[{"data":1,"prerenderedAt":2584},["ShallowReactive",2],{"blog-\u002Fen\u002Fblog\u002Fconfiguration-openiam-avec-ldaps":3,"blog-\u002Fen\u002Fblog\u002Fconfiguration-openiam-avec-ldaps-surround":2464,"blog-\u002Fen\u002Fblog\u002Fconfiguration-openiam-avec-ldaps-certifications":2519},{"id":4,"title":5,"body":6,"categories":2449,"cover":2451,"cover_contain":234,"credly_badge_id":2452,"date":2453,"description":2454,"extension":2455,"meta":2456,"navigation":234,"path":2457,"related_certifications":2458,"seo":2460,"slug":2461,"stem":2462,"__hash__":2463},"blog\u002Fen\u002Fblog\u002Fconfiguration-openiam-avec-ldaps.md","Configuring OpenIAM with LDAPS",{"type":7,"value":8,"toc":2432},"minimark",[9,14,18,21,24,27,34,41,46,62,66,69,91,94,98,101,115,118,155,158,174,177,189,192,344,347,434,438,441,672,675,684,687,1442,1445,1453,1456,1472,1476,1479,1501,1515,1524,1528,1542,1551,1554,1594,1597,1633,1636,1648,1651,1663,1666,1681,1684,1696,1699,1718,1721,1782,1786,1789,1792,1821,1824,1840,1843,1852,1855,1863,1867,1870,1879,1882,1898,1901,1913,1916,2277,2280,2300,2303,2316,2319,2341,2344,2365,2368,2378,2381,2385,2396,2405,2410,2413,2418,2424,2428],[10,11,13],"h2",{"id":12},"real-world-use-case","Real-world use case",[15,16,17],"p",{},"You need to centralize identity management in a secure way: here's how to configure OpenIAM with LDAPS.",[10,19,5],{"id":20},"configuring-openiam-with-ldaps",[15,22,23],{},"OpenIAM is an identity and access management solution for enterprise management. It's an ideal integration solution for cloud-type dematerialized services. It's simple and effective to implement, thanks in particular to the open standard it uses. The solution is promoted as one of the best professional management solutions, since it lets partners, sales teams, or clients manage identities, modify them, or delete them.",[15,25,26],{},"In this article, we'll cover a case of interconnection with Windows Active Directory in secure mode: LDAPS connector. The OpenIAM server will run on CentOS 6.7, while the ldaps server will run on Windows 2008R2. To better understand our solution, here's a diagram:",[15,28,29],{},[30,31],"img",{"alt":32,"src":33},"","\u002Fimages\u002Fblog\u002Fconfiguration-openiam-avec-ldaps\u002F744179e2da.png",[15,35,36,40],{},[37,38,39],"strong",{},"Info:"," Our OpenIAM machine's configuration must be 4 CPUs, 6GB of RAM, and 10GB of disk space.",[42,43,45],"h3",{"id":44},"discover-for-yourself","Discover for yourself:",[47,48,49,53,56,59],"ol",{},[50,51,52],"li",{},"Installing the prerequisites.",[50,54,55],{},"Installing OpenIAM on CentOS.",[50,57,58],{},"Installing a root certificate on Windows (LDAPS).",[50,60,61],{},"Configuring the LDAPS connector.",[10,63,65],{"id":64},"installing-the-prerequisites","Installing the prerequisites",[15,67,68],{},"We're on a CentOS distribution in Desktop mode. We use the yum package manager:",[70,71,75],"pre",{"className":72,"code":73,"language":74,"meta":32,"style":32},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","yum update\n","bash",[76,77,78],"code",{"__ignoreMap":32},[79,80,83,87],"span",{"class":81,"line":82},"line",1,[79,84,86],{"class":85},"sBMFI","yum",[79,88,90],{"class":89},"sfazB"," update\n",[15,92,93],{},"Once the software update is complete, you'll need to install two essential pieces of software: Java JDK 1.7 and MySQL 5.1.",[42,95,97],{"id":96},"java-jdk-17-on-centos","Java JDK 1.7 on CentOS",[15,99,100],{},"It's important to choose the right Java version, so head to the opt folder:",[70,102,104],{"className":72,"code":103,"language":74,"meta":32,"style":32},"cd \u002Fopt\u002F\n",[76,105,106],{"__ignoreMap":32},[79,107,108,112],{"class":81,"line":82},[79,109,111],{"class":110},"s2Zo4","cd",[79,113,114],{"class":89}," \u002Fopt\u002F\n",[15,116,117],{},"Next, download the jdk-7u79-linux-x64.tar.gz file:",[70,119,121],{"className":72,"code":120,"language":74,"meta":32,"style":32},"wget --no-cookies --no-check-certificate --header \"Cookie: gpw_e24=http%3A%2F%2Fwww.oracle.com%2F; oraclelicense=accept-securebackup-cookie\" \"http:\u002F\u002Fdownload.oracle.com\u002Fotn-pub\u002Fjava\u002Fjdk\u002F7u79-b15\u002Fjdk-7u79-linux-x64.tar.gz\"\n",[76,122,123],{"__ignoreMap":32},[79,124,125,128,131,134,137,141,144,147,149,152],{"class":81,"line":82},[79,126,127],{"class":85},"wget",[79,129,130],{"class":89}," --no-cookies",[79,132,133],{"class":89}," --no-check-certificate",[79,135,136],{"class":89}," --header",[79,138,140],{"class":139},"sMK4o"," \"",[79,142,143],{"class":89},"Cookie: gpw_e24=http%3A%2F%2Fwww.oracle.com%2F; oraclelicense=accept-securebackup-cookie",[79,145,146],{"class":139},"\"",[79,148,140],{"class":139},[79,150,151],{"class":89},"http:\u002F\u002Fdownload.oracle.com\u002Fotn-pub\u002Fjava\u002Fjdk\u002F7u79-b15\u002Fjdk-7u79-linux-x64.tar.gz",[79,153,154],{"class":139},"\"\n",[15,156,157],{},"Then, extract the compressed archive:",[70,159,161],{"className":72,"code":160,"language":74,"meta":32,"style":32},"tar xzf jdk-7u79-linux-x64.tar.gz\n",[76,162,163],{"__ignoreMap":32},[79,164,165,168,171],{"class":81,"line":82},[79,166,167],{"class":85},"tar",[79,169,170],{"class":89}," xzf",[79,172,173],{"class":89}," jdk-7u79-linux-x64.tar.gz\n",[15,175,176],{},"Install it in the current directory:",[70,178,180],{"className":72,"code":179,"language":74,"meta":32,"style":32},"cd \u002Fopt\u002Fjdk1.7.0_79\u002F\n",[76,181,182],{"__ignoreMap":32},[79,183,184,186],{"class":81,"line":82},[79,185,111],{"class":110},[79,187,188],{"class":89}," \u002Fopt\u002Fjdk1.7.0_79\u002F\n",[15,190,191],{},"At this exact moment, we're going to use alternatives, which let us specify the version of Java to install:",[70,193,195],{"className":72,"code":194,"language":74,"meta":32,"style":32},"alternatives --install \u002Fusr\u002Fbin\u002Fjava java \u002Fopt\u002Fjdk1.7.0_79\u002Fbin\u002Fjava 2\nalternatives --config java\n\nThere are 3 programs which provide \"java\".\n\n  Selection    Command\n-----------------------------------------------\n*+ 1           \u002Fusr\u002Flib\u002Fjvm\u002Fjre-1.7.0-openjdk.x86_64\u002Fbin\u002Fjava\n   2           \u002Fusr\u002Flib\u002Fjvm\u002Fjre-1.6.0-openjdk.x86_64\u002Fbin\u002Fjava\n   3           \u002Fopt\u002Fjdk1.7.0_79\u002Fbin\u002Fjava\n\nEnter to keep the current selection [+], or type selection number:3\n",[76,196,197,218,229,236,267,272,281,287,297,306,315,320],{"__ignoreMap":32},[79,198,199,202,205,208,211,214],{"class":81,"line":82},[79,200,201],{"class":85},"alternatives",[79,203,204],{"class":89}," --install",[79,206,207],{"class":89}," \u002Fusr\u002Fbin\u002Fjava",[79,209,210],{"class":89}," java",[79,212,213],{"class":89}," \u002Fopt\u002Fjdk1.7.0_79\u002Fbin\u002Fjava",[79,215,217],{"class":216},"sbssI"," 2\n",[79,219,221,223,226],{"class":81,"line":220},2,[79,222,201],{"class":85},[79,224,225],{"class":89}," --config",[79,227,228],{"class":89}," java\n",[79,230,232],{"class":81,"line":231},3,[79,233,235],{"emptyLinePlaceholder":234},true,"\n",[79,237,239,242,245,248,251,254,257,259,262,264],{"class":81,"line":238},4,[79,240,241],{"class":85},"There",[79,243,244],{"class":89}," are",[79,246,247],{"class":216}," 3",[79,249,250],{"class":89}," programs",[79,252,253],{"class":89}," which",[79,255,256],{"class":89}," provide",[79,258,140],{"class":139},[79,260,261],{"class":89},"java",[79,263,146],{"class":139},[79,265,266],{"class":89},".\n",[79,268,270],{"class":81,"line":269},5,[79,271,235],{"emptyLinePlaceholder":234},[79,273,275,278],{"class":81,"line":274},6,[79,276,277],{"class":85},"  Selection",[79,279,280],{"class":89},"    Command\n",[79,282,284],{"class":81,"line":283},7,[79,285,286],{"class":85},"-----------------------------------------------\n",[79,288,290,293],{"class":81,"line":289},8,[79,291,292],{"class":139},"*",[79,294,296],{"class":295},"sTEyZ","+ 1           \u002Fusr\u002Flib\u002Fjvm\u002Fjre-1.7.0-openjdk.x86_64\u002Fbin\u002Fjava\n",[79,298,300,303],{"class":81,"line":299},9,[79,301,302],{"class":85},"   2",[79,304,305],{"class":89},"           \u002Fusr\u002Flib\u002Fjvm\u002Fjre-1.6.0-openjdk.x86_64\u002Fbin\u002Fjava\n",[79,307,309,312],{"class":81,"line":308},10,[79,310,311],{"class":85},"   3",[79,313,314],{"class":89},"           \u002Fopt\u002Fjdk1.7.0_79\u002Fbin\u002Fjava\n",[79,316,318],{"class":81,"line":317},11,[79,319,235],{"emptyLinePlaceholder":234},[79,321,323,326,329,332,335,338,341],{"class":81,"line":322},12,[79,324,325],{"class":85},"Enter",[79,327,328],{"class":89}," to",[79,330,331],{"class":89}," keep",[79,333,334],{"class":89}," the",[79,336,337],{"class":89}," current",[79,339,340],{"class":89}," selection",[79,342,343],{"class":295}," [+], or type selection number:3\n",[15,345,346],{},"Check the version currently in use, so it matches the version supported by OpenIAM:",[70,348,350],{"className":72,"code":349,"language":74,"meta":32,"style":32},"java -version\n\njava version \"1.7.0_79\"\nJava(TM) SE Runtime Environment (build 1.7.0_79-b15)\nJava HotSpot(TM) 64-Bit Server VM (build 24.79-b02, mixed mode)\n",[76,351,352,359,363,377,394],{"__ignoreMap":32},[79,353,354,356],{"class":81,"line":82},[79,355,261],{"class":85},[79,357,358],{"class":89}," -version\n",[79,360,361],{"class":81,"line":220},[79,362,235],{"emptyLinePlaceholder":234},[79,364,365,367,370,372,375],{"class":81,"line":231},[79,366,261],{"class":85},[79,368,369],{"class":89}," version",[79,371,140],{"class":139},[79,373,374],{"class":89},"1.7.0_79",[79,376,154],{"class":139},[79,378,379,382,385,388,391],{"class":81,"line":238},[79,380,381],{"class":85},"Java(TM",[79,383,384],{"class":295},") SE Runtime Environment (",[79,386,387],{"class":85},"build",[79,389,390],{"class":89}," 1.7.0_79-b15",[79,392,393],{"class":295},")\n",[79,395,396,399,402,405,408,411,414,417,420,423,426,429,432],{"class":81,"line":269},[79,397,398],{"class":85},"Java",[79,400,401],{"class":89}," HotSpot",[79,403,404],{"class":139},"(",[79,406,407],{"class":85},"TM",[79,409,410],{"class":139},")",[79,412,413],{"class":89}," 64-Bit",[79,415,416],{"class":89}," Server",[79,418,419],{"class":89}," VM",[79,421,422],{"class":295}," (build ",[79,424,425],{"class":89},"24.79-b02,",[79,427,428],{"class":89}," mixed",[79,430,431],{"class":89}," mode",[79,433,393],{"class":295},[42,435,437],{"id":436},"mysql-5-on-centos","MySQL 5 on CentOS",[15,439,440],{},"Installing the DBMS is also an essential prerequisite. To do so, we just need to install mysql-server:",[70,442,444],{"className":72,"code":443,"language":74,"meta":32,"style":32},"yum install mysql-server\nResolved dependencies\n\n=================================================================================================\n Package                    Architecture       Version                    Repository       Size\n=================================================================================================\nInstalling:\n mysql-server               x86_64             5.1.73-5.el6_6             base             8.6 M\nInstalling for dependency:\n mysql                      x86_64             5.1.73-5.el6_6             base             894 k\n perl-DBD-MySQL             x86_64             4.013-3.el6                base             134 k\n perl-DBI                   x86_64             1.609-4.el6                base             705 k\n\nTransaction Summary\n=================================================================================================\nInstall     4 Package(s)\n\nTotal download size: 10 M\nInstalled size: 29 M\nIs this ok [y\u002FN]: y\n",[76,445,446,456,464,468,473,490,494,499,519,530,548,567,585,590,599,604,622,627,644,657],{"__ignoreMap":32},[79,447,448,450,453],{"class":81,"line":82},[79,449,86],{"class":85},[79,451,452],{"class":89}," install",[79,454,455],{"class":89}," mysql-server\n",[79,457,458,461],{"class":81,"line":220},[79,459,460],{"class":85},"Resolved",[79,462,463],{"class":89}," dependencies\n",[79,465,466],{"class":81,"line":231},[79,467,235],{"emptyLinePlaceholder":234},[79,469,470],{"class":81,"line":238},[79,471,472],{"class":89},"=================================================================================================\n",[79,474,475,478,481,484,487],{"class":81,"line":269},[79,476,477],{"class":85}," Package",[79,479,480],{"class":89},"                    Architecture",[79,482,483],{"class":89},"       Version",[79,485,486],{"class":89},"                    Repository",[79,488,489],{"class":89},"       Size\n",[79,491,492],{"class":81,"line":274},[79,493,472],{"class":89},[79,495,496],{"class":81,"line":283},[79,497,498],{"class":85},"Installing:\n",[79,500,501,504,507,510,513,516],{"class":81,"line":289},[79,502,503],{"class":85}," mysql-server",[79,505,506],{"class":89},"               x86_64",[79,508,509],{"class":89},"             5.1.73-5.el6_6",[79,511,512],{"class":89},"             base",[79,514,515],{"class":216},"             8.6",[79,517,518],{"class":89}," M\n",[79,520,521,524,527],{"class":81,"line":299},[79,522,523],{"class":85},"Installing",[79,525,526],{"class":89}," for",[79,528,529],{"class":89}," dependency:\n",[79,531,532,535,538,540,542,545],{"class":81,"line":308},[79,533,534],{"class":85}," mysql",[79,536,537],{"class":89},"                      x86_64",[79,539,509],{"class":89},[79,541,512],{"class":89},[79,543,544],{"class":216},"             894",[79,546,547],{"class":89}," k\n",[79,549,550,553,556,559,562,565],{"class":81,"line":317},[79,551,552],{"class":85}," perl-DBD-MySQL",[79,554,555],{"class":89},"             x86_64",[79,557,558],{"class":89},"             4.013-3.el6",[79,560,561],{"class":89},"                base",[79,563,564],{"class":216},"             134",[79,566,547],{"class":89},[79,568,569,572,575,578,580,583],{"class":81,"line":322},[79,570,571],{"class":85}," perl-DBI",[79,573,574],{"class":89},"                   x86_64",[79,576,577],{"class":89},"             1.609-4.el6",[79,579,561],{"class":89},[79,581,582],{"class":216},"             705",[79,584,547],{"class":89},[79,586,588],{"class":81,"line":587},13,[79,589,235],{"emptyLinePlaceholder":234},[79,591,593,596],{"class":81,"line":592},14,[79,594,595],{"class":85},"Transaction",[79,597,598],{"class":89}," Summary\n",[79,600,602],{"class":81,"line":601},15,[79,603,472],{"class":89},[79,605,607,610,613,615,617,620],{"class":81,"line":606},16,[79,608,609],{"class":85},"Install",[79,611,612],{"class":216},"     4",[79,614,477],{"class":89},[79,616,404],{"class":139},[79,618,619],{"class":85},"s",[79,621,393],{"class":139},[79,623,625],{"class":81,"line":624},17,[79,626,235],{"emptyLinePlaceholder":234},[79,628,630,633,636,639,642],{"class":81,"line":629},18,[79,631,632],{"class":85},"Total",[79,634,635],{"class":89}," download",[79,637,638],{"class":89}," size:",[79,640,641],{"class":216}," 10",[79,643,518],{"class":89},[79,645,647,650,652,655],{"class":81,"line":646},19,[79,648,649],{"class":85},"Installed",[79,651,638],{"class":89},[79,653,654],{"class":216}," 29",[79,656,518],{"class":89},[79,658,660,663,666,669],{"class":81,"line":659},20,[79,661,662],{"class":85},"Is",[79,664,665],{"class":89}," this",[79,667,668],{"class":89}," ok",[79,670,671],{"class":295}," [y\u002FN]: y\n",[15,673,674],{},"As soon as our installation finishes, you need to manually put the server into production with the command:",[70,676,678],{"className":72,"code":677,"language":74,"meta":32,"style":32},"mysql_secure_installation\n",[76,679,680],{"__ignoreMap":32},[79,681,682],{"class":81,"line":82},[79,683,677],{"class":85},[15,685,686],{},"A result appears: there are choices to follow like this:",[70,688,690],{"className":72,"code":689,"language":74,"meta":32,"style":32},"Enter current password for root (enter for none):\nOK, successfully used password, moving on...\n\nSetting the root password ensures that nobody can log into the MySQL\nroot user without the proper authorisation.\n\nSet root password? [Y\u002Fn] y\nNew password:\nRe-enter new password:\nPassword updated successfully!\nReloading privilege tables..\n ... Success!\n\nBy default, a MySQL installation has an anonymous user, allowing anyone\nto log into MySQL without having to have a user account created for\nthem.  This is intended only for testing, and to make the installation\ngo a bit smoother.  You should remove them before moving into a\nproduction environment.\n\nRemove anonymous users? [Y\u002Fn] y\n ... Success!\n\nNormally, root should only be allowed to connect from 'localhost'.  This\nensures that someone cannot guess at the root password from the network.\n\nDisallow root login remotely? [Y\u002Fn] y\n ... Success!\n\nBy default, MySQL comes with a database named 'test' that anyone can\naccess.  This is also intended only for testing, and should be removed\nbefore moving into a production environment.\n\nRemove test database and access to it? [Y\u002Fn] y\n - Dropping test database...\n ... Success!\n - Removing privileges on test database...\n ... Success!\n\nReloading the privilege tables will ensure that all changes made so far\nwill take effect immediately.\n\nReload privilege tables now? [Y\u002Fn] y\n ... Success!\n\nCleaning up...\n\nAll done!  If you've completed all of the above steps, your MySQL\ninstallation should now be secure.\n\nThanks for using MySQL!\n",[76,691,692,718,738,742,776,795,799,812,820,830,841,852,860,864,899,933,968,1003,1011,1015,1027,1034,1039,1080,1113,1118,1134,1141,1146,1184,1214,1231,1236,1258,1272,1279,1297,1304,1309,1344,1359,1364,1379,1386,1391,1400,1405,1425,1431,1436],{"__ignoreMap":32},[79,693,694,696,698,701,703,706,709,712,715],{"class":81,"line":82},[79,695,325],{"class":85},[79,697,337],{"class":89},[79,699,700],{"class":89}," password",[79,702,526],{"class":89},[79,704,705],{"class":89}," root",[79,707,708],{"class":295}," (enter ",[79,710,711],{"class":89},"for",[79,713,714],{"class":89}," none",[79,716,717],{"class":295},"):\n",[79,719,720,723,726,729,732,735],{"class":81,"line":220},[79,721,722],{"class":85},"OK,",[79,724,725],{"class":89}," successfully",[79,727,728],{"class":89}," used",[79,730,731],{"class":89}," password,",[79,733,734],{"class":89}," moving",[79,736,737],{"class":89}," on...\n",[79,739,740],{"class":81,"line":231},[79,741,235],{"emptyLinePlaceholder":234},[79,743,744,747,749,751,753,756,759,762,765,768,771,773],{"class":81,"line":238},[79,745,746],{"class":85},"Setting",[79,748,334],{"class":89},[79,750,705],{"class":89},[79,752,700],{"class":89},[79,754,755],{"class":89}," ensures",[79,757,758],{"class":89}," that",[79,760,761],{"class":89}," nobody",[79,763,764],{"class":89}," can",[79,766,767],{"class":89}," log",[79,769,770],{"class":89}," into",[79,772,334],{"class":89},[79,774,775],{"class":89}," MySQL\n",[79,777,778,781,784,787,789,792],{"class":81,"line":269},[79,779,780],{"class":85},"root",[79,782,783],{"class":89}," user",[79,785,786],{"class":89}," without",[79,788,334],{"class":89},[79,790,791],{"class":89}," proper",[79,793,794],{"class":89}," authorisation.\n",[79,796,797],{"class":81,"line":274},[79,798,235],{"emptyLinePlaceholder":234},[79,800,801,804,806,809],{"class":81,"line":283},[79,802,803],{"class":85},"Set",[79,805,705],{"class":89},[79,807,808],{"class":89}," password?",[79,810,811],{"class":295}," [Y\u002Fn] y\n",[79,813,814,817],{"class":81,"line":289},[79,815,816],{"class":85},"New",[79,818,819],{"class":89}," password:\n",[79,821,822,825,828],{"class":81,"line":299},[79,823,824],{"class":85},"Re-enter",[79,826,827],{"class":89}," new",[79,829,819],{"class":89},[79,831,832,835,838],{"class":81,"line":308},[79,833,834],{"class":85},"Password",[79,836,837],{"class":89}," updated",[79,839,840],{"class":89}," successfully!\n",[79,842,843,846,849],{"class":81,"line":317},[79,844,845],{"class":85},"Reloading",[79,847,848],{"class":89}," privilege",[79,850,851],{"class":89}," tables..\n",[79,853,854,857],{"class":81,"line":322},[79,855,856],{"class":110}," ...",[79,858,859],{"class":89}," Success!\n",[79,861,862],{"class":81,"line":587},[79,863,235],{"emptyLinePlaceholder":234},[79,865,866,869,872,875,878,881,884,887,890,893,896],{"class":81,"line":592},[79,867,868],{"class":85},"By",[79,870,871],{"class":89}," default,",[79,873,874],{"class":89}," a",[79,876,877],{"class":89}," MySQL",[79,879,880],{"class":89}," installation",[79,882,883],{"class":89}," has",[79,885,886],{"class":89}," an",[79,888,889],{"class":89}," anonymous",[79,891,892],{"class":89}," user,",[79,894,895],{"class":89}," allowing",[79,897,898],{"class":89}," anyone\n",[79,900,901,904,906,908,910,912,915,917,920,922,924,927,930],{"class":81,"line":601},[79,902,903],{"class":85},"to",[79,905,767],{"class":89},[79,907,770],{"class":89},[79,909,877],{"class":89},[79,911,786],{"class":89},[79,913,914],{"class":89}," having",[79,916,328],{"class":89},[79,918,919],{"class":89}," have",[79,921,874],{"class":89},[79,923,783],{"class":89},[79,925,926],{"class":89}," account",[79,928,929],{"class":89}," created",[79,931,932],{"class":89}," for\n",[79,934,935,938,941,944,947,950,952,955,958,960,963,965],{"class":81,"line":606},[79,936,937],{"class":85},"them.",[79,939,940],{"class":89},"  This",[79,942,943],{"class":89}," is",[79,945,946],{"class":89}," intended",[79,948,949],{"class":89}," only",[79,951,526],{"class":89},[79,953,954],{"class":89}," testing,",[79,956,957],{"class":89}," and",[79,959,328],{"class":89},[79,961,962],{"class":89}," make",[79,964,334],{"class":89},[79,966,967],{"class":89}," installation\n",[79,969,970,973,975,978,981,984,987,990,993,996,998,1000],{"class":81,"line":624},[79,971,972],{"class":85},"go",[79,974,874],{"class":89},[79,976,977],{"class":89}," bit",[79,979,980],{"class":89}," smoother.",[79,982,983],{"class":89},"  You",[79,985,986],{"class":89}," should",[79,988,989],{"class":89}," remove",[79,991,992],{"class":89}," them",[79,994,995],{"class":89}," before",[79,997,734],{"class":89},[79,999,770],{"class":89},[79,1001,1002],{"class":89}," a\n",[79,1004,1005,1008],{"class":81,"line":629},[79,1006,1007],{"class":85},"production",[79,1009,1010],{"class":89}," environment.\n",[79,1012,1013],{"class":81,"line":646},[79,1014,235],{"emptyLinePlaceholder":234},[79,1016,1017,1020,1022,1025],{"class":81,"line":659},[79,1018,1019],{"class":85},"Remove",[79,1021,889],{"class":89},[79,1023,1024],{"class":89}," users?",[79,1026,811],{"class":295},[79,1028,1030,1032],{"class":81,"line":1029},21,[79,1031,856],{"class":110},[79,1033,859],{"class":89},[79,1035,1037],{"class":81,"line":1036},22,[79,1038,235],{"emptyLinePlaceholder":234},[79,1040,1042,1045,1047,1049,1051,1054,1057,1059,1062,1065,1068,1071,1074,1077],{"class":81,"line":1041},23,[79,1043,1044],{"class":85},"Normally,",[79,1046,705],{"class":89},[79,1048,986],{"class":89},[79,1050,949],{"class":89},[79,1052,1053],{"class":89}," be",[79,1055,1056],{"class":89}," allowed",[79,1058,328],{"class":89},[79,1060,1061],{"class":89}," connect",[79,1063,1064],{"class":89}," from",[79,1066,1067],{"class":139}," '",[79,1069,1070],{"class":89},"localhost",[79,1072,1073],{"class":139},"'",[79,1075,1076],{"class":89},".",[79,1078,1079],{"class":89},"  This\n",[79,1081,1083,1086,1088,1091,1094,1097,1100,1102,1104,1106,1108,1110],{"class":81,"line":1082},24,[79,1084,1085],{"class":85},"ensures",[79,1087,758],{"class":89},[79,1089,1090],{"class":89}," someone",[79,1092,1093],{"class":89}," cannot",[79,1095,1096],{"class":89}," guess",[79,1098,1099],{"class":89}," at",[79,1101,334],{"class":89},[79,1103,705],{"class":89},[79,1105,700],{"class":89},[79,1107,1064],{"class":89},[79,1109,334],{"class":89},[79,1111,1112],{"class":89}," network.\n",[79,1114,1116],{"class":81,"line":1115},25,[79,1117,235],{"emptyLinePlaceholder":234},[79,1119,1121,1124,1126,1129,1132],{"class":81,"line":1120},26,[79,1122,1123],{"class":85},"Disallow",[79,1125,705],{"class":89},[79,1127,1128],{"class":89}," login",[79,1130,1131],{"class":89}," remotely?",[79,1133,811],{"class":295},[79,1135,1137,1139],{"class":81,"line":1136},27,[79,1138,856],{"class":110},[79,1140,859],{"class":89},[79,1142,1144],{"class":81,"line":1143},28,[79,1145,235],{"emptyLinePlaceholder":234},[79,1147,1149,1151,1153,1155,1158,1161,1163,1166,1169,1171,1174,1176,1178,1181],{"class":81,"line":1148},29,[79,1150,868],{"class":85},[79,1152,871],{"class":89},[79,1154,877],{"class":89},[79,1156,1157],{"class":89}," comes",[79,1159,1160],{"class":89}," with",[79,1162,874],{"class":89},[79,1164,1165],{"class":89}," database",[79,1167,1168],{"class":89}," named",[79,1170,1067],{"class":139},[79,1172,1173],{"class":89},"test",[79,1175,1073],{"class":139},[79,1177,758],{"class":89},[79,1179,1180],{"class":89}," anyone",[79,1182,1183],{"class":89}," can\n",[79,1185,1187,1190,1192,1194,1197,1199,1201,1203,1205,1207,1209,1211],{"class":81,"line":1186},30,[79,1188,1189],{"class":85},"access.",[79,1191,940],{"class":89},[79,1193,943],{"class":89},[79,1195,1196],{"class":89}," also",[79,1198,946],{"class":89},[79,1200,949],{"class":89},[79,1202,526],{"class":89},[79,1204,954],{"class":89},[79,1206,957],{"class":89},[79,1208,986],{"class":89},[79,1210,1053],{"class":89},[79,1212,1213],{"class":89}," removed\n",[79,1215,1217,1220,1222,1224,1226,1229],{"class":81,"line":1216},31,[79,1218,1219],{"class":85},"before",[79,1221,734],{"class":89},[79,1223,770],{"class":89},[79,1225,874],{"class":89},[79,1227,1228],{"class":89}," production",[79,1230,1010],{"class":89},[79,1232,1234],{"class":81,"line":1233},32,[79,1235,235],{"emptyLinePlaceholder":234},[79,1237,1239,1241,1244,1246,1248,1251,1253,1256],{"class":81,"line":1238},33,[79,1240,1019],{"class":85},[79,1242,1243],{"class":89}," test",[79,1245,1165],{"class":89},[79,1247,957],{"class":89},[79,1249,1250],{"class":89}," access",[79,1252,328],{"class":89},[79,1254,1255],{"class":89}," it?",[79,1257,811],{"class":295},[79,1259,1261,1264,1267,1269],{"class":81,"line":1260},34,[79,1262,1263],{"class":85}," -",[79,1265,1266],{"class":89}," Dropping",[79,1268,1243],{"class":89},[79,1270,1271],{"class":89}," database...\n",[79,1273,1275,1277],{"class":81,"line":1274},35,[79,1276,856],{"class":110},[79,1278,859],{"class":89},[79,1280,1282,1284,1287,1290,1293,1295],{"class":81,"line":1281},36,[79,1283,1263],{"class":85},[79,1285,1286],{"class":89}," Removing",[79,1288,1289],{"class":89}," privileges",[79,1291,1292],{"class":89}," on",[79,1294,1243],{"class":89},[79,1296,1271],{"class":89},[79,1298,1300,1302],{"class":81,"line":1299},37,[79,1301,856],{"class":110},[79,1303,859],{"class":89},[79,1305,1307],{"class":81,"line":1306},38,[79,1308,235],{"emptyLinePlaceholder":234},[79,1310,1312,1314,1316,1318,1321,1324,1327,1329,1332,1335,1338,1341],{"class":81,"line":1311},39,[79,1313,845],{"class":85},[79,1315,334],{"class":89},[79,1317,848],{"class":89},[79,1319,1320],{"class":89}," tables",[79,1322,1323],{"class":89}," will",[79,1325,1326],{"class":89}," ensure",[79,1328,758],{"class":89},[79,1330,1331],{"class":89}," all",[79,1333,1334],{"class":89}," changes",[79,1336,1337],{"class":89}," made",[79,1339,1340],{"class":89}," so",[79,1342,1343],{"class":89}," far\n",[79,1345,1347,1350,1353,1356],{"class":81,"line":1346},40,[79,1348,1349],{"class":85},"will",[79,1351,1352],{"class":89}," take",[79,1354,1355],{"class":89}," effect",[79,1357,1358],{"class":89}," immediately.\n",[79,1360,1362],{"class":81,"line":1361},41,[79,1363,235],{"emptyLinePlaceholder":234},[79,1365,1367,1370,1372,1374,1377],{"class":81,"line":1366},42,[79,1368,1369],{"class":85},"Reload",[79,1371,848],{"class":89},[79,1373,1320],{"class":89},[79,1375,1376],{"class":89}," now?",[79,1378,811],{"class":295},[79,1380,1382,1384],{"class":81,"line":1381},43,[79,1383,856],{"class":110},[79,1385,859],{"class":89},[79,1387,1389],{"class":81,"line":1388},44,[79,1390,235],{"emptyLinePlaceholder":234},[79,1392,1394,1397],{"class":81,"line":1393},45,[79,1395,1396],{"class":85},"Cleaning",[79,1398,1399],{"class":89}," up...\n",[79,1401,1403],{"class":81,"line":1402},46,[79,1404,235],{"emptyLinePlaceholder":234},[79,1406,1408,1411,1414,1417,1420,1422],{"class":81,"line":1407},47,[79,1409,1410],{"class":85},"All",[79,1412,1413],{"class":89}," done!",[79,1415,1416],{"class":89},"  If",[79,1418,1419],{"class":89}," you",[79,1421,1073],{"class":139},[79,1423,1424],{"class":89},"ve completed all of the above steps, your MySQL\n",[79,1426,1428],{"class":81,"line":1427},48,[79,1429,1430],{"class":89},"installation should now be secure.\n",[79,1432,1434],{"class":81,"line":1433},49,[79,1435,235],{"emptyLinePlaceholder":234},[79,1437,1439],{"class":81,"line":1438},50,[79,1440,1441],{"class":89},"Thanks for using MySQL!\n",[15,1443,1444],{},"Once the MySQL installation and hardening steps are done, run the following test:",[70,1446,1451],{"className":1447,"code":1449,"language":1450},[1448],"language-text","mysql -u root -p\n\nEnter password:\nWelcome to the MySQL monitor.  Commands end with ; or g.\nYour MySQL connection id is 12\nServer version: 5.1.73 Source distribution\n\nCopyright (c) 2000, 2013, Oracle and\u002For its affiliates. All rights reserved.\n\nOracle is a registered trademark of Oracle Corporation and\u002For its\naffiliates. Other names may be trademarks of their respective\nowners.\n\nType 'help;' or 'h' for help. Type 'c' to clear the current input statement.\n\nmysql>\n","text",[76,1452,1449],{"__ignoreMap":32},[15,1454,1455],{},"To exit MySQL:",[70,1457,1459],{"className":72,"code":1458,"language":74,"meta":32,"style":32},"mysql> exit\n",[76,1460,1461],{"__ignoreMap":32},[79,1462,1463,1466,1469],{"class":81,"line":82},[79,1464,1465],{"class":85},"mysql",[79,1467,1468],{"class":295},"> ",[79,1470,1471],{"class":89},"exit\n",[42,1473,1475],{"id":1474},"starting-automatic-services-on-centos","Starting automatic services on CentOS",[15,1477,1478],{},"For the mysqld and jbossas7 (Java server) services to start automatically, you need to use chkconfig:",[70,1480,1482],{"className":72,"code":1481,"language":74,"meta":32,"style":32},"\u002Fsbin\u002Fchkconfig --levels 235 mysqld on\n",[76,1483,1484],{"__ignoreMap":32},[79,1485,1486,1489,1492,1495,1498],{"class":81,"line":82},[79,1487,1488],{"class":85},"\u002Fsbin\u002Fchkconfig",[79,1490,1491],{"class":89}," --levels",[79,1493,1494],{"class":216}," 235",[79,1496,1497],{"class":89}," mysqld",[79,1499,1500],{"class":89}," on\n",[70,1502,1504],{"className":72,"code":1503,"language":74,"meta":32,"style":32},"\u002Fsbin\u002Fchkconfig jbossas7 on\n",[76,1505,1506],{"__ignoreMap":32},[79,1507,1508,1510,1513],{"class":81,"line":82},[79,1509,1488],{"class":85},[79,1511,1512],{"class":89}," jbossas7",[79,1514,1500],{"class":89},[15,1516,1517,1519,1520],{},[37,1518,39],{}," ",[1521,1522,1523],"em",{},"At this exact point, you can reboot the server and check your processes.",[10,1525,1527],{"id":1526},"installing-openiam-on-centos","Installing OpenIAM on CentOS",[15,1529,1530,1531,1076,1538,1541],{},"Now, we need to create an account on OpenIAM's website at the following address: ",[1532,1533,1537],"a",{"href":1534,"rel":1535},"https:\u002F\u002Fwww.openiam.com\u002Fwp-login.php?action=register",[1536],"nofollow","register openiam",[1539,1540],"br",{},"\nDownload the archive named RHEL \u002F CentOS 6.x .- OpenIAM_unix_3_3_3_RELEASE.sh.",[70,1543,1545],{"className":72,"code":1544,"language":74,"meta":32,"style":32},"wget\n",[76,1546,1547],{"__ignoreMap":32},[79,1548,1549],{"class":81,"line":82},[79,1550,1544],{"class":85},[15,1552,1553],{},"Run the following command to launch the installation:",[70,1555,1557],{"className":72,"code":1556,"language":74,"meta":32,"style":32},"sh OpenIAM_unix_3_3_3_RELEASE.sh\ntesting JVM in \u002Fusr ...\nStarting Installer ...\n",[76,1558,1559,1567,1584],{"__ignoreMap":32},[79,1560,1561,1564],{"class":81,"line":82},[79,1562,1563],{"class":85},"sh",[79,1565,1566],{"class":89}," OpenIAM_unix_3_3_3_RELEASE.sh\n",[79,1568,1569,1572,1575,1578,1581],{"class":81,"line":220},[79,1570,1571],{"class":85},"testing",[79,1573,1574],{"class":89}," JVM",[79,1576,1577],{"class":89}," in",[79,1579,1580],{"class":89}," \u002Fusr",[79,1582,1583],{"class":89}," ...\n",[79,1585,1586,1589,1592],{"class":81,"line":231},[79,1587,1588],{"class":85},"Starting",[79,1590,1591],{"class":89}," Installer",[79,1593,1583],{"class":89},[15,1595,1596],{},"Summary of the GUI installation steps:",[47,1598,1599,1602,1605,1611,1618,1621,1624,1627,1630],{},[50,1600,1601],{},"Destination \u002Fopt\u002FOpenIAM",[50,1603,1604],{},"Automatic extraction of files into the destination folder.",[50,1606,1607,1608,1076],{},"Selecting the installation type: ",[1521,1609,1610],{},"1.Tier (jboss Only, Full application)",[50,1612,1613,1614,1617],{},"Selecting the database type: ",[1521,1615,1616],{},"MySQL"," with only the admin credentials to add.",[50,1619,1620],{},"Selecting the selfservice localhost address: port 9080.",[50,1622,1623],{},"Configuring the activation link: change the port to 9080 instead of 8080 since we're using jboss Only.",[50,1625,1626],{},"Enter your SMTP settings.",[50,1628,1629],{},"Check or uncheck sending an email.",[50,1631,1632],{},"At the end, an installation popup appears to notify us to run the password generation.",[15,1634,1635],{},"At this exact moment, we head to OpenIAM's destination directory:",[70,1637,1639],{"className":72,"code":1638,"language":74,"meta":32,"style":32},"cd \u002Fopt\u002FOpenIAM\u002F\n",[76,1640,1641],{"__ignoreMap":32},[79,1642,1643,1645],{"class":81,"line":82},[79,1644,111],{"class":110},[79,1646,1647],{"class":89}," \u002Fopt\u002FOpenIAM\u002F\n",[15,1649,1650],{},"Run the OpenIAM server's startup script:",[70,1652,1654],{"className":72,"code":1653,"language":74,"meta":32,"style":32},"sh start_jboss.sh\n",[76,1655,1656],{"__ignoreMap":32},[79,1657,1658,1660],{"class":81,"line":82},[79,1659,1563],{"class":85},[79,1661,1662],{"class":89}," start_jboss.sh\n",[15,1664,1665],{},"Before being able to use OpenIAM, check the logs:",[70,1667,1669],{"className":72,"code":1668,"language":74,"meta":32,"style":32},"service jbossas7 log\n",[76,1670,1671],{"__ignoreMap":32},[79,1672,1673,1676,1678],{"class":81,"line":82},[79,1674,1675],{"class":85},"service",[79,1677,1512],{"class":89},[79,1679,1680],{"class":89}," log\n",[15,1682,1683],{},"Wait a few minutes for the .deployed files to become visible in:",[70,1685,1687],{"className":72,"code":1686,"language":74,"meta":32,"style":32},"cd \u002Fopt\u002FOpenIAM\u002Fjboss\u002Fjboss-as-7.1.1.Final\u002Fstandalone\u002Fdeployments\n",[76,1688,1689],{"__ignoreMap":32},[79,1690,1691,1693],{"class":81,"line":82},[79,1692,111],{"class":110},[79,1694,1695],{"class":89}," \u002Fopt\u002FOpenIAM\u002Fjboss\u002Fjboss-as-7.1.1.Final\u002Fstandalone\u002Fdeployments\n",[15,1697,1698],{},"In the log file, the result looks like:",[70,1700,1702],{"className":72,"code":1701,"language":74,"meta":32,"style":32},"[MDC] Finished deploying webconsole.war, result: webconsole.war.deployed\n",[76,1703,1704],{"__ignoreMap":32},[79,1705,1706,1709,1712,1715],{"class":81,"line":82},[79,1707,1708],{"class":139},"[",[79,1710,1711],{"class":295},"MDC",[79,1713,1714],{"class":139},"]",[79,1716,1717],{"class":295}," Finished deploying webconsole.war, result: webconsole.war.deployed\n",[15,1719,1720],{},"After a few minutes, you'll be able to run this:",[70,1722,1724],{"className":72,"code":1723,"language":74,"meta":32,"style":32},"cd \u002Fopt\u002FOpenIAM\u002Futility\nsh generate_password.sh\n\nProperties are found. loading...\nGenerating master key...\nGenerating master key successfully finished\n",[76,1725,1726,1733,1740,1744,1757,1768],{"__ignoreMap":32},[79,1727,1728,1730],{"class":81,"line":82},[79,1729,111],{"class":110},[79,1731,1732],{"class":89}," \u002Fopt\u002FOpenIAM\u002Futility\n",[79,1734,1735,1737],{"class":81,"line":220},[79,1736,1563],{"class":85},[79,1738,1739],{"class":89}," generate_password.sh\n",[79,1741,1742],{"class":81,"line":231},[79,1743,235],{"emptyLinePlaceholder":234},[79,1745,1746,1749,1751,1754],{"class":81,"line":238},[79,1747,1748],{"class":85},"Properties",[79,1750,244],{"class":89},[79,1752,1753],{"class":89}," found.",[79,1755,1756],{"class":89}," loading...\n",[79,1758,1759,1762,1765],{"class":81,"line":269},[79,1760,1761],{"class":85},"Generating",[79,1763,1764],{"class":89}," master",[79,1766,1767],{"class":89}," key...\n",[79,1769,1770,1772,1774,1777,1779],{"class":81,"line":274},[79,1771,1761],{"class":85},[79,1773,1764],{"class":89},[79,1775,1776],{"class":89}," key",[79,1778,725],{"class":89},[79,1780,1781],{"class":89}," finished\n",[42,1783,1785],{"id":1784},"installing-a-root-certificate-on-windows-for-ldaps","Installing a root certificate on Windows for ldaps",[15,1787,1788],{},"We'll now need to create a trusted root certificate on Windows Server 2008R2 so communication is encrypted over ldaps.",[15,1790,1791],{},"Summary of the steps:",[47,1793,1794,1797,1800,1803,1806,1809,1812,1815,1818],{},[50,1795,1796],{},"Launch Windows Server Manager.",[50,1798,1799],{},"Add the role: Active Directory Certificate Services.",[50,1801,1802],{},"Add the Certification Authority role services from the Role Services screen.",[50,1804,1805],{},"When choosing the CA, select: Enterprise.",[50,1807,1808],{},"The CA type is: root.",[50,1810,1811],{},"A new private key request is needed.",[50,1813,1814],{},"The encryption method choice appears (minimum 2048-bit key).",[50,1816,1817],{},"Then you need to choose a certificate name.",[50,1819,1820],{},"Finish the installation & reboot the Windows server.",[15,1822,1823],{},"We need to export the certificate since it will let us link the identity manager (OpenIAM) with Active Directory. To do this, launch the Windows CMD, then run the following command:",[70,1825,1827],{"className":72,"code":1826,"language":74,"meta":32,"style":32},"certutil -ca.cert certificatSSL.cer\n",[76,1828,1829],{"__ignoreMap":32},[79,1830,1831,1834,1837],{"class":81,"line":82},[79,1832,1833],{"class":85},"certutil",[79,1835,1836],{"class":89}," -ca.cert",[79,1838,1839],{"class":89}," certificatSSL.cer\n",[15,1841,1842],{},"The certificate is directly exported to the current folder, by default in your user folder, e.g.:",[70,1844,1846],{"className":72,"code":1845,"language":74,"meta":32,"style":32},"C:\u002FUsers\u002Fmy_account\n",[76,1847,1848],{"__ignoreMap":32},[79,1849,1850],{"class":81,"line":82},[79,1851,1845],{"class":85},[15,1853,1854],{},"Now, you'll need to transfer your certificatSSL.cer certificate to the OpenIAM server.",[15,1856,1857,1859,1860],{},[37,1858,39],{}," I invite you to use WinSCP or FileZilla via the SFTP protocol ",[1521,1861,1862],{},"(enable the SSH server)",[42,1864,1866],{"id":1865},"configuring-the-certificate-in-openiam","Configuring the certificate in OpenIAM",[15,1868,1869],{},"In our example, we'll use the certificatSSL.cer certificate, which we transferred to the following directory:",[70,1871,1873],{"className":72,"code":1872,"language":74,"meta":32,"style":32},"\u002Fhome\u002Fmy_account\u002Fssl\u002F\n",[76,1874,1875],{"__ignoreMap":32},[79,1876,1877],{"class":81,"line":82},[79,1878,1872],{"class":85},[15,1880,1881],{},"Rename the certificate to:",[70,1883,1885],{"className":72,"code":1884,"language":74,"meta":32,"style":32},"mv certicatSSL.cer adcert.ca\n",[76,1886,1887],{"__ignoreMap":32},[79,1888,1889,1892,1895],{"class":81,"line":82},[79,1890,1891],{"class":85},"mv",[79,1893,1894],{"class":89}," certicatSSL.cer",[79,1896,1897],{"class":89}," adcert.ca\n",[15,1899,1900],{},"To import the certificate into java, head to the tool's folder:",[70,1902,1904],{"className":72,"code":1903,"language":74,"meta":32,"style":32},"cd \u002Fopt\u002Fjdk1.7.0_79\u002Fjre\u002Fbin\u002F\n",[76,1905,1906],{"__ignoreMap":32},[79,1907,1908,1910],{"class":81,"line":82},[79,1909,111],{"class":110},[79,1911,1912],{"class":89}," \u002Fopt\u002Fjdk1.7.0_79\u002Fjre\u002Fbin\u002F\n",[15,1914,1915],{},"With the keytool utility, launch the import:",[70,1917,1919],{"className":72,"code":1918,"language":74,"meta":32,"style":32},".\u002Fkeytool -import -alias adcert -keystore \u002Fusr\u002Fjava\u002Fjdk1.7.0_79\u002Fjre\u002Flib\u002Fsecurity\u002Fcacerts -file \u002Fopt\u002FOpenIAM\u002Fdata\u002Fopeniam\u002Fconf\u002Fbackup_ssl\u002Fadcert.ca\n\nEnter keystore password:  \nRe-enter new password:\nOwner: CN=ldap-CA, DC=ldap, DC=kassianoff, DC=fr\nIssuer: CN=ldap-CA, DC=ldap, DC=kassianoff, DC=fr\nSerial number: *******************************\nValid from: Tue Dec 15 12:51:34 CET 2015 until: Tue Dec 15 13:01:33 CET 2020\nCertificate fingerprints:\n     MD5:  \u002F\n     SHA1 : \u002F\n     SHA256 : \u002F\n     Signature algorithm name: SHA1withRSA\n     Version : 3\n\nExtensions:\n\n#1: ObjectId: 1.3.6.1.4.1.300.24.0 Criticality=false\n0000: 02 01 00                                           ...\n\n#2: ObjectId: 2.5.29.19 Criticality=true\nBasicConstraints:[\n  CA:true\n  PathLen:2147481400\n]\n\n#3: ObjectId: 2.5.29.15 Criticality=false\nKeyUsage [\n  DigitalSignature\n  Key_CertSign\n  Crl_Sign\n]\n\n#4: ObjectId: 2.5.29.14 Criticality=false\nSubjectKeyIdentifier [\nKeyIdentifier [\n0000: \u002F .....?x..X.X'.0\n0010: \u002F                                       I.Vc\n]\n]\n\nTrust this certificate? [no] :  yes\n",[76,1920,1921,1947,1951,1964,1972,1989,2002,2013,2056,2064,2072,2083,2092,2106,2116,2120,2125,2129,2135,2152,2156,2161,2166,2171,2176,2181,2185,2190,2198,2203,2208,2213,2217,2221,2226,2233,2240,2255,2260,2264,2268,2272],{"__ignoreMap":32},[79,1922,1923,1926,1929,1932,1935,1938,1941,1944],{"class":81,"line":82},[79,1924,1925],{"class":85},".\u002Fkeytool",[79,1927,1928],{"class":89}," -import",[79,1930,1931],{"class":89}," -alias",[79,1933,1934],{"class":89}," adcert",[79,1936,1937],{"class":89}," -keystore",[79,1939,1940],{"class":89}," \u002Fusr\u002Fjava\u002Fjdk1.7.0_79\u002Fjre\u002Flib\u002Fsecurity\u002Fcacerts",[79,1942,1943],{"class":89}," -file",[79,1945,1946],{"class":89}," \u002Fopt\u002FOpenIAM\u002Fdata\u002Fopeniam\u002Fconf\u002Fbackup_ssl\u002Fadcert.ca\n",[79,1948,1949],{"class":81,"line":220},[79,1950,235],{"emptyLinePlaceholder":234},[79,1952,1953,1955,1958,1961],{"class":81,"line":231},[79,1954,325],{"class":85},[79,1956,1957],{"class":89}," keystore",[79,1959,1960],{"class":89}," password:",[79,1962,1963],{"class":295},"  \n",[79,1965,1966,1968,1970],{"class":81,"line":238},[79,1967,824],{"class":85},[79,1969,827],{"class":89},[79,1971,819],{"class":89},[79,1973,1974,1977,1980,1983,1986],{"class":81,"line":269},[79,1975,1976],{"class":85},"Owner:",[79,1978,1979],{"class":89}," CN=ldap-CA,",[79,1981,1982],{"class":89}," DC=ldap,",[79,1984,1985],{"class":89}," DC=kassianoff,",[79,1987,1988],{"class":89}," DC=fr\n",[79,1990,1991,1994,1996,1998,2000],{"class":81,"line":274},[79,1992,1993],{"class":85},"Issuer:",[79,1995,1979],{"class":89},[79,1997,1982],{"class":89},[79,1999,1985],{"class":89},[79,2001,1988],{"class":89},[79,2003,2004,2007,2010],{"class":81,"line":283},[79,2005,2006],{"class":85},"Serial",[79,2008,2009],{"class":89}," number:",[79,2011,2012],{"class":295}," *******************************\n",[79,2014,2015,2018,2021,2024,2027,2030,2033,2036,2039,2042,2044,2046,2048,2051,2053],{"class":81,"line":289},[79,2016,2017],{"class":85},"Valid",[79,2019,2020],{"class":89}," from:",[79,2022,2023],{"class":89}," Tue",[79,2025,2026],{"class":89}," Dec",[79,2028,2029],{"class":216}," 15",[79,2031,2032],{"class":89}," 12:51:34",[79,2034,2035],{"class":89}," CET",[79,2037,2038],{"class":216}," 2015",[79,2040,2041],{"class":89}," until:",[79,2043,2023],{"class":89},[79,2045,2026],{"class":89},[79,2047,2029],{"class":216},[79,2049,2050],{"class":89}," 13:01:33",[79,2052,2035],{"class":89},[79,2054,2055],{"class":216}," 2020\n",[79,2057,2058,2061],{"class":81,"line":299},[79,2059,2060],{"class":85},"Certificate",[79,2062,2063],{"class":89}," fingerprints:\n",[79,2065,2066,2069],{"class":81,"line":308},[79,2067,2068],{"class":85},"     MD5:",[79,2070,2071],{"class":89},"  \u002F\n",[79,2073,2074,2077,2080],{"class":81,"line":317},[79,2075,2076],{"class":85},"     SHA1",[79,2078,2079],{"class":89}," :",[79,2081,2082],{"class":89}," \u002F\n",[79,2084,2085,2088,2090],{"class":81,"line":322},[79,2086,2087],{"class":85},"     SHA256",[79,2089,2079],{"class":89},[79,2091,2082],{"class":89},[79,2093,2094,2097,2100,2103],{"class":81,"line":587},[79,2095,2096],{"class":85},"     Signature",[79,2098,2099],{"class":89}," algorithm",[79,2101,2102],{"class":89}," name:",[79,2104,2105],{"class":89}," SHA1withRSA\n",[79,2107,2108,2111,2113],{"class":81,"line":592},[79,2109,2110],{"class":85},"     Version",[79,2112,2079],{"class":89},[79,2114,2115],{"class":216}," 3\n",[79,2117,2118],{"class":81,"line":601},[79,2119,235],{"emptyLinePlaceholder":234},[79,2121,2122],{"class":81,"line":606},[79,2123,2124],{"class":85},"Extensions:\n",[79,2126,2127],{"class":81,"line":624},[79,2128,235],{"emptyLinePlaceholder":234},[79,2130,2131],{"class":81,"line":629},[79,2132,2134],{"class":2133},"sHwdD","#1: ObjectId: 1.3.6.1.4.1.300.24.0 Criticality=false\n",[79,2136,2137,2140,2143,2146,2149],{"class":81,"line":646},[79,2138,2139],{"class":85},"0000:",[79,2141,2142],{"class":216}," 02",[79,2144,2145],{"class":216}," 01",[79,2147,2148],{"class":216}," 00",[79,2150,2151],{"class":89},"                                           ...\n",[79,2153,2154],{"class":81,"line":659},[79,2155,235],{"emptyLinePlaceholder":234},[79,2157,2158],{"class":81,"line":1029},[79,2159,2160],{"class":2133},"#2: ObjectId: 2.5.29.19 Criticality=true\n",[79,2162,2163],{"class":81,"line":1036},[79,2164,2165],{"class":85},"BasicConstraints:[\n",[79,2167,2168],{"class":81,"line":1041},[79,2169,2170],{"class":85},"  CA:true\n",[79,2172,2173],{"class":81,"line":1082},[79,2174,2175],{"class":85},"  PathLen:2147481400\n",[79,2177,2178],{"class":81,"line":1115},[79,2179,2180],{"class":295},"]\n",[79,2182,2183],{"class":81,"line":1120},[79,2184,235],{"emptyLinePlaceholder":234},[79,2186,2187],{"class":81,"line":1136},[79,2188,2189],{"class":2133},"#3: ObjectId: 2.5.29.15 Criticality=false\n",[79,2191,2192,2195],{"class":81,"line":1143},[79,2193,2194],{"class":85},"KeyUsage",[79,2196,2197],{"class":295}," [\n",[79,2199,2200],{"class":81,"line":1148},[79,2201,2202],{"class":85},"  DigitalSignature\n",[79,2204,2205],{"class":81,"line":1186},[79,2206,2207],{"class":85},"  Key_CertSign\n",[79,2209,2210],{"class":81,"line":1216},[79,2211,2212],{"class":85},"  Crl_Sign\n",[79,2214,2215],{"class":81,"line":1233},[79,2216,2180],{"class":295},[79,2218,2219],{"class":81,"line":1238},[79,2220,235],{"emptyLinePlaceholder":234},[79,2222,2223],{"class":81,"line":1260},[79,2224,2225],{"class":2133},"#4: ObjectId: 2.5.29.14 Criticality=false\n",[79,2227,2228,2231],{"class":81,"line":1274},[79,2229,2230],{"class":85},"SubjectKeyIdentifier",[79,2232,2197],{"class":295},[79,2234,2235,2238],{"class":81,"line":1281},[79,2236,2237],{"class":85},"KeyIdentifier",[79,2239,2197],{"class":295},[79,2241,2242,2244,2247,2250,2252],{"class":81,"line":1299},[79,2243,2139],{"class":85},[79,2245,2246],{"class":89}," \u002F",[79,2248,2249],{"class":89}," .....?x..X.X",[79,2251,1073],{"class":139},[79,2253,2254],{"class":89},".0\n",[79,2256,2257],{"class":81,"line":1306},[79,2258,2259],{"class":89},"0010: \u002F                                       I.Vc\n",[79,2261,2262],{"class":81,"line":1311},[79,2263,2180],{"class":89},[79,2265,2266],{"class":81,"line":1346},[79,2267,2180],{"class":89},[79,2269,2270],{"class":81,"line":1361},[79,2271,235],{"emptyLinePlaceholder":234},[79,2273,2274],{"class":81,"line":1366},[79,2275,2276],{"class":89},"Trust this certificate? [no] :  yes\n",[15,2278,2279],{},"Check that the certificate was successfully imported on the server:",[70,2281,2283],{"className":72,"code":2282,"language":74,"meta":32,"style":32},".\u002Fkeytool -list -v -keystore \u002Fopt\u002Fjdk1.7.0_79\u002Fjre\u002Flib\u002Fsecurity\u002Fcacerts\n",[76,2284,2285],{"__ignoreMap":32},[79,2286,2287,2289,2292,2295,2297],{"class":81,"line":82},[79,2288,1925],{"class":85},[79,2290,2291],{"class":89}," -list",[79,2293,2294],{"class":89}," -v",[79,2296,1937],{"class":89},[79,2298,2299],{"class":89}," \u002Fopt\u002Fjdk1.7.0_79\u002Fjre\u002Flib\u002Fsecurity\u002Fcacerts\n",[15,2301,2302],{},"Edit the security file:",[70,2304,2306],{"className":72,"code":2305,"language":74,"meta":32,"style":32},"nano \u002Fopt\u002FOpenIAM\u002Fdata\u002Fopeniam\u002Fconf\u002Fsecurityconf.proprietes\n",[76,2307,2308],{"__ignoreMap":32},[79,2309,2310,2313],{"class":81,"line":82},[79,2311,2312],{"class":85},"nano",[79,2314,2315],{"class":89}," \u002Fopt\u002FOpenIAM\u002Fdata\u002Fopeniam\u002Fconf\u002Fsecurityconf.proprietes\n",[15,2317,2318],{},"Here's the configuration to put on the first line:",[70,2320,2322],{"className":72,"code":2321,"language":74,"meta":32,"style":32},"KEYSTORE=${confpath}\u002Fconf\u002Fcacerts\n",[76,2323,2324],{"__ignoreMap":32},[79,2325,2326,2329,2332,2335,2338],{"class":81,"line":82},[79,2327,2328],{"class":295},"KEYSTORE",[79,2330,2331],{"class":139},"=${",[79,2333,2334],{"class":295},"confpath",[79,2336,2337],{"class":139},"}",[79,2339,2340],{"class":89},"\u002Fconf\u002Fcacerts\n",[15,2342,2343],{},"Then stop the OpenIAM solution:",[70,2345,2347],{"className":72,"code":2346,"language":74,"meta":32,"style":32},"cd \u002Fopt\u002FOpenIAM\u002F && sh stop_jboss.sh\n",[76,2348,2349],{"__ignoreMap":32},[79,2350,2351,2353,2356,2359,2362],{"class":81,"line":82},[79,2352,111],{"class":110},[79,2354,2355],{"class":89}," \u002Fopt\u002FOpenIAM\u002F",[79,2357,2358],{"class":139}," &&",[79,2360,2361],{"class":85}," sh",[79,2363,2364],{"class":89}," stop_jboss.sh\n",[15,2366,2367],{},"After a few minutes, restart the script:",[70,2369,2370],{"className":72,"code":1653,"language":74,"meta":32,"style":32},[76,2371,2372],{"__ignoreMap":32},[79,2373,2374,2376],{"class":81,"line":82},[79,2375,1563],{"class":85},[79,2377,1662],{"class":89},[15,2379,2380],{},"You're now able to configure OpenIAM securely with Active Directory.",[10,2382,2384],{"id":2383},"configuring-the-ldaps-connector","Configuring the LDAPS connector",[15,2386,2387,2388,2390,2391,2395],{},"Now you need to connect to OpenIAM's web admin interface to install the connector.",[1539,2389],{},"\nHead to the admin URL via ",[1532,2392,2393],{"href":2393,"rel":2394},"https:\u002F\u002Flocalhost:9080\u002Fwebconsole",[1536]," with the default credentials:",[2397,2398,2399,2402],"ul",{},[50,2400,2401],{},"Username: sysadmin",[50,2403,2404],{},"Password: passwd000",[15,2406,2407,2409],{},[37,2408,39],{}," As soon as you log in for the first time, OpenIAM informs us that we need to change our password.",[15,2411,2412],{},"Next, head to the Provisioning section, then Managed System, to create a New Managed System:",[15,2414,2415],{},[30,2416],{"alt":32,"src":2417},"\u002Fimages\u002Fblog\u002Fconfiguration-openiam-avec-ldaps\u002Fa13d8850fc.png",[15,2419,2420,2423],{},[37,2421,2422],{},"Success!"," I now invite you to save and run an SSL request, then test the ldaps connection: OK.",[10,2425,2427],{"id":2426},"conclusion","Conclusion",[2429,2430,2431],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":32,"searchDepth":220,"depth":220,"links":2433},[2434,2435,2438,2443,2447,2448],{"id":12,"depth":220,"text":13},{"id":20,"depth":220,"text":5,"children":2436},[2437],{"id":44,"depth":231,"text":45},{"id":64,"depth":220,"text":65,"children":2439},[2440,2441,2442],{"id":96,"depth":231,"text":97},{"id":436,"depth":231,"text":437},{"id":1474,"depth":231,"text":1475},{"id":1526,"depth":220,"text":1527,"children":2444},[2445,2446],{"id":1784,"depth":231,"text":1785},{"id":1865,"depth":231,"text":1866},{"id":2383,"depth":220,"text":2384},{"id":2426,"depth":220,"text":2427},[2450],"Linux","\u002Fimages\u002Fblog\u002Fconfiguration-openiam-avec-ldaps\u002Fb5eaa788f1.jpg",null,"2016-02-01","OpenIAM is an open-source identity management solution. Discover how to interconnect this solution with LDAPS.","md",{},"\u002Fen\u002Fblog\u002Fconfiguration-openiam-avec-ldaps",[2459],"certificat-lpi-linux-essentials-exam-010-150",{"title":5,"description":2454},"configuration-openiam-avec-ldaps","en\u002Fblog\u002Fconfiguration-openiam-avec-ldaps","sBQtCWeWe54txp639yHSg0ztpMisiMI7NjO6H6b0iTY",[2465,2471,2477,2484,2492,2499,2506,2513],{"title":2466,"path":2467,"stem":2468,"date":2469,"cover":2470,"categories":2452,"children":-1},"Protect All Your Data on Your Computer","\u002Fen\u002Fblog\u002Fcertificat-protegez-ensemble-vos-donnees-sur-votre-ordinateur","en\u002Fblog\u002Fcertificat-protegez-ensemble-vos-donnees-sur-votre-ordinateur","2016-04-06","\u002Fimages\u002Fblog\u002Fcertificat-protegez-ensemble-vos-donnees-sur-votre-ordinateur\u002Fb4c7d4ec05.png",{"title":2472,"path":2473,"stem":2474,"date":2475,"cover":2476,"categories":2452,"children":-1},"Introduction to Containers","\u002Fen\u002Fblog\u002Fcertificat-introduction-aux-conteneurs","en\u002Fblog\u002Fcertificat-introduction-aux-conteneurs","2016-04-03","\u002Fimages\u002Fblog\u002Fcertificat-introduction-aux-conteneurs\u002Fb36ecfb03e.png",{"title":2478,"path":2479,"stem":2480,"date":2481,"cover":2482,"categories":2483,"children":-1},"Installing a Gandi Certificate on Zimbra","\u002Fen\u002Fblog\u002Finstallation-certificat-gandi-sous-zimbra","en\u002Fblog\u002Finstallation-certificat-gandi-sous-zimbra","2016-03-23","\u002Fimages\u002Fblog\u002Finstallation-certificat-gandi-sous-zimbra\u002F832221cad6.png",[2450],{"title":2485,"path":2486,"stem":2487,"date":2488,"cover":2489,"categories":2490,"children":-1},"VMware vCenter: Distributed vSwitch","\u002Fen\u002Fblog\u002Fvmware-vcenter-vswitch-distribue","en\u002Fblog\u002Fvmware-vcenter-vswitch-distribue","2016-03-15","\u002Fimages\u002Fblog\u002Fvmware-vcenter-vswitch-distribue\u002Fa3ce9b6363.jpg",[2491],"Réseau",{"title":2493,"path":2494,"stem":2495,"date":2496,"cover":2497,"categories":2498,"children":-1},"Configuring a Counter-Strike GO Server on Linux","\u002Fen\u002Fblog\u002Fconfiguration-serveur-counter-strike-sous-linux","en\u002Fblog\u002Fconfiguration-serveur-counter-strike-sous-linux","2016-01-27","\u002Fimages\u002Fblog\u002Fconfiguration-serveur-counter-strike-sous-linux\u002F25d3c9f715.png",[2450],{"title":2500,"path":2501,"stem":2502,"date":2503,"cover":2504,"categories":2505,"children":-1},"Choosing a Home Infrastructure","\u002Fen\u002Fblog\u002Fchoix-une-infrastructure-domestique","en\u002Fblog\u002Fchoix-une-infrastructure-domestique","2015-12-24","\u002Fimages\u002Fblog\u002Fchoix-une-infrastructure-domestique\u002Fedf65eed4e.png",[2491],{"title":2507,"path":2508,"stem":2509,"date":2510,"cover":2511,"categories":2512,"children":-1},"Configuring Debian 8 in Desktop Mode","\u002Fen\u002Fblog\u002Fconfiguration-debian-mode-desktop","en\u002Fblog\u002Fconfiguration-debian-mode-desktop","2015-08-29","\u002Fimages\u002Fblog\u002Fconfiguration-debian-mode-desktop\u002F463de156f7.png",[2450],{"title":2514,"path":2515,"stem":2516,"date":2517,"cover":2518,"categories":2452,"children":-1},"Hack In Paris 2015: a Nice X11 Backdoor","\u002Fen\u002Fblog\u002Fhack-paris-2015-une-belle-backdoor-x11","en\u002Fblog\u002Fhack-paris-2015-une-belle-backdoor-x11","2015-07-26","\u002Fimages\u002Fblog\u002Fhack-paris-2015-une-belle-backdoor-x11\u002Fd1aaf6a60c.jpg",[2520],{"id":2521,"title":2522,"body":2523,"categories":2572,"cover":2574,"cover_contain":2575,"credly_badge_id":2576,"date":2577,"description":2578,"extension":2455,"meta":2579,"navigation":234,"path":2580,"related_certifications":2452,"seo":2581,"slug":2459,"stem":2582,"__hash__":2583},"blog\u002Fen\u002Fblog\u002Fcertificat-lpi-linux-essentials-exam-010-150.md","LPI Linux Essentials – Exam 010-150",{"type":7,"value":2524,"toc":2568},[2525,2527,2530,2533,2560,2563,2565],[10,2526,13],{"id":12},[15,2528,2529],{},"To make my work on Linux servers for clients more reliable, I took the LPI Linux Essentials certification.",[15,2531,2532],{},"The \"LPI Linux Essentials\" training path is designed for systems professionals.\nThe online course catalog covers the following modules:",[2397,2534,2535,2540,2545,2550,2555],{},[50,2536,2537],{},[37,2538,2539],{},"The Linux Community and a Career in Open Source",[50,2541,2542],{},[37,2543,2544],{},"Finding Your Way on a Linux System",[50,2546,2547],{},[37,2548,2549],{},"The Power of the Command Line",[50,2551,2552],{},[37,2553,2554],{},"The Linux Operating System",[50,2556,2557],{},[37,2558,2559],{},"Security and File Permissions",[15,2561,2562],{},"The training takes about 2 days.\nYou should then allow around 1h for the certification exam itself: LPI Linux Essentials.",[10,2564,2427],{"id":2426},[15,2566,2567],{},"This training via NDG prepares for the LPI Linux Essentials certification, covering the basics of the Linux ecosystem: the command line, the operating system, and file security. It is a solid first certification for anyone starting out on Linux systems. An essential foundation before tackling more advanced Linux certifications.",{"title":32,"searchDepth":220,"depth":220,"links":2569},[2570,2571],{"id":12,"depth":220,"text":13},{"id":2426,"depth":220,"text":2427},[2573,2450],"Certifications","\u002Fimages\u002Fblog\u002Fcertificat-lpi-linux-essentials-exam-010-150\u002F4497f02702.jpg",false,"dbc3a0e7-5909-47df-b9b1-c05ecb60ccb4","2017-11-24","LPI Linux Essentials Exam 010-150 certification via an NDG online course.",{},"\u002Fen\u002Fblog\u002Fcertificat-lpi-linux-essentials-exam-010-150",{"title":2522,"description":2578},"en\u002Fblog\u002Fcertificat-lpi-linux-essentials-exam-010-150","xeSCYjFx9jOx2b6qHUfhxCIjiKjTseXAXAtG-rh6Z1M",1786644889050]