LDAP: Difference between revisions

From DWIKI
mNo edit summary
Line 39: Line 39:


==modify a record==
==modify a record==
ldapmodify
*http://docs.sun.com/source/816-6400-10/lmodify.html


ldapmodify -x -D "cn=admin, dc=bar, dc=com" -W << EOF
dn: cn=foo, dc=bar, dc=com
changetype: modify
replace: sn
sn: new name
EOF


==search for a record==
==search for a record==

Revision as of 22:39, 12 August 2008

Lightweight Directory Access Protocol

In computer networking, the Lightweight Directory Access Protocol, or LDAP ("ell-dap"), is a networking protocol for querying and modifying directory services running over TCP/IP. An LDAP directory usually follows the X.500 model: it is a tree of entries, each of which consists of a set of named attributes with values. While some services use a more complicated "forest" model, the vast majority use a simple starting point for their database organization.

An LDAP directory often reflects various political, geographic, and/or organizational boundaries, depending on the model chosen. LDAP deployments today tend to use Domain Name System (DNS) names for structuring the most simple levels of the hierarchy. Further into the directory might appear entries representing people, organizational units, printers, documents, groups of people or anything else which represents a given tree entry, or multiple entries.

Its current version is LDAPv3. LDAPv3 is specified in a series of IETF Standard Track RFCs as detailed in RFC 4510.


Tutorials and docs

ldapmodify

Links

FAQ

additional info: structuralObjectClass: no user modification allowed

use slapadd instead of ldapadd

AttributeType inappropriate matching rule: "integerMatch"

duh


modify a record


ldapmodify -x -D "cn=admin, dc=bar, dc=com" -W << EOF
dn: cn=foo, dc=bar, dc=com
changetype: modify
replace: sn
sn: new name
EOF

search for a record

http://docs.sun.com/source/816-6400-10/lsearch.html

ldapsearch -x -b  -s base '(objectclass=*)' namingContexts
ldapsearch -x -b "dc=foo, dc=com" "uid=harry"
  • scope?

ldapsearch filters

Keywords

rootdn

The user/account with full access


Tools

phpldapadmin ldapbrowser lam