Red Hat DIRECTORY SERVER 7.1 - Changing Configuration Attributes; Modifying Configuration Entries Using LDAP

Accessing and Modifying Server Configuration
Chapter 2 Core Server Configuration Reference 33
• The user acting as the administrator, who has the UID admin that can be
configured at installation time.
• Members of local Directory Administrators Group.
• The local Directory Administrator (root DN).
• The SIE (Server Instance Entry) Group, usually assigned using the Set Access
Permissions from the main topology view in the main console.
For more information on access control, see the Red Hat Directory Server
Administrator’s Guide.
Changing Configuration Attributes
You can view and change server attribute values in one of three ways. You make
the changes by using LDAP through Red Hat Console, by performing ldapsearch
and ldapmodify commands, or by manually editing the dse.ldif file.
The following sections describe how to modify entries using LDAP (both via Red
Hat Console and over the command-line), the restrictions to modifying entries, the
restrictions to modifying attributes, and the configuration changes requiring
restart.
Modifying Configuration Entries Using LDAP
The configuration entries in the directory can be searched and modified using
LDAP either via the Red Hat Console or by performing ldapsearch and
ldapmodify operations in the same way as other directory entries. The advantage
of using LDAP to modify entries is that you can make the changes while the server
is running. You must remember to specify the port number when modifying
configuration entries since the server is not necessarily running on port 389. For
further information, see chapter 2, “Creating Directory Entries,” in the Red Hat
Directory Server Administrator’s Guide. However, certain changes do require the
server to be restarted before they are taken into account. See “Configuration
Changes Requiring Server Restart,” on page 126, for further information.
NOTE If you edit the dse.ldif file, you must stop the server beforehand;
otherwise, your changes will be lost. Editing the dse.ldif file is
recommended only for changes to attributes which cannot be
altered dynamically. See “Configuration Changes Requiring Server
Restart,” on page 126, for further information.