LoginSignup
4
5

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

More than 3 years have passed since last update.

@bwitch

389dsのツールを使う

Last updated at Posted at 2020-03-31

dscreate ~ サーバの作成

初期設定のテンプレートを作成

sudo -s
#以降rootで実行

dscreate create-template /tmp/x

中身を確認

grep Default /tmp/x -A1

# Default value: 2
;config_version = 2
--
# Default value: 999999999
;defaults = 999999999
--
# Default value: localhost.localdomain
;full_machine_name = localhost.localdomain
--
# Default value: True
;selinux = True
--
# Default value: True
;start = True
--
# Default value: True
;strict_host_checking = True
--
# Default value: True
;systemd = True
--
# Default value: /var/lib/dirsrv/slapd-{instance_name}/bak
;backup_dir = /var/lib/dirsrv/slapd-{instance_name}/bak
--
# Default value: /usr/bin
;bin_dir = /usr/bin
--
# Default value: /etc/dirsrv/slapd-{instance_name}
;cert_dir = /etc/dirsrv/slapd-{instance_name}
--
# Default value: /etc/dirsrv/slapd-{instance_name}
;config_dir = /etc/dirsrv/slapd-{instance_name}
--
# Default value: /usr/share
;data_dir = /usr/share
--
# Default value: /var/lib/dirsrv/slapd-{instance_name}/db
;db_dir = /var/lib/dirsrv/slapd-{instance_name}/db
--
# Default value: dirsrv
;group = dirsrv
--
# Default value: /etc/sysconfig
;initconfig_dir = /etc/sysconfig
--
# Default value: /usr/lib64/dirsrv/slapd-{instance_name}
;inst_dir = /usr/lib64/dirsrv/slapd-{instance_name}
--
# Default value: localhost
;instance_name = localhost
--
# Default value: /var/lib/dirsrv/slapd-{instance_name}/ldif
;ldif_dir = /var/lib/dirsrv/slapd-{instance_name}/ldif
--
# Default value: /usr/lib64
;lib_dir = /usr/lib64
--
# Default value: /var
;local_state_dir = /var
--
# Default value: /var/lock/dirsrv/slapd-{instance_name}
;lock_dir = /var/lock/dirsrv/slapd-{instance_name}
--
# Default value: /var/log/dirsrv/slapd-{instance_name}
;log_dir = /var/log/dirsrv/slapd-{instance_name}
--
# Default value: 389
;port = 389
--
# Default value: /usr
;prefix = /usr
--
# Default value: cn=Directory Manager
;root_dn = cn=Directory Manager
--
# Default value: Directory_Manager_Password
;root_password = Directory_Manager_Password
--
# Default value: /var/run/dirsrv
;run_dir = /var/run/dirsrv
--
# Default value: /usr/sbin
;sbin_dir = /usr/sbin
--
# Default value: /etc/dirsrv/slapd-{instance_name}/schema
;schema_dir = /etc/dirsrv/slapd-{instance_name}/schema
--
# Default value: 636
;secure_port = 636
--
# Default value: True
;self_sign_cert = True
--
# Default value: 24
;self_sign_cert_valid_months = 24
--
# Default value: /etc
;sysconf_dir = /etc
--
# Default value: /tmp
;tmp_dir = /tmp
--
# Default value: dirsrv
;user = dirsrv
--
# Default value: False
;create_suffix_entry = False
--
# Default value: False
;require_index = False
--
# Default value: no
;sample_entries = no
--
# Default value:
;suffix =

バインドを簡単にしておく

sed -ri 's/;(root_dn).*/\1=cn=manager/;s/;(root_password).*/\1=secret/' /tmp/x

作成(と起動)

dscreate from-file /tmp/x

#起動してるか確認
ps -C ns-slapd -f

#再起動してみる
systemctl restart dirsrv@localhost

dsconf ~ 各種設定

ルートDNを作成(三つ)

#定義だけ
dsconf localhost backend create --suffix dc=example1,dc=com --be-name userRoot1
dsconf localhost backend create --suffix dc=example2,dc=com --be-name userRoot2
dsconf localhost backend create --suffix dc=example3,dc=com --be-name userRoot3

#DNの一覧
dsconf localhost backend suffix list

#実際のデータ（ルートDNだけを作ってくれるコマンドがない?）
cat <<EOS | ldapadd -D cn=manager -wsecret
dn: dc=example1,dc=com
objectClass: dcObject
dc: example1

dn: dc=example2,dc=com
objectClass: dcObject
dc: example2

dn: dc=example3,dc=com
objectClass: dcObject
dc: example3
EOS

ルートDNを削除

echo 'Yes I am sure' | dsconf localhost backend delete userRoot3

dsidm ~ データの登録/変更/削除

ユーザ用のOUを作成

dsidm -b dc=example1,dc=com localhost organizationalunit create --ou users
dsidm -b dc=example2,dc=com localhost organizationalunit create --ou users

ユーザを作成

dsidm -b ou=users,dc=example1,dc=com localhost user create --uid teacher --cn teacher --displayName teacher --uidNumber 1000 --gidNumber 1000 --homeDirectory /home/teacher
dsidm -b ou=users,dc=example2,dc=com localhost user create --uid student --cn student --displayName student --uidNumber 2000 --gidNumber 2000 --homeDirectory /home/student

Error: {'desc': 'No such object', 'matched': 'ou=users,dc=example1,dc=com'}

ユーザ用のOUは、 ou=people,... という前提

dsctl ~ その他の操作

サーバを削除

dsctl localhost remove --do-it

蛇足：本体(389-ds-base)に含まれるコマンド

dlclt ~ 負荷テスト

#バグ対処
echo ... > x.jpg
#登録
ldclt -D cn=manager -wsecret -b ou=users,dc=example,dc=com -f uid=hogeXX -r1 -R99 -e incr,noloop,commoncounter,add,inetOrgPerson,imagesdir=.
#変更
ldclt -D cn=manager -wsecret -b ou=users,dc=example,dc=com -f uid=hogeXX -r1 -R99 -e incr,noloop,commoncounter,attreplace=displayName:ホゲXXXX
#検索
ldclt -D cn=manager -wsecret -b ou=users,dc=example,dc=com -f uid=hogeXX -r1 -R99 -e incr,noloop,commoncounter,esearch
#削除
ldclt -D cn=manager -wsecret -b ou=users,dc=example,dc=com -f uid=hogeXX -r1 -R99 -e incr,noloop,commoncounter,delete
オプションの説明
  • -D cn=manager -wsecret -b ... ... LDAPコマンドと同様
    • なのでリモートの場合は-H ...などを指定する
  • -f uid=hogeXX -r1 -R99 ... RDNのパターンと範囲
    • X...の部分が数字で埋めれらる
    • この場合、uid=hoge01～uid=hoge99
  • -e incr,noloop,commoncounter ... インクリメント、ループしない、スレッド間で重複しない
    • incrでなければrandom
    • noloopとcommoncounterはincr専用
  • -e add,inetOrgPerson,imagesdir=. ... オブジェクトクラスinetOrgPersonを登録
    • 他にpersonとemailPerson
    • person以外はimagesdirが必要
    • imagesdirはjpegPhoto属性のために.jpgファイルを探す場所
      (.jpgがなければクラッシュする)
  • -e attreplace=displayName:ホゲXXXX ... 属性displayNameを変更
    • 変更対象の属性は任意
    • X...の部分がランダム文字で埋められる
    • 使われる文字は"コントール文字以外のアスキー"...なので記号を含む

logconv.pl ~ アクセスログの集計

#全ての集計を表示
sudo logconv.pl /var/log/dirsrv/slapd-localhost/access -V

#分単位の集計表を出力
sudo logconv.pl /var/log/dirsrv/slapd-localhost/access -M hoge.csv
**`-V`** の結果
Access Log Analyzer 8.2
Command: logconv.pl /var/log/dirsrv/slapd-localhost/access
Processing 1 Access Log(s)...

[001] /var/log/dirsrv/slapd-localhost/access    size (bytes):     31232891
     25000 Lines Processed          3037352 of     31232891 bytes (9.725%)
     50000 Lines Processed          6086090 of     31232891 bytes (19.486%)
     75000 Lines Processed          9168125 of     31232891 bytes (29.354%)
    100000 Lines Processed         12255766 of     31232891 bytes (39.240%)
    125000 Lines Processed         15343372 of     31232891 bytes (49.126%)
    150000 Lines Processed         18431013 of     31232891 bytes (59.012%)
    175000 Lines Processed         21497493 of     31232891 bytes (68.830%)
    200000 Lines Processed         24583018 of     31232891 bytes (78.709%)
    225000 Lines Processed         27670624 of     31232891 bytes (88.595%)
    250000 Lines Processed         30758265 of     31232891 bytes (98.480%)


Total Log Lines Analysed:  254038


----------- Access Log Output ------------

Start of Logs:    16/Apr/2020:09:48:22.654258930
End of Logs:      16/Apr/2020:10:08:14.867321284

Processed Log Time:  0 Hours, 19 Minutes, 52.21305344 Seconds

Restarts:                     0
Peak Concurrent Connections:  0
Total Operations:             126913
Total Results:                126913
Overall Performance:          100.0%

Total Connections:            103           (0.09/sec)  (5.18/min)
 - LDAP Connections:          103           (0.09/sec)  (5.18/min)
 - LDAPI Connections:         0             (0.00/sec)  (0.00/min)
 - LDAPS Connections:         0             (0.00/sec)  (0.00/min)
 - StartTLS Extended Ops:     0             (0.00/sec)  (0.00/min)

Searches:                     126612        (106.20/sec)  (6371.95/min)
Modifications:                99            (0.08/sec)  (4.98/min)
Adds:                         0             (0.00/sec)  (0.00/min)
Deletes:                      99            (0.08/sec)  (4.98/min)
Mod RDNs:                     0             (0.00/sec)  (0.00/min)
Compares:                     0             (0.00/sec)  (0.00/min)
Binds:                        103           (0.09/sec)  (5.18/min)

Proxied Auth Operations:      0
Persistent Searches:          0
Internal Operations:          0
Entry Operations:             0
Extended Operations:          0
Abandoned Requests:           0
Smart Referrals Received:     0

VLV Operations:               0
VLV Unindexed Searches:       0
VLV Unindexed Components:     0
SORT Operations:              0

Entire Search Base Queries:   0
Paged Searches:               0
Unindexed Searches:           0
Unindexed Components:         0

FDs Taken:                    103
FDs Returned:                 113
Highest FD Taken:             73

Broken Pipes:                 0
Connections Reset By Peer:    0
Resource Unavailable:         0
Max BER Size Exceeded:        0

Binds:                        103
Unbinds:                      3
---------------------------------
 - LDAP v2 Binds:             0
 - LDAP v3 Binds:             103
 - AUTOBINDs(LDAPI):          0
 - SSL Client Binds:          0
 - Failed SSL Client Binds:   0
 - SASL Binds:                0
 - Directory Manager Binds:   0
 - Anonymous Binds:           0


----- Connection Latency Details -----

 (in seconds)           <=1     2       3       4-5     6-10    11-15   >15
 --------------------------------------------------------------------------
 (# of connections)     3       40      70

----- Errors -----

err=0                126715    Successful Operations
err=32                  198    No Such Object

----- Total Connection Codes -----

B1      108   Bad Ber Tag Encountered
U1        3   Cleanly Closed Connections


----- Top 20 Clients -----

Number of Clients:  1

[1] Client: ::1
       103 - Connections
        98 - B1 (Bad Ber Tag Encountered)
         3 - U1 (Cleanly Closed Connections)



----- Top 20 Bind DN's -----

Number of Unique Bind DN's: 1

103             cn=manager


----- Top 20 Search Bases -----

Number of Unique Search Bases: 3

126411          ou=users,dc=example,dc=com
198             ou=users,dc=example1,dc=com
3               dc=example,dc=com


----- Top 20 Search Filters -----

Number of Unique Search Filters: 198

1390            (uid=f-tarou64)
1380            (uid=f-tarou97)
1376            (uid=f-tarou56)
1357            (uid=f-tarou47)
1357            (uid=f-tarou76)
1356            (uid=f-tarou77)
1356            (uid=f-tarou50)
1349            (uid=f-tarou17)
1345            (uid=f-tarou54)
1338            (uid=f-tarou99)
1337            (uid=f-tarou26)
1337            (uid=f-tarou62)
1333            (uid=f-tarou45)
1332            (uid=f-tarou10)
1331            (uid=f-tarou29)
1329            (uid=f-tarou12)
1327            (uid=f-tarou52)
1327            (uid=f-tarou78)
1326            (uid=f-tarou43)
1324            (uid=f-tarou51)


----- Top 20 Most Frequent etimes -----

7               etime=0.0000121133
6               etime=0.0000121755
6               etime=0.0000121857
6               etime=0.0000106785
6               etime=0.0000121726
5               etime=0.0000121786
5               etime=0.0000121462
5               etime=0.0000121770
5               etime=0.0000122473
5               etime=0.0000104470
5               etime=0.0000229719
5               etime=0.0000121573
5               etime=0.0000107007
5               etime=0.0000104749
5               etime=0.0000104101
5               etime=0.0000229269
5               etime=0.0000121447
5               etime=0.0000121226
5               etime=0.0000107083
5               etime=0.0000111169


----- Top 20 Longest etimes -----

etime=0.1999855984    1
etime=0.1999770550    1
etime=0.1999673439    1
etime=0.1999662544    1
etime=0.1999631747    1
etime=0.1999595500    1
etime=0.1999559786    1
etime=0.1999552360    1
etime=0.1999550394    1
etime=0.1999516172    1
etime=0.1999502807    1
etime=0.1999499795    1
etime=0.1999479053    1
etime=0.1999452273    1
etime=0.1999430328    1
etime=0.1999418265    1
etime=0.1999391314    1
etime=0.1999391222    1
etime=0.1999376977    1
etime=0.1999363996    1


----- Top 20 Largest nentries -----

nentries=1                 126414
nentries=0                    198


----- Top 20 Most returned nentries -----

126414          nentries=1
198             nentries=0



----- Top 20 Most Requested Attributes -----

108240      cn
108240      sn
18372       All Attributes


----- Recommendations -----

 1.  You have a significant difference between binds and unbinds.  You may want to investigate this difference.

 2.  You have more abnormal connection codes than cleanly closed connections.  You may want to investigate this difference.

 3.  You have a majority of etimes that are greater than zero, you may want to investigate this performance problem.

Cleaning up temp files...
Done.
**`-M`** のCSV
Time,time_t,Results,Search,Add,Mod,Modrdn,Moddn,Compare,Delete,Abandon,Connections,SSL Conns,Bind,Anon Bind,Unbind,Unindexed search,Unindexed component,ElapsedTime
16/Apr/2020:09:48:22.654258900 +0900,1586998080,75702,75692,0,0,0,0,0,0,0,10,0,10,0,0,0,0,15.2383253021001
16/Apr/2020:09:49:00.509301100 +0900,1586998140,50442,50422,0,0,0,0,0,0,0,20,0,20,0,0,0,0,12.8409661904
16/Apr/2020:09:50:00.099331400 +0900,1586998200,109,99,0,0,0,0,0,0,0,10,0,10,0,0,0,0,0.1941425189
16/Apr/2020:09:58:16.535995200 +0900,1586998680,218,198,0,0,0,0,0,0,0,20,0,20,0,0,0,0,0.5506085747
16/Apr/2020:10:00:02.438920100 +0900,1586998800,109,99,0,0,0,0,0,0,0,10,0,10,0,0,0,0,1.645754401
16/Apr/2020:10:04:48.382675600 +0900,1586999040,109,0,0,99,0,0,0,0,0,10,0,10,0,0,0,0,1.9310870437
16/Apr/2020:10:05:08.382504300 +0900,1586999100,2,1,0,0,0,0,0,0,0,1,0,1,0,0,0,0,0.002618222
16/Apr/2020:10:06:31.886534000 +0900,1586999160,4,2,0,0,0,0,0,0,0,2,0,2,0,0,0,0,0.2000212735
16/Apr/2020:10:07:25.744255300 +0900,1586999220,218,99,0,0,0,0,0,99,0,20,0,20,0,0,0,0,0.5538454234
16/Apr/2020:10:08:14.866995400 +0900,1586999280,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
4
5
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
Sign upLogin
4
5

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?