Red Hat DIRECTORY SERVER 7.1 - Restrictions to Modifying Configuration Entries and Attributes

Accessing and Modifying Server Configuration
34 Red Hat Directory Server Configuration, Command, and File Reference • May 2005
The entire configuration, including attributes that always take default values, can
be viewed by performing an ldapsearch operation on the cn=config subtree:
ldapsearch -b cn=config -D bindDN -w password
where bindDN is the DN chosen for the Directory Manager when the server was
installed and password is the password chosen for the Directory Manager. For
more information on using ldapsearch , see “ldapsearch,” on page 236.
Previously, we saw an example of the configuration entry for the Telephone
Syntax Plug-in where the plug-in is enabled. If you wanted to disable this feature,
you might use the following series of commands to implement this change.
Code Example 2-4 Disabling the Telephone Syntax Plug-in
Restrictions to Modifying Configuration Entries and Attributes
Certain restrictions apply when modifying server entries and attributes:
• The cn=monitor entry and its child entries are read-only and cannot be
modified.
• If an attribute is added to cn=config , the server will ignore it.
• If an invalid value is entered for an attribute, this will be ignored by the
server.
• Because ldapdelete is used for deleting an entire entry, you should use
ldapmodify if you want to remove an attribute from an entry.
NOTE As with any set of configuration files, care should be taken when
changing or deleting nodes in the cn=config subtree as this risks
affecting Directory Server functionality.
ldapmodify -D cn="directory manager" -w password33
dn: cn=Telephone Syntax,cn=plugins,cn=config
changetype: modify
replace: nsslapd-pluginEnabled
nsslapd-pluginEnabled: off