39
7.2.3 Remote OSD Administration Tab
(continued)
7. Administration
(continued)
Customizing the OpenLDAP Schema
The schema that
slapd
uses may be extended to support additional
syntaxes, matching rules, attribute types, and object classes. In the case
of the KVM, the
User
class and the
permission attribute
are extended
to define a new schema. The extended schema file used to authenticate
and authorize users logging in to the KVM switch is shown in the
following figure:
LDAP Data Stucture
An LDAP directory stores information in a tree structure known as the
Directory Information Tree (DIT).
The nodes in the tree are directory
entries, and each entry contains information in attribute-value form. An
example of the LDAP directory tree is shown in the figure:
DIT Creation
The
LDAP Data Interchange Format (LDIF)
is used to represent LDAP
entries in a simple text format (please refer to RFC 2849). The
following figure illustrates an LDIF file that creates the DIT for the
KVM directory tree:
The following figure illustrates an LDIF file that defines the
OpenLDAP group for the KVM.
