Tagged openldap.xml

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@4359 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Manuel Canales Esparcia 2005-05-18 20:19:40 +00:00
parent be2a00be05
commit 814e53c3f3

View File

@ -4,224 +4,263 @@
<!ENTITY % general-entities SYSTEM "../../general.ent"> <!ENTITY % general-entities SYSTEM "../../general.ent">
%general-entities; %general-entities;
<!ENTITY openldap-download-http "http://gd.tuwien.ac.at/infosys/network/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz"> <!ENTITY openldap-download-http "http://gd.tuwien.ac.at/infosys/network/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
<!ENTITY openldap-download-ftp "ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz"> <!ENTITY openldap-download-ftp "ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-&openldap-version;.tgz">
<!ENTITY openldap-md5sum "383691dbabe05ee2b72a3e9db2042a82"> <!ENTITY openldap-md5sum "383691dbabe05ee2b72a3e9db2042a82">
<!ENTITY openldap-size "2.6 MB"> <!ENTITY openldap-size "2.6 MB">
<!ENTITY openldap-buildsize "76.7 MB"> <!ENTITY openldap-buildsize "76.7 MB">
<!ENTITY openldap-time "6.58 SBU"> <!ENTITY openldap-time "6.58 SBU">
]> ]>
<sect1 id="openldap" xreflabel="OpenLDAP-&openldap-version;"> <sect1 id="openldap" xreflabel="OpenLDAP-&openldap-version;">
<sect1info> <?dbhtml filename="openldap.html"?>
<othername>$LastChangedBy$</othername>
<date>$Date$</date>
</sect1info>
<?dbhtml filename="openldap.html"?>
<title><application>Open<acronym>LDAP</acronym></application>-&openldap-version;
</title>
<indexterm zone="openldap">
<primary sortas="a-OpenLDAP">OpenLDAP</primary></indexterm>
<sect2> <sect1info>
<title>Introduction to <othername>$LastChangedBy$</othername>
<application>Open<acronym>LDAP</acronym></application></title> <date>$Date$</date>
</sect1info>
<para>The <application>Open<acronym>LDAP</acronym></application> package <title>OpenLDAP-&openldap-version;</title>
provides an open source implementation of the Lightweight Directory
Access Protocol.</para>
<sect3><title>Package information</title> <indexterm zone="openldap">
<itemizedlist spacing='compact'> <primary sortas="a-OpenLDAP">OpenLDAP</primary>
<listitem><para>Download (HTTP): </indexterm>
<ulink url="&openldap-download-http;"/></para></listitem>
<listitem><para>Download (FTP):
<ulink url="&openldap-download-ftp;"/></para></listitem>
<listitem><para>Download MD5 sum: &openldap-md5sum;</para></listitem>
<listitem><para>Download size: &openldap-size;</para></listitem>
<listitem><para>Estimated disk space required:
&openldap-buildsize;</para></listitem>
<listitem><para>Estimated build time:
&openldap-time;</para></listitem></itemizedlist>
</sect3>
<sect3><title><application>Open<acronym>LDAP</acronym></application> <sect2 role="package">
dependencies</title> <title>Introduction to OpenLDAP</title>
<sect4><title>Required</title>
<para><xref linkend="db"/></para>
</sect4>
<sect4><title>Recommended</title> <para>The <application>OpenLDAP</application> package provides an open
<para><xref linkend="cyrus-sasl"/> and <xref linkend="openssl"/></para> source implementation of the Lightweight Directory Access Protocol.</para>
</sect4>
<sect4><title>Optional</title> <bridgehead renderas="sect3">Package Information</bridgehead>
<para><xref linkend="tcpwrappers"/>, <itemizedlist spacing="compact">
<xref linkend="gdbm"/>, <listitem>
<ulink url="http://www.gnu.org/software/pth/">GNU Pth</ulink>, and <para>Download (HTTP): <ulink url="&openldap-download-http;"/></para>
<xref linkend="heimdal"/> or </listitem>
<xref linkend="mitkrb"/></para> <listitem>
</sect4> <para>Download (FTP): <ulink url="&openldap-download-ftp;"/></para>
</listitem>
<listitem>
<para>Download MD5 sum: &openldap-md5sum;</para>
</listitem>
<listitem>
<para>Download size: &openldap-size;</para>
</listitem>
<listitem>
<para>Estimated disk space required: &openldap-buildsize;</para>
</listitem>
<listitem>
<para>Estimated build time: &openldap-time;</para>
</listitem>
</itemizedlist>
</sect3> <bridgehead renderas="sect3">OpenLDAP Dependencies</bridgehead>
</sect2> <bridgehead renderas="sect4">Required</bridgehead>
<para><xref linkend="db"/></para>
<sect2> <bridgehead renderas="sect4">Recommended</bridgehead>
<title>Installation of <para><xref linkend="cyrus-sasl"/> and <xref linkend="openssl"/></para>
<application>Open<acronym>LDAP</acronym></application></title>
<para>Install <application>Open<acronym>LDAP</acronym></application> by <bridgehead renderas="sect4">Optional</bridgehead>
running the following commands:</para> <para><xref linkend="tcpwrappers"/>,
<xref linkend="gdbm"/>,
<ulink url="http://www.gnu.org/software/pth/">GNU Pth</ulink>, and
<xref linkend="heimdal"/> or
<xref linkend="mitkrb"/></para>
<screen><userinput><command>./configure --prefix=/usr --libexecdir=/usr/sbin \ </sect2>
<sect2 role="installation">
<title>Installation of OpenLDAP</title>
<para>Install <application>OpenLDAP</application> by
running the following commands:</para>
<screen><userinput>./configure --prefix=/usr --libexecdir=/usr/sbin \
--sysconfdir=/etc --localstatedir=/srv/ldap \ --sysconfdir=/etc --localstatedir=/srv/ldap \
--enable-ldbm --disable-debug &amp;&amp; --enable-ldbm --disable-debug &amp;&amp;
make depend &amp;&amp; make depend &amp;&amp;
make &amp;&amp; make &amp;&amp;
make test</command></userinput></screen> make test</userinput></screen>
<para>Now, as the root user:</para> <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
<screen><userinput role='root'><command>make install &amp;&amp; <screen role="root"><userinput>make install &amp;&amp;
chmod 755 /usr/lib/libl*-2.2.so.7.0.17</command></userinput></screen> chmod 755 /usr/lib/libl*-2.2.so.7.0.17</userinput></screen>
</sect2> </sect2>
<sect2> <sect2 role="commands">
<title>Command explanations</title> <title>Command Explanations</title>
<para><parameter>--libexecdir=/usr/sbin</parameter>: Installs the server <para><parameter>--libexecdir=/usr/sbin</parameter>: Installs the server
executables in <filename class="directory">/usr/sbin</filename> instead of executables in <filename class="directory">/usr/sbin</filename> instead of
<filename class="directory">/usr/libexec</filename>.</para> <filename class="directory">/usr/libexec</filename>.</para>
<para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration file <para><parameter>--sysconfdir=/etc</parameter>: Sets the configuration file
directory to avoid the default of directory to avoid the default of
<filename class="directory">/usr/etc</filename>.</para> <filename class="directory">/usr/etc</filename>.</para>
<para><parameter>--localstatedir=/srv/ldap</parameter>: Sets the directory <para><parameter>--localstatedir=/srv/ldap</parameter>: Sets the directory
to use for the <acronym>LDAP</acronym> directory database, replication logs and to use for the LDAP directory database, replication logs and
run-time variable data.</para> run-time variable data.</para>
<para><parameter>--enable-ldbm</parameter>: Build <command>slapd</command> <para><parameter>--enable-ldbm</parameter>: Build <command>slapd</command>
with the primary database back end using either with the primary database back end using either
<application>Berkeley DB</application> or <application>Berkeley DB</application> or
<application><acronym>GNU</acronym> Database Manager</application>.</para> <application>GNU Database Manager</application>.</para>
<para><parameter>--disable-debug</parameter>: Disable debugging code.</para> <para><parameter>--disable-debug</parameter>: Disable debugging code.</para>
<para><command>make test</command>: Validates the correct build of the <para><command>make test</command>: Validates the correct build of the
package. If you've enabled <application>tcp_wrappers</application>, ensure you package. If you've enabled <application>tcp_wrappers</application>, ensure you
add 127.0.0.1 to the <parameter>slapd</parameter> line in the add 127.0.0.1 to the <parameter>slapd</parameter> line in the
<filename>/etc/hosts.allow</filename> file if you have a <filename>/etc/hosts.allow</filename> file if you have a
restrictive <filename>/etc/hosts.deny</filename> file. If you logged the restrictive <filename>/etc/hosts.deny</filename> file. If you logged the
output of the <command>make test</command>, an easy test to see if all the output of the <command>make test</command>, an easy test to see if all the
tests succeeded is to issue <command>grep ">>>>> Test succeeded" tests succeeded is to issue <command>grep ">>>>> Test succeeded"
<replaceable>[logfilename]</replaceable> | wc -l</command>. You should have <replaceable>[logfilename]</replaceable> | wc -l</command>. You should have
<computeroutput>39</computeroutput> returned.</para> <computeroutput>39</computeroutput> returned.</para>
<para><command>chmod 755 /usr/lib/libl*-2.2.so.7.0.17</command>: This command <para><command>chmod 755 /usr/lib/libl*-2.2.so.7.0.17</command>: This command
adds the executable bit to the shared libraries.</para> adds the executable bit to the shared libraries.</para>
</sect2> </sect2>
<sect2> <sect2 role="configuration">
<title>Configuring <title>Configuring OpenLDAP</title>
<application>Open<acronym>LDAP</acronym></application></title>
<sect3 id="openldap-config"><title>Config files</title> <sect3 id="openldap-config">
<para><filename>/etc/openldap/*</filename></para> <title>Config Files</title>
<indexterm zone="openldap openldap-config">
<primary sortas="e-etc-openldap">/etc/openldap/*</primary></indexterm>
</sect3>
<sect3><title>Configuration Information</title> <para><filename>/etc/openldap/*</filename></para>
<para>Configuring the <command>slapd</command> and <command>slurpd</command>
servers can be complex. Securing the <acronym>LDAP</acronym> directory,
especially if you are storing non-public data such as password databases,
can also be a challenging task. You'll need to modify the
<filename>/etc/openldap/slapd.conf</filename> and
<filename>/etc/openldap/ldap.conf</filename> files to set up
<application>Open<acronym>LDAP</acronym></application> for your particular
needs.</para>
<indexterm zone="openldap openldap-config">
<primary sortas="e-etc-openldap-slapd.conf">/etc/openldap/slapd.conf</primary>
</indexterm>
<indexterm zone="openldap openldap-config">
<primary sortas="e-etc-openldap-ldap.conf">/etc/openldap/ldap.conf</primary>
</indexterm>
<para>Resources to assist you with topics such as choosing a directory <indexterm zone="openldap openldap-config">
configuration, backend and database definitions, access control settings, <primary sortas="e-etc-openldap">/etc/openldap/*</primary>
running as a user other than root and setting a <command>chroot</command> </indexterm>
environment include:
</para>
<itemizedlist spacing='compact'> </sect3>
<listitem><para>The <command>slapd</command> man page</para></listitem>
<listitem><para>The <filename>slapd.conf</filename> man page</para></listitem>
<listitem><para>The <ulink
url="http://www.openldap.org/doc/admin22/">OpenLDAP 2.2 Administrator's
Guide</ulink></para></listitem>
<listitem><para>Documents located at
<ulink url="http://www.openldap.org/pub/"/></para></listitem>
</itemizedlist></sect3>
<sect3><title>Utilizing <application>GDBM</application></title> <sect3>
<para>To utilize <application>GDBM</application> as the database <title>Configuration Information</title>
backend, the <quote>database</quote> entry in
<filename>/etc/openldap/slapd.conf</filename> must be changed from
<quote>bdb</quote> to <quote>ldbm</quote>. You can use both by creating an
additional database section in <filename>/etc/openldap/slapd.conf</filename>.
</para></sect3>
<sect3><title><application>Mozilla</application> Address Directory</title> <para>Configuring the <command>slapd</command> and
<para>By default, <acronym>LDAP</acronym>v2 support is disabled in the <command>slurpd</command> servers can be complex. Securing the LDAP
<filename>slapd.conf</filename> file. Once the database is properly directory, especially if you are storing non-public data such as
set up and <application>Mozilla</application> is configured to use the password databases, can also be a challenging task. You'll need to
directory, you must add <option>allow bind_v2</option> to the modify the <filename>/etc/openldap/slapd.conf</filename> and
<filename>slapd.conf</filename> file.</para></sect3> <filename>/etc/openldap/ldap.conf</filename> files to set up
<application>OpenLDAP</application> for your particular needs.</para>
<sect3 id="openldap-init"><title>Init Script</title> <indexterm zone="openldap openldap-config">
<para>To automate the startup of the <acronym>LDAP</acronym> server at system <primary
bootup, install the <filename>/etc/rc.d/init.d/openldap</filename> init script sortas="e-etc-openldap-slapd.conf">/etc/openldap/slapd.conf</primary>
included in the <xref linkend="intro-important-bootscripts"/> package using the </indexterm>
following command:</para>
<indexterm zone="openldap openldap-init">
<primary sortas="f-openldap">openldap</primary></indexterm>
<screen><userinput><command>make install-openldap1</command></userinput></screen> <indexterm zone="openldap openldap-config">
<primary
sortas="e-etc-openldap-ldap.conf">/etc/openldap/ldap.conf</primary>
</indexterm>
<para><emphasis>Note:</emphasis> The init script you just installed only starts <para>Resources to assist you with topics such as choosing a directory
the <command>slapd</command> daemon. If you wish to also start the configuration, backend and database definitions, access control settings,
<command>slurpd</command> daemon at system startup, install a modified version running as a user other than <systemitem class="username">root</systemitem>
of the script using this command:</para> and setting a <command>chroot</command> environment include:</para>
<screen><userinput><command>make install-openldap2</command></userinput></screen> <itemizedlist spacing='compact'>
<listitem>
<para>The <command>slapd</command> man page</para>
</listitem>
<listitem>
<para>The <filename>slapd.conf</filename> man page</para>
</listitem>
<listitem>
<para>The <ulink
url="http://www.openldap.org/doc/admin22/">OpenLDAP 2.2 Administrator's
Guide</ulink></para>
</listitem>
<listitem>
<para>Documents located at
<ulink url="http://www.openldap.org/pub/"/></para>
</listitem>
</itemizedlist>
<note><para>The init script starts the daemons without any parameters. You'll </sect3>
need to modify the script to include the parameters needed for your specific
configuration. See the <command>slapd</command> and <command>slurpd</command>
man pages for parameter information.</para></note>
</sect3>
<sect3><title>Testing the Configuration</title> <sect3>
<para>Start the <acronym>LDAP</acronym> server using the init script:</para> <title>Utilizing GDBM</title>
<screen><userinput><command>/etc/rc.d/init.d/openldap start</command></userinput></screen> <para>To utilize <application>GDBM</application> as the database
backend, the <quote>database</quote> entry in
<filename>/etc/openldap/slapd.conf</filename> must be changed from
<quote>bdb</quote> to <quote>ldbm</quote>. You can use both by
creating an additional database section in
<filename>/etc/openldap/slapd.conf</filename>.</para>
<para>Verify access to the <acronym>LDAP</acronym> server with the following </sect3>
command:</para>
<screen><userinput><command>ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts</command></userinput></screen> <sect3>
<title>Mozilla Address Directory</title>
<para>By default, LDAPv2 support is disabled in the
<filename>slapd.conf</filename> file. Once the database is properly
set up and <application>Mozilla</application> is configured to use the
directory, you must add <option>allow bind_v2</option> to the
<filename>slapd.conf</filename> file.</para>
</sect3>
<sect3 id="openldap-init">
<title>Boot Script</title>
<para>To automate the startup of the LDAP server at system bootup,
install the <filename>/etc/rc.d/init.d/openldap</filename> init script
included in the <xref linkend="intro-important-bootscripts"/> package
using the following command:</para>
<indexterm zone="openldap openldap-init">
<primary sortas="f-openldap">openldap</primary>
</indexterm>
<screen role="root"><userinput>make install-openldap1</userinput></screen>
<para><emphasis>Note:</emphasis> The init script you just installed only
starts the <command>slapd</command> daemon. If you wish to also start the
<command>slurpd</command> daemon at system startup, install a modified
version of the script using this command:</para>
<screen role="root"><userinput>make install-openldap2</userinput></screen>
<note>
<para>The init script starts the daemons without any parameters.
You'll need to modify the script to include the parameters needed for
your specific configuration. See the <command>slapd</command> and
<command>slurpd</command> man pages for parameter information.</para>
</note>
</sect3>
<sect3>
<title>Testing the Configuration</title>
<para>Start the LDAP server using the init script:</para>
<screen role="root"><userinput>/etc/rc.d/init.d/openldap start</userinput></screen>
<para>Verify access to the LDAP server with the following
command:</para>
<screen><userinput>ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts</userinput></screen>
<para>The expected result is:</para>
<para>The expected result is:</para>
<screen><computeroutput># extended LDIF <screen><computeroutput># extended LDIF
# #
# LDAPv3 # LDAPv3
# base &lt;&gt; with scope base # base &lt;&gt; with scope base
# filter: (objectclass=*) # filter: (objectclass=*)
# requesting: namingContexts # requesting: namingContexts
# #
# #
@ -235,208 +274,244 @@ result: 0 Success
# numResponses: 2 # numResponses: 2
# numEntries: 1</computeroutput></screen> # numEntries: 1</computeroutput></screen>
</sect3> </sect3>
</sect2>
<sect2> </sect2>
<title>Contents</title>
<segmentedlist> <sect2 role="content">
<segtitle>Installed Programs</segtitle> <title>Contents</title>
<segtitle>Installed Libraries</segtitle>
<segtitle>Installed Directories</segtitle>
<seglistitem> <segmentedlist>
<seg>ldapadd, ldapcompare, ldapdelete, ldapmodify, ldapmodrdn, ldappasswd, <segtitle>Installed Programs</segtitle>
ldapsearch, ldapwhoami, slapadd, slapcat, slapd, slapdn, slapindex, <segtitle>Installed Libraries</segtitle>
slappasswd, slaptest and slurpd</seg> <segtitle>Installed Directories</segtitle>
<seg>liblber.[so,a], libldap.[so,a] and libldap_r.[so,a]</seg>
<seg>/etc/openldap, /srv/ldap and /usr/share/openldap</seg>
</seglistitem>
</segmentedlist>
<variablelist> <seglistitem>
<bridgehead renderas="sect3">Short Descriptions</bridgehead> <seg>ldapadd, ldapcompare, ldapdelete, ldapmodify, ldapmodrdn,
<?dbfo list-presentation="list"?> ldappasswd, ldapsearch, ldapwhoami, slapadd, slapcat, slapd, slapdn,
slapindex, slappasswd, slaptest, and slurpd</seg>
<seg>liblber.[so,a], libldap.[so,a], and libldap_r.[so,a]</seg>
<seg>/etc/openldap, /srv/ldap, and /usr/share/openldap</seg>
</seglistitem>
</segmentedlist>
<varlistentry id="ldapadd"> <variablelist>
<term><command>ldapadd</command></term> <bridgehead renderas="sect3">Short Descriptions</bridgehead>
<listitem><para>opens a connection to an <acronym>LDAP</acronym> server, <?dbfo list-presentation="list"?>
binds and adds entries.</para> <?dbhtml list-presentation="table"?>
<indexterm zone="openldap ldapadd">
<primary sortas="b-ldapadd">ldapadd</primary>
</indexterm></listitem>
</varlistentry>
<varlistentry id="ldapcompare"> <varlistentry id="ldapadd">
<term><command>ldapcompare</command></term> <term><command>ldapadd</command></term>
<listitem><para>opens a connection to an <acronym>LDAP</acronym> server, <listitem>
binds and performs a compare using specified parameters.</para> <para>opens a connection to an LDAP server, binds and adds
<indexterm zone="openldap ldapcompare"> entries.</para>
<primary sortas="b-ldapcompare">ldapcompare</primary> <indexterm zone="openldap ldapadd">
</indexterm></listitem> <primary sortas="b-ldapadd">ldapadd</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="ldapdelete"> <varlistentry id="ldapcompare">
<term><command>ldapdelete</command></term> <term><command>ldapcompare</command></term>
<listitem><para> opens a connection to an <acronym>LDAP</acronym> server, <listitem>
binds and deletes one or more entries.</para> <para>opens a connection to an LDAP server, binds and performs
<indexterm zone="openldap ldapdelete"> a compare using specified parameters.</para>
<primary sortas="b-ldapdelete">ldapdelete</primary> <indexterm zone="openldap ldapcompare">
</indexterm></listitem> <primary sortas="b-ldapcompare">ldapcompare</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="ldapmodify"> <varlistentry id="ldapdelete">
<term><command>ldapmodify</command></term> <term><command>ldapdelete</command></term>
<listitem><para>opens a connection to an <acronym>LDAP</acronym> server, <listitem>
binds and modifies entries.</para> <para> opens a connection to an LDAP server, binds and deletes
<indexterm zone="openldap ldapmodify"> one or more entries.</para>
<primary sortas="b-ldapmodify">ldapmodify</primary> <indexterm zone="openldap ldapdelete">
</indexterm></listitem> <primary sortas="b-ldapdelete">ldapdelete</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="ldapmodrdn"> <varlistentry id="ldapmodify">
<term><command>ldapmodrdn</command></term> <term><command>ldapmodify</command></term>
<listitem><para>opens a connection to an <acronym>LDAP</acronym> server, <listitem>
binds and modifies the <acronym>RDN</acronym> of entries.</para> <para>opens a connection to an LDAP server, binds and modifies
<indexterm zone="openldap ldapmodrdn"> entries.</para>
<primary sortas="b-ldapmodrdn">ldapmodrdn</primary> <indexterm zone="openldap ldapmodify">
</indexterm></listitem> <primary sortas="b-ldapmodify">ldapmodify</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="ldappasswd"> <varlistentry id="ldapmodrdn">
<term><command>ldappasswd</command></term> <term><command>ldapmodrdn</command></term>
<listitem><para>is a tool to set the password of an <acronym>LDAP</acronym> <listitem>
user.</para> <para>opens a connection to an LDAP server, binds and modifies
<indexterm zone="openldap ldappasswd"> the RDN of entries.</para>
<primary sortas="b-ldappasswd">ldappasswd</primary> <indexterm zone="openldap ldapmodrdn">
</indexterm></listitem> <primary sortas="b-ldapmodrdn">ldapmodrdn</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="ldapsearch"> <varlistentry id="ldappasswd">
<term><command>ldapsearch</command></term> <term><command>ldappasswd</command></term>
<listitem><para>opens a connection to an <acronym>LDAP</acronym> server, <listitem>
binds and performs a search using specified parameters.</para> <para>is a tool to set the password of an LDAP user.</para>
<indexterm zone="openldap ldapsearch"> <indexterm zone="openldap ldappasswd">
<primary sortas="b-ldapsearch">ldapsearch</primary> <primary sortas="b-ldappasswd">ldappasswd</primary>
</indexterm></listitem> </indexterm>
</varlistentry> </listitem>
</varlistentry>
<varlistentry id="ldapwhoami"> <varlistentry id="ldapsearch">
<term><command>ldapwhoami</command></term> <term><command>ldapsearch</command></term>
<listitem><para>opens a connection to an <acronym>LDAP</acronym> server, <listitem>
binds and displays whoami information.</para> <para>opens a connection to an LDAP server, binds and performs
<indexterm zone="openldap ldapwhoami"> a search using specified parameters.</para>
<primary sortas="b-ldapwhoami">ldapwhoami</primary> <indexterm zone="openldap ldapsearch">
</indexterm></listitem> <primary sortas="b-ldapsearch">ldapsearch</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="slapadd"> <varlistentry id="ldapwhoami">
<term><command>slapadd</command></term> <term><command>ldapwhoami</command></term>
<listitem><para>is used to add entries specified in <acronym>LDAP</acronym> <listitem>
Directory Interchange Format (<acronym>LDIF</acronym>) to an <para>opens a connection to an LDAP server, binds and displays
<acronym>LDAP</acronym> database.</para> whoami information.</para>
<indexterm zone="openldap slapadd"> <indexterm zone="openldap ldapwhoami">
<primary sortas="b-slapadd">slapadd</primary> <primary sortas="b-ldapwhoami">ldapwhoami</primary>
</indexterm></listitem> </indexterm>
</varlistentry> </listitem>
</varlistentry>
<varlistentry id="slapcat"> <varlistentry id="slapadd">
<term><command>slapcat</command></term> <term><command>slapadd</command></term>
<listitem><para>is used to generate an <acronym>LDAP</acronym> <listitem>
<acronym>LDIF</acronym> output based upon the contents of a slapd <para>is used to add entries specified in LDAP Directory Interchange
database.</para> Format (LDIF) to an LDAP database.</para>
<indexterm zone="openldap slapcat"> <indexterm zone="openldap slapadd">
<primary sortas="b-slapcat">slapcat</primary> <primary sortas="b-slapadd">slapadd</primary>
</indexterm></listitem> </indexterm>
</varlistentry> </listitem>
</varlistentry>
<varlistentry id="slapd"> <varlistentry id="slapcat">
<term><command>slapd</command></term> <term><command>slapcat</command></term>
<listitem><para>is the stand-alone <acronym>LDAP</acronym> server.</para> <listitem>
<indexterm zone="openldap slapd"> <para>is used to generate an LDAP LDIF output based upon the
<primary sortas="b-slapd">slapd</primary> contents of a slapd database.</para>
</indexterm></listitem> <indexterm zone="openldap slapcat">
</varlistentry> <primary sortas="b-slapcat">slapcat</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="slapdn"> <varlistentry id="slapd">
<term><command>slapdn</command></term> <term><command>slapd</command></term>
<listitem><para>checks a list of string-represented <acronym>DN</acronym>s <listitem>
based on schema syntax.</para> <para>is the stand-alone LDAP server.</para>
<indexterm zone="openldap slapdn"> <indexterm zone="openldap slapd">
<primary sortas="b-slapdn">slapdn</primary> <primary sortas="b-slapd">slapd</primary>
</indexterm></listitem> </indexterm>
</varlistentry> </listitem>
</varlistentry>
<varlistentry id="slapindex"> <varlistentry id="slapdn">
<term><command>slapindex</command></term> <term><command>slapdn</command></term>
<listitem><para>is used to regenerate slapd indices based upon the current <listitem>
contents of a database.</para> <para>checks a list of string-represented DNs based on schema
<indexterm zone="openldap slapindex"> syntax.</para>
<primary sortas="b-slapindex">slapindex</primary> <indexterm zone="openldap slapdn">
</indexterm></listitem> <primary sortas="b-slapdn">slapdn</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="slappasswd"> <varlistentry id="slapindex">
<term><command>slappasswd</command></term> <term><command>slapindex</command></term>
<listitem><para>is an <application>Open<acronym>LDAP</acronym></application> <listitem>
password utility.</para> <para>is used to regenerate slapd indices based upon the current
<indexterm zone="openldap slappasswd"> contents of a database.</para>
<primary sortas="b-slappasswd">slappasswd</primary> <indexterm zone="openldap slapindex">
</indexterm></listitem> <primary sortas="b-slapindex">slapindex</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="slaptest"> <varlistentry id="slappasswd">
<term><command>slaptest</command></term> <term><command>slappasswd</command></term>
<listitem><para>checks the sanity of the <filename>slapd.conf</filename> <listitem>
file.</para> <para>is an <application>OpenLDAP</application> password
<indexterm zone="openldap slaptest"> utility.</para>
<primary sortas="b-slaptest">slaptest</primary> <indexterm zone="openldap slappasswd">
</indexterm></listitem> <primary sortas="b-slappasswd">slappasswd</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="slurpd"> <varlistentry id="slaptest">
<term><command>slurpd</command></term> <term><command>slaptest</command></term>
<listitem><para>is the stand-alone <acronym>LDAP</acronym> replication <listitem>
server.</para> <para>checks the sanity of the <filename>slapd.conf</filename>
<indexterm zone="openldap slurpd"> file.</para>
<primary sortas="b-slurpd">slurpd</primary> <indexterm zone="openldap slaptest">
</indexterm></listitem> <primary sortas="b-slaptest">slaptest</primary>
</varlistentry> </indexterm>
</listitem>
</varlistentry>
<varlistentry id="liblber"> <varlistentry id="slurpd">
<term><filename class='libraryfile'>liblber.[so,a]</filename></term> <term><command>slurpd</command></term>
<listitem><para>is a set of lightweight Basic Encoding Rules routines. These <listitem>
routines are used by the <acronym>LDAP</acronym> library routines to encode <para>is the stand-alone LDAP replication server.</para>
and decode <acronym>LDAP</acronym> protocol elements using the (slightly <indexterm zone="openldap slurpd">
simplified) Basic Encoding Rules defined by <acronym>LDAP</acronym>. They are <primary sortas="b-slurpd">slurpd</primary>
not normally used directly by an <acronym>LDAP</acronym> application program </indexterm>
except in the handling of controls and extended operations.</para> </listitem>
<indexterm zone="openldap liblber"> </varlistentry>
<primary sortas="c-liblber">liblber.[so,a]</primary>
</indexterm></listitem>
</varlistentry>
<varlistentry id="libldap"> <varlistentry id="liblber">
<term><filename class='libraryfile'>libldap.[so,a]</filename></term> <term><filename class='libraryfile'>liblber.[so,a]</filename></term>
<listitem><para>supports the <acronym>LDAP</acronym> programs and provide <listitem>
functionality for other programs interacting with <para>is a set of lightweight Basic Encoding Rules routines. These
<acronym>LDAP</acronym>.</para> routines are used by the LDAP library routines to encode and decode
<indexterm zone="openldap libldap"> LDAP protocol elements using the (slightly simplified) Basic
<primary sortas="c-libldap">libldap.[so,a]</primary> Encoding Rules defined by LDAP. They are not normally used directly
</indexterm></listitem> by an LDAP application program except in the handling of controls
</varlistentry> and extended operations.</para>
<indexterm zone="openldap liblber">
<primary sortas="c-liblber">liblber.[so,a]</primary>
</indexterm>
</listitem>
</varlistentry>
<varlistentry id="libldap_r"> <varlistentry id="libldap">
<term><filename class='libraryfile'>libldap_r.[so,a]</filename></term> <term><filename class='libraryfile'>libldap.[so,a]</filename></term>
<listitem><para>contains the functions required by the <acronym>LDAP</acronym> <listitem>
programs to produce the results from <acronym>LDAP</acronym> requests.</para> <para>supports the LDAP programs and provide functionality for
<indexterm zone="openldap libldap_r"> other programs interacting with LDAP.</para>
<primary sortas="c-libldap_r">libldap_r.[so,a]</primary> <indexterm zone="openldap libldap">
</indexterm></listitem> <primary sortas="c-libldap">libldap.[so,a]</primary>
</varlistentry> </indexterm>
</variablelist> </listitem>
</varlistentry>
</sect2> <varlistentry id="libldap_r">
<term><filename class='libraryfile'>libldap_r.[so,a]</filename></term>
<listitem>
<para>contains the functions required by the LDAP programs to
produce the results from LDAP requests.</para>
<indexterm zone="openldap libldap_r">
<primary sortas="c-libldap_r">libldap_r.[so,a]</primary>
</indexterm>
</listitem>
</varlistentry>
</variablelist>
</sect2>
</sect1> </sect1>