Ldap – Manage permissions with OpenLDAP

ldapopenldappermissions

I'm currently configuring permissions on an existing openldap server using ldapadd | ldapmodify and ldif files (created following these examples). I'm then testing using ldapsearch. All the tests I run as cn=admin are successful (not very difficult I guess since it's the built-in all mighty admin account) but I'm just unable to give special permissions to other users (though the bind works). Bottom line is, I found the management of ldap permissions being very painful.

[Q1] What tools do you use to visualize existing permissions on an LDAP server and change them as needed?

To manipulate the LDAP directory I use Apache directory studio

[Q2] What other tools to you use to manipulate the LDAP directory?

Best Answer

To visualize and administer LDAP, there are many options, here are some.

I personally use ldapsh to perform some quick ldap edits. It visualizes your ldap tree as directory structure which is easy to navigate and make edits using vim or your fav editor.

Related Solutions

Ldapadd, slapadd, ldapmodify hang when trying to add entries

Your LDAP databases may have become corrupt.

Try recovering by doing the following:

stop openldap
copy the entire folder someplace safe
do a slapcat
delete the database files
run slapadd

Ldap – Multiline data list (ldif file) manipulation with awk or other tool

You can do this with an awk script

#!/bin/awk -f
/^dn:/ {split($0,dname,", dn=");print $0 }
/^cn:/ { cn = $2 }
/^givenName:/ { gn = tolower($2) }
/sn:/ { sn = tolower($2) ; printf("mail: %s.%s@%s.%s\n\n",gn,sn,dname[2],dname[3] ) }

to use, save the above in a file e.g. awkscript and make it executable then

./awkscript datafile

Given your input this script outputs

dn: cn=fremer, ou=people, dn=domain, dn=com
mail: freddy.mercury@domain.com

dn: cn=markno, ou=people, dn=domain, dn=com
mail: mark.knopfler@domain.com

Best Answer

Related Solutions

Ldapadd, slapadd, ldapmodify hang when trying to add entries

Ldap – Multiline data list (ldif file) manipulation with awk or other tool

Related Topic