Home / server / Questions / 581959
In Process
Joel K
Asked: 2014-03-14 14:43:47 +0800 CST

Alternative methods to handle OpenLDAP's new config syntax slapd.d/cn=config?

  • 772

I for one feel that configuring OpenLDAP with LDIFs instead of basic configuration files is a major step in the wrong direction.

Does anyone have some tools/techniques to more easily manage OpenLDAP that don't require LDAP to be working 100%?

openldap

1 Answers

  1. For configuration changes, I nearly never submit them via LDIF files and ldapmodify calls but use a GUI like Apache Directory studio, which makes this a lot less cumbersome.

    However, if you somehow manage to destroy your config in such a way that you can't connect via LDAP anymore, you can manually edit the cn=config tree in an editor, as this is just a collection of LDIF files in (usually) /etc/openldap/slapd.d/. Just make sure slapd is stopped, edit the files, restart slapd and you should be back in (but be sure to make a backup beforehand).

    • 4