Skip to content

Apache Directory Studio

Apache Directory Studio has been out there for awhile, but now that it’s up to version 1.3 RC2, I’ve decided to go full immersion with it and see just what can be done.

Based on the Eclipse IDE, the product is basically a complete LDAP development toolkit that includes a client browser/editor (could this replace Jarek Gawor’s LBE? Old habits die hard in tech, so I wouldn’t bet on it), LDIF editor, OpenLDAP schema editor, as well as an aci and configuration editor for Apache’s own Directory Server (Apache DS).

If you already have a copy of Eclipse installed, you can choose to install it through the “Help, Software, Updates, Find and Install dialog”. Instructions for doing that are found here. At the moment the URL to add as a New Remote Site is

http://directory.apache.org/studio/update/1.x

So far I’ve only tested it with OpenLDAP, but next week will see what it can do with Sun’s Java Systems Directory and Oracle’s Internet Directory. I’ll probably be asking eldapino to check it out with Microsoft’s Active Directory.

Posted 15 November 2008 † Phil Lembo § Directory Servers § LDAP Apps § LDAP Open Source § Open Source Software § Tools ‡ Comments Off

A slapd-meta configuration

Just wanted to quickly note down a couple of things to document some configuration work I’ve been doing with OpenLDAP’s slapd-proxy and slapd-meta backends. Both do basically the same thing, provide a virtual directory that can be used to transform entries at the attribute level, as well as to massage entry dn’s when necessary.

database        meta
suffix          "o=example,c=US"
uri             "ldap://ldap.example.com/ou=home,o=example,c=US"
suffixmassage   "ou=home,o=example,c=US" "ou=people,dc=example,dc=com"
acl-authcDN     "cn=manager,dc=example,dc=com
acl-passwd      secret

What this configuration results in is an OpenLDAP meta server that translates an entry like

“uid=test,ou=People,dc=example,dc=com”

into the entry

“uid=test,ou=home,o=example,c=US”

The directives are pretty much as they appear in a sldap-proxy slapd.conf, although some older code has made it necessary, for backward compatibility, to maintain some older terminology like “suffixmassage” rather than “rwm-suffixmassage”.

Posted 15 November 2008 † Phil Lembo § Configuration § Directory Servers ‡ Comments Off