Red Hat DIRECTORY SERVER 8.1 Command Reference Manual page 53

2.3.1.66. nsslapd-ldapifilepath (File Location for LDAPI Socket)
LDAPI connects a user to an LDAP server over a UNIX socket rather than TCP. In order to configure
LDAPI, the server must be configured to communicate over a UNIX socket. The UNIX socket to use is
set in the nsslapd-ldapifilepath attribute.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.67. nsslapd-ldapigidnumbertype (Attribute Mapping for System
GUID Number)
Autobind can be used to authenticate system users to the server automatically and connect to the
server using a UNIX socket. To map the system user to a Directory Server user for authentication,
the system user's UID and GUID numbers should be mapped to be a Directory Server attribute. The
nsslapd-ldapigidnumbertype attribute points to the Directory Server attribute to map system
GUIDs to user entries.
Users can only connect to the server with autobind if LDAPI is enabled (nsslapd-ldapilisten
and nsslapd-ldapifilepath), autobind is enabled (nsslapd-ldapiautobind), and autobind
mapping is enabled for regular users (nsslapd-ldapimaptoentries).
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
2.3.1.68. nsslapd-ldapilisten (Enable LDAPI)
The nsslapd-ldapilisten enables LDAPI connections to the Directory Server. LDAPI allows
users to connect to the Directory Server over a UNIX socket rather than a standard TCP port. Along
with enabling LDAPI by setting nsslapd-ldapilisten to on, there must also be a UNIX socket set
for LDAPI in the nsslapd-ldapifilepath attribute.
Parameter
Entry DN
Valid Values
Default Value
Syntax
Example
Description
cn=config
Any directory path
/var/run/dirsrv/slapd-example.socket
Case-exact string
nsslapd-ldapifilepath: /var/run/slapd-
example.socket
Description
cn=config
Any Directory Server attribute
gidNumber
DirectoryString
nsslapd-ldapigidnumbertype: gidNumber
Description
cn=config
on | off
off
DirectoryString
nsslapd-ldapilisten: off
cn=config
39