This article is a mirror article of machine translation, please click here to jump to the original article.

View: 10532|Reply: 0

OpenLDAP custom objectclass and properties

[Copy link]
Posted on 6/26/2020 6:41:39 PM | | | |
In almost all LDAP servers, it is necessary to extend the functionality of the basic LDAP directory as needed, create new object classes or extend existing object classes. All object classes inherit from their parent object classes.

objectClass has a strict hierarchy, with top and alias at the top. For example, the objectClass of organizationalPerson is subordinate to person, and person is subordinate to top.

objectClass can be divided into the following 3 categories:

Structural: such as person and organizationUnit;

Auxiliary: such as extensibeObject;

Abstract: For example, the abstract objectClass cannot be used directly.

1. Create a new schema file, and create a new my.schema under the /etc/openldap/schema directory



Note:

1. The oid needs to ensure global uniqueness, such as: 2.5.4.56 2.5.6.24

Reference:The hyperlink login is visible.

2. Attribute and class names Keywords should be avoided

For example: person user, etc

3. Customize the schema, preferably inherit person or organizationalUnit

2. Introduce my.schema in slapd.conf

Path: /etc/openldap/slapd.conf



3. Restart LDAP





Previous:Angular 9 Series (nine) #id selector applied on the page
Next:CentOS 7 uses crontab to perform tasks at regular intervals
Disclaimer:
All software, programming materials or articles published by Code Farmer Network are only for learning and research purposes; The above content shall not be used for commercial or illegal purposes, otherwise, users shall bear all consequences. The information on this site comes from the Internet, and copyright disputes have nothing to do with this site. You must completely delete the above content from your computer within 24 hours of downloading. If you like the program, please support genuine software, purchase registration, and get better genuine services. If there is any infringement, please contact us by email.

Mail To:help@itsvse.com