7.3. LDAP

OpenLDAP

The configuration required for the OpenLDAP service has changed in Red Hat Enterprise Linux 6. In previous versions, slapd was configured via the /etc/openldap/slapd.conf file. The slapd configuration in Red Hat Enterprise Linux 6 is now stored in a special LDAP directory (/etc/openldap/slapd.d/) with a pre-defined schema and Directory Information Tree (DIT). Further details of this configuration schema can be found at openldap.org. The following section details an example on how to convert the old configuration file to work with the new directory:

7.3.1. Converting slapd configuration

This example assumes that the file to convert from the old slapd configuration is located at /etc/openldap/slapd.conf and the new directory for OpenLDAP configuration is located at /etc/openldap/slapd.d/.

Remove the contents of the new /etc/openldap/slapd.d/ directory:
```
 # rm -rf /etc/openldap/slapd.d/* 
```
Run slaptest to check the validity of the configuration file and specify the new configuration directory:
```
 slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d 
```

Configure permissions on the new directory:

 chown -R ldap:ldap /etc/openldap/slapd.d

 chmod -R 000 /etc/openldap/slapd.d

 chmod -R u+rwX /etc/openldap/slapd.d

Once the service is confirmed to be working in the new configuration directory, remove the old configuration file:
```
 rm -rf /etc/openldap/slapd.conf 
```