[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries



-----Original Message-----
From: openldap-technical-bounces@OpenLDAP.org [mailto:openldap-technical-bounces@OpenLDAP.org] On Behalf Of btb@bitrate.net
Sent: Wednesday, March 21, 2012 10:33 PM
To: openldap-technical@openldap.org
Subject: Re: Concerns with OLC (cn=config) for editing schema, ACLs, and deleting entries

not frowned upon at all, but i'd amend that process slightly:

1. stop slapd
2. slapcat -b 'cn=config' -l config.ldif 3. mv slapd.d slapd.d.bak 4. mkdir slapd.d 5. edit ldif as desired 6. slapadd -n 0 -F slapd.d/ -l config.ldif 7. slaptest -F slapd.d/ 8. adjust ownership/permissions as appropriate for slapd.d/ 9. start slapd

----
You can avoid those ownership/permissions problems if you just do "sudo -u <ldap user> slapadd whatever" 

- Aaron