Installing slapd on Ubuntu 9.10 is not enough.
The configuration of slapd requires more steps.
I refer to article:
http://doc.ubuntu.com/ubuntu/serverguide/C/openldap-server.html which apparently also applies to 9.10.
Make sure you load the necessary schemas:
ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldifMy ldif file I wanted to load contains dc=ldap,dc=example,dc=ipp. So I wanted to set up a rootdn starting with same domain.
# Load dynamic backend modules dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulepath: /usr/lib/ldap olcModuleload: back_hdb # Database settings dn: olcDatabase=hdb,cn=config objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: {1}hdb olcSuffix: dc=ldap,dc=example,dc=ipp olcDbDirectory: /var/lib/ldap olcRootDN: cn=admin,dc=ldap,dc=example,dc=ipp olcRootPW: secret olcDbConfig: set_cachesize 0 2097152 0 olcDbConfig: set_lk_max_objects 1500 olcDbConfig: set_lk_max_locks 1500 olcDbConfig: set_lk_max_lockers 1500 olcDbIndex: objectClass eq olcLastMod: TRUE olcDbCheckpoint: 512 30 olcAccess: to attrs=userPassword by dn="cn=admin,dc=ldap,dc=example,dc=ipp" write by anonymous auth by self write by * none olcAccess: to attrs=shadowLastChange by self write by * read olcAccess: to dn.base="" by * read olcAccess: to * by dn="cn=admin,dc=ldap,dc=example,dc=ipp" write by * readNote that I changed the domain, and left password to secret. Load this backend file with:
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.ldap.example.ipp.ldifYou will now need to restart your slapd daemon. Then you can add your own ldif file with data. Afterwards you can test with ldapsearch. As normal user:
ldapsearch -x -b "dc=ldap,dc=example,dc=ipp" uid=User sn ginveName cn ldapsearch -x -b "dc=ldap,dc=example,dc=ipp" '(objectclass=top)' ldapsearch -x -b "dc=ldap,dc=example,dc=ipp" '(objectclass=domain)' ldapsearch -x -b "dc=ldap,dc=example,dc=ipp" '(objectclass=person)' ldapsearch -x -b "dc=ldap,dc=example,dc=ipp" '(objectclass=organizationalUnit)'
Comments