Chapter 5. Advanced Configuration

In the last chapter, we looked at securing our OpenLDAP server with SSL/TLS, simple and SASL authentication, and ACL-based authorization rules. All of these measures were implemented through configuration files for SLAPD. In this chapter, we will look at some other advanced features of SLAPD, including:

  • Configuring multiple database backends
  • Tuning directory performance
  • Working with directory overlays
  • Adding integrity checks
  • Adding uniqueness constraints

Multiple Database Backends

As we have worked on OpenLDAP so far we have been using only one directory tree (dc=example,dc=com) and one backend database (an HDB database configured in slapd.conf). This works well for most of the small directory servers. It is simple to ...

Get Mastering OpenLDAP now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.