6. Securing OpenLDAP

6. Securing OpenLDAP
Prev	Chapter 26. Linux OpenLDAP Server	Next

Don't forget to immunize important configuration files. The immutable bit can be used to prevent one from accidentally deleting or overwriting a file that must be protected. It also prevents someone from creating a symbolic link to this file. Once your slapd.conf file has been configured, it's a good idea to immunize it with command like:

               [root@deep] /# chattr +i /etc/openldap/slapd.conf

Further documentation, for more details there are several man pages you can read:

ldapd(8): LDAP X.500 Protocol Daemon
ldapdelete(1): ldap delete entry tool
ldapfilter.conf(5): configuration file for LDAP get filter routines
ldapfriendly(5): data file for LDAP friendly routines
ldapmodify, ldapadd(1): ldap modify entry and ldap add entry tools
ldapmodrdn(1): ldap modify entry RDN tool
ldappasswd(1): change the password of an LDAP entry
ldapsearch(1): ldap search tool
ldapsearchprefs.conf(5): configuration file for LDAP search preference routines
ldaptemplates.conf(5): configuration file for LDAP display template routines
ldif(5): LDAP Data Interchange Format
slapd(8): Stand-alone LDAP Daemon
slapd.conf(5): configuration file for slapd, the stand-alone LDAP daemon
slurpd(8): Standalone LDAP Update Replication Daemon
ud(1): interactive LDAP Directory Server query program

Prev	Up	Next
5. Configure the `/etc/rc.d/init.d/ldap` script file	Home	7. OpenLDAP Creation and Maintenance Tools