{"id":37966,"date":"2026-01-20T04:40:59","date_gmt":"2026-01-20T01:40:59","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=37966"},"modified":"2026-01-20T04:40:59","modified_gmt":"2026-01-20T01:40:59","slug":"ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/","title":{"rendered":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131"},"content":{"rendered":"

<\/p>\n

Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h2>\n

Giri\u015f<\/h2>\n

LDAP (Lightweight Directory Access Protocol), da\u011f\u0131t\u0131k bilgi servislerine eri\u015fmek ve bu servisleri y\u00f6netmek i\u00e7in kullan\u0131lan bir uygulama katman\u0131 protokol\u00fcd\u00fcr. Genellikle kullan\u0131c\u0131 hesaplar\u0131, gruplar, a\u011f kaynaklar\u0131 ve di\u011fer sistemler i\u00e7in merkezi bir dizin hizmeti sa\u011flamak amac\u0131yla kullan\u0131l\u0131r. Bir kurum i\u00e7indeki t\u00fcm kullan\u0131c\u0131lar\u0131n ve kaynaklar\u0131n tek bir yerden y\u00f6netilmesine olanak tan\u0131yarak BT altyap\u0131s\u0131n\u0131 basitle\u015ftirir ve g\u00fcvenli\u011fi art\u0131r\u0131r. \u00d6rne\u011fin, bir kullan\u0131c\u0131n\u0131n Active Directory veya OpenLDAP gibi bir LDAP sunucusunda tan\u0131mlanmas\u0131, o kullan\u0131c\u0131n\u0131n e-posta, dosya sunucusu, VPN ve di\u011fer uygulamalara tek bir kullan\u0131c\u0131 ad\u0131 ve \u015fifre ile eri\u015fmesini sa\u011flayabilir.<\/p>\n

Bu makale, nispeten eski bir s\u00fcr\u00fcm olmas\u0131na ra\u011fmen, hala belirli ortamlarda kar\u015f\u0131la\u015f\u0131labilecek olan Ubuntu 12.04 LTS (Precise Pangolin) \u00fczerinde temel bir OpenLDAP sunucusunun nas\u0131l kurulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r. Ubuntu 12.04, uzun s\u00fcreli destek (LTS) s\u00fcr\u00fcm\u00fc olmas\u0131 nedeniyle, yay\u0131nland\u0131\u011f\u0131 d\u00f6nemde bir\u00e7ok sunucu ortam\u0131nda kullan\u0131lm\u0131\u015ft\u0131r ve baz\u0131 eski sistemlerin bak\u0131m\u0131 veya yeniden olu\u015fturulmas\u0131 gerekti\u011finde bu bilgi hala de\u011ferli olabilir. Bir VPS (Virtual Private Server) ortam\u0131, bu t\u00fcr bir kurulum i\u00e7in maliyet etkin ve esnek bir platform sunar. Bu makale, LDAP’\u0131n temel kavramlar\u0131n\u0131 tan\u0131tacak, kurulum ad\u0131mlar\u0131n\u0131 detayland\u0131racak, temel yap\u0131land\u0131rmalar\u0131 ve g\u00fcvenlik \u00f6nlemlerini ele alacak ve yayg\u0131n sorunlara \u00e7\u00f6z\u00fcmler sunacakt\u0131r.<\/p>\n

\u00d6n Gereksinimler<\/h2>\n

Bu rehberi takip edebilmek i\u00e7in a\u015fa\u011f\u0131daki \u00f6n gereksinimlere sahip olman\u0131z gerekmektedir:<\/p>\n

* Ubuntu 12.04 LTS VPS:<\/strong> Root eri\u015fimi veya sudo<\/code> yetkilerine sahip bir kullan\u0131c\u0131 ile \u00e7al\u0131\u015fan bir Ubuntu 12.04 sanal \u00f6zel sunucusuna sahip olmal\u0131s\u0131n\u0131z.
\n* SSH Eri\u015fimi:<\/strong> Sunucunuza SSH \u00fczerinden ba\u011flanabilmelisiniz.
\n* Temel Linux Bilgisi:<\/strong> Komut sat\u0131r\u0131 kullan\u0131m\u0131, dosya d\u00fczenleme (nano<\/code> veya vi<\/code> gibi metin d\u00fczenleyiciler) ve temel sistem y\u00f6netimi konular\u0131nda bilgi sahibi olman\u0131z beklenir.
\n* Domain Ad\u0131:<\/strong> LDAP dizininizi yap\u0131land\u0131rmak i\u00e7in bir DNS domain ad\u0131na ihtiyac\u0131n\u0131z olacak (\u00f6rne\u011fin, example.com<\/code>). Bu, dizin taban\u0131n\u0131z\u0131n (dc=example,dc=com<\/code>) belirlenmesinde kullan\u0131lacakt\u0131r. Ger\u00e7ek bir domain’e sahip olmasan\u0131z bile, dahili a\u011f\u0131n\u0131zda kullanmak \u00fczere bir ad belirleyebilirsiniz.
\n* G\u00fcncel Sistem:<\/strong> Kuruluma ba\u015flamadan \u00f6nce sistem paketlerinin g\u00fcncel oldu\u011fundan emin olmak iyi bir pratiktir.<\/p>\n

LDAP Kavramlar\u0131na K\u0131sa Bir Bak\u0131\u015f<\/h2>\n

LDAP’\u0131n \u00e7al\u0131\u015fma prensiplerini anlamak, kurulum ve yap\u0131land\u0131rma s\u00fcre\u00e7lerini kolayla\u015ft\u0131racakt\u0131r. \u0130\u015fte temel LDAP kavramlar\u0131:<\/p>\n

* DIT (Directory Information Tree – Dizin Bilgi A\u011fac\u0131):<\/strong> LDAP dizinindeki t\u00fcm verilerin hiyerar\u015fik bir a\u011fa\u00e7 yap\u0131s\u0131nda d\u00fczenlenmesidir. K\u00f6kten dallara ve yapraklara do\u011fru ilerleyen bir yap\u0131ya sahiptir, t\u0131pk\u0131 bir dosya sistemi gibi.
\n* DN (Distinguished Name – Ay\u0131rt Edici Ad):<\/strong> Bir LDAP dizinindeki her bir girdiyi (entry) benzersiz \u015fekilde tan\u0131mlayan tam yoldur. A\u011fa\u00e7taki k\u00f6kten o girdiye kadar olan t\u00fcm g\u00f6receli ay\u0131rt edici adlar\u0131n (RDN) birle\u015fimidir. \u00d6rne\u011fin, cn=John Doe,ou=People,dc=example,dc=com<\/code>.
\n* RDN (Relative Distinguished Name – G\u00f6receli Ay\u0131rt Edici Ad):<\/strong> Bir girdinin, \u00fcst girdisine g\u00f6re benzersiz ad\u0131d\u0131r. DN’nin en spesifik (en soldaki) par\u00e7as\u0131d\u0131r. \u00d6rne\u011fin, cn=John Doe<\/code> veya ou=People<\/code>.
\n* Schema (\u015eema):<\/strong> LDAP dizinindeki girdilerin hangi t\u00fcr \u00f6zelliklere sahip olabilece\u011fini ve bu \u00f6zelliklerin veri tiplerini tan\u0131mlayan kurallar b\u00fct\u00fcn\u00fcd\u00fcr. Her girdi, bir veya daha fazla nesne s\u0131n\u0131f\u0131na (objectClass) ait olmak zorundad\u0131r ve bu nesne s\u0131n\u0131flar\u0131, girdinin hangi \u00f6zellikleri ta\u015f\u0131yabilece\u011fini belirler.
\n* ObjectClass (Nesne S\u0131n\u0131f\u0131):<\/strong> Bir LDAP girdisinin t\u00fcr\u00fcn\u00fc belirleyen ve o girdinin sahip olabilece\u011fi zorunlu ve iste\u011fe ba\u011fl\u0131 \u00f6zellikleri tan\u0131mlayan bir \u015fema \u00f6\u011fesidir. \u00d6rne\u011fin, inetOrgPerson<\/code> bir ki\u015fi girdisini, groupOfNames<\/code> ise bir grup girdisini tan\u0131mlar.
\n* Attribute (\u00d6zellik):<\/strong> Bir LDAP girdisinin belirli bir \u00f6zelli\u011fini veya niteli\u011fini temsil eden anahtar\/de\u011fer \u00e7iftidir. \u00d6rne\u011fin, cn<\/code> (Common Name), sn<\/code> (Surname), uid<\/code> (User ID), mail<\/code> (E-posta adresi) gibi.
\n* LDIF (LDAP Data Interchange Format):<\/strong> LDAP dizinindeki girdileri ve de\u011fi\u015fiklikleri temsil etmek i\u00e7in kullan\u0131lan standart, d\u00fcz metin tabanl\u0131 bir formatt\u0131r. LDAP sunucular\u0131na veri eklemek, de\u011fi\u015ftirmek veya silmek i\u00e7in s\u0131kl\u0131kla kullan\u0131l\u0131r.<\/p>\n

Ad\u0131m 1: Sistemi G\u00fcncelleme ve Gerekli Paketleri Kurma<\/h2>\n

Kuruluma ba\u015flamadan \u00f6nce, sistem paket listesini g\u00fcncelleyelim ve mevcut paketleri y\u00fckseltelim. Bu, olas\u0131 ba\u011f\u0131ml\u0131l\u0131k sorunlar\u0131n\u0131 \u00f6nlemeye yard\u0131mc\u0131 olacakt\u0131r.<\/p>\n

sudo apt-get update\nsudo apt-get upgrade -y<\/code><\/pre>\n
Ard\u0131ndan, OpenLDAP sunucu paketi olan slapd<\/code> ve LDAP ile etkile\u015fim kurmak i\u00e7in gerekli yard\u0131mc\u0131 programlar\u0131 i\u00e7eren ldap-utils<\/code> paketini kural\u0131m:<\/p>\n
sudo apt-get install slapd ldap-utils -y<\/code><\/pre>\n
Kurulum s\u0131ras\u0131nda slapd<\/code> paketi sizi baz\u0131 temel yap\u0131land\u0131rma sorular\u0131yla kar\u015f\u0131layacakt\u0131r. Bu sorular, ba\u015flang\u0131\u00e7 yap\u0131land\u0131rmas\u0131n\u0131 olu\u015fturmak i\u00e7in kullan\u0131l\u0131r:<\/p>\n
1.  “Omitted local LDAP server configuration?”<\/strong>: Bu soruya genellikle “No” (Hay\u0131r) yan\u0131t\u0131n\u0131 vererek yap\u0131land\u0131rmaya devam etmelisiniz.
\n2.  “DNS domain name:”<\/strong>: LDAP dizininizin temelini olu\u015fturacak DNS domain ad\u0131n\u0131 girin. \u00d6rne\u011fin, example.com<\/code>. Bu, dizininizin dc=example,dc=com<\/code> olarak yap\u0131land\u0131r\u0131lmas\u0131n\u0131 sa\u011flayacakt\u0131r.
\n3.  “Organization name:”<\/strong>: Kurulu\u015funuzun ad\u0131n\u0131 girin (\u00f6rne\u011fin, My Company<\/code>). Bu, dizininizin \u00fcst d\u00fczey a\u00e7\u0131klamas\u0131nda kullan\u0131lacakt\u0131r.
\n4.  “Administrator password:”<\/strong>: LDAP dizini i\u00e7in y\u00f6netici (admin<\/code>) kullan\u0131c\u0131s\u0131n\u0131n \u015fifresini belirleyin ve onaylay\u0131n. Bu \u015fifre \u00e7ok \u00f6nemlidir, g\u00fcvenli bir \u015fifre se\u00e7ti\u011finizden emin olun.<\/p>\n
Bu ad\u0131mlar\u0131 tamamlad\u0131\u011f\u0131n\u0131zda, temel OpenLDAP sunucunuz kurulmu\u015f ve ilk yap\u0131land\u0131rmas\u0131 yap\u0131lm\u0131\u015f olacakt\u0131r.<\/p>\n
Ad\u0131m 2: OpenLDAP Yap\u0131land\u0131rmas\u0131<\/h2>\n
slapd<\/code> paketi kurulduktan sonra, temel yap\u0131land\u0131rma tamamlanm\u0131\u015f olsa da, bu yap\u0131land\u0131rmay\u0131 g\u00f6zden ge\u00e7irmek ve gerekirse de\u011fi\u015ftirmek isteyebilirsiniz. dpkg-reconfigure slapd<\/code> komutu, kurulum s\u0131ras\u0131nda sorulan sorular\u0131 yeniden sorman\u0131z\u0131 ve mevcut yap\u0131land\u0131rmay\u0131 de\u011fi\u015ftirmenizi sa\u011flar.<\/p>\n
sudo dpkg-reconfigure slapd<\/code><\/pre>\n
Bu komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 takip ederek yap\u0131land\u0131rmay\u0131 g\u00f6zden ge\u00e7irebilirsiniz:<\/p>\n
1.  “Omit OpenLDAP server configuration?”<\/strong>: “No” se\u00e7ene\u011fini se\u00e7in.
\n2.  “DNS domain name:”<\/strong>: \u00d6nceki ad\u0131mda girdi\u011finiz domain ad\u0131n\u0131 (\u00f6rn: example.com<\/code>) onaylay\u0131n veya de\u011fi\u015ftirin. Bu, temel DN’nizi (dc=example,dc=com<\/code>) belirler.
\n3.  “Organization name:”<\/strong>: Kurulu\u015f ad\u0131n\u0131z\u0131 (\u00f6rn: My Company<\/code>) onaylay\u0131n veya de\u011fi\u015ftirin.
\n4.  “Administrator password:”<\/strong>: Y\u00f6neticinin \u015fifresini yeniden girin veya yeni bir \u015fifre belirleyin.
\n5.  “Confirm administrator password:”<\/strong>: \u015eifreyi onaylay\u0131n.
\n6.  “Database backend to use:”<\/strong>: HDB<\/code> (Hierarchical Database) se\u00e7ene\u011fini se\u00e7in. Bu, en yayg\u0131n ve \u00f6nerilen veritaban\u0131 t\u00fcr\u00fcd\u00fcr.
\n7.  “Remove the database when slapd is purged?”<\/strong>: “Yes” (Evet) se\u00e7ene\u011fini se\u00e7in. Bu, slapd<\/code> paketi kald\u0131r\u0131ld\u0131\u011f\u0131nda veritaban\u0131n\u0131n da silinmesini sa\u011flar.
\n8.  “Move old database?”<\/strong>: E\u011fer mevcut bir veritaban\u0131 varsa, onu ta\u015f\u0131y\u0131p ta\u015f\u0131mayaca\u011f\u0131n\u0131z\u0131 sorar. Genellikle “Yes” se\u00e7ene\u011fini se\u00e7mek g\u00fcvenlidir.
\n9.  “Allow LDAPv2 protocol?”<\/strong>: “No” (Hay\u0131r) se\u00e7ene\u011fini se\u00e7in. LDAPv3 daha g\u00fcvenli ve modern bir protokold\u00fcr.<\/p>\n
Yap\u0131land\u0131rma tamamland\u0131ktan sonra, OpenLDAP servisi otomatik olarak yeniden ba\u015flat\u0131l\u0131r. Servisin durumunu kontrol edebilirsiniz:<\/p>\n
sudo service slapd status<\/code><\/pre>\n
\u00c7\u0131kt\u0131da slapd is running.<\/code> benzeri bir ifade g\u00f6rmelisiniz.<\/p>\n
OpenLDAP’\u0131n yap\u0131land\u0131rma dosyalar\u0131 iki ana yerde bulunur:
\n*   \/etc\/ldap\/ldap.conf<\/code>: LDAP istemcilerinin ve yard\u0131mc\u0131 programlar\u0131n\u0131n sunucuya nas\u0131l ba\u011flanaca\u011f\u0131n\u0131 belirleyen global istemci yap\u0131land\u0131rma dosyas\u0131.
\n*   \/etc\/ldap\/slapd.d\/<\/code>: Sunucunun \u00e7al\u0131\u015fma zaman\u0131 yap\u0131land\u0131rmas\u0131n\u0131 (cn=config) i\u00e7eren dizin. Bu dizindeki dosyalar do\u011frudan d\u00fczenlenmemeli, bunun yerine ldapmodify<\/code> gibi ara\u00e7larla g\u00fcncellenmelidir. Ancak, ba\u015flang\u0131\u00e7ta baz\u0131 dosyalara bakmak faydal\u0131 olabilir.<\/p>\n
Temel DN’nizin do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in \/etc\/ldap\/ldap.conf<\/code> dosyas\u0131n\u0131 inceleyebilirsiniz. BASE<\/code> ve URI<\/code> sat\u0131rlar\u0131n\u0131n do\u011fru oldu\u011fundan emin olun:<\/p>\n
cat \/etc\/ldap\/ldap.conf<\/code><\/pre>\n
\u00c7\u0131kt\u0131da \u015funlar\u0131 g\u00f6rmelisiniz (\u00f6rne\u011fin example.com<\/code> i\u00e7in):<\/p>\n
BASE    dc=example,dc=com\nURI     ldap:\/\/localhost ldap:\/\/127.0.0.1<\/code><\/pre>\n
Ad\u0131m 3: Temel Dizin Yap\u0131s\u0131n\u0131 Olu\u015fturma (LDIF ile)<\/h2>\n
OpenLDAP sunucusu kuruldu ve temel yap\u0131land\u0131rmas\u0131 yap\u0131ld\u0131, ancak dizinimiz hen\u00fcz bo\u015f. \u015eimdi, kullan\u0131c\u0131lar ve gruplar gibi nesneleri tutacak temel organizasyon birimlerini (Organizational Units – OU) olu\u015fturmam\u0131z gerekiyor. Bunu LDIF (LDAP Data Interchange Format) dosyalar\u0131 kullanarak yapaca\u011f\u0131z.<\/p>\n
\u00d6ncelikle, dizininizin k\u00f6k girdisini (root entry) ve temel organizasyon birimlerini tan\u0131mlayan bir base.ldif<\/code> dosyas\u0131 olu\u015ftural\u0131m.<\/p>\n
nano base.ldif<\/code><\/pre>\n
Dosyan\u0131n i\u00e7ine a\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n. dc=example,dc=com<\/code> ve o=My Company<\/code> k\u0131s\u0131mlar\u0131n\u0131 kendi domain ad\u0131n\u0131z ve kurulu\u015f ad\u0131n\u0131zla de\u011fi\u015ftirin:<\/p>\n
dn: dc=example,dc=com\nobjectClass: top\nobjectClass: dcObject\nobjectClass: organization\no: My Company\ndc: example\n\ndn: cn=admin,dc=example,dc=com\nobjectClass: simpleSecurityObject\nobjectClass: organizationalRole\ncn: admin\ndescription: LDAP Administrator\n\ndn: ou=People,dc=example,dc=com\nobjectClass: organizationalUnit\nou: People\n\ndn: ou=Groups,dc=example,dc=com\nobjectClass: organizationalUnit\nou: Groups<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong>
\n*   dn: dc=example,dc=com<\/code>: Dizin a\u011fac\u0131m\u0131z\u0131n k\u00f6k girdisi.
\n*   objectClass: top<\/code>, dcObject<\/code>, organization<\/code>: Bu girdinin bir kurulu\u015f nesnesi oldu\u011funu ve temel LDAP nesne s\u0131n\u0131flar\u0131n\u0131 kulland\u0131\u011f\u0131n\u0131 belirtir.
\n*   o: My Company<\/code>: Kurulu\u015fumuzun ad\u0131.
\n*   dc: example<\/code>: Domain bile\u015feni.
\n*   dn: cn=admin,dc=example,dc=com<\/code>: LDAP y\u00f6neticisi i\u00e7in bir girdi. Bu, dpkg-reconfigure slapd<\/code> s\u0131ras\u0131nda belirledi\u011finiz admin kullan\u0131c\u0131s\u0131d\u0131r.
\n*   objectClass: simpleSecurityObject<\/code>, organizationalRole<\/code>: Bu girdinin bir g\u00fcvenlik nesnesi ve organizasyonel rol oldu\u011funu belirtir.
\n*   cn: admin<\/code>: Y\u00f6neticinin ortak ad\u0131.
\n*   dn: ou=People,dc=example,dc=com<\/code>: Kullan\u0131c\u0131 hesaplar\u0131n\u0131 tutacak organizasyon birimi.
\n*   dn: ou=Groups,dc=example,dc=com<\/code>: Grup hesaplar\u0131n\u0131 tutacak organizasyon birimi.<\/p>\n
Dosyay\u0131 kaydedin (Ctrl+O, Enter, Ctrl+X).<\/p>\n
\u015eimdi bu LDIF dosyas\u0131n\u0131 kullanarak girdileri LDAP dizinine ekleyelim. Bu i\u015flem i\u00e7in y\u00f6netici \u015fifrenizi girmeniz gerekecek:<\/p>\n
ldapadd -x -D \"cn=admin,dc=example,dc=com\" -W -f base.ldif<\/code><\/pre>\n
*   -x<\/code>: Basit kimlik do\u011frulama kullan\u0131r.
\n*   -D \"cn=admin,dc=example,dc=com\"<\/code>: Y\u00f6netici DN’sini belirtir.
\n*   -W<\/code>: Komutun \u015fifre istemesini sa\u011flar.
\n*   -f base.ldif<\/code>: Eklenecek verileri i\u00e7eren LDIF dosyas\u0131n\u0131 belirtir.<\/p>\n
Herhangi bir hata mesaj\u0131 almazsan\u0131z, girdiler ba\u015far\u0131yla eklenmi\u015ftir. Do\u011frulamak i\u00e7in ldapsearch<\/code> komutunu kullanabiliriz:<\/p>\n
ldapsearch -x -b \"dc=example,dc=com\"<\/code><\/pre>\n
Bu komut, dc=example,dc=com<\/code> taban DN’si alt\u0131ndaki t\u00fcm girdileri listelemelidir. \u00c7\u0131kt\u0131da ou=People<\/code> ve ou=Groups<\/code> girdilerini g\u00f6rmelisiniz.<\/p>\n
Ad\u0131m 4: Kullan\u0131c\u0131 ve Grup Ekleme<\/h2>\n
Temel dizin yap\u0131m\u0131z haz\u0131r oldu\u011funa g\u00f6re, \u015fimdi kullan\u0131c\u0131 ve grup girdileri ekleyebiliriz.<\/p>\n
Grup Ekleme<\/h3>\n
\u00d6ncelikle, bir grup olu\u015ftural\u0131m. \u00d6rne\u011fin, “developers” ad\u0131nda bir grup.<\/p>\n
group.ldif<\/code> ad\u0131nda bir dosya olu\u015fturun:<\/p>\n
nano group.ldif<\/code><\/pre>\n
\u0130\u00e7ine a\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n:<\/p>\n
dn: cn=developers,ou=Groups,dc=example,dc=com\nobjectClass: top\nobjectClass: posixGroup\ngidNumber: 5000\ncn: developers\ndescription: Development Team<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong>
\n*   dn: cn=developers,ou=Groups,dc=example,dc=com<\/code>: Grubun ay\u0131rt edici ad\u0131. ou=Groups<\/code> alt\u0131nda yer al\u0131r.
\n*   objectClass: top<\/code>, posixGroup<\/code>: Bu girdinin bir POSIX grubu oldu\u011funu belirtir. posixGroup<\/code> nesne s\u0131n\u0131f\u0131, cn<\/code> ve gidNumber<\/code> gibi \u00f6zellikleri zorunlu k\u0131lar.
\n*   gidNumber: 5000<\/code>: Grubun benzersiz say\u0131sal kimli\u011fi (Group ID). Sisteminizdeki di\u011fer GID’lerle \u00e7ak\u0131\u015fmamas\u0131na dikkat edin.
\n*   cn: developers<\/code>: Grubun ortak ad\u0131.<\/p>\n
Dosyay\u0131 kaydedin ve LDAP dizinine ekleyin:<\/p>\n
ldapadd -x -D \"cn=admin,dc=example,dc=com\" -W -f group.ldif<\/code><\/pre>\n
Kullan\u0131c\u0131 Ekleme<\/h3>\n
\u015eimdi de “John Doe” ad\u0131nda bir kullan\u0131c\u0131 ekleyelim ve bu kullan\u0131c\u0131y\u0131 “developers” grubuna dahil edelim.<\/p>\n
LDAP’ta kullan\u0131c\u0131 parolalar\u0131 genellikle d\u00fcz metin olarak saklanmaz, bunun yerine hash’lenmi\u015f halleri saklan\u0131r. slappasswd<\/code> komutunu kullanarak bir parola i\u00e7in SSHA (Salted SHA) hash’i olu\u015fturabiliriz:<\/p>\n
slappasswd<\/code><\/pre>\n
Komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, bir \u015fifre girmeniz istenecek ve size \"{SSHA}...\"<\/code> ile ba\u015flayan bir \u00e7\u0131kt\u0131 verecektir. Bu \u00e7\u0131kt\u0131y\u0131 kopyalay\u0131n.<\/p>\n
user.ldif<\/code> ad\u0131nda bir dosya olu\u015fturun:<\/p>\n
nano user.ldif<\/code><\/pre>\n
\u0130\u00e7ine a\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n. dc=example,dc=com<\/code> k\u0131sm\u0131n\u0131 kendi domaininizle de\u011fi\u015ftirin ve userPassword<\/code> de\u011ferini slappasswd<\/code> ile olu\u015fturdu\u011funuz hash ile de\u011fi\u015ftirin. uidNumber<\/code> ve gidNumber<\/code> de\u011ferlerinin sisteminizdeki di\u011fer de\u011ferlerle \u00e7ak\u0131\u015fmad\u0131\u011f\u0131ndan emin olun.<\/p>\n
dn: uid=john.doe,ou=People,dc=example,dc=com\nobjectClass: top\nobjectClass: person\nobjectClass: organizationalPerson\nobjectClass: inetOrgPerson\nobjectClass: posixAccount\nobjectClass: shadowAccount\ncn: John Doe\nsn: Doe\nuid: john.doe\nuidNumber: 10001\ngidNumber: 5000\nhomeDirectory: \/home\/john.doe\nloginShell: \/bin\/bash\nmail: john.doe@example.com\nuserPassword: {SSHA}YOUR_PASSWORD_HASH_HERE\nshadowLastChange: 18000\ndescription: Developer at My Company<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong>
\n*   dn: uid=john.doe,ou=People,dc=example,dc=com<\/code>: Kullan\u0131c\u0131n\u0131n ay\u0131rt edici ad\u0131. ou=People<\/code> alt\u0131nda yer al\u0131r.
\n*   objectClass: ...<\/code>: Kullan\u0131c\u0131n\u0131n bir ki\u015fi (person<\/code>, organizationalPerson<\/code>, inetOrgPerson<\/code>), bir POSIX hesab\u0131 (posixAccount<\/code>) ve bir shadow hesab\u0131 (shadowAccount<\/code>) oldu\u011funu belirten nesne s\u0131n\u0131flar\u0131. Bu nesne s\u0131n\u0131flar\u0131, kullan\u0131c\u0131n\u0131n cn<\/code>, sn<\/code>, uid<\/code>, uidNumber<\/code>, gidNumber<\/code>, homeDirectory<\/code>, loginShell<\/code>, userPassword<\/code> gibi \u00f6zellikleri ta\u015f\u0131mas\u0131n\u0131 sa\u011flar.
\n*   cn: John Doe<\/code>, sn: Doe<\/code>: Kullan\u0131c\u0131n\u0131n ortak ad\u0131 ve soyad\u0131.
\n*   uid: john.doe<\/code>: Kullan\u0131c\u0131n\u0131n benzersiz kullan\u0131c\u0131 kimli\u011fi.
\n*   uidNumber: 10001<\/code>: Kullan\u0131c\u0131n\u0131n benzersiz say\u0131sal kimli\u011fi (User ID).
\n*   gidNumber: 5000<\/code>: Kullan\u0131c\u0131n\u0131n birincil grubunun GID’si. Bu, daha \u00f6nce olu\u015fturdu\u011fumuz “developers” grubunun GID’sidir.
\n*   homeDirectory: \/home\/john.doe<\/code>: Kullan\u0131c\u0131n\u0131n ana dizini.
\n*   loginShell: \/bin\/bash<\/code>: Kullan\u0131c\u0131n\u0131n varsay\u0131lan kabu\u011fu.
\n*   mail: john.doe@example.com<\/code>: Kullan\u0131c\u0131n\u0131n e-posta adresi.
\n*   userPassword: {SSHA}YOUR_PASSWORD_HASH_HERE<\/code>: Kullan\u0131c\u0131n\u0131n \u015fifresinin hash’lenmi\u015f hali.
\n*   shadowLastChange: 18000<\/code>: \u015eifrenin en son de\u011fi\u015ftirildi\u011fi tarih (Unix epoch’tan bu yana ge\u00e7en g\u00fcn say\u0131s\u0131).<\/p>\n
Dosyay\u0131 kaydedin ve LDAP dizinine ekleyin:<\/p>\n
ldapadd -x -D \"cn=admin,dc=example,dc=com\" -W -f user.ldif<\/code><\/pre>\n
Ad\u0131m 5: LDAP Sunucusunu Test Etme<\/h2>\n
Kullan\u0131c\u0131 ve gruplar\u0131 ekledikten sonra, LDAP sunucumuzun do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve ekledi\u011fimiz girdilere eri\u015febildi\u011fimizi do\u011frulamam\u0131z \u00f6nemlidir.<\/p>\n
T\u00fcm dizin i\u00e7eri\u011fini aramak i\u00e7in:<\/p>\n
ldapsearch -x -b \"dc=example,dc=com\"<\/code><\/pre>\n
Bu komut, dc=example,dc=com<\/code> taban DN’si alt\u0131ndaki t\u00fcm girdileri listeler. \u00c7\u0131kt\u0131da ou=People<\/code>, ou=Groups<\/code>, cn=developers<\/code> ve uid=john.doe<\/code> girdilerini g\u00f6rmelisiniz.<\/p>\n
Belirli bir kullan\u0131c\u0131y\u0131 aramak i\u00e7in:<\/p>\n
ldapsearch -x -b \"dc=example,dc=com\" \"uid=john.doe\"<\/code><\/pre>\n
Bu komut, sadece john.doe<\/code> kullan\u0131c\u0131s\u0131n\u0131n bilgilerini d\u00f6nd\u00fcrmelidir.<\/p>\n
Kimlik do\u011frulama (authentication) testi yapmak i\u00e7in ldapwhoami<\/code> komutunu kullanabiliriz. Bu komut, belirtilen kimlik bilgileriyle LDAP sunucusuna ba\u011flanmaya \u00e7al\u0131\u015f\u0131r ve ba\u015far\u0131l\u0131 olursa, kimli\u011fi do\u011frulanan kullan\u0131c\u0131n\u0131n DN’sini d\u00f6nd\u00fcr\u00fcr:<\/p>\n
ldapwhoami -x -D \"uid=john.doe,ou=People,dc=example,dc=com\" -W<\/code><\/pre>\n
Bu komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda, john.doe<\/code> kullan\u0131c\u0131s\u0131n\u0131n \u015fifresi istenecek. Do\u011fru \u015fifreyi girdi\u011finizde, \u00e7\u0131kt\u0131 olarak dn: uid=john.doe,ou=People,dc=example,dc=com<\/code> benzeri bir ifade g\u00f6rmelisiniz. Bu, kullan\u0131c\u0131n\u0131n kimlik do\u011frulamas\u0131n\u0131n ba\u015far\u0131l\u0131 oldu\u011fu anlam\u0131na gelir.<\/p>\n
Ad\u0131m 6: G\u00fcvenlik Ayarlar\u0131 (Temel)<\/h2>\n
LDAP sunucunuzu \u00fcretim ortam\u0131nda kullanmay\u0131 d\u00fc\u015f\u00fcn\u00fcyorsan\u0131z, g\u00fcvenlik hayati \u00f6nem ta\u015f\u0131r. \u0130\u015fte baz\u0131 temel g\u00fcvenlik \u00f6nlemleri:<\/p>\n
TLS\/SSL ile \u015eifreleme (LDAPS)<\/h3>\n
LDAP trafi\u011fini \u015fifrelemek i\u00e7in TLS\/SSL (Transport Layer Security\/Secure Sockets Layer) kullanmak \u015fiddetle tavsiye edilir. Bu, parolalar ve di\u011fer hassas bilgilerin a\u011f \u00fczerinden d\u00fcz metin olarak iletilmesini \u00f6nler. LDAP’\u0131n TLS \u00fczerinden \u00e7al\u0131\u015fmas\u0131na LDAPS denir ve varsay\u0131lan olarak 636 numaral\u0131 portu kullan\u0131r.<\/p>\n
Ubuntu 12.04’te cn=config<\/code> tabanl\u0131 yap\u0131land\u0131rma kullan\u0131ld\u0131\u011f\u0131ndan, TLS sertifikalar\u0131n\u0131 yap\u0131land\u0131rmak biraz karma\u015f\u0131k olabilir. Genel ad\u0131mlar \u015funlard\u0131r:<\/p>\n
1.  Sertifika Olu\u015fturma:<\/strong> Kendi kendine imzal\u0131 (self-signed) bir sertifika olu\u015fturabilirsiniz. \u00dcretim ortamlar\u0131 i\u00e7in CA (Certificate Authority) taraf\u0131ndan imzalanm\u0131\u015f bir sertifika kullanmal\u0131s\u0131n\u0131z.<\/p>\n
sudo mkdir -p \/etc\/ldap\/ssl\n    sudo openssl req -new -x509 -nodes -out \/etc\/ldap\/ssl\/ldap_server.pem -keyout \/etc\/ldap\/ssl\/ldap_server.key -days 365\n    sudo chmod 600 \/etc\/ldap\/ssl\/ldap_server.key\n    sudo chown openldap:openldap \/etc\/ldap\/ssl\/ldap_server.*<\/code><\/pre>\n
    Sertifika olu\u015ftururken size sorulan bilgilere (\u00fclke, eyalet, kurulu\u015f ad\u0131, ortak ad vb.) do\u011fru yan\u0131tlar verin. Ortak ad (Common Name) olarak sunucunuzun tam nitelikli alan ad\u0131n\u0131 (FQDN) kullan\u0131n.<\/p>\n
2.  TLS Yap\u0131land\u0131rmas\u0131n\u0131 LDAP’a Ekleme:<\/strong> Bu ad\u0131m, ldif<\/code> dosyalar\u0131 olu\u015fturup ldapmodify<\/code> ile cn=config<\/code> dizinine eklenerek yap\u0131l\u0131r.<\/p>\n
    tls.ldif<\/code> ad\u0131nda bir dosya olu\u015fturun:<\/p>\n
nano tls.ldif<\/code><\/pre>\n
    \u0130\u00e7ine a\u015fa\u011f\u0131daki i\u00e7eri\u011fi yap\u0131\u015ft\u0131r\u0131n. dc=example,dc=com<\/code> k\u0131sm\u0131n\u0131 kendi domaininizle de\u011fi\u015ftirin:<\/p>\n
dn: cn=config\nchangetype: modify\nadd: olcTLSCACertificateFile\nolcTLSCACertificateFile: \/etc\/ldap\/ssl\/ldap_server.pem\n-\nadd: olcTLSCertificateFile\nolcTLSCertificateFile: \/etc\/ldap\/ssl\/ldap_server.pem\n-\nadd: olcTLSCertificateKeyFile\nolcTLSCertificateKeyFile: \/etc\/ldap\/ssl\/ldap_server.key<\/code><\/pre>\n
    Dosyay\u0131 kaydedin ve uygulay\u0131n:<\/p>\n
ldapmodify -Y EXTERNAL -H ldapi:\/\/\/ -f tls.ldif<\/code><\/pre>\n
    Bu komut, EXTERNAL<\/code> kimlik do\u011frulama y\u00f6ntemini kullanarak yerel UNIX soketi (ldapi:\/\/\/<\/code>) \u00fczerinden cn=config<\/code> dizinini de\u011fi\u015ftirir.<\/p>\n
3.  Hizmeti Yeniden Ba\u015flatma:<\/strong> De\u011fi\u015fikliklerin etkili olmas\u0131 i\u00e7in slapd<\/code> servisini yeniden ba\u015flat\u0131n:<\/p>\n
sudo service slapd restart<\/code><\/pre>\n
Art\u0131k LDAPS (port 636) \u00fczerinden g\u00fcvenli ba\u011flant\u0131 kurabilirsiniz. \u0130stemcilerinizde ldap:\/\/<\/code> yerine ldaps:\/\/<\/code> kullanman\u0131z gerekecektir.<\/p>\n
ACL’ler (Eri\u015fim Kontrol Listeleri)<\/h3>\n
ACL’ler, LDAP dizinindeki hangi kullan\u0131c\u0131lar\u0131n hangi verilere eri\u015febilece\u011fini veya de\u011fi\u015ftirebilece\u011fini kontrol etmenizi sa\u011flar. Bu, hassas verilerin yetkisiz eri\u015fimden korunmas\u0131 i\u00e7in kritik \u00f6neme sahiptir. ACL’ler de cn=config<\/code> dizini \u00fczerinden y\u00f6netilir.<\/p>\n
\u00d6rnek bir ACL kural\u0131, anonim kullan\u0131c\u0131lar\u0131n dizini okumas\u0131n\u0131 engeller ve yaln\u0131zca kimli\u011fi do\u011frulanm\u0131\u015f kullan\u0131c\u0131lar\u0131n kendi girdilerini okumas\u0131na ve de\u011fi\u015ftirmesine izin verirken, y\u00f6neticinin her \u015feyi okuyup yazmas\u0131na izin verir.<\/p>\n
Mevcut ACL’leri g\u00f6rmek i\u00e7in:<\/p>\n
ldapsearch -Y EXTERNAL -H ldapi:\/\/\/ -b \"olcDatabase={1}hdb,cn=config\" olcAccess<\/code><\/pre>\n
Yeni bir ACL kural\u0131 eklemek veya mevcut olan\u0131 de\u011fi\u015ftirmek i\u00e7in acl.ldif<\/code> ad\u0131nda bir dosya olu\u015fturabilirsiniz:<\/p>\n
nano acl.ldif<\/code><\/pre>\n
A\u015fa\u011f\u0131daki \u00f6rnek, temel bir ACL yap\u0131land\u0131rmas\u0131 sunar. Bu \u00f6rnek, olcAccess<\/code> direktifini de\u011fi\u015ftirir. Mevcut ACL’lerinizi kontrol edip ona g\u00f6re d\u00fczenleme yapman\u0131z \u00f6nemlidir. E\u011fer zaten ACL’ler varsa, add<\/code> yerine replace<\/code> kullanman\u0131z veya daha spesifik bir dn<\/code>‘e ACL eklemeniz gerekebilir.<\/p>\n
dn: olcDatabase={1}hdb,cn=config\nchangetype: modify\nreplace: olcAccess\nolcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn=\"cn=admin,dc=example,dc=com\" write by * none\nolcAccess: {1}to dn.base=\"\" by * read\nolcAccess: {2}to  by self write by dn=\"cn=admin,dc=example,dc=com\" write by <\/em> read<\/code><\/pre>\n
A\u00e7\u0131klamalar:<\/strong>
\n*   olcAccess: {0}to attrs=userPassword,shadowLastChange ...<\/code>: userPassword<\/code> ve shadowLastChange<\/code> \u00f6zelliklerine eri\u015fimi kontrol eder.
\n    *   by self write<\/code>: Kendi \u015fifresini de\u011fi\u015ftirmesine izin verir.
\n    *   by anonymous auth<\/code>: Anonim kullan\u0131c\u0131lar\u0131n kimlik do\u011frulamas\u0131n\u0131 yapmas\u0131na izin verir (ancak okuma\/yazma izni vermez).
\n    *   by dn=\"cn=admin,dc=example,dc=com\" write<\/code>: Admin’in \u015fifreleri yazmas\u0131na izin verir.
\n       by <\/em> none<\/code>: Di\u011fer herkes i\u00e7in bu \u00f6zelliklere eri\u015fimi yasaklar.
\n   olcAccess: {1}to dn.base=\"\" by <\/em> read<\/code>: Dizin a\u011fac\u0131n\u0131n temelini (root DSE) herkesin okumas\u0131na izin verir. Bu, istemcilerin dizinin temel bilgilerini almas\u0131n\u0131 sa\u011flar.
\n   olcAccess: {2}to <\/em> by self write by dn=\"cn=admin,dc=example,dc=com\" write by * read<\/code>: Di\u011fer t\u00fcm \u00f6zelliklere (ilk kuralda belirtilenler hari\u00e7) eri\u015fimi kontrol eder.
\n    *   by self write<\/code>: Kullan\u0131c\u0131n\u0131n kendi girdisindeki di\u011fer \u00f6zelliklerini de\u011fi\u015ftirmesine izin verir.
\n    *   by dn=\"cn=admin,dc=example,dc=com\" write<\/code>: Admin’in her \u015feyi yazmas\u0131na izin verir.
\n       by <\/em> read<\/code>: Di\u011fer herkesin t\u00fcm \u00f6zellikleri okumas\u0131na izin verir.<\/p>\n
Dosyay\u0131 kaydedin ve uygulay\u0131n:<\/p>\n
ldapmodify -Y EXTERNAL -H ldapi:\/\/\/ -f acl.ldif<\/code><\/pre>\n
ACL’ler karma\u015f\u0131k olabilir ve dikkatli bir \u015fekilde yap\u0131land\u0131r\u0131lmal\u0131d\u0131r. Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f bir ACL, dizine eri\u015fimi tamamen engelleyebilir. Her zaman k\u00fc\u00e7\u00fck de\u011fi\u015fiklikler yap\u0131n ve her de\u011fi\u015fikli\u011fi test edin.<\/p>\n
Ad\u0131m 7: LDAP \u0130stemci Yap\u0131land\u0131rmas\u0131 (K\u0131sa Bir Bak\u0131\u015f)<\/h2>\n
LDAP sunucunuzu kurduktan sonra, di\u011fer Linux sistemlerinin (istemcilerin) bu sunucuyu kullan\u0131c\u0131 ve grup bilgileri i\u00e7in kullanmas\u0131n\u0131 sa\u011flamak isteyebilirsiniz. Ubuntu 12.04’te bu genellikle libnss-ldap<\/code> ve libpam-ldap<\/code> paketleri ile yap\u0131l\u0131r.<\/p>\n
Bir istemci makinede (ba\u015fka bir Ubuntu 12.04 sunucu veya masa\u00fcst\u00fc olabilir):<\/p>\n
1.  Gerekli Paketleri Kurun:<\/strong><\/p>\n
sudo apt-get install libnss-ldap libpam-ldap auth-client-config nscd -y<\/code><\/pre>\n
    Kurulum s\u0131ras\u0131nda sizden LDAP sunucusunun IP adresi veya hostname’i, temel DN’si ve di\u011fer bilgiler istenecektir. Bu bilgileri kurdu\u011funuz LDAP sunucusunun bilgileriyle doldurun.<\/p>\n
2.  Yap\u0131land\u0131rma Dosyalar\u0131n\u0131 Kontrol Edin:<\/strong>
\n    *   \/etc\/ldap.conf<\/code>: Bu dosya, LDAP sunucusuna nas\u0131l ba\u011flan\u0131laca\u011f\u0131n\u0131 tan\u0131mlar. host<\/code>, base<\/code>, ldap_version<\/code> gibi parametreleri kontrol edin.
\n    *   \/etc\/nsswitch.conf<\/code>: Bu dosya, sistemin kullan\u0131c\u0131 ve grup bilgilerini nereden alaca\u011f\u0131n\u0131 belirler. passwd<\/code>, group<\/code>, shadow<\/code> sat\u0131rlar\u0131na ldap<\/code> eklenmelidir (\u00f6rn: passwd: files ldap<\/code>).
\n    *   \/etc\/pam.d\/common-auth<\/code>, \/etc\/pam.d\/common-account<\/code>, \/etc\/pam.d\/common-password<\/code>: PAM (Pluggable Authentication Modules) yap\u0131land\u0131rmas\u0131, LDAP \u00fczerinden kimlik do\u011frulaman\u0131n nas\u0131l yap\u0131laca\u011f\u0131n\u0131 belirler.<\/p>\n
3.  NSS Cache Daemon’\u0131 Yeniden Ba\u015flat\u0131n:<\/strong><\/p>\n
sudo service nscd restart<\/code><\/pre>\n
4.  LDAP Kullan\u0131c\u0131lar\u0131n\u0131 Test Edin:<\/strong>
\n    \u0130stemci makinede getent passwd<\/code> komutunu \u00e7al\u0131\u015ft\u0131rarak LDAP’tan gelen kullan\u0131c\u0131lar\u0131 g\u00f6rebilmelisiniz. id john.doe<\/code> komutu ile de kullan\u0131c\u0131n\u0131n UID ve GID bilgilerini kontrol edebilirsiniz.<\/p>\n
Bu ad\u0131m, istemci taraf\u0131ndaki yap\u0131land\u0131rman\u0131n karma\u015f\u0131kl\u0131\u011f\u0131 nedeniyle sadece genel bir bak\u0131\u015f sunmaktad\u0131r. Detayl\u0131 istemci yap\u0131land\u0131rmas\u0131 ayr\u0131 bir rehber konusu olabilir.<\/p>\n
Yayg\u0131n Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h2>\n
LDAP kurulumu ve yap\u0131land\u0131rmas\u0131 s\u0131ras\u0131nda kar\u015f\u0131la\u015fabilece\u011finiz baz\u0131 yayg\u0131n sorunlar ve olas\u0131 \u00e7\u00f6z\u00fcmleri a\u015fa\u011f\u0131dad\u0131r:<\/p>\n
*   Ba\u011flant\u0131 Sorunlar\u0131 (Can't contact LDAP server<\/code>):<\/strong>
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> slapd<\/code> servisinin \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 kontrol edin: sudo service slapd status<\/code>. \u00c7al\u0131\u015fm\u0131yorsa sudo service slapd start<\/code> ile ba\u015flat\u0131n.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> G\u00fcvenlik duvar\u0131n\u0131z\u0131n (firewall) LDAP portlar\u0131na (varsay\u0131lan olarak 389, LDAPS i\u00e7in 636) izin verdi\u011finden emin olun. Ubuntu 12.04’te UFW kullan\u0131yorsan\u0131z: sudo ufw allow 389\/tcp<\/code> ve sudo ufw allow 636\/tcp<\/code>.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> LDAP sunucusunun IP adresi veya hostname’inin do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun (hem sunucu hem de istemci taraf\u0131nda).<\/p>\n
*   Kimlik Do\u011frulama Hatalar\u0131 (Invalid credentials<\/code>, Authentication failed<\/code>):<\/strong>
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> DN’nizin ve parolan\u0131z\u0131n do\u011fru oldu\u011fundan emin olun. \u00d6zellikle ldapadd<\/code> veya ldapmodify<\/code> komutlar\u0131n\u0131 kullan\u0131rken y\u00f6netici DN’sini (cn=admin,dc=example,dc=com<\/code>) ve \u015fifresini do\u011fru girdi\u011finizden emin olun.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> Kullan\u0131c\u0131 parolas\u0131 hash’ini (userPassword<\/code>) do\u011fru olu\u015fturup olu\u015fturmad\u0131\u011f\u0131n\u0131z\u0131 kontrol edin. slappasswd<\/code> \u00e7\u0131kt\u0131s\u0131n\u0131 do\u011fru kopyalad\u0131\u011f\u0131n\u0131zdan emin olun.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> LDAP sunucusunun g\u00fcnl\u00fcklerini kontrol edin. \/var\/log\/syslog<\/code> veya dmesg<\/code> komutlar\u0131, kimlik do\u011frulama denemeleriyle ilgili hata mesajlar\u0131 i\u00e7erebilir.<\/p>\n
*   LDIF Dosyas\u0131 Hatalar\u0131 (ldapadd: invalid format<\/code>, schema violation<\/code>):<\/strong>
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> LDIF dosyan\u0131zdaki s\u00f6zdizimini dikkatlice kontrol edin. Her sat\u0131r\u0131n ba\u015f\u0131nda bo\u015fluk olmad\u0131\u011f\u0131ndan, her \u00f6zelli\u011fin bir DN’ye ait oldu\u011fundan ve bo\u015f sat\u0131rlar\u0131n do\u011fru kullan\u0131ld\u0131\u011f\u0131ndan emin olun.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> objectClass<\/code> tan\u0131mlar\u0131n\u0131n do\u011fru oldu\u011fundan ve ilgili \u00f6zelliklerin bu nesne s\u0131n\u0131flar\u0131 taraf\u0131ndan izin verildi\u011finden emin olun. \u00d6rne\u011fin, inetOrgPerson<\/code> olmayan bir girdiye mail<\/code> \u00f6zelli\u011fi eklemeye \u00e7al\u0131\u015f\u0131rsan\u0131z schema violation<\/code> hatas\u0131 alabilirsiniz.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> dn<\/code> sat\u0131rlar\u0131n\u0131n hiyerar\u015fik olarak do\u011fru oldu\u011fundan emin olun. \u00d6rne\u011fin, ou=People<\/code> alt\u0131na bir kullan\u0131c\u0131 eklerken kullan\u0131c\u0131n\u0131n DN’si uid=john.doe,ou=People,dc=example,dc=com<\/code> \u015feklinde olmal\u0131d\u0131r.<\/p>\n
*   ACL Sorunlar\u0131 (Eri\u015fim reddedildi):<\/strong>
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> ACL’lerinizi dikkatlice inceleyin. olcAccess<\/code> kurallar\u0131 \u00e7ok spesifik olabilir ve yanl\u0131\u015f bir kural, bekledi\u011finizden daha fazla veya daha az eri\u015fime neden olabilir.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> ACL’lerdeki s\u0131ralama \u00f6nemlidir. Daha spesifik kurallar genellikle daha genel kurallardan \u00f6nce gelir.
\n    *   \u00c7\u00f6z\u00fcm:<\/strong> ldapsearch<\/code> komutunu farkl\u0131 kullan\u0131c\u0131larla (anonim, normal kullan\u0131c\u0131, y\u00f6netici) \u00e7al\u0131\u015ft\u0131rarak ACL’lerinizi test edin.<\/p>\n
*   Slapd G\u00fcnl\u00fcklerini \u0130nceleme:<\/strong>
\n    *   OpenLDAP ile ilgili \u00e7o\u011fu sorunun k\u00f6k nedeni \/var\/log\/syslog<\/code> veya dmesg<\/code> komutlar\u0131n\u0131n \u00e7\u0131kt\u0131s\u0131nda bulunabilir. Hata mesajlar\u0131n\u0131 dikkatlice okuyun.
\n    *   Daha detayl\u0131 hata ay\u0131klama i\u00e7in, slapd<\/code> servisini daha y\u00fcksek bir hata ay\u0131klama seviyesiyle ba\u015flatabilirsiniz. \u00d6rne\u011fin, sudo service slapd stop<\/code> ve ard\u0131ndan sudo \/usr\/sbin\/slapd -d 256<\/code> komutuyla detayl\u0131 g\u00fcnl\u00fckleri terminalde g\u00f6rebilirsiniz.<\/p>\n
Sonu\u00e7<\/h2>\n
Bu makalede, Ubuntu 12.04 LTS bir VPS \u00fczerinde temel bir OpenLDAP sunucusunun nas\u0131l kurulaca\u011f\u0131n\u0131 ve yap\u0131land\u0131r\u0131laca\u011f\u0131n\u0131 ad\u0131m ad\u0131m ele ald\u0131k. LDAP’\u0131n temel kavramlar\u0131n\u0131 a\u00e7\u0131klayarak ba\u015flad\u0131k, ard\u0131ndan slapd<\/code> paketinin kurulumunu, temel dizin yap\u0131s\u0131n\u0131n olu\u015fturulmas\u0131n\u0131, kullan\u0131c\u0131 ve grup eklemeyi g\u00f6sterdik. Son olarak, dizinin i\u015flevselli\u011fini test etme, TLS\/SSL ile g\u00fcvenli\u011fi sa\u011flama ve temel ACL yap\u0131land\u0131rmas\u0131 gibi \u00f6nemli g\u00fcvenlik ad\u0131mlar\u0131n\u0131 tart\u0131\u015ft\u0131k. Ayr\u0131ca, yayg\u0131n sorunlara ve \u00e7\u00f6z\u00fcmlerine de de\u011findik.<\/p>\n
Unutulmamal\u0131d\u0131r ki, Ubuntu 12.04 eski bir i\u015fletim sistemi s\u00fcr\u00fcm\u00fcd\u00fcr ve art\u0131k resmi g\u00fcvenlik g\u00fcncellemeleri almamaktad\u0131r. Bu nedenle, \u00fcretim ortamlar\u0131nda m\u00fcmk\u00fcnse daha g\u00fcncel ve desteklenen bir Ubuntu s\u00fcr\u00fcm\u00fc (\u00f6rne\u011fin, Ubuntu 20.04 LTS veya 22.04 LTS) kullan\u0131lmas\u0131 \u015fiddetle tavsiye edilir. G\u00fcncel s\u00fcr\u00fcmlerde OpenLDAP’\u0131n kurulum ve yap\u0131land\u0131rma s\u00fcre\u00e7leri, \u00f6zellikle cn=config<\/code> tabanl\u0131 dinamik yap\u0131land\u0131rma y\u00f6netimi a\u00e7\u0131s\u0131ndan baz\u0131 farkl\u0131l\u0131klar g\u00f6sterebilir.<\/p>\n
LDAP, g\u00fc\u00e7l\u00fc ve esnek bir dizin hizmetidir. Bu temel kurulum, daha karma\u015f\u0131k LDAP da\u011f\u0131t\u0131mlar\u0131 i\u00e7in sa\u011flam bir temel olu\u015fturur. \u0130leri d\u00fczey konular aras\u0131nda LDAP replikasyonu (y\u00fcksek eri\u015filebilirlik i\u00e7in), farkl\u0131 \u015femalar\u0131n entegrasyonu (\u00f6rne\u011fin, Active Directory ile uyumluluk), GUI tabanl\u0131 y\u00f6netim ara\u00e7lar\u0131 (phpLDAPadmin gibi) ve LDAP’\u0131 \u00e7e\u015fitli uygulamalarla (posta sunucular\u0131, web sunucular\u0131, VPN’ler) entegre etme yer al\u0131r. Bu konular, LDAP bilginizi ve becerilerinizi daha da geli\u015ftirmek i\u00e7in ke\u015ffedebilece\u011finiz alanlard\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\nGiri\u015f\nLDAP (Lightweight Directory Access Protocol), da\u011f\u0131t\u0131k bilgi","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1468],"tags":[],"class_list":{"0":"post-37966","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-ubuntu","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nUbuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\" \/>\n<meta property=\"og:description\" content=\"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f LDAP (Lightweight Directory Access Protocol), da\u011f\u0131t\u0131k bilgi\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-20T01:40:59+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"23 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\",\"datePublished\":\"2026-01-20T01:40:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/\"},\"wordCount\":3623,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Ubuntu\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/\",\"name\":\"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-01-20T01:40:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/","og_locale":"tr_TR","og_type":"article","og_title":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131","og_description":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 Giri\u015f LDAP (Lightweight Directory Access Protocol), da\u011f\u0131t\u0131k bilgi","og_url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-01-20T01:40:59+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"23 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131","datePublished":"2026-01-20T01:40:59+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/"},"wordCount":3623,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Ubuntu"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/","url":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/","name":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-01-20T01:40:59+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/ubuntu-12-04-vps-uzerine-temel-bir-ldap-sunucusu-kurulumu-ve-yapilandirmasi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Ubuntu 12.04 VPS \u00dczerine Temel Bir LDAP Sunucusu Kurulumu ve Yap\u0131land\u0131rmas\u0131"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37966","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37966"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37966\/revisions"}],"predecessor-version":[{"id":37967,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37966\/revisions\/37967"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37966"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37966"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37966"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}