252 Chapter 19. Lightweight Directory Access Protocol (LDAP)
or
suffix "dc=acmeuniversity, dc=edu"
The rootdn entry is the DN for a user who is unrestricted by the access control or administrative limit
parameters set for operations on the LDAP directory. The rootdn user can be thought of as the root
user for the LDAP directory. The rootdn line needs to be changed from:
rootdn "cn=root, dc=your-domain, dc=com"
to something like:
rootdn "cn=root, dc=redhat, dc=com"
or
rootdn "cn=ldapmanager, dc=my_organization, dc=org"
Change the rootpw line from:
rootpw secret
to something like
rootpw {crypt}s4L9sOIJo4kBM
In the above example, you are using an encrypted root password, which is a much better idea than
leaving a plain text root password in the slapd.conf file. To make this crypt string, you can use Perl:
perl -e "print crypt(’passwd’,’a_salt_string’);"
In the previous Perl line, salt_string is a two character salt, and passwd is the plain text version
of the password.
You could also copy a passwd entry out of /etc/passwd, but this will not work if the passwd entry
is an MD5 password (the default in Red Hat Linux 7.3).
19.6.2. The schema Directory
New to OpenLDAP version 2, the schema directory holds the various LDAP definitions, previously
located in the slapd.at.conf and slapd.oc.conf files. All attribute syntax definitions and object-
class definitions are now located in the different schema files. The various schema files are referenced
in /etc/openldap/slapd.conf using include lines, as shown in this example:
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/rfc822-MailMember.schema
include /etc/openldap/schema/autofs.schema
include /etc/openldap/schema/kerberosobject.schema
Commenti su questo manuale