Table of Contents
Advertisement
252
You should not modify any of the schema items defined in the schema files
installed by OpenLDAP.
You can extend the schema used by OpenLDAP to support additional attribute types and object
classes using the default schema files as a guide. To do this, create a local.schema file in the
/etc/openldap/schema directory. Reference this new schema within slapd.conf by adding
the following line below your default include schema lines:
include
Next, go about defining your new attribute types and object classes within the local.schema file.
Many organizations use existing attribute types and object classes from the schema files installed by
default and modify them for use in the local.schema file. This can help you to learn the schema
syntax while meeting the immediate needs of your organization.
Extending schemas to match certain specialized requirements is quite involved and beyond the scope
of this chapter. Visit http://www.openldap.org/doc/admin/schema.html for information on writing
new schema files.
15.7 OpenLDAP Daemons and Utilities
The OpenLDAP package includes two daemons: slapd and slurpd.
The slapd daemon is the stand-alone LDAP daemon, which you'll need to run to support LDAP.
The slurpd daemon controls the replication of LDAP directories over a network by sending changes
from the master LDAP directory to slave LDAP directories. You won't need to run slurpd unless
you have more than one LDAP server on your network. If you have two or more LDAP servers,
slurpd will keep the various LDAP directories in sync.
OpenLDAP also includes some utilities in /usr/bin for adding, modifying and deleting entries in
an LDAP directory:
•
ldapmodify — Modify entries in an LDAP database, accepting input via a file or standard
input.
•
ldapadd — Adds entries to your directory, accepting input via a file or standard input; ldapadd
is actually a hard link to ldapmodify -a.
•
ldapsearch — Searches for entries in the LDAP directory using a shell prompt.
Chapter 15:Lightweight Directory Access Protocol (LDAP)
/etc/openldap/schema/local.schema
CAUTION
Advertisement
Table of Contents
