LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2022 palw3ey
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1 +1,74 @@
-# rfc2307bis
+# rfc2307bis
+
+nis rfc2307 is obsolete, this README will help you replace it with the new rfc2307bis.ldif
+
+# 1 - Install openldap and utils
+```bash
+sudo apt install slapd ldap-utils
+```
+
+# 2 - Download rfc2307bis.ldif
+```bash
+sudo wget https://github.com/palw3ey/rfc2307bis/releases/download/latest/rfc2307bis.ldif -O /etc/ldap/schema/rfc2307bis.ldif
+```
+
+# 3 - Edit slapd.init.ldif to replace rfc2307
+```bash
+sudo vi /usr/share/slapd/slapd.init.ldif
+```
+
+find this line :
+```bash
+include: file:///etc/ldap/schema/nis.ldif
+```
+append a # at the beginning of the line, to make it as a comment.  
+And just below this commented line, add :
+```bash
+include: file:///etc/ldap/schema/rfc2307bis.ldif
+```
+
+# 4 - Start the configuration of OpenLDAP
+```bash
+sudo dpkg-reconfigure slapd
+```
+
+# 5 - Verify that rfc2307bis is enabled
+```bash
+sudo ldapsearch -LLL -Y external -H ldapi:/// -b cn=schema,cn=config -s one dn
+```
+If everything is OK, then you should see this line in the output :
+```bash
+dn: cn={2}rfc2307bis,cn=schema,cn=config
+```
+
+# 6 - memberof overlay (optional)
+Enable memberof overlay : To automatically add (or remove) a "memberof" attribute to the user entry, when the user is added (or removed) to a groupofnames.
+
+Check if memberof is already enabled :
+```bash
+sudo slapcat -n 0 | grep "olcModuleLoad.*memberof"
+```
+
+Otherwise load memberof module :
+```bash
+sudo ldapmodify -Y EXTERNAL -H ldapi:/// <<!
+dn: cn=module{0},cn=config
+changetype: modify
+add: olcModuleLoad
+olcModuleLoad: memberof.la
+!
+```
+Check if memberof overlay is already enabled :
+```bash
+sudo slapcat -n 0 | grep "olcOverlay.*memberof"
+```
+Otherwise apply overlay :
+```bash
+sudo ldapmodify -a -Y EXTERNAL -H ldapi:/// <<!
+dn: olcOverlay=memberof,olcDatabase={1}mdb,cn=config
+objectClass: olcOverlayConfig
+objectClass: olcMemberOf
+olcOverlay: memberof
+olcMemberOfRefint: TRUE
+!
+```