Hack The Sec-Leading Resource Of Linux Tutorial: phpLDAPAdmin

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
Install and Configure phpLDAPAdmin on Linux</div>
<div style="text-align: center;">
 </div>
phpLDAPadmin is a web application for administering Lightweight Directory Access Protocol (LDAP) servers.It's written in the PHP programming language, and is licensed  
 
under the GNU General Public License. The application is available in 14 languagesand supports UTF-8 encoded directory strings. 
 
<a href="http://www.hackthesec.co.in/2016/11/how-to-migrate-local-users-to-ldap.html" itemprop="url" style="background-color: white; display: block; font-family: "Open Sans", serif, sans-serif; font-weight: 600; text-decoration: none;">How to migrate local users to LDAP accounts</a>

On CentOS / RHEL: 
 
 
phpLDAPAdmin is not available in the main repository, so you need to enable <a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html">EPEL repository for Redhat</a> based derivatives. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">### For RHEL 7 ###

# rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

### For CentOS 7 ###

# yum -y install epel-release</pre>
Install phpLDAPAdmin: 
<div style="clear: both; margin: 10px 0;">
<center>
<script async="" src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" data-ad-client="ca-pub-5744890361111211" data-ad-slot="1658755283" style="display: inline-block; height: 15px; width: 728px;"></ins></center>
</div>
Install phpLDAPAdmin using "yum" on CentOS and "apt-get" on Ubuntu. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">### CentOS 7 / RHEL 7 ###

# yum install -y phpldapadmin

### Ubuntu 16.04 ###

$ sudo apt-get update
$ sudo apt-get install -y phpldapadmin</pre>
Configure Apache virtual host on CentOS 7 / RHEL 7: 
 
Default phpLDAPAdmin web config file in /etc/httpd/conf.d directory, it has rules and access permission. phpLDAPAdmin can be accessed only from the localhost (127.0.0.1) check the bellow settings. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># vi /etc/httpd/conf.d/phpldapadmin.conf</pre>
Update the configuration file shown like below.  
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Alias /phpldapadmin /usr/share/phpldapadmin/htdocs
Alias /ldapadmin /usr/share/phpldapadmin/htdocs

usr/share/phpldapadmin/htdocs>
 <IfModule mod_authz_core.c>
 # Apache 2.4
 # Require local
 Require all granted
 IfModule>
 <IfModule !mod_authz_core.c>
 # Apache 2.2
 Order Deny,Allow
 Deny from all
 Allow from 127.0.0.1
 Allow from ::1
 </IfModule>
</Directory></pre>
Start the apache service in CentOS 7 / RHEL 7. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># systemctl restart httpd.service</pre>
Configure the FirewallD to allow external machines to access the dashboard (CentOS / RHEL). 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># firewall-cmd --permanent --zone=public --add-service=http
# firewall-cmd --reload</pre>
Configure phpLDAPAdmin: 
<div style="clear: both; margin: 10px 0;">
<center>
<script async="" src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script>

<ins class="adsbygoogle" data-ad-client="ca-pub-5744890361111211" data-ad-slot="1658755283" style="display: inline-block; height: 15px; width: 728px;"></ins></center>
</div>
phpLDAPadmin by modifying some of its configuration values. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">### CentOS 7 / RHEL 7 ###

# vi /etc/phpldapadmin/config.php

### Ubuntu 16.04 ###

$ sudo nano /etc/phpldapadmin/config.php</pre>
A handy name that will appear in the left tree viewer and throughout phpLDAPadmin to identify this LDAP server to users. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$servers->setValue('server','name','HackTheSec Local LDAP Server');</pre>
If you are planning to manage the LDAP server other than localhost then you can modify the below parameter. (Optional) 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$servers->setValue('server','host','127.0.0.1');</pre>
To connect to the LDAP server which listens on the non-standard port. (Optional) 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$servers->setValue('server','port',389);</pre>
Array of base domain names of your LDAP server. ( Must be set in Ubuntu 16.04) 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$servers->setValue('server','base',array('dc=hackthesec,dc=local'));</pre>
On CentOS 7 / RHEL 7: 
 
Uncomment the line 397 and comment out the 398, like below. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$servers->setValue('login','attr','dn');
// $servers->setValue('login','attr','uid');</pre>
If you have SELinux enabled on CentOS 7 / RHEL 7 then run this command. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># setsebool -P httpd_can_connect_ldap on</pre>
Access phpLDAPAdmin: 
 
Open up the web browser and navigate it to the following URL. 
http://your-ip-add-ress/phpldapadmin 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgC4H8H_DLb4Dyi-bXqjSL_veED94b5UY1xEBUIxIukoKxr8EseQ1Au9cgKdVHXb8OCyT66b5eGIqh2geQkEDvt_BEHCWoMgVeHRjkpl6VQJte7BronBi7aF3MyWpPysTJsax-flqu-9_pn/s1600/xConfigure-phpLDAPAdmin-on-CentOS-7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgC4H8H_DLb4Dyi-bXqjSL_veED94b5UY1xEBUIxIukoKxr8EseQ1Au9cgKdVHXb8OCyT66b5eGIqh2geQkEDvt_BEHCWoMgVeHRjkpl6VQJte7BronBi7aF3MyWpPysTJsax-flqu-9_pn/s1600/xConfigure-phpLDAPAdmin-on-CentOS-7.jpg" /></a></div>
Click on the "login" link that is visible on the left-hand side of the page. You will be taken to the login page, log in using the LDAP root (ldapadm) account in the form of "cn=ldapadm,dc=hackthesec,dc=local". 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzDHfhjd21ThBzLktS38edIbS5plu0X9viwsIy1xxjmmfO4nzjkSx2BIVG8rQtogqCMvvOhpEBQP42DJ1ByYMAzHnu5vRaRzqGc1s8lJZRuI_39EVv-RkzDe7BtsxvM_pQXOST07Xn8FBF/s1600/phpLDAPAdmin-Login.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzDHfhjd21ThBzLktS38edIbS5plu0X9viwsIy1xxjmmfO4nzjkSx2BIVG8rQtogqCMvvOhpEBQP42DJ1ByYMAzHnu5vRaRzqGc1s8lJZRuI_39EVv-RkzDe7BtsxvM_pQXOST07Xn8FBF/s1600/phpLDAPAdmin-Login.jpg" /></a></div>
If you have below values set in /etc/phpldapadmin/config.php file then the Login DN: will be automatically pre-populated. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$servers->setValue('login','bind_id','cn=ldapadm,dc=hackthesec,dc=local');</pre>
Now you can start managing your LDAP server via phpLDAPAdmin. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhelI5SDN1eQLU2LR0SwZS9nCJFSxRK28tJP4p4X5ktsrdANL0qO6F5om2W_4YtQ0n2uYFrl-EvATpvjdAntPlGixSIfUEhJRJbb6bMChJrp9duAkQUw8B9q00iC0hw51aulrNteFoMKewP/s1600/LOCAL_LDAP.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhelI5SDN1eQLU2LR0SwZS9nCJFSxRK28tJP4p4X5ktsrdANL0qO6F5om2W_4YtQ0n2uYFrl-EvATpvjdAntPlGixSIfUEhJRJbb6bMChJrp9duAkQUw8B9q00iC0hw51aulrNteFoMKewP/s1600/LOCAL_LDAP.jpg" /></a></div>
 
Thanks for watching ... 
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>

How to Install and Configure phpLDAPAdmin on CentOS 7 / Ubuntu 16.04

Install and Configure phpLDAPAdmin on Linux phpLDAPadmin is a web application for administering Lightweight Directory Access Protocol (LDAP) servers.It's written in the PHP programming language, and …