LDAP/LAM

LDAP Account Manager
本家様 https://www.ldap-account-manager.org/lamcms/
ドキュメントを見てみるとRequirementsが定義されていた

LAM has the following requirements to run:
 
Apache/Nginx webserver (SSL recommended) with PHP module (PHP (>= 8.0.2) with ldap, gettext, xml, openssl and optional OpenSSL)
Some LAM plugins may require additional PHP extensions (you will get a note on the login page if something is missing)
Perl (optional, needed only for lamdaemon)
Any standard LDAP server (e.g. OpenLDAP, Active Directory, Samba 4, OpenDJ, 389 Directory Server, Apache DS, ...)
A recent web browser that supports CSS2 and JavaScript, at minimum:
   Firefox (max. 2 years old)
   Edge (max. 2 years old)
   Opera (max. 2 years old)
   Chrome (max. 2 years old)
OpenSSL will be used to store your LDAP password encrypted in the session file.
Please note that LAM does not ship with a SELinux policy. Please disable SELinux or create your own policy.
See LDAP schema fles for information about used LDAP schema files.

ここではRockyLinux9に対して構築してみた.

まずはphp-8.0.2以上の準備が必要みたい. ベースはApacheでいいかな

下拵え†

[root@ldap-server ~]# cat /etc/redhat-release
Rocky Linux release 9.2 (Blue Onyx)
 
[root@ldap-server ~]# dnf info php
Last metadata expiration check: 3:06:30 ago on Tue 30 Jan 2024 11:02:01 PM JST.
Available Packages
Name         : php
Version      : 8.0.30
Release      : 1.el9_2
Architecture : x86_64
Size         : 7.7 k
Source       : php-8.0.30-1.el9_2.src.rpm
Repository   : appstream
Summary      : PHP scripting language for creating dynamic web sites
URL          : http://www.php.net/
License      : PHP and Zend and BSD and MIT and ASL 1.0 and NCSA
Description  : PHP is an HTML-embedded scripting language. PHP attempts to make it
             : easy for developers to write dynamically generated web pages. PHP also
             : offers built-in database integration for several commercial and
             : non-commercial database management systems, so writing a
             : database-enabled webpage with PHP is fairly simple. The most common
             : use of PHP coding is probably as a replacement for CGI scripts.
 
[root@ldap-server ~]#

とRockyLinux9で提供されるphpは 8.0.30 なので要件に適合している.
なので

[root@ldap-server ~]# dnf install php php-ldap php-xml php-gd php-gmp php-pecl-zip

↑

LDAP Account Managerパッケージのインストール†

パッケージ本体は本家様から入手するようです.　
https://www.ldap-account-manager.org/lamcms/releases
RockyLinux系なのでFedora/CentOSのrpmを取得します

Fedora/CentOS package
Fedora/CentOS package (lamdaemon only)

ここでは前者をダウンロードしました. 得られたファイルは「ldap-account-manager-8.6-0.fedora.1.noarch.rpm」(45MB)です.
っでインストール

[root@ldap-server ~]# dnf localinstall ./ldap-account-manager-8.6-0.fedora.1.noarch.rpm
 
(どこに何が入ったかはこのコマンドで確認)
[root@ldap-server ~]# rpm -qali ldap-account-manager |less

↑

起動†

apacheコンテンツとなっているので、そのままhttpを起動させます

[root@ldap-server ~]# systemctl start httpd --now
[root@ldap-server ~]# firewall-cmd --add-service=http --add-service=https --zone=public --permanent
[root@ldap-server ~]# firewall-cmd --reload

↑