Novell LINUX ENTERPRISE DESKTOP 11, Manual

Page: 76 / 450

the LDIF format (LDAP data interchange format) for this. An LDIF file is a simple text
file that can contain an arbitrary number of attribute and value pairs. The LDIF file for
creating a rough framework for the example in
Figure 4.1, “Structure of an LDAP Di-
rectory” (page 38) would look like that in Example 4.2, “Example for an LDIF File”
(page 62).
IMPORTANT: Encoding of LDIF Files
LDAP works with UTF-8 (Unicode). Umlauts must be encoded correctly. Other-
wise, avoid umlauts and other special characters or use
recode
to recode the
input to UTF-8.
Example 4.2 Example for an LDIF File
# The Organization
dn: dc=example,dc=com
objectClass: dcObject
objectClass: organization
o: Example dc: example
# The organizational unit development (devel)
dn: ou=devel,dc=example,dc=com
objectClass: organizationalUnit
ou: devel
# The organizational unit documentation (doc)
dn: ou=doc,dc=example,dc=com
objectClass: organizationalUnit
ou: doc
# The organizational unit internal IT (it)
dn: ou=it,dc=example,dc=com
objectClass: organizationalUnit
ou: it
Save the file with the
.ldif
suffix then pass it to the server with the following com-
mand:
ldapadd -x -D <dn of the administrator> -W -f <file>.ldif
-x
switches off the authentication with SASL in this case.
-D
declares the user that
calls the operation. The valid DN of the administrator is entered here just like it has
been configured in
slapd.conf
. In the current example, this is
cn=Administrator,dc=example,dc=com
.
-W
circumvents entering the pass-
word on the command line (in clear text) and activates a separate password prompt.
62 Security Guide