http://asyd.net/home/ 2011-06-18T22:10:42+02:00 http://asyd.net/home/ http://asyd.net/home/lib/images/favicon.ico text/html 2005-10-19T15:48:13+02:00 http://asyd.net/home/docs/ldap/activedirectory Extend the schema The Geek way You can create attributes, new schema (class) but you can't edit an existing schema. Read this doc I think the best way to know how to create the .ldif is take a look in existing schema, but, here an example : dn: CN=asyd,CN=Schema,CN=Configuration,DC=test,DC=com attributeID: 1.2.841.1.1.1 attributeSyntax: 2.5.5.9 cn: asyd isSingleValued: TRUE lDAPDisplayName: asyd adminDisplayName: asyd searchFlags: 0 objectClass: top objectClass: attributeSchema nam… text/html 2008-10-03T08:25:38+02:00 http://asyd.net/home/docs/ldap/common user.ldif dn: <dn> objectClass: top objectClass: shadowAccount objectClass: posixAccount objectClass: account uid: userPassword: {CRYPT} cn: uidNumber: gidNumber: homeDirectory: suffix.ldif dn: <dndomain> objectClass: top objectClass: dcObject objectClass: organization o: <domain> dc: <domainnotld> structuralObjectClass: organization dn: cn=admin,<dndomain> objectClass: simpleSecurityObject objectClass: organizationalRole cn: admin description: LDAP administrator userPassword:: <pass… text/html 2008-12-26T23:47:38+02:00 http://asyd.net/home/docs/ldap/opends * Enable audit log text/html 2005-09-25T20:46:05+02:00 http://asyd.net/home/docs/ldap/openldap Note I hate OpenLDAP, I had too many problems when I use it in a (critical) production enrivonment. Even with actual versions, I still have so problems.. And I'm not the only one, just stay few days in #ldap@Freenode, and you will unserstand by yourself. But anyway, OpenLDAP is sometime usefull, and at least, it's GPL. text/html 2007-11-20T11:27:13+02:00 http://asyd.net/home/docs/ldap/sunone Administration SSL Initialize the database # ./shared/bin/certutil -N -d alias -P slapd-<instance> Import the CA certificate # ./shared/bin/certutil -A -n "<name>" -t "CT,c,c" -i /tmp/cacert.pem -d <directory> -P slapd-<instance> Create a CSR # ./shared/bin/certutil -R -s "cn=<dns name>" -a -d <directory> -P slapd-<instance>