Ryan Conover
rconover@symas.com
Article
Last Month
How To Backup the cn=config Database for slapd.d
Published February 29th, 2024 by Ryan Conover
Date: 11-04-2022 OpenLDAP uses an internal, in-memory database (cn=config) to hold its configuration during operation. That database is initially loaded from an LDIF (text representation of LDAP data) file and stored in the OpenLDAP data directory /var/symas/openldap-data/. From that point on the contents of cn=config is maintained through the norma
Using Ldapdelete With a File
Published March 16th, 2026 by Ryan Conover
ldapdelete can remove multiple LDAP entries by reading distinguished names (DNs) either from the command line or from a file. This article shows you how to use ldapdelete with a file. This method is commonly used for directory cleanup, migration tasks, and administrative maintenance. Key points: The file must contain one DN per line (ldapdelete does
Changing the rootdn Password in OpenLDAP
Published March 13th, 2025 by Ryan Conover
In practice, the rootDN should be used sparingly, such as for initial configuration. The master account is for slapd itself, and it bypasses a lot of features (such as ACLs). You should define administrative accounts in the DIT, give them the appropriate privileges, and use those. It should also be noted that user passwords should not be changed usi