Red Hat DIRECTORY SERVER 8.0 Command Reference Manual page 56

Chapter 2. Core Server Configuration Reference
2.3.1.81. nsslapd-rootdn (Manager DN)
This attribute sets the distinguished name (DN) of an entry that is not subject to access control
restrictions, administrative limit restrictions for operations on the directory, or resource limits in general.
There does not have to be an entry corresponding to this DN, and by default there is not an entry for
this DN, thus values like cn=Directory Manager are acceptable.
For information on changing the root DN, see the "Creating Directory Entries" chapter in the Directory
Server Administrator's Guide.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.82. nsslapd-rootpw (Root Password)
This attribute sets the password associated with the Manager DN. When the root password
is provided, it is encrypted according to the encryption method selected for the nsslapd-
rootpwstoragescheme attribute. When viewed from the server console, this attribute shows the
value *****. When viewed from the dse.ldif file, this attribute shows the encryption method
followed by the encrypted string of the password. The example shows the password as displayed in
the dse.ldif file, not the actual password.
CAUTION
When the root DN is configred at server setup, a root password is required. However, it is
possible for the root password to be deleted from dse.ldif by directly editing the file. In
this situation, the root DN can only obtain the same access to the directory is allowed for
anonymous access. Always make sure that a root password is defined in dse.ldif when
a root DN is configured for the database. The pwdhash command-line utility can create a
new root password. For more information, see
Passwords)".
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
46
Description
cn=config
Any valid distinguished name
DN
nsslapd-rootdn: cn=Directory Manager
Section 7.3.9, "pwdhash (Prints Encrypted
Description
cn=config
Any valid password encrypted by any one of
the encryption methods which are described in
Section 2.3.1.123, "passwordStorageScheme
(Password Storage Scheme)".
DirectoryString {encryption_method
}encrypted_Password
nsslapd-rootpw: {SSHA}9Eko69APCJfF