Installation#

$ dnf install openldap-clients

CA Certificate Directory#

Store CA certificates in a directory, then execute the following command:

``$ openssl rehash ``

Environment Variables#

  • LDAP_BASEDN: default base DN for ldapsearch

  • LDAPTLS_CACERT:

  • LDAPTLS_CERT:

  • LDAPTLS_KEY:

  • LDAPTLS_CACERTDIR:

ldap.conf Parameters#

  • TLS_CERT:

  • TLS_KEY: [:]

  • TLS_CACERTDIR:

Authentication#

Basic Authentication#

$ <command> -x -D "cn=Directory Manager" -w Secret.123 ...

LDAPI#

$ <command> -H <URL> -Y EXTERNAL

Searching LDAP Entries#

$ ldapsearch -x -D "cn=Directory Manager" -w Secret.123 -b "dc=example,dc=com" -s base "(objectClass=*)"

See Also#