Re: [Fedora-directory-devel] Need to configure, but not start fedora-ds

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Date: Sat, 24 Feb 2007 09:02:23 +1100
> From: Andrew Bartlett <abartlet@xxxxxxxxx>

> On Fri, 2007-02-23 at 08:49 -0700, Richard Megginson wrote:
> Andrew Bartlett wrote:
> I understand where you are coming from. With openldap, you just have to > provide your own hand tuned slapd.conf file - nothing else really is > required. That also controls what schema is loaded.

Yeah.  It really does show that I did this on OpenLDAP first...

> It's not so easy to do the same thing with fedora ds. For starters, the > dse.ldif file is much more complex (but in your case, there are only a > few options required to be tweaked). And the schema handling (i.e. > include /path/to/core.schema ; include /path/to/posix.schema) is > completely out of band with this process (well, not quite - you can > override the nsslapd-schemadir in cn=config).

So, yes, I suppose I'm just trying to turn Fedora DS into OpenLDAP, one
step at a time :-)

Good man!  ;)

(But wait, I thought we were turning OpenLDAP's config into ... oh never mind...)

I don't know if this will help you guys or not, but we implemented "include:" directives for LDIF, following this discussion:
http://www.openldap.org/lists/ietf-ldapext/200504/msg00003.html

The current manpage also describes it
http://www.openldap.org/software/man.cgi?query=ldif&sektion=5&apropos=0&manpath=OpenLDAP+2.4-Release

Note that this is already implemented in OpenLDAP 2.3, we just didn't backport the manpage update (oops).

Anyway, this lets us create very compact config.ldif's that can be slapadd'd to bootstrap a server, with all relevant schema (in LDIF, not slapd.conf format) referenced as desired.

Obviously being able to keep everything under a single config tree makes life a lot easier.
--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  Chief Architect, OpenLDAP     http://www.openldap.org/project/

--
Fedora-directory-devel mailing list
Fedora-directory-devel@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-devel

[Index of Archives]     [Fedora Directory Announce]     [Fedora Users]     [Older Fedora Users Mail]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Devel Java]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Review]     [Fedora Art]     [Fedora Music]     [Fedora Packaging]     [CentOS]     [Fedora SELinux]     [Big List of Linux Books]     [KDE Users]     [Fedora Art]     [Fedora Docs]

  Powered by Linux