
Chapter 19. Lightweight Directory Access Protocol (LDAP) 251
An entry can contain as many attrtype : attrvalue pairs as needed. A blank line indicates
that the entry is finished and that another entry is about to begin.
Caution
Your attrtype and attrvalue pairs must be defined in a schema before they can be used.
You cannot simply define them in an LDIF file and expect an LDAP server without corresponding data
in its schema files to be able to use this information.
Everything enclosed within
is variable and can be set by you when you add an LDAP entry, with
the exception of the
id . The id is a number normally set by the LDAP tools when you add an
entry, and you will probably never need to manually set one.
19.5. OpenLDAP 2.0 Enhancements
OpenLDAP 2.0 represents a major upgrade for the application, bringing with it:
• LDAPv3 Support — Now works with SASL, TLS, and SSL, among other improvements, in full
compliance with RFC 2251-2256; many of the changes since LDAPv2 are aimed to help make
LDAP a much more secure protocol.
• IPv6 Support — Now supports the next generation Internet Protocol.
• LDAP Over IPC — OpenLDAP can communicate within a particular system without having to go
over a network, making it more secure.
• Updated C API — Improves the way programmers can connect to and use the application.
• LDIFv1 Support — Full compliance with the LDAP Data Interchange Format (LDIF) version 1.
• Enhanced Stand-Alone LDAP Server — Includes an updated access control system, thread pooling,
better tools and much more.
19.6. OpenLDAP Files
OpenLDAP configuration files are installed into the /etc/openldap directory. If you do an ls on
/etc/openldap, you will see the following files and directory:
ldap.conf ldapsearchprefs.conf schema
ldapfilter.conf ldaptemplates.conf slapd.conf
19.6.1. slapd.conf
The /etc/openldap/slapd.conf file contains the configuration information needed by your
slapd LDAP server. You will need to edit this file to make it specific to your domain and server.
The suffix line names the domain for which the LDAP server will provide information. The suffix line
should be changed from:
suffix "dc=your-domain, dc=com"
so that it reflects your domain name. For example:
suffix "dc=acmewidgets, dc=com"
Commenti su questo manuale