{"id":1486,"date":"2015-09-18T08:55:26","date_gmt":"2015-09-17T23:55:26","guid":{"rendered":"http:\/\/www.nightmare-yk.com\/?p=1486"},"modified":"2016-02-24T02:12:48","modified_gmt":"2016-02-23T17:12:48","slug":"openldap%e3%83%90%e3%82%b0%e7%99%ba%e8%a6%8b-rewrite%e6%a9%9f%e8%83%bd%e3%81%ab%e3%81%a6","status":"publish","type":"post","link":"http:\/\/www.nightmare-yk.com\/?p=1486","title":{"rendered":"openLDAP\u30d0\u30b0\u767a\u898b &#8211; Rewrite\u6a5f\u80fd\u306b\u3066 &#8211;"},"content":{"rendered":"<p>\u4e45\u3005\u306e\u66f4\u65b0\u3067\u3059(\u25cb\u00b4\uff65\u0434\uff65)\uff89<\/p>\n<p>ldap\u306eRewrite\u3092\u3054\u5b58\u77e5\u3067\u3057\u3087\u3046\u304b\uff1f\u691c\u7d22\u306e\u6761\u4ef6\u3092\u66f8\u304d\u63db\u3048\u3066\u304f\u308c\u308b\u6a5f\u80fd\u3067\u3059(\uff40\uff65\u03c9\uff65\uff61)\u3063<br \/>\nRewrite\u306e\u8a2d\u5b9a\u3092\u5909\u3048\u3088\u3046\u3068\u3057\u3066\u3044\u305f\u3068\u3053\u308d\u3067\u3001ldap\u306e\u30d0\u30b0\u3092\u767a\u898b\u3057\u307e\u3057\u305f\uff01\uff01<br \/>\n\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u306b\u9023\u7d61(\u9023\u7d61\u3057\u305f\u306e\u306f\u79c1\u3067\u306f\u306a\u3044\u3067\u3059\u304c)\u3057\u305f\u3068\u3053\u308d\u3001\u901f\u653b\u3067\u4fee\u6b63\/\u53cd\u6620\u3057\u3066\u304f\u308c\u307e\u3057\u305f\u3002<br \/>\n\u5bfe\u5fdc\u304c\u3059\u3070\u3089\u3057\u3044\u3067\u3059\u306d\u3002\u3044\u3084\u3001\u672c\u5f53\u306b\u3002\u3053\u3093\u306a\u5bfe\u5fdc\u3092\u898b\u7fd2\u3044\u305f\u3044\u3082\u306e\u3067\u3059\u3002<\/p>\n<p>\u3068\u308a\u3042\u3048\u305a\u3001Rewrite\u306b\u3064\u3044\u3066\u7c21\u5358\u306b\u8aac\u660e\u3057\u307e\u3059\u3002<\/p>\n<p>\u4f7f\u7528\u3057\u3066\u3044\u308b\u74b0\u5883\u306f\u3001\u3044\u3064\u3082\u306eCentOS\u3067\u306f\u306a\u304f\u3001debian\u306a\u306e\u3067\u3054\u6ce8\u610f\u3092\u3002\u305d\u3093\u306a\u5909\u308f\u308b\u90e8\u5206\u306f\u306a\u3044\u304b\u3068\u306f\u601d\u3044\u307e\u3059\u304c\u3001\u82e5\u5e72\u8a2d\u5b9a\u306edn\u304c\u9055\u3046\u3088\u3046\u306a\u6c17\u304c\u3057\u307e\u3059\u3002<\/p>\n<p>\u3068\u308a\u3042\u3048\u305a\u3001ldap\u304c\u52d5\u3044\u3066\u3044\u308b\u3082\u306e\u3068\u3057\u3066\u8a71\u3092\u59cb\u3081\u307e\u3059\u306d\u03c6(\uff65\u0434\uff65\uff61<br \/>\nldap\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6559\u3048\u3066\u3088\uff01\u3068\u3044\u3046\u4eba\u306f\u30b3\u30e1\u30f3\u30c8\u306b\u9023\u7d61\u304f\u3060\u3055\u3044\u3002\u5225\u9014\u66f8\u304d\u307e\u3059\u306e\u3067\u3002<\/p>\n<p>\u65e9\u901fRewrite\u306e\u767b\u9332\u3067\u3059\u3002<\/p>\n<p><span style=\"color: #7b68ee;\">\u25c6 Rewrite\u30e2\u30b8\u30e5\u30fc\u30eb\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/span><\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># cat module.ldif\r\ndn: cn=module,cn=config\r\ncn: module\r\nobjectclass: olcModuleList\r\nobjectclass: top\r\nolcmoduleload: rwm.la\r\nolcmodulepath: \/usr\/lib\/ldap<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapadd -Y EXTERNAL -H ldapi:\/\/ -f module.ldif\r\nASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\nadding new entry \"cn=module,cn=config\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p><span style=\"color: #7b68ee;\">\u25c6 Rewrite\u306e\u8a2d\u5b9a<\/span><\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># cat rwm.ldif\r\ndn: olcOverlay=rwm,olcDatabase={1}mdb,cn=config\r\nobjectClass: olcOverlayConfig\r\nobjectClass: olcRwmConfig\r\nolcOverlay: rwm\r\nolcRwmRewrite: rwm-rewriteEngine on\r\nolcRwmRewrite: rwm-rewriteContext searchFilter\r\nolcRwmRewrite: rwm-rewriteRule \"(.*)mail=([a-z0-9_]+)\\\\-([a-zA-Z0-9_=\\\\.]+)@(nightmare-yk.com)(.*)\" \"$1mail=$2@$4$5\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapadd -Y EXTERNAL -H ldapi:\/\/ -f rwm.ldif\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\nadding new entry \"olcOverlay=rwm,olcDatabase={1}mdb,cn=config\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>\u767b\u9332\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapsearch -LLL -Y EXTERNAL -H ldapi:\/\/ -b \" olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\ndn: olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\r\nobjectClass: olcOverlayConfig\r\nobjectClass: olcRwmConfig\r\nolcOverlay: {0}rwm\r\nolcRwmRewrite: {0}rwm-rewriteEngine on\r\nolcRwmRewrite: {1}rwm-rewriteContext searchFilter\r\nolcRwmRewrite: {2}rwm-rewriteRule \"(.*)mail=([a-z0-9_]+)\\-([a-zA-Z0-9_=\\.]+)@(nightmare-yk\\.com)(.*)\" \"$1mail=$2@$4$5\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>\u767b\u9332\u3067\u304d\u307e\u3057\u305f\u306d\uff01<br \/>\n\u3061\u306a\u307f\u306b\u4e0a\u8a18\u306f\u3001test-sub@nightmare-yk.com\u306e\u3088\u3046\u306a\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u306e-\u3088\u308a\u5f8c\u308d\u306e\u90e8\u5206<br \/>\n\u3092\u7121\u8996\u3057\u3066\u691c\u7d22\u3057\u3066\u304f\u308c\u308b\u3088\u3046\u306b\u3059\u308b\u8a2d\u5b9a\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u5b9f\u969b\u306b\u78ba\u304b\u3081\u3066\u307f\u308b\u3068\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>&#8211; \u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u305d\u306e\u307e\u307e<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapsearch -h 127.0.0.1 -LLL -x -D \"cn=manager,dc=nightmare-yk,dc=com\" -b \"dc=nightmare-yk,dc=com\" -w secret \"(mail=yosuke@nightmare-yk.com)\"\r\ndn: uid=yosuke,dc=nightmare-yk,dc=com\r\nobjectClass: inetOrgPerson\r\nsn: yosuke\r\ncn: yosuke\r\nmail: yosuke@nightmare-yk.com\r\nuid: yosuke<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>&#8211; \u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u306b-test\u304c\u3064\u3044\u305f\u3068\u304d<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapsearch -h 127.0.0.1 -LLL -x -D \"cn=manager,dc=nightmare-yk,dc=com\" -b \"dc=nightmare-yk,dc=com\" -w secret \"(mail=yosuke-test@nightmare-yk.com)\"\r\ndn: uid=yosuke,dc=nightmare-yk,dc=com\r\nobjectClass: inetOrgPerson\r\nsn: yosuke\r\ncn: yosuke\r\nmail: yosuke@nightmare-yk.com\r\nuid: yosuke<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>&#8211; \u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u306b+test\u304c\u3064\u3044\u305f\u3068\u304d<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapsearch -h 127.0.0.1 -LLL -x -D \"cn=manager,dc=nightmare-yk,dc=com\" -b \"dc=nightmare-yk,dc=com\" -w secret \"(mail=yosuke+test@nightmare-yk.com)\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>-\u3088\u308a\u5f8c\u308d\u304c\u7121\u8996\u3055\u308c\u3066\u691c\u7d22\u3067\u304d\u3066\u3044\u308b\u3068\u601d\u3044\u307e\u3059\u3002<br \/>\n\u52ff\u8ad6\u3001Rewrite\u306e\u8a2d\u5b9a\u8ffd\u52a0\u3084\u5909\u66f4\u3001\u524a\u9664\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<p><span style=\"color: #7b68ee;\">\u25c6 \u8ffd\u52a0<\/span><\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># cat rwm_add.ldif\r\ndn: olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\r\nchangetype: modify\r\nadd: olcRwmRewrite\r\nolcRwmRewrite: rwm-rewriteRule \"test\" \"test2\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapmodify -Y EXTERNAL -H ldapi:\/\/\/ -f rwm_add.ldif\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\nmodifying entry \"olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapsearch -LLL -Y EXTERNAL -H ldapi:\/\/ -b \"olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\ndn: olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\r\nobjectClass: olcOverlayConfig\r\nobjectClass: olcRwmConfig\r\nolcOverlay: {0}rwm\r\nolcRwmRewrite: {0}rwm-rewriteEngine on\r\nolcRwmRewrite: {1}rwm-rewriteContext searchFilter\r\nolcRwmRewrite: {2}rwm-rewriteRule \"(.*)mail=([a-z0-9_]+)\\-([a-zA-Z0-9_=\\.]+)@(\r\n nightmare-yk\\.com)(.*)\" \"$1mail=$2@$4$5\" \":@\"\r\nolcRwmRewrite: {3}rwm-rewriteRule \"test\" \"test2\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p><span style=\"color: #7b68ee;\">\u25c6 \u5909\u66f4<\/span><\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># cat rwm_mod.ldif\r\ndn: olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\r\nchangetype: modify\r\nreplace: olcRwmRewrite\r\nolcRwmRewrite: {0}rwm-rewriteEngine on\r\nolcRwmRewrite: {1}rwm-rewriteContext searchFilter\r\nolcRwmRewrite: {2}rwm-rewriteRule \"(.*)mail=([a-z0-9_]+)\\-([a-zA-Z0-9_=\\.]+)@(nightmare-yk\\.com)(.*)\" \"$1mail=$2@$4$5\" \":@\"\r\nolcRwmRewrite: rwm-rewriteRule \"kome\" \"kome2\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapmodify -Y EXTERNAL -H ldapi:\/\/\/ -f rwm_mod.ldif\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\nmodifying entry \"olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapsearch -LLL -Y EXTERNAL -H ldapi:\/\/ -b \" olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\ndn: olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\r\nobjectClass: olcOverlayConfig\r\nobjectClass: olcRwmConfig\r\nolcOverlay: {0}rwm\r\nolcRwmRewrite: {0}rwm-rewriteEngine on\r\nolcRwmRewrite: {1}rwm-rewriteContext searchFilter\r\nolcRwmRewrite: {2}rwm-rewriteRule \"(.*)mail=([a-z0-9_]+)\\-([a-zA-Z0-9_=\\.]+)@(\r\n nightmare-yk\\.com)(.*)\" \"$1mail=$2@$4$5\" \":@\"\r\nolcRwmRewrite: {3}rwm-rewriteRule \"kome\" \"kome2\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>\u305f\u3060\u3001\u524a\u9664\u306b\u30d0\u30b0\u304c\u3042\u3063\u305f\u306e\u3067\u3059\u3002\u2211\u30fe(\uffe30\uffe3;<\/p>\n<p><span style=\"color: #7b68ee;\">\u25c6 \u524a\u9664<\/span><\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># cat rwm_del.ldif\r\ndn: olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\r\nchangetype: modify\r\ndelete: olcRwmRewrite\r\nolcRwmRewrite: rwm-rewriteRule \"kome\" \"kome2\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapmodify -Y EXTERNAL -H ldapi:\/\/\/ -f rwm_del.ldif\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\nmodifying entry \"olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"\r\nldap_result: Can't contact LDAP server (-1)<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>Can&#8217;t contact LDAP server (-1)&#8230;\uff1f\u3093\uff1f<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ps -ef | grep ldap | grep -v grep<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>&#8230;\u6b7b\u3093\u3067\u308b\u3084\u3093\uff01<\/p>\n<p>\u3068\u3044\u3046\u3053\u3068\u3067\u3001\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u306b\u554f\u3044\u5408\u308f\u305b\u305f\u3068\u3053\u308d\u3001<\/p>\n<p>Looks like it. Please file an ITS for tracking. <a title=\"URL\" href=\"http:\/\/www.openldap.org\/its\/\"><span style=\"color: #00FF00;\">http:\/\/www.openldap.org\/its\/<\/span><\/a><\/p>\n<p>\u3068\u8fd4\u4fe1\u3092\u9802\u304d\u307e\u3057\u305f\u3002<br \/>\n\u3059\u3050\u306bITS\u306b\u767b\u9332\u3057\u307e\u3057\u305f\u3068\u3053\u308d\u3001\u6539\u4fee\u30d1\u30c3\u30c1\u306e\u9023\u7d61\u3092\u9802\u304d\u307e\u3057\u305f\u3002<\/p>\n<p><a title=\"URL\" href=\"http:\/\/www.openldap.org\/devel\/gitweb.cgi?p=openldap.git;a=commitdiff;h=7380354270758201408200253efff729a8e7deee\"><span style=\"color: #00FF00;\">http:\/\/www.openldap.org\/devel\/gitweb.cgi?p=openldap.git;a=commitdiff;h=7380354270758201408200253efff729a8e7deee<\/span><\/a><\/p>\n<p>8\u670814\u65e5\u306b OpenLDAP 2.4.42 \u304c\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u3066\u304a\u308a\u3001\u3053\u306e\u6539\u4fee\u304c\u53cd\u6620\u3055\u308c\u3066\u3044\u307e\u3057\u305f\u3002<br \/>\n\u65e9\u901f\u3001debian\u306eldap\u306b\u5165\u308c\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n<p><span style=\"color: #7b68ee;\">\u25c6 \u30d1\u30c3\u30c1\u7528\u610f<\/span><\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># cat rwm.patch\r\n--- openldap_2.4.40+dfsg.orig\/servers\/slapd\/overlays\/rwm.c      2014-09-19 10:48:49.000000000 +0900\r\n+++ openldap-2.4.40+dfsg\/servers\/slapd\/overlays\/rwm.c   2015-09-16 07:16:31.368000000 +0900\r\n@@ -2179,7 +2179,10 @@\r\n                                        ca.line = rwmap-&gt;rwm_bva_rewrite[ i ].bv_val;\r\n                                        ca.argc = 0;\r\n                                        config_fp_parse_line( &amp;ca );\r\n-\r\n+\r\n+                                        argv0 = ca.argv[ 0 ];\r\n+                                        ca.argv[ 0 ] += STRLENOF( \"rwm-\" );\r\n+\r\n                                        if ( strcasecmp( ca.argv[ 0 ], \"suffixmassage\" ) == 0 ) {\r\n                                                rc = rwm_suffixmassage_config( &amp;db, c-&gt;fname, c-&gt;lineno,\r\n                                                        ca.argc, ca.argv );\r\n@@ -2189,6 +2192,8 @@\r\n                                                        ca.argc, ca.argv );\r\n                                        }\r\n\r\n+                                        ca.argv[ 0 ] = argv0;\r\n+\r\n                                        ch_free( ca.tline );\r\n                                        ch_free( ca.argv );<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p><span style=\"color: #7b68ee;\">\u25c6 \u30d1\u30c3\u30b1\u30fc\u30b8\u4f5c\u6210<\/span><\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># apt-get source slapd\r\n# patch -p0 &lt; rwm.patch\r\n# cd openldap-2.4.40+dfsg\r\n# debuild -uc -us -b<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>\u5c11\u3005\u3068\u3044\u3046\u304b\u3060\u3044\u3076\u6642\u9593\u304c\u304b\u304b\u308a\u307e\u3059\u3002<br \/>\n\u65e9\u901f\u5165\u308c\u3066\u307f\u307e\u3057\u3087\u3046\u3002<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># dpkg -i slapd_2.4.40+dfsg-1_amd64.deb\r\n(\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3092\u8aad\u307f\u8fbc\u3093\u3067\u3044\u307e\u3059 ... \u73fe\u5728 43305 \u500b\u306e\u30d5\u30a1\u30a4\u30eb\u3068\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u304c\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u307e\u3059 \u3002)\r\nslapd_2.4.40+dfsg-1_amd64.deb \u3092\u5c55\u958b\u3059\u308b\u6e96\u5099\u3092\u3057\u3066\u3044\u307e\u3059 ...\r\nslapd (2.4.40+dfsg-1) \u3067 (2.4.40+dfsg-1 \u306b) \u4e0a\u66f8\u304d\u5c55\u958b\u3057\u3066\u3044\u307e\u3059 ...\r\nslapd (2.4.40+dfsg-1) \u3092\u8a2d\u5b9a\u3057\u3066\u3044\u307e\u3059 ...\r\n  Backing up \/etc\/ldap\/slapd.d in \/var\/backups\/slapd-2.4.40+dfsg-1... done.\r\nman-db (2.7.0.2-5) \u306e\u30c8\u30ea\u30ac\u3092\u51e6\u7406\u3057\u3066\u3044\u307e\u3059 ...\r\nsystemd (215-17+deb8u1) \u306e\u30c8\u30ea\u30ac\u3092\u51e6\u7406\u3057\u3066\u3044\u307e\u3059 ...\r\nlibc-bin (2.19-18) \u306e\u30c8\u30ea\u30ac\u3092\u51e6\u7406\u3057\u3066\u3044\u307e\u3059 ...<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>LDAP\u3092\u518d\u8d77\u52d5\u3057\u3066<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># systemctl restart slapd<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>\u8a2d\u5b9a\u306e\u524a\u9664\u306b\u30c8\u30e9\u30a4\u2606<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapmodify -Y EXTERNAL -H ldapi:\/\/\/ -f rwm_del.ldif\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\nmodifying entry \"olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>\u78ba\u8a8d\u3057\u3066\u307f\u308b\u3068&#8230;<\/p>\n<table style=\"table-layout:fixed;\">\n<tr>\n<td>\n<div style=\"overflow-x:auto;\">\n<pre># ldapsearch -LLL -Y EXTERNAL -H ldapi:\/\/ -b \" olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\"\r\nSASL\/EXTERNAL authentication started\r\nSASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\r\nSASL SSF: 0\r\ndn: olcOverlay={0}rwm,olcDatabase={1}mdb,cn=config\r\nobjectClass: olcOverlayConfig\r\nobjectClass: olcRwmConfig\r\nolcOverlay: {0}rwm\r\nolcRwmRewrite: {0}rwm-rewriteEngine on\r\nolcRwmRewrite: {1}rwm-rewriteContext searchFilter\r\nolcRwmRewrite: {2}rwm-rewriteRule \"(.*)mail=([a-z0-9_]+)\\-([a-zA-Z0-9_=\\.]+)@(\r\n nightmare-yk\\.com)(.*)\" \"$1mail=$2@$4$5\" \":@\"<\/pre>\n<\/p><\/div>\n<\/td>\n<\/tr>\n<\/table>\n<p>\u304a\u3063\uff01\u6d88\u3048\u3066\u308b\u6d88\u3048\u3066\u308b(\u25cf\u00b4\u2200\uff40)\u30ce<\/p>\n<div class='wp_social_bookmarking_light'>\n            <div class=\"wsbl_facebook_like\"><div id=\"fb-root\"><\/div><fb:like href=\"http:\/\/www.nightmare-yk.com\/?p=1486\" layout=\"button_count\" action=\"like\" width=\"100\" share=\"false\" show_faces=\"false\" ><\/fb:like><\/div>\n            <div class=\"wsbl_google_plus_one\"><g:plusone size=\"medium\" annotation=\"none\" href=\"http:\/\/www.nightmare-yk.com\/?p=1486\" ><\/g:plusone><\/div>\n    <\/div>\n<br class='wp_social_bookmarking_light_clear' \/>\n","protected":false},"excerpt":{"rendered":"<p>\u4e45\u3005\u306e\u66f4\u65b0\u3067\u3059(\u25cb\u00b4\uff65\u0434\uff65)\uff89 ldap\u306eRewrite\u3092\u3054\u5b58\u77e5\u3067\u3057\u3087\u3046\u304b\uff1f\u691c\u7d22\u306e\u6761\u4ef6\u3092\u66f8\u304d\u63db\u3048\u3066\u304f\u308c\u308b\u6a5f\u80fd\u3067\u3059(\uff40\uff65\u03c9\uff65\uff61)\u3063 Rewrite\u306e\u8a2d\u5b9a\u3092\u5909\u3048\u3088\u3046\u3068\u3057\u3066\u3044\u305f\u3068\u3053\u308d\u3067\u3001ldap\u306e\u30d0\u30b0\u3092\u767a\u898b\u3057\u307e\u3057\u305f\uff01\uff01 \u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u306b\u9023\u7d61(\u9023\u7d61\u3057\u305f\u306e\u306f\u79c1\u3067\u306f\u306a\u3044\u3067\u3059\u304c)\u3057\u305f\u3068\u3053\u308d\u3001\u901f\u653b\u3067\u4fee\u6b63\/\u53cd\u6620\u3057\u3066\u304f\u308c [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1491,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_publicize_message":"openLDAP\u30d0\u30b0\u767a\u898b - Rewrite\u6a5f\u80fd\u306b\u3066 -","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[3],"tags":[259,262,261,258,260,263,127],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.nightmare-yk.com\/wp-content\/uploads\/2015\/09\/\u30b3\u30f3\u30bd\u30fc\u30eb_ldap.png?fit=637%2C440","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=\/wp\/v2\/posts\/1486"}],"collection":[{"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1486"}],"version-history":[{"count":17,"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=\/wp\/v2\/posts\/1486\/revisions"}],"predecessor-version":[{"id":1893,"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=\/wp\/v2\/posts\/1486\/revisions\/1893"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=\/wp\/v2\/media\/1491"}],"wp:attachment":[{"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1486"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.nightmare-yk.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}