Openldap Software 2.4 Administrator's Guide Openldap Software 2.4 Administrator's Guide Table of Contents Preface
Total Page:16
File Type:pdf, Size:1020Kb
OpenLDAP Software 2.4 Administrator's Guide OpenLDAP Software 2.4 Administrator's Guide Table of Contents Preface.....................................................................................................................................................1 Copyright....................................................................................................................................1 Scope of this Document..............................................................................................................1 Acknowledgments......................................................................................................................1 Amendments...............................................................................................................................2 About this document...................................................................................................................2 1. Introduction to OpenLDAP Directory Services..............................................................................3 1.1. What is a directory service?.................................................................................................3 1.2. What is LDAP?....................................................................................................................4 1.3. When should I use LDAP?..................................................................................................6 1.4. When should I not use LDAP?............................................................................................6 1.5. How does LDAP work?.......................................................................................................6 1.6. What about X.500?..............................................................................................................7 1.7. What is the difference between LDAPv2 and LDAPv3?....................................................7 1.8. LDAP vs RDBMS...............................................................................................................7 1.9. What is slapd and what can it do?........................................................................................9 2. A Quick-Start Guide........................................................................................................................11 3. The Big Picture - Configuration Choices.......................................................................................15 3.1. Local Directory Service.....................................................................................................15 3.2. Local Directory Service with Referrals.............................................................................15 3.3. Replicated Directory Service.............................................................................................15 3.4. Distributed Local Directory Service..................................................................................16 4. Building and Installing OpenLDAP Software...............................................................................17 4.1. Obtaining and Extracting the Software..............................................................................17 4.2. Prerequisite software..........................................................................................................17 4.2.1. Transport Layer Security..........................................................................................17 4.2.2. Simple Authentication and Security Layer..............................................................18 4.2.3. Kerberos Authentication Service.............................................................................18 4.2.4. Database Software....................................................................................................18 4.2.5. Threads.....................................................................................................................19 4.2.6. TCP Wrappers..........................................................................................................19 4.3. Running configure.............................................................................................................19 4.4. Building the Software........................................................................................................20 4.5. Testing the Software..........................................................................................................20 4.6. Installing the Software.......................................................................................................20 5. Configuring slapd............................................................................................................................22 5.1. Configuration Layout.........................................................................................................22 5.2. Configuration Directives....................................................................................................24 5.2.1. cn=config..................................................................................................................24 5.2.2. cn=module................................................................................................................26 5.2.3. cn=schema................................................................................................................27 5.2.4. Backend-specific Directives.....................................................................................27 5.2.5. Database-specific Directives....................................................................................28 i OpenLDAP Software 2.4 Administrator's Guide Table of Contents 5. Configuring slapd 5.2.6. BDB and HDB Database Directives........................................................................33 5.3. Configuration Example......................................................................................................37 5.4. Converting old style slapd.conf(5) file to cn=config format.............................................39 6. The slapd Configuration File..........................................................................................................40 6.1. Configuration File Format.................................................................................................40 6.2. Configuration File Directives............................................................................................41 6.2.1. Global Directives......................................................................................................41 6.2.2. General Backend Directives.....................................................................................44 6.2.3. General Database Directives....................................................................................44 6.2.4. BDB and HDB Database Directives........................................................................48 6.3. Configuration File Example...............................................................................................49 7. Running slapd..................................................................................................................................51 7.1. Command-Line Options....................................................................................................51 7.2. Starting slapd.....................................................................................................................52 7.3. Stopping slapd....................................................................................................................53 8. Access Control..................................................................................................................................54 8.1. Introduction........................................................................................................................54 8.2. Access Control via Static Configuration...........................................................................54 8.2.1. What to control access to.........................................................................................55 8.2.2. Who to grant access to.............................................................................................56 8.2.3. The access to grant...................................................................................................57 8.2.4. Access Control Evaluation.......................................................................................57 8.2.5. Access Control Examples.........................................................................................58 8.3. Access Control via Dynamic Configuration......................................................................59 8.3.1. What to control access to.........................................................................................60 8.3.2. Who to grant access to.............................................................................................61 8.3.3. The access to grant...................................................................................................62 8.3.4. Access Control Evaluation.......................................................................................62 8.3.5. Access Control Examples.........................................................................................63 8.3.6. Access Control Ordering..........................................................................................64