The SLAPD and SLURPD Administrators Guide
University of Michigan
Version 3.3
April 30, 1996
- 1. Introduction to slapd and slurpd
- 1.1 What is a directory service?
- 1.2 What is LDAP?
- 1.3 How does LDAP work?
- 1.4 What is slapd and what can it do?
- 1.5 What about X.500?
- 1.6 What is slurpd and what can it do?
- 2. A Quick-Start Guide to Running slapd
- 3. The Big Picture - Configuration Choices
- 3.1 LDAP as a local service only
- 3.2 Local service with X.500 referrals
- 3.3 LDAP as a front end to X.500
- 3.4 Replicated slapd service
- 4. Building and Installing slapd & slurpd
- 4.1 Pre-Build Configuration
- 4.1.1 Editing the Make-common file
- 4.1.2 Editing the include/ldapconfig.h file
- 4.2 Making the Software
- 4.3 Installing the Software
- 5. The slapd Configuration File
- 5.1 Configuration File Format
- 5.2 Configuration File Options
- 5.2.1 Global Options
- 5.2.2 General Backend Options
- 5.2.3 LDBM Backend-Specific Options
- 5.2.4 Shell Backend-Specific Options
- 5.2.5 Password Backend-Specific Options
- 5.3 Access Control
- 5.3.1 What to control access to
- 5.3.2 Who to grant access to
- 5.3.3 The access to grant
- 5.3.4 Access Control Evaluation
- 5.3.5 Access Control Examples
- 5.4 Schema Enforcement
- 5.5 Configuration File Example
- 6. Running slapd
- 6.1 Command-Line Options
- 6.2 Running slapd as a Stand-Alone Daemon
- 6.3 Running slapd from inetd
- 7. Monitoring Slapd
- 8. Database Creation and Maintenance Tools
- 8.1 Creating a database over LDAP
- 8.2 Creating a database off-line
- 8.2.1 The ldif2ldbm program
- 8.2.2 The ldif2index program
- 8.2.3 The ldif2id2entry program
- 8.2.4 The ldif2id2children program
- 8.2.5 The ldbmcat program
- 8.2.6 The ldif program
- 8.3 The LDIF text entry format
- 8.4 Converting from QUIPU EDB format to LDIF format
- 8.4.1 The edb2ldif program
- 8.4.2 Step-by-step EDB to LDIF conversion
- 8.5 The ldbmtest program
- 8.6 The LDBM database format
- 8.6.1 Overview
- 8.6.2 Attribute index format
- 8.6.3 Other indexes
- 9. Performance Tuning
- 9.1 The allIDs threshold
- 9.2 The entry cache
- 9.3 The DB cache
- 9.4 Maintain the right indices
- 10. Distributing slapd DATA
- 11. Replication with slurpd
- 11.1 Overview
- 11.2 Replication Logs
- 11.3 Command-Line Options
- 11.4 Configuring slurpd and a slave slapd instance
- 11.4.1 Set up the master slapd
- 11.4.2 Set up the slave slapd
- 11.4.3 Shut down the master slapd
- 11.4.4 Copy the master slapd's database to the slave
- 11.4.5 Configure the master slapd for replication
- 11.4.6 Restart the master slapd and start the slave slapd
- 11.4.7 Start slurpd
- 11.5 Advanced slurpd Operation
- 11.5.1 Replication errors
- 11.5.2 Slurpd's one-shot mode and reject files
- 11.6 Replication from a slapd directory server to an X.500 DSA
- 12. Appendix A:Writing a slapd Backend
- 12.1 The slapd Backend API
- 12.1.1 Bind
- 12.1.2 Unbind
- 12.1.3 Compare
- 12.1.4 Search
- 12.1.5 Modify
- 12.1.6 Modify RDN
- 12.1.7 Add
- 12.1.8 Delete
- 12.1.9 Abandon
- 12.1.10 Initialization
- 12.1.11 Configuration
- 12.1.12 Close
- 12.2 Utility Routines Your Backend May Want to Call
- 12.2.1 Sending Search Entries
- 12.2.2 Sending a Result
- 12.2.3 Testing a Filter Against an Entry
- 12.2.4 Creating an Entry
- 13. Appendix B:Writing a SHELL backend
- 13.1 Overview
- 13.2 Input Format
- 13.2.1 Bind
- 13.2.2 Unbind
- 13.2.3 Search
- 13.2.4 Compare
- 13.2.5 Modify
- 13.2.6 Modify RDN
- 13.2.7 Add
- 13.2.8 Delete
- 13.2.9 Abandon
- 13.3 Output Format
- 13.3.1 Search Entry
- 13.3.2 Result
- 13.3.3 Debugging
- 13.4 Exit Status
- 13.5 Example
- 13.5.1 Configuration file
- 13.5.2 Search command shell script
- 14. Appendix C: Distributed Indexing with centipede
- 14.1 An Example
- 14.2 Limitations
- 15. Appendix D:Using Kerberos authentication with slapd and slurpd.
- 15.1 Build the U-M LDAP Package with Kerberos Support Enabled
- 15.2 Using Kerberos with slapd
- 15.2.1 Obtain a srvtab File for Your slapd Server
- 15.2.2 Install the srvtab File and Tell slapd Where It Is
- 15.2.3 Add Kerberos Names to Entries to Enable Authentication
- 15.2.4 Associate a Kerberos Name with the "rootdn" (optional)
- 15.3 Using Kerberos With slurpd
- 15.3.1 Obtain a srvtab File for Your slurpd Server
- 15.3.2 Configure the slapd Slaves to Accept Kerberos Authentication
- 15.3.3 Configure slurpd to Use Kerberos When Connecting to the Slaves
Send comments about this page to:
ldap-support@umich.edu