Tripp Lite B020-U08-19-IP Switch User Manual


 
49
7. Administration
(
continued
)
7.3.4 ANMS
(
continued
)
Starting the Open LDAP Server
TostarttheOpenLDAPServer,runslapd(theOpenLDAPServer
executable file) from the command line. slapd supports a number of
command line options, the most important option is the d switch that
triggers debug information. For example, a command of slapd -d 256
wouldstartOpenLDAPwithadebuglevelof256,asshowninthe
following screenshot:
Note: For details about slapd options and their meanings, refer to the
OpenLDAP documentation.
Customizing the OpenLDAP Schema
The schema that slapd uses may be extended to support additional
syntaxes, matching rules, attribute types, and object classes. In the case of
theB020-U08-19-IP,theUser class and the permission attribute are
extended to define a new schema. The extended schema file used to
authenticateandauthorizeusersloggingintotheKVMswitchisshown
in the figure below.
LDAP Data Stucture
AnLDAPdirectorystoresinformationinatreestructureknownasthe
Directory Information Tree (DIT). The nodes in the tree are directory
entries,andeachentrycontainsinformationinattribute-valueform.An
exampleoftheLDAPdirectorytreeisshowninthefigurebelow.
DIT Creation
The LDAP Data Interchange Format (LDIF)isusedtorepresentLDAP
entriesinasimpletextformat(pleaserefertoRFC2849).Thefigure
illustratesanLDIFfilethatcreatestheDITfortheB020-U08-19-IP
directory tree.
ThefollowingfigureillustratesanLDIFfilethatdefinestheOpenLDAP
groupfortheB020-U08-19-IP:
201009236 93-2985.indd 49 11/18/2010 4:21:49 PM