inserting the first object in your ldap directory
inserting the first object in your ldap directory
The first thing we have to add to our directory is the top level node. We create a "ldif" file that contains all information of the top level node. ldif stands for Lightweight Directory Interchange Format. The top level node will be of the type "organizationalUnit" and "dcObject". dc stands for "domain component". The ldif file looks like this:
topnode.ldif:
# top node dn: dc=redflo,dc=de dc: redflo objectClass: dcObject objectClass: organizationalUnit ou: redflo.de domain
There are 2 different utilities to add data to your ldap directory: ldapadd and slapadd. ldapadd uses the ldap protocol to modifiy the directory, while slapadd directly modifies the ldap database. Therefore ldapadd can be used remote and all ldap access control is honoured while slapadd only works locally. Since we did not define authentication in ldap we use slapadd to add the first data:
slapadd -v -l topnode.ldif
restart your ldap server (needed if you use slapadd) with /etc/init.d/ldap restart (or similar on other distros) and check if all is there:
ldapsearch -x -b "dc=redflo,dc=de" "(objectClass=*)" # extended LDIF # # LDAPv3 # base <dc=redflo,dc=de> with scope sub # filter: (objectClass=*) # requesting: ALL # # redflo.de dn: dc=redflo,dc=de dc: redflo objectClass: dcObject objectClass: organizationalUnit ou: redflo.de domain # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1
Created by redflo. Last Modification: Monday 26 of December, 2005 11:54:37 UTC by admin.
Category: UNIX
-
wiki page:
- How to use Microsoft Active Directory with postfix
- inserting the first object in your ldap directory
- Installing the mailsystem packages
- Integrating LDAP in your unix system
- Introduction
- Kerberizing kadmin
- Kerberizing sshd
- Kerberos setup
- LDAP
- LDAP schema files
- logging
- Motivation
- nss_ldap security
- OpenLDAP config files
- Other documentation
- performing a first ldap query
- PerfParse
- populating the directory
- Postfix and cyrus imapd and kerberos and LDAP
- Setting up a kerberos client machine
- Setting up your Kerberos servers
- SIngle sign on (SSO) first try
- SSO and Central Administration with Kerberos and LDAP
- Start the kerberos servers
- The configuration files
- The name service switch
- Tweak pam
- Understanding Kerberos
- Understanding Kerberos pt. 2
- Webserver Stress Test Tools
- What is LDAP?
- What the heck is pam?
- What we need
- What we want
- Audience
- Authenticating
- Bash script with timeout function
- Check Processes
- Check your installation
- Choosing a Realm
- configure your mail client
- Configuring and understanding pam
- configuring cyrus imapd
- configuring postfix
- Connect to kadmind and have a look into the database
- Creating the kerberos database
- Edit the Kerberos Admin Server ACL config
- Edit the kerberos client config file
- Edit the kerberos server config file
- Excursus to principals
- exploring schemas
- Fight Image Spam
- Fight Spam best practice
- adding a group
- Adding principals and authenticating
- Another principal
- nss with Solaris 10
- SerialConsole






