Linux Networking Cookbook

12.4. Creating a New Database on Fedora

Problem

Your Fedora OpenLDAP installation does not yet include an administrative user, nor any users at all. You need to create an admin user to manage your directory, and you also need to define your suffix.

Solution

There are three steps:

1. Create an LDIF file with the new information.

2. Use the ldapadd command to add the new entries to Berkeley DB.

3. Configure read-write permissions in slapd.conf.

First, create the LDAP Data Interchange Format (LDIF) file, which in this example is named first.ldif. Substitute your own domain name, company name, description, and password. Trim all leading and trailing spaces. A blank line separates entries, comments must go on their own lines, and there must be one space after each colon:

	##first.ldif
	# root dn entry
	dn: dc=alrac,dc=net
	objectclass: dcObject
	objectclass: organization
	o: Alrac's Fine Cookies and Beer
	dc: alrac

	# directory administrator
	dn: cn=admin,dc=alrac,dc=net
	objectClass: simpleSecurityObject
	objectClass: organizationalRole
	cn: admin
	userPassword: bigsecretword
	description: LDAP administrator

Second, run this ldapadd command. You'll be asked for the rootpw password you entered in slapd.conf:

	# ldapadd -x -D "cn=admin,dc=alrac,dc=net" -W -f first.ldif
	Enter LDAP Password:
	adding new entry "dc=alrac,dc=net"
	adding new entry "cn=admin,dc=alrac,dc=net"

Let us admire the new entries:

	$ ldapsearch -x -b 'dc=alrac,dc=net' [...] # alrac.net dn: dc=alrac,dc=net objectClass: dcObject objectClass: organization ...