OpenLDAP Software 2.4 Administrator's Guide OpenLDAP Software 2.4 Administrator's Guide Table of Contents Table of Contents.....................................................................................................................................1 Preface..................................................................................................................................................................1 Copyright.................................................................................................................................................1 Scope of this Document...........................................................................................................................1 Acknowledgments....................................................................................................................................2 Amendments............................................................................................................................................2 About this document................................................................................................................................3 1. Introduction to OpenLDAP Directory Services...........................................................................................3 1.1. What is a directory service?..............................................................................................................3 1.2. What is LDAP?.................................................................................................................................6 1.3. When should I use LDAP?...............................................................................................................6 1.4. When should I not use LDAP?.........................................................................................................6 1.5. How does LDAP work?....................................................................................................................7 1.6. What about X.500?...........................................................................................................................7 1.7. What is the difference between LDAPv2 and LDAPv3?.................................................................7 1.8. LDAP vs RDBMS............................................................................................................................9 1.9. What is slapd and what can it do?...................................................................................................11 2. A Quick-Start Guide.....................................................................................................................................15 3. The Big Picture - Configuration Choices....................................................................................................15 3.1. Local Directory Service..................................................................................................................15 3.2. Local Directory Service with Referrals..........................................................................................15 3.3. Replicated Directory Service..........................................................................................................16 3.4. Distributed Local Directory Service...............................................................................................17 4. Building and Installing OpenLDAP Software............................................................................................17 4.1. Obtaining and Extracting the Software...........................................................................................17 4.2. Prerequisite software.......................................................................................................................17 4.2.1.................................................................................................................................................18 4.2.2.................................................................................................................................................18 4.2.3.................................................................................................................................................18 4.2.4. Database Software.................................................................................................................19 4.2.5. Threads..................................................................................................................................19 4.2.6. TCP Wrappers.......................................................................................................................19 4.3. Running configure..........................................................................................................................20 4.4. Building the Software.....................................................................................................................20 4.5. Testing the Software.......................................................................................................................20 4.6. Installing the Software....................................................................................................................23 5. Configuring slapd..........................................................................................................................................23 5.1. Configuration Layout......................................................................................................................25 5.2. Configuration Directives.................................................................................................................26 5.2.1. cn=config...............................................................................................................................27 5.2.2. cn=module.............................................................................................................................28 5.2.3. cn=schema.............................................................................................................................29 i OpenLDAP Software 2.4 Administrator's Guide Table of Contents 5. Configuring slapd 5.2.4. Backend-specific Directives..................................................................................................30 5.2.5. Database-specific Directives.................................................................................................34 5.2.6. BDB and HDB Database Directives.....................................................................................38 5.3. Configuration Example...................................................................................................................40 5.4. Converting old style slapd.conf(5) file to cn=config format..........................................................43 6. The slapd Configuration File.......................................................................................................................43 6.1. Configuration File Format..............................................................................................................44 6.2. Configuration File Directives.........................................................................................................44 6.2.1. Global Directives...................................................................................................................46 6.2.2. General Backend Directives..................................................................................................47 6.2.3. General Database Directives.................................................................................................51 6.2.4. BDB and HDB Database Directives.....................................................................................52 6.3. Configuration File Example............................................................................................................55 7. Running slapd................................................................................................................................................55 7.1. Command-Line Options.................................................................................................................57 7.2. Starting slapd..................................................................................................................................57 7.3. Stopping slapd.................................................................................................................................59 8. Access Control...............................................................................................................................................59 8.1. Introduction.....................................................................................................................................59 8.2. Access Control via Static Configuration.........................................................................................60 8.2.1. What to control access to.......................................................................................................61 8.2.2. Who to grant access to...........................................................................................................62 8.2.3. The access to grant................................................................................................................62 8.2.4. Access Control