Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to set up some ACLs (starting off with a simple userpassword ACL) on a new OpenLdap deployment.

I am trying to get to grips with the new conf.d configuration format - but am struggling. Can anyone direct me to a good resource for this? (The obvious resources are yet to be updated to this new way of working it seems)

share|improve this question

To be honest, the first thing I did with my RHEL6 OpenLDAP installation was to revert back to the legacy slapd.conf file-based configuration, since it's much more amendable to things like version control and Puppet. However...

If you're familiar with the legacy configuration mechanism, you can set up your ACLs in a slapd.conf file and then use slaptest to migrate the configuration to cn=config style configuration:

# slaptest -f slapd.conf -F slapd.d

That should give you something to start with. The online OpenLDAP documentation already includes lots of documentation about the cn=config dynamic configuration mechanism.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.