Home / server / Questions / 741286
In Process
StephenKing
Asked: 2015-12-08 04:58:15 +0800 CST

Export LDAP schema without data

  • 772

For testing purposes, I need a copy of our LDAP server without any personal data.

What is the best way, to export this from an existing OpenLDAP server?

I tried ldapsearch and Apache Directory Studio, but I did not find a way to skip actual data (if there is such a thing in LDAP).

ldap

1 Answers

  1. Configuration for reasonably modern versions of OpenLDAP are accessible at the cn=config suffix, provided you're authenticating with a dn that has read privileges to it. If local root is also the rootdn you should be able to dump the ldif via sudo ldapsearch -H ldapi:/// -Y EXTERNAL -b cn=config

    If that method does not work, within the filesystem these files will likely be under /etc/openldap/slapd.d/. If your system is older the configuration will be in a single file, likely /etc/openldap/slapd.conf.

    • 2