Hacker News new | ask | show | jobs
by throw0101a 287 days ago
Is it possible to view/edit the "cn=config" tree of OpenLDAP to make configuration changes with this?

I often do

    ldapvi -h ldapi:/// -Y EXTERNAL -b 'cn=config'
and another tool could be useful.
1 comments
woumn 287 days ago
It would be possible, but I don't have a good ldap server to test on, especially one I can modify config changes. If you'd like to contribute to the repo, adding a test ldap server that can be used for development would enable a lot more features.
link
throw0101a 287 days ago
If you have a Debian or Ubuntu system available, installing the `slapd` package (OpenLDAP) would be sufficient to get something on localhost or ldapi:///. RH-based systems have openldap* packages.

You don't really have to do much more than that for the purpose of testing this (no creating of accounts, groups, sub-trees, etc).

Perhaps at most go to the stanza/paragraph that defines "olcDbIndex" values, add a new one, and see if a new index file is created in "olcDbDirectory" (often /var/lib/ldap):

* https://www.zytrax.com/books/ldap/apa/indeces.html

* https://warlord0blog.wordpress.com/2020/10/19/ldap-indexes/

link
bravetraveler 287 days ago
May find this worth a whirl, hosted instance: https://www.freeipa.org/page/Demo

Verified the services respond/credentials work [through the UI, my ldapsearch-fu is weak] :)

link