Openldap Files - Red Hat LINUX 7.2 Reference Manual

250
• LDAPv3 Support — Now works with SASL, TLS, and SSL, among other improvements, in full
compliance with RFC 2251-2256; many of the changes since LDAPv2 are aimed to help make
LDAP a much more secure protocol.
• IPv6 Support — Now supports the next generation Internet Protocol.
• LDAP Over IPC — OpenLDAP can communicate within a particular system without having to
go over a network, making it more secure.
• Updated C API — Improves the way programmers can connect to and use the application.
• LDIFv1 Support — Full compliance with the LDAP Data Interchange Format (LDIF) version 1.
• Enhanced Stand-Alone LDAP Server — Includes an updated access control system, thread pool-
ing, better tools and much more.

15.6 OpenLDAP Files

OpenLDAP configuration files are installed into the /etc/openldap directory. If you do an ls on
/etc/openldap, you will see something like:
ldap.conf
ldapfilter.conf
15.6.1 Edit /etc/openldap/slapd.conf
The slapd.conf file, located in /etc/openldap, contains the configuration information needed
by your slapd LDAP server. You will need to edit this file to make it specific to your domain and
server.
The suffix line names the domain for which the LDAP server will provide information. The suffix line
should be changed from:
suffix
so that it reflects your domain name. For example:
suffix
or
suffix
The rootdn entry is the DN for a user who is unrestricted by the access control or administrative limit
parameters set for operations on the LDAP directory. The rootdn user can be thought of as the root
user for the LDAP directory. The rootdn line needs to be changed from:
rootdn
Chapter 15:Lightweight Directory Access Protocol (LDAP)
ldapsearchprefs.conf
ldaptemplates.conf
"dc=your-domain, dc=com"
"dc=acmewidgets, dc=com"
"dc=acmeuniversity, dc=edu"
"cn=root, dc=your-domain, dc=com"
schema
slapd.conf