LDIF file

LDAP configurations are specified in a format known as LDAP Data Interchange Format (LDIF).

Purpose

This text-based file stores information in object-oriented hierarchies of entries. LDIF is used to import and export directory information between LDAP-based directory servers, or to describe a set of changes that are to be applied to a directory. The purpose of using an LDIF file is that you can populate the LDAP directory using a single file rather than having to populate the directory one entry at a time.

The process for configuring the IBM® Directory Server calls for importing a LDIF file, so if you are installing the IBM Directory Server, you need to create and save the LDIF file before you begin the IBM Directory installation process.

Sample

You can use the sample LDIF configuration file shown here as-is, with the default values, or you can customize the file with values that are unique to your organization. To do this, copy-and-paste the contents of the sample file into a text file and with a text editor complete the following steps:
  1. Replace all occurrences of the string yourOrg with an appropriate value for your company or department.
  2. Replace the Administrator role user ID (Admin) and password (adminpassword) with appropriate values for your company or department.
  3. Replace the Backup role user ID (Back) and password (backpassword) with appropriate values for your company or department.
  4. Replace the Operator role user ID (Oper) and password (operpassword) with appropriate values for your company or department.
  5. Replace the Monitor role user ID (Monit) and password (monitpassword) with appropriate values for your company or department.
  6. If you require additional users (such as a second Administrator), you can copy and paste the rows that define the particular user, and make the appropriate edits. For example, if you need an additional Administrator, you can edit the values for the attributes uid (Admin) and userPassword (adminpassword), as highlighted in this example (the other attributes would be customized for your company or department too):
    dn:cn=yourOrgAdmin Administrator,ou=Users,o=yourOrg
    objectClass:inetOrgPerson
    cn:yourOrgAdmin Administrator
    sn:Administrator
    uid:Admin
    userPassword:adminpassword
  7. Save the customized file as a text file to a directory that can be accessed from the server on which the LDAP directory is installed.
dn:o=yourOrg
objectClass:organization
o:yourOrg

dn:ou=Users,o=yourOrg
objectClass:organizationalUnit
ou:Users

dn:cn=yourOrgAdmin Administrator,ou=Users,o=yourOrg
objectClass:inetOrgPerson
cn:yourOrgAdmin Administrator
sn:Administrator
uid:Admin
userPassword:adminpassword

dn:cn=yourOrgMon Monitor,ou=Users,o=yourOrg
objectClass:inetOrgPerson
cn:yourOrgMon Monitor
sn:Monitor
uid:Monit
userPassword:monitPassword

dn:cn=yourOrgBack Backup,ou=Users,o=yourOrg
objectClass:inetOrgPerson
cn:yourOrgBack Backup
sn:Backup
uid:Back
userPassword:backpassword

dn:cn=yourOrgOper Operator,ou=Users,o=yourOrg
objectClass:inetOrgPerson
cn:yourOrgOper Operator
sn:Operator
uid:Oper
userPassword:operpassword

dn:ou=Roles,o=yourOrg
objectClass:organizationalUnit
ou:Roles

dn:cn=Administrator,ou=Roles,o=yourOrg
objectClass:organizationalRole
cn:Administrator
roleOccupant:cn=yourOrgAdmin Administrator,ou=Users,o=yourOrg

dn:cn=Monitor,ou=Roles,o=yourOrg
objectClass:organizationalRole
cn:Monitor
roleOccupant:cn=yourOrgMon Monitor,ou=Users,o=yourOrg

dn:cn=Backup,ou=Roles,o=yourOrg
objectClass:organizationalRole
cn:Backup
roleOccupant:cn=yourOrgBack Backup,ou=Users,o=yourOrg

dn:cn=Operator,ou=Roles,o=yourOrg
objectClass:organizationalRole
cn:Operator
roleOccupant:cn=yourOrgOper Operator,ou=Users,o=yourOrg

Parent topic: LDAP configuration

Parent topic: Reference

Library | Support | Terms of use | Feedback
(C) Copyright IBM Corporation 2003, 2004. All Rights Reserved.
IBM TotalStorage SAN File System v2.2