389ds on centos8

1. installation

yum -y module install 389-directory-server:stable/minimal

mcedit -b ds.rsp

[general]
full_machine_name = srv009.d01.net
start = True
strict_host_checking = False

[slapd]
instance_name = ldap
port = 389
root_dn = cn=root
root_password = Passw0rd
secure_port = 636
self_sign_cert = True
self_sign_cert_valid_months = 120
lock_dir = /var/run/dirsrv/slapd-ldap

[backend-userroot]
create_suffix_entry = False
require_index = False
sample_entries = no
suffix = dc=d01,dc=net

dscreate from-file ds.rsp

by adding the -v switch, u will get dscreate.out

2. testing

ldapsearch -LLL -h localhost -D cn=root -w Passw0rd -b dc=d01,dc=net

dn = dc=d01,dc=net
objectClass = top
objectClass = domain
dc = d01
description = dc=d01,dc=net

3. cockpit

yum -y install cockpit-389-ds
dsctl ldap
systemctl start cockpit.service

https://ldaps.d01.net:9090

4. services

systemctl enable dirsrv@ldap.service
systemctl start dirsrv@ldap.service

systemctl enable cockpit.socket
systemctl start cockpit.socket

systemctl daemon-reload

5. samba

yum -y install cifs-utils samba samba-client tdb-tools
cp -pv /usr/share/doc/samba/LDAP/samba-schema-FDS.ldif /etc/dirsrv/slapd-ldap/schema/95samba.ldif

6. smbldap-tools

yum -y install http://repo.iotti.biz/CentOS/8/noarch/lux-release-8-1.noarch.rpm
yum -y install smbldap-tools

7. response file valid lines

backup_dir = /var/lib/dirsrv/slapd-ldap/bak
bin_dir = /usr/bin
cert_dir = /etc/dirsrv/slapd-ldap
config_dir = /etc/dirsrv/slapd-ldap
data_dir = /usr/share
db_dir = /var/lib/dirsrv/slapd-ldap/db
db_home_dir = /var/lib/dirsrv/slapd-ldap/db
group = dirsrv
initconfig_dir = /etc/sysconfig
instance_name = ldap
inst_dir = /usr/lib64/dirsrv/slapd-ldap
ldif_dir = /var/lib/dirsrv/slapd-ldap/ldif
lib_dir = /usr/lib64
local_state_dir = /var
lock_dir = /var/lock/dirsrv/slapd-ldap
log_dir = /var/log/dirsrv/slapd-ldap
port = 389
prefix = /usr
root_dn = cn=root
root_password = Passw0rd
run_dir = /var/run/dirsrv
sbin_dir = /usr/sbin
schema_dir = /etc/dirsrv/slapd-ldap/schema
secure_port = 636
self_sign_cert = True
self_sign_cert_valid_months = 120
sysconf_dir = /etc
tmp_dir = /tmp
user = dirsrv

8. delete

dsctl ldap remove --do-it
dsctl --remove-all

9. ssl

https://www.theurbanpenguin.com/secure-ldaps-with-389-ds-and-centos-8/