Modules For Adding Extra Functionality To Ldap - Red Hat LINUX 7.2 Reference Manual

Section 15.8:Modules for Adding Extra Functionality to LDAP
• ldapdelete — Deletes entries from an LDAP directory, accepting input via a file or a shell
prompt.
With the exception of ldapsearch, each of these utilities is much more easily used by referencing
a file with the changes to be made rather than typing the commands one after the other. Each of their
respective man pages covers the syntax of these files.
To import or export blocks of information with a slapd directory or perform similar administrative
tasks, different utilities, located in /usr/sbin, are required:
• slapadd — Adds entries from an LDIF file to an LDAP directory. For example, execute
/usr/sbin/slapadd -l ldif where ldif is the name of the LDIF file containing the
new entries.
• slapcat — Pulls entries out of an LDAP directory and saves them in an LDIF file. For example,
execute /usr/sbin/slapcat -l ldif where ldif is the name of the target LDIF file to
contain the entries from the LDAP directory.
• slapindex — Reindexes the slapd database based on the actual current database content.
Execute /usr/sbin/slapindex to begin reindexing.
• slappasswd — Generates a user password value for use with ldapmodify or the rootpw
value in /etc/openldap/slapd.conf. Execute /usr/sbin/slappasswd to create the
password.
Be sure to stop slapd before using slapadd, slapcat or slapin-
dex. Otherwise, you are risking the consistency of your LDAP database.
See the man pages for each of these utilities for more information about how to use them.

15.8 Modules for Adding Extra Functionality to LDAP

Red Hat Linux includes several packages that add functionality to LDAP.
The nss_ldap module is an LDAP module for the Solaris Nameservice Switch (NSS). NSS is a set
of C library extensions necessary for accessing LDAP directory information, instead of or in addition
to the Network Information Service (NIS) name service and/or flat files. The nss_ldap module
is needed to use LDAP as a native name service.
The pam_ldap module is needed to integrate LDAP authentication into the Pluggable Authentica-
tion Modules (PAM) API. If you use pam_ldap, users can authenticate and change their password
WARNING
253