Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 52

Chapter 2. Core Server Configuration Reference
If for some reason this attribute were set to off, the solution is to export the database to
ldif (db2ldif or db2ldif.pl or from the console), set the value to on, and import the
data. The import process assigns each entry a unique id.
2.3.1.64. nsslapd-ldapiautobind (Enable Autobind)
The nsslapd-ldapiautobind sets whether the server will allow users to autobind to Directory
Server using LDAPI. Autobind maps the UID or GUID number of a system user to a Directory Server
user, and automatically authenticates the user to Directory Server based on those credentials. The
Directory Server connection occurs over UNIX socket.
Along with enabling autobind, configuring autobind requires configuring mapping entries. The
nsslapd-ldapimaprootdn maps a root user on the system to the Directory Manager. The
nsslapd-ldapimaptoentries maps regular users to Directory Server users, based on the
parameters defined in the nsslapd-ldapiuidnumbertype, nsslapd-ldapigidnumbertype,
and nsslapd-ldapientrysearchbase attributes.
Autobind can only be enabled if LDAPI is enabled, meaning the nsslapd-ldapilisten is on and
the nsslapd-ldapifilepath attribute is set to an LDAPI socket.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.65. nsslapd-ldapientrysearchbase (Search Base for LDAPI
Authentication Entries)
With autobind, it is possible to map system users to Directory Server user entries, based on the
system user's UID and GUID numbers. This requires setting Directory Server parameters for
which attribute to use for the UID number (nsslapd-ldapiuidnumbertype) and GUID number
(nsslapd-ldapigidnumbertype) and setting the search base to use to search for matching user
entries.
The nsslapd-ldapientrysearchbase gives the subtree to search for user entries to use for
autobind.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
38
Description
cn=config
on | off
off
DirectoryString
nsslapd-ldapiautobind: off
Description
cn=config
DN
The suffix created when the server instance was
created, such as dc=example,dc=com
DN
nsslapd-ldapientrysearchbase:
ou=people,dc=example,dc=om