Re: how to edit cn=config

[Tony Earnshaw <tonni@hetnet.nl>]

Scott Classen skrev, on 07-11-2007 19:00:

> I am using openldap 2.4.6 (recently migrated directly from 2.3.37). I am 
> using this for a very small community of users. I will have maybe 50-60 
> users.

So am I on my FC6 test machine. On my "work" site I'm still using 
up-to-date 2.3.

> I have recently converted from using slapd.conf to using the slapd.d 
> backend ldap database for configuring my openldap server. I am, however, 
> unclear on the proper method to make changes to my configuration. When 
> using slapd.conf it was fairly straight forward: edit the file with vi 
> and restart slapd.

If you're using a client machine running X, consider installing gq 
(1.0.0, all later are useless) on the ldap host and sshing with '-Y -C' 
to the host from the client (if they're both on the same machine this 
latter is obviously not necessary) and running gq.

For 2.4.6 this is a true revelation compared to 2.3.x, you can configure 
cn=config entries through gq's GUI and browsing cn=config is a 
revelation. Editing is a cinch.

I've tried every other ldap GUI client there is available and gq is the 
only one worth using, for multiple reasons.

--Tonni

--

> When using slapd.d should I directly edit the various LDIF files within 
> the slapd.d/cn=config folder? This doesn't really seem like the proper 
> way to do things so I haven't done this.
>
> I'm fairly certain that I should make ldapmodify style LDIF files, but 
> that can be a bit cumbersome for quick configuration changes. So I've 
> started experimenting with various ldap GUI interfaces (phpldapadmin and 
> JXplorer), thinking that they might display the entire cn=config databse 
> in a human-readable form, but neither returns information about 
> cn=config. Indeed a simple ldapsearch doesn't return any information 
> either.
>
> ldapsearch -x -D "uid=bigcheese,dc=my,dc=domain" -W "cn=config"
>
> I know that my slapd.d backend is working because I've renamed the 
> slapd.conf file so it is no longer recognized by slapd.
>
> Any help or advice would be greatly appreciated.
>
> Scott
>
> ps I've read both the version 2.3 and 2.4 Administrator's Guide several 
> times.

--
Tony Earnshaw
Email: tonni at hetnet dot nl