Manually Administering Ldap Data - Novell LINUX ENTERPRISE SERVER 11 - SECURITY Manual

To access the new configuration backend easily you can use SASL external authentica-
tion. For example, the following ldapsearch command executed as root can be
used to print the complete slapd configuration to stdout:
ldapsearch -Y external -H ldapi:/// -b cn=config
4.7.1 Starting and Stopping the Servers
Once the LDAP server is fully configured and all desired entries have been made ac-
cording to the pattern described in Section 4.8, "Manually Administering LDAP Data"
(page 61), start the LDAP server as root by entering rcldap start. To stop the
server manually, enter the command rcldap stop. Request the status of the running
LDAP server with rcldap status.
The YaST runlevel editor, described in Section "Configuring System Services (Runlevel)
with YaST" (Chapter 8, Booting and Configuring a Linux System, ↑Administration
Guide), can be used to have the server started and stopped automatically on boot and
halt of the system. It is also possible to create the corresponding links to the start and
stop scripts with the insserv command from a command prompt as described in
Section "Init Scripts" (Chapter 8, Booting and Configuring a Linux System, ↑Adminis-
tration Guide).
4.8 Manually Administering LDAP
Data
OpenLDAP offers a series of tools for the administration of data in the LDAP directory.
The four most important tools for adding to, deleting from, searching through and
modifying the data stock are explained below.
4.8.1 Inserting Data into an LDAP Directory
Once the configuration of your LDAP server is correct and ready to go (it features ap-
propriate entries for suffix, directory, rootdn, rootpw and index), proceed
to entering records. OpenLDAP offers the ldapadd command for this task. If possible,
add the objects to the database in bundles for practical reasons. LDAP is able to process
LDAP—A Directory Service 61