TAK Server OpenLDAP integration

These are ldif files I use to enable TAK/LDAP integration. I wanted to store user callsign, role & color in LDAP. These setting will be applied to EUD on first connect.

Requirements

• Debian 12 (that what I use), Ubuntu, RHEL, CentOS
• OpenLDAP server (slapd preferred)

Steps

1. Install slapd server and LDAP tools:

apt install -y slapd ldap-utils

2. Download enhanced version of LDAP schema:

wget https://github.com/palw3ey/rfc2307bis/releases/download/latest/rfc2307bis.ldif -O /etc/ldap/schema/rfc2307bis.ldif

3. Update slapd configuration to use new schema:

sed -i 's/^include: file:///etc/ldap/schema/nis.ldif/#\0\ninclude: file:///etc/ldap/schema/rfc2307bis.ldif/' /usr/share/slapd/slapd.init.ldif

Note! For Ubuntu 22 the correct usage is:

sed -i 's|^include: file:///etc/ldap/schema/nis.ldif|#&\ninclude: file:///etc/ldap/schema/rfc2307bis.ldif|' /usr/share/slapd/slapd.init.ldif

4. Restart & reconfigure LDAP server:

systemctl restart slapd

dpkg-reconfigure slapd

In this step enter:

• administrator's password (eg. abcd1234)
• organization name (eg. TAKSERVER)
• domain name (eg. takserver.local)

5. The magic starts here :)

• create organizational units for users (ou=people,dc=takserver,dc=local) and groups (ou=groups,dc=takserver,dc=local)

ldapadd -x -D cn=admin,dc=takserver,dc=local -w -f add_nodes.ldif

• enable logging (I don't need it in production environment - just for finding problems)

ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f logging.ldif

• enable memberof functionality in LDAP server

ldapadd -Q -Y EXTERNAL -H ldapi:/// -f membersof_config.ldif

ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f refint1.ldif

ldapadd -Q -Y EXTERNAL -H ldapi:/// -f refint2.ldif

• modify LDAP schema to support takCallsign, takColor and takRole attributes

ldapadd -Q -Y EXTERNAL -H ldapi:/// -f mod_schema.ldif

• add some users and groups for tests. Default username is abcd1234. You can change it with slapdpasswd -s command.

ldapadd -x -D cn=admin,dc=takserver,dc=local -w -f add_user.ldif

ldapadd -x -D cn=admin,dc=takserver,dc=local -w -f add_group.ldif

6. Enjoy!