OpenLDAP 2.1 Administrator's Guide

Table of Contents

Preface
1. Introduction to OpenLDAP Directory Services
1.1. What is a directory service?
1.2. What is LDAP?
1.3. How does LDAP work?
1.4. What about X.500?
1.5. What is the difference between LDAPv2 and LDAPv3?
1.6. What is slapd and what can it do?
1.7. What is slurpd and what can it do?

2. A Quick-Start Guide
3. The Big Picture - Configuration Choices
3.1. Local Directory Service
3.2. Local Directory Service with Referrals
3.3. Replicated Directory Service
3.4. Distributed Local Directory Service

4. Building and Installing OpenLDAP Software
4.1. Obtaining and Extracting the Software
4.2. Prerequisite software
4.3. Running configure
4.4. Building the Software
4.5. Testing the Software
4.6. Installing the Software

5. The slapd Configuration File
5.1. Configuration File Format
5.2. Configuration File Directives
5.3. Access Control
5.4. Configuration File Example

6. Running slapd
6.1. Command-Line Options
6.2. Starting slapd
6.3. Stopping slapd

7. Database Creation and Maintenance Tools
7.1. Creating a database over LDAP
7.2. Creating a database off-line
7.3. The LDIF text entry format

8. Schema Specification
8.1. Distributed Schema Files
8.2. Extending Schema

9. Security Considerations
9.1. Network Security
9.2. Integrity and Confidentiality Protection
9.3. Authentication Methods

10. Using SASL
10.1. SASL Security Considerations
10.2. SASL Authentication
10.3. SASL Proxy Authorization

11. Using TLS
11.1. TLS Certificates
11.2. TLS Configuration

12. Constructing a Distributed Directory Service
12.1. Subordinate Knowledge Information
12.2. Superior Knowledge Information
12.3. The ManageDsaIT Control

13. Replication with slurpd
13.1. Overview
13.2. Replication Logs
13.3. Command-Line Options
13.4. Configuring slurpd and a slave slapd instance
13.5. Advanced slurpd Operation

A. Generic configure Instructions
B. OpenLDAP Software Copyright Notices
B.1. OpenLDAP Copyright Notice
B.2. University of Michigan Copyright Notice

C. OpenLDAP Public License