CentOS7下安装self-service-password实现AD域自助修改/重置密码

wget https://mirror.webtatic.com/yum/el7/webtatic-release.rpm
yum localinstall webtatic-release.rpm

yum -y install php72w php72w-fpm php72w-cli php72w-common php72w-gd php72w-ldap php72w-mbstring

vi /etc/php.ini
时区配置
date.timezone = Asia/Shanghai

systemctl enable php-fpm.service
systemctl start php-fpm.service

https://ltb-project.org/download.html

https://ltb-project.org/archives/self-service-password-1.4.3-1.el7.noarch.rpm

yum localinstall self-service-password-1.4.3-1.el7.noarch.rpm

yum install nginx -y

vi /etc/nginx/nginx.conf

server {
  listen       80;
  listen       [::]:80;
  root /usr/share/self-service-password/htdocs/;
  index index.php index.html index.htm;

  # Make site accessible from http://localhost/
  server_name _;

  # Disable sendfile as per https://docs.vagrantup.com/v2/synced-folders/virtualbox.html
  sendfile off;

  gzip on;
  gzip_comp_level 6;
  gzip_min_length 1000;
  gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript text/x-js;
  gzip_vary on;
  gzip_proxied any;
  gzip_disable "MSIE [1-6]\.(?!.*SV1)";

  # Add stdout logging
  error_log /var/log/nginx/ldapssp_error.log warn;
  access_log /var/log/nginx/ldapssp_access.log main;


  # pass the PHP scripts to FastCGI server listening on socket
  #
  location ~ \.php {
  #fastcgi_pass unix:/var/run/php-fpm.socket;
  fastcgi_pass 127.0.0.1:9000;
  fastcgi_split_path_info       ^(.+\.php)(/.+)$;
  fastcgi_param PATH_INFO       $fastcgi_path_info;
  fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
  fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  fastcgi_index index.php;
  try_files $fastcgi_script_name =404;
  fastcgi_read_timeout 600;
  include fastcgi_params;
  }

  error_page 404 /404.html;
  location = /404.html {
        root /usr/share/nginx/html;
        internal;
  }

  # deny access to . files, for security
  #
  location ~ /\. {
  log_not_found off;
  deny all;
  }

  location ~ /scripts {
  log_not_found off;
  deny all;
  }
}
 

 systemctl start nginx
 systemctl enable nginx
 firewall-cmd --permanent --zone=public --add-port=80/tcp
 firewall-cmd --reload

cd /usr/share/self-service-password/conf/ 

vim config.inc.php

vi /usr/share/self-service-password/lang/zh-CN.inc.php 

https://www.cnblogs.com/Fmaj7/p/15791366.html
https://www.ilanni.com/?p=13822
https://www.yeboyzq.com/linux/ruanjiananzhuangweihu/1117.html
https://blog.51cto.com/u_10630242/2538982
https://self-service-password.readthedocs.io/en/stable/installation.html#centos-redhat
https://blog.csdn.net/yanchuandong/article/details/119598665
https://blog.csdn.net/qq461391728/article/details/115867721?ops_request_misc=%257B%2522request%255Fid%2522%253A%2522162848744116780265427748%2522%252C%2522scm%2522%253A%252220140713.130102334..%2522%257D&request_id=162848744116780265427748&biz_id=0&utm_medium=distribute.pc_search_result.none-task-blog-2~all~sobaiduend~default-1-115867721.pc_search_result_control_group&utm_term=self+service+password+%E5%9F%9F%E8%B4%A6%E5%8F%B7&spm=1018.2226.3001.4187
https://self-service-password.readthedocs.io/en/stable/installation.html