Setup the EBOX
Before we can use our ebox server and connect other services to it, we have to do some setup on the ebox to get it to work.
Make sure that iptables is off or accepting connections on port 389 from the address on which you want to put your service:
We have to make sure that our ldap server is responding on all interfaces so that we can connect to it from another server.
sudo nano /etc/default/slapd
Should look like this:
Linux Login PAM
In order for the Ubuntu user to be able to login later, we must change the login skel to /bin/bash
sudo nano /etc/ebox/80samba.conf
And change so that it looks like:
login_shell = /bin/bash
this will change the login skel for a new user. But for an existing user ("matte") you must run:
Don't change anything other than the login skel or the user account can break
LDAP Admin Information
Sometimes when you connect other services to the ebox ldap you have to enter the ldap admin account. And to get the admin account and password do the following;
Get all of the ldap tree:
ldapsearch -x -b"dc=kalle,dc=se"
Search in the output for this entry:
# ebox, kalle.se dn: cn=ebox,dc=kalle,dc=se objectClass: organizationalRole objectClass: simpleSecurityObject description: eBox admin account cn: ebox
So my admin user is "cn=ebox,dc=kalle,dc=se"
Now get the password:
And there you have your admin account and password for the ldap server.
Test if you have connection to the ebox from an external server:
telnet ebox-ip 389
You should get:
Connected to localhost. Escape character is '^]'.
Time to get some services to the ebox server.