Latest Articles - Page 39

Enable and disable backend and instance read-only mode in 389 Directory Server with dsconf, verify LDAP result code 53 on writes, recover from dse.ldif, and avoid replication mistakes.

Configure default, smart, suffix, and replication LDAP referrals in 389 Directory Server with dsconf, ldapmodify, client tests, security notes, and cleanup.

Configure pointer, indirect, and classic Class of Service (CoS) in 389 Directory Server with tested LDIF examples, qualifiers, verification, and cleanup.

Compare groups with managed, filtered, and nested roles in 389 Directory Server. Learn how nsRole, memberOf, and dynamic membership differ.

Rename LDAP entries, move users between OUs, and rename subtrees in 389 Directory Server with ldapmodify modrdn records, deleteOldRDN, newSuperior, and dsidm rename helpers.

Prepare a custom Directory Server root with dscreate ds-root, add administration wrapper scripts to PATH, create an unprivileged ldap-dev instance on ports above 1024, and manage it with user-specific dsctl commands.

Plan, create, and manage multiple 389 Directory Server instances on one host with unique names, LDAP ports, suffixes, systemd units, and client profiles.

Understand 389 Directory Server architecture, including instances, ns-slapd, suffixes, backends, LMDB databases, schema, plug-ins, configuration, and replication.

Compare OpenLDAP and 389 Directory Server across installation, administration, access control, replication, plugins, performance, migration, and use cases.

Configure OpenLDAP MDB indexes with olcDbIndex, map LDAP filters to index types, build indexes online, rebuild them with slapindex, and measure search performance.

Migrate local users and groups to OpenLDAP on RHEL, Rocky Linux, AlmaLinux, Oracle Linux, and CentOS Stream while preserving UID, GID, passwords, groups, and file ownership.

Configure OpenLDAP sudoRole policies with SSSD on RHEL, Rocky Linux, AlmaLinux, Oracle Linux, and CentOS Stream clients.

Fix OpenLDAP Error 49 for wrong bind DNs, passwords, userPassword ACLs, locked accounts, expired passwords, SSSD cache, PAM, and SSH authentication.

Configure OpenLDAP memberOf and refint overlays for groupOfNames membership, reverse membership lookup, and automatic reference cleanup.

Fix OpenLDAP Error 50 for ldapadd, ldapmodify, ldapdelete, password changes, cn=config, and no-write-access-to-parent ACL failures.

Configure OpenLDAP ppolicy for password expiration, warnings, history, account lockout, grace logins, forced resets, and SSSD client behavior.

Back up and restore OpenLDAP cn=config and all MDB databases using slapcat, slapadd, systemd timers, retention, checksums, and tested recovery.

Configure OpenLDAP olcAccess ACLs for passwords, users, groups, SSSD, entry and children permissions, with safe testing and rollback.

ldapadd creates LDAP entries from LDIF input. Use a StartTLS-protected simple bind for directory data or SASL EXTERNAL over LDAPI for local cn=config schema work.

ldapdelete removes LDAP entries by distinguished name. It supports one or more DNs on the command line, a DN file, and recursive subtree deletion when a non-leaf entry must be removed.

ldapmodify applies LDIF changes to LDAP entries. It adds, replaces, or deletes attributes using a StartTLS simple bind, and can modify local cn=config through LDAPI SASL EXTERNAL.

ldapsearch queries LDAP directory entries from the command line. It can search anonymously, use a simple bind protected by StartTLS, or authenticate locally over LDAPI with SASL EXTERNAL.

ldapwhoami performs the LDAP Who Am I extended operation after a bind. It is a compact way to verify the authorization identity seen by an OpenLDAP server.

slappasswd generates RFC 2307 password values for OpenLDAP userPassword attributes and the cn=config olcRootPW setting on RHEL-family LDAP servers.

Understand OpenLDAP cn=config and MDB, discover numbered database DNs, query modules and overlays, and safely modify settings with ldapmodify.

Add, search, modify, rename, reset passwords, manage group membership, and delete OpenLDAP POSIX users and groups using LDIF.

Configure OpenLDAP client authentication with SSSD, authselect, StartTLS, and automatic home directories on RHEL, Rocky Linux, AlmaLinux, Oracle Linux, and CentOS Stream.

OpenLDAP vs Active Directory in plain language: LDAP protocol vs directory services, OpenLDAP vs LDAPS, Samba AD vs Microsoft AD, cost, GPO, Kerberos, Linux integration, and when to choose each.

In this tutorial we will cover the steps to install and configure OpenLDAP from scratch and then use the OpenLDAP server as a central authentication server

OpenLDAP is an open-source implementation of the Lightweight Directory Access Protocol (LDAP). It's widely used for managing directory information, providing