[nzlug] Bootstrapping LDAP

[Cliff Pratt]

Martin Kealey wrote:
> This is arguably a bit OT, so apologies in advance.
> 
> I've administered LDAP servers many times over the years, but now I'm faced
> with getting one working from scratch, I have to admit I'm a bit stumped.
> 
> I've installed slapd on Debian, started the daemon, but it's "lights on
> nobody home". Or more precisely, all the doors are locked and nobody's
> answering.
> 
> I've read a gazillion web guides, varying in quality from excellent to
> execrable, and basically I can't get authorisation to add the base records
> which are supposed to be the authorisation for everything else. I've added a
> DN and secret in /etc/slapd/ldap.conf (and several other places), but to no
> avail.
> 
It should be in slapd.conf, I believe, and not ldap.conf.

Here's what I have for root dn and password:

# root dn and passwd
rootdn "cn=root,dc=cliffs,dc=bogus"
rootpw stuff			<= this can be encrypted if you wish

root dn is outside of the normal ldap hierarchy.

Cheers,

Cliff