LDAP for Rocket Scientists - Change Log

The changes made since the previous revision of this document. We constantly update the on-line text and note the changes made in this log for the next version. When we publish - periodically - a new version the changes noted here may already have been available on-line for some time.

Version 0.1.19 15th, March 2018

General - Progressive update to OpenLDAP 2.4+.
General - Progressive change to use OLC (cn=config) for all configuration.
General - OpenDS (appers dormant) changed to OpenDJ (and link updated).
Chapter 2 - fixed annoying typos notified by readers.
Chapter 2 - Inconsistent use of widget and widgets in referral examples.
Chapter 2 - Clarification of alias names in attributes. Removal of SINGLE-VALUE userPassword (surprisingly it's actually MULTI-VALUE).
Chapter 3 - fixed annoying typos notified by readers.
Chapter 3 - added note of three types of entries (object, alias and subentry).
Chapter 4 - Substantial update to the Windows install process to reflect OpenLDAP on Windows changes.
Chapter 5 - Number of textual corrections.
Chapter 6 - olcLogLevel/loglevel addition of a note to clarify that the -d argument of the slapd command line overrides these settings. Incorrect links.
Chapter 6 slapd-config.html - fixed annoying typos notified by readers.
Chapter 6 slapd-config.html - additional note when adding schema using slaptest conversion method.
Chapter 6 syncprov.html - incorrect value (contextCSN) shown in olcDbIndex/index example.
Chapter 6 olcDbIndex/idex - incorrect form of the olcDatabase name used in link.
Chapter 8 Updated to reference RFC 4525. Clarified some text on add directive.
Chapter 7 slapd.conf referred to as slad.conf in titles. Typos fixed.
Chapter 11 - Added very short note about changing port numbers for LDAP and LDAPS.
Chapter 14 - Incorrect link for slaptest. Minor format correcctions.
Chapter 14 - Note to indicate that -d argument of slap overrides and olcLogLevel/loglevel parameter including OLC (cn=config) updates.
Chapter 15 - Typo corrections.
Appendix A - Added subentry page, link to information about ASN.1 and note about changing port numbers.
Appendix D - Added subentry, subschema glossary definitions. Expanded entry definition.
Appendix E - misc.schema title correction.

Version 0.1.18 16th december 2016

General - Progressive update to OpenLDAP 2.4+.
General - Progressive change to use OLC (cn=config) for all configuration.
Chapter 2 - Changed order of ObjectClass and Attributes descriptions. Additional text and notes added thoughout section 2.4 especially 2.4.4 and 2.4.5.
Chapter 2 - favouriteDrink spelled incorrectly in text - twice (uses, bizarrely, the UK favourite spelling not the US favorite form which may reflect a UK prediliction for drink - whether of the alcoholic variety or not we can only speculate - or a pathological fear of being served coffee instead of tea).
Chapter 2 - Correction of typo in 2.3.1 and 2.4.5.
Chapter 3 - Correction of rootDSE definition to DSA Specific Entry. Correct in glossary but wrong in ch3.
Chapter 3 - Description of COLLECTIVE, NO-USER-MODIFICATION and X- elements of the attribute definition. Minor wording changes on X-ORDERED description.
Chapter 5 - minor update to LDIF file notes.
Chapter 5 - the text describing the LDIF file at step-1 incorrectly indicated that a title attribute was being added.
Chapter 6 - bdb and hdb links updated to new Bdb (Oracle) documentation.
Chapter 6 - Added mdb placeholder.
Chapter 7 - Data Replication (AccessLog) example incorrectly referred to olcReloadHint - corrected to olcSpReloadHint.
Chapter 8 - Major update and clarifications to LDIF.
Chapter 12 - Update to Error Code 80 and Error Code 53.
Appendix A - Additional information about RFC2247, X.500 style DIT roots.
Appendix B - Updated BDB links.
Appendix D - Typo in rootDSE definition.

Version 0.1.17 16th October, 2015

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.
General - Progressive change to use olc (cn=config) for all configuration.
General - Progressive change to use HTML5.
chapter 3 - Update RFC references for Objectclass and Attribute definitions.
Appendix A - Clarifications and additional text on Inheritance.

Version 0.1.16 April 2nd, 2015

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.

General - Progressive change to use olc (cn=config) for all configuration.

Chapter 2 - Typos, wording changes and diagram update. Refomatted for HTML5.

Chapter 3 - Typos, OLC update, wording clarification and updated diagrams.

Chapter 5 - Step 1 - reworkrd text describing < file: format in LDIF to reflect current OpenLDAP format (which is different to RFC2849).

Chapter 5 - reworked to use OLC by default - slapd.conf pages saved as -file and linked.

Chapter 6 - olcAccess (Access to) clarified use of 'manage' permission.

Chapter 6 - include statement reference to OLC (cn=config).

Chapter 6 - correction: slapd.d files need 0750 in latest releases.

Chapter 6 - manual deletion of Database procedure documented with OLC.

Chapter 6 - ppolicy - correction of last fragment in page change from pwdPolicy to pwdPolicySubentry. Converted to HTML5.

Chapter 7 - updated text and diagrams to cover OLC (cn=config). Reformatted for HTML5.

Chapter 7 - Aliases - corrected text errors. Refomatted for HTML5.

Chapter 9 - Fixed error links to dyngroup.schema. Reformatted to HTML5.

Chapter 9 - Typo in memberURL.

Chapter 14 - minor note and link added to Apache Directory Studio for use as an LDAP browser and client.

Appendix A - Additional information and diagrams on DNs for Authentication.

Appendix E - config.ldif increased links. Convert to HTML5.

Version 0.1.15 July 26th, 2013

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.

Chapter 2 - Rewording of text to improve clarity - hopefully.

Chapter 3 - minor clarifications to x-ordered attribute description and correction of minor typos.

Chapter 4 - updated Win2k section to OpenLDAP for Windows distribution - notes on use of cygwin or ApacheDS on windows.

Chapter 5 - correction of minor typos.

Chapter 5 - 5.1.7 correction of jpegphoto:< file:// format error (incorrect space present).

Chapter 5 - Step 3, correction of minor typos.

Chapter 5 - Step 4, correction of minor typos, fix uids in 5.4.6.

Chapter 6 - additional linkage - minor text revisions.

Chapter 6 - Indexing - incorrect definition of subinitial and subfinal.

Chapter 6 - ppolicy - corrected attribute name to pwdLockout in unlocking account section.

Chapter 7 - additional note about syncing with obsoleted slurpd.

Chapter 7 - clarification of syncing procedure with replication - applies to both slurpd and syncrepl.

Chapter 7 - referrals - text clarifications. Added procedure and notes about deleting referral entry.

Chapter 7 - Aliases - new section - definition and description with examples.

Chapter 8 - correct HTML format errors.

Chapter 14 - typos and replicated arguments in ldapadd,ldapmodify.

Chapter 14 - argument -M added usage note - needed to delete referral.

Appendix A - LDAP Data types - formatting changes and minor clarifications on Integer type.

Appendix A - Indexing - incorrect definition of subinitial and subfinal.

Appendix A - LDAP OIDs - minor formatting changes.

Appendix A - LDAP Component matching - incorrect RFC reference.

Appendix C - Updated RFCs.

Appendix D - Glossary - minor clarification changes.

Appendix E - Objects - Formatting changes.

Version 0.1.14 May 16th, 2012

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.
General - Updated references from Fedora Directory Server to 389 Directory Server.
Chapter 2 - text revisions and minor extensions to improve readability - it is hoped.
Chapter 3 - description of the non-standard attribute feature X-ORDERED used on OLC (cn=config).
Chapter 3 - minor revisions and extensions to improve readability.
Chapter 4 - updated ApacheDS Windows installation guide to confirm no change to install for Windows 7.
Chapter 6 - cn=config, erroneous oldRootDn reference corected to olcRootDn in a note.
Chapter 6 - add reference to dynlist (dynamic Groups) overlay.
Chapter 6 - add dynlist overlay description.
Chapter 6 - Change of terminology when describing cn=config from real-time configuration (rtc) to on-line configuration (OLC) to reflect the use of 'olc' to prefix directive names.
Chapter 6 - Addition of olc (cn=config) names to all documented configuration directives.
Chapter 6 - Addition of objectClasses used in OLC (cn=config).
Chapter 6 - Addition of usage notes for OLC (cn=config) to cover common tasks such as adding schemas, ACLs, modules, databases and overlays.
Chapter 6 - syncprov overlay - added OLC (cn=config) names.
Chapter 9 - add localhost search URL example.
Chapter 11 - Added new note on Dynamic Groups
Chapter 12 - Additional notes on error types
Chapter 14 - LDAPBrowser/Editor documentation. Fixed broken local link.
Chapter 14 - Added -n flag for slaptest. Additional and modified explanations. Additional examples.
Appendix A - Component Search filters - correction to syntax and fixing an error in one example.
Appendix D - Added missing definition of name scope.
Appendix E - Added dyngroup.schema for Dynamic Groups and misc.schema.
Appendix E - config.ldif (cn=config) - added browsing features.
Appendix E - correction to inetOrgPerson objectclass hierarchy.

Version 0.1.13 10th November 2011

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.
Chapter 2 - Addition of notes on DNs used for Authentication. Typos.
Chapter 2 - Section 2.4.1 change from 'each parent may have one or more children' to 'each parent mare have zero or more children'.
Chapter 3 - Typos.
Chapter 5 Section 5.1.4 - Addition of notes on DNs used for Authentication.
Chapter 11 Error in howto set up groups - incorrectly defined dc=groups, corrected to ou=groups..
Chapter 14 ldadelete missing 'dn:' from second line of ldapmodify example at begining of section.
Appendix A - New note on DNs used for Authentication (Bind DN or Principal DN).
Appendix A - Addition of cross-refs to Bind DN note.
Appendix D - Addition of Principal DN definition.

Version 0.1.12 4th August 2010

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.
Implementations Page - Minor rewording.
Contents Page - Correction of multiple broken links in Chapter 11.
Chapter 2 - Correction of two references to Relatively Distinguished Name to relative Distinguished Name.
Chapter 3 - Explanation of the USAGE attribute definition value.
Chapter 4 - Update to ApacheDS installation procedures.
Chapter 5 - Section 5.3.4 Updated ACLs following re-testing on OpenLDAP 2.4.16+.
Chapter 6 - Diagram used in the 'Access to' example section titled Public and Private Address Books was incorrect. The ACL from this section contained a note about the use of ,expand when used with 2.4. The text of the accompanying notes has been updated to reflect the ACL note.
Chapter 6 - Removal of duplicate text.
Chapter 6 - Revised text on the group and peername statements of Access to directive, reflecting recent changes.
Chapter 9 - Replacement of Ethereal with wireshark.
Chapter 12 - Update to error messages.
Chapter 14 - Update to LDAP Browser/Editor link.
Chapter 14 - Minor update to slappasswd example text.
Appendix A - Additional text in DN/RDN description.
Appendix A - Minor changes to ASN.1.
Appendix A - Additional text on defining root/suffix name.
Appendix A - New sections on defining X.500, RFC 2247 and simple root/suffix names.
Appendix B - Update to LDAP Browser/Editor link.
Appendix C - Update to RFCs.
Appendix D - minor error in the description of entryCSN, additional detail on contextCSN, CSN and entryCSN descriptions. Link corrections. Spelling corrections.
Appendix D - Additional detail on naming contexts.

Version 0.1.11 12th July 2009

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.
Chapter 1 - minor text changes.
Chapter 2 - minor text changes.
Chapter 3 - Addition of parent, child and sibling entry definitions in section 3.1 - additional minor clarifications and links added throughout.
Chapter 5 - minor text changes.
Chapter 6 - Additional notes on URL form of ServerID and minor clarifications.
Chapter 6 - Addition of password-hash directive.
Chapter 6 - Addition of Password Policy Overlay (ppolicy) description
Chapter 6 - Availability of an enhanced version of ppolicy
Chapter 14 - Update to the status of LDAP Browser/Editor.
Appendix A - Data Types - Additional notes on Integer data type.
Appendix A - Correction of link to components matching search filter.
Appendix A - OID - Update references to the old oid.elibel.tm.fr site to www.oid-info.com.
Appendix A - Notes on ObjectClass Inheritance
Appendix B - Update references to the old oid.elibel.tm.fr site to www.oid-info.com.
Appendix B - Update references LDAP Browser/Editor. Addition of Apache LDAP Studio to LDAP browser list.

Version 0.1.10 October 26th 2008

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.
Index/Contents - update to reflect new sections
Chapter 1 - Typo.
Chapter 2 - Correction to the LDAIF file at 2.4.4 which incorrectly showed inetOrgPerson used for ou=people.
Chapter 2 - Revised text on LDAP vs RDBMS. Minor corrections and updated links.
Chapter 3 - Updated text (add entry description in overview) and updated/additional diagrams. Minor corrections and updated links.
Chapter 3 - Updated rootDSE to 2.4.x.
Chapter 5 - Section 5.3.1 corrected diagram
Chapter 6 - Access directive dn.dnstyle - change to default of base (exact) was regex until 2.2+
Chapter 6 - Access directive revised documentation on break control word
Chapter 6 - BDB update references to oracle site from old sleepycat.com site.
Chapter 6 - Corrections to converting slapd.conf to cn=config.
Chapter 6 - Inclusion of index directive (previously referenced only through Appendix A) and mirrormode directives.
Chapter 6 - Updated documentation for syncprov and accesslog overlay.
Chapter 6 - Updated documentation for rootpw directive.
Chapter 6 - Updated documentation for syncrepl directive.
Chapter 6 - Inclusion of slapd.conf TLS directives
Chapter 6 - Some ldap.conf directives (TLS_CACERT)
Chapter 6 - Spell checked!
Chapter 7 - Spell checked!
Chapter 7 - Corrections and updates to syncrepl, delta-sync and N-Way multi-mastering configurations following testing with 2.4.11.
Chapter 8 - Corrections to LDIF files and text when using ldapadd/ldapmodify to reflect the fact that assumptions are no longer made by these utilities.
Chapter 11 - Additional Howtos (TLS and Security)
Chapter 11 - Notes moved to Appendix A
Chapter 12 - additional causes on some error messages
Chapter 12 - additional error messages
Chapter 14 - re-order of ldapsearch arguments
Chapter 14 - re-order of ldapadd/ldapmodify arguments - update to 2.4+
Chapter 14 - re-order of ldapdelete arguments and notes about file format (-f)
Chapter 14 - Addition of LDAPBrowser/Editor usage and configuration information.
Chapter 14 - Addition of slapd command line options.
Chapter 15 - Security Overview. Placeholders for SASL and TLS configuration.
Chapter 15 - TLS configurations.
Appendix A - New section on survival ASN.1
Appendix A - Moved Notes from chapter 11 to Appendix A
Appendix A - Data Types - minor correction to DirectoryString definition.
Appendix A - New section - Component Matching Search Filters - incomplete because it does not currently work in OpenLDAP 2.4.8
Appendix B - Update to resources
Appendix C - Update to RFCs (RFCs 3641 and 4792)

Version 0.1.9 1st February 2008

General - Progressive addition of ApacheDS material and update to OpenLDAP 2.4+.
Index/Contents - Updated
Chapter 2 - Addition of section summarizing LDAP advantages. Minor corrections.
Chapter 2 - Expansion and Rework of Referral and Replication Section.
Chapter 3 - Attributes - additional text.
Chapter 6 - Renaming of chapter to Configuration Files (covers OpenLDAP's slapd.conf, ldap.conf and ApacheDS's server.xml file).
Chapter 6 - OpenLDAP's LogLevel - additional detail, directory - minor corrections.
Chapter 6 - OpenLDAP's access to <what> - change to attrs (was attr) seems that OpenLDAP is trying to remove attr, change to use of expand modifier with regex.
Chapter 6 - add OpenLDAP's overlay, replica, replogfile, syncrepl, readonly, updatedn, updateref, replicationinterval, referral, moduleload and modulepath directives
Chapter 6 - OpenLDAP - overlay documentation for accesslog, chain, syncprov (replication). Placeholders for pcache (proxy), ppolicy (password policy), rwm (re-write DN).
Chapter 6 - OpenLDAP - conversion to cn=config
Chapter 7 - Renaming of chapter to Replication and Referrals.
Chapter 7 - 7.2 Replication (slurpd and syncrepl).
Chapter 7 - 7.2 Replication syncrepl N-Way Multi-Master.
Chapter 7 - 7.2 Replication syncrepl delta synchronization.
Chapter 7 - 7.3 Referral and Chaining.
Chapter 8 - LDIF deleting attributes and entries - additional detail.
Chapter 8 - DSML Placemarker.
Chapter 9 - LDAP URLs - minor corrections and clarifications. Updated to RFC 4516. Changes to use example.com
Chapter 11 - add slurpd, referrals, referral chaing, syncrepl, delta synchronization
Chapter 14 - LDAP Tools - update ldapsearch to version 2.4+
Chapter 14 - LDAP Tools - update slapadd to version 2.4+
Chapter 14 - LDAP Tools - update slapcat to version 2.4+
Chapter 14 - LDAP Tools - update slapindex to version 2.4+
Chapter 14 - LDAP Tools - addition of ldappasswd and slaptest documentation
Appendix A - OIDs - additional detail.
Appendix A - search filters - minor corrections. Update to RFC 4515 (including extensible matching).
Appendix A - DNs-RDNs - clarification that it is the data content of an attribute that creates the DN/RDN.
Appendix B - Updates to Open Source LDAP servers.
Appendix C - RFC updates.
Appendix D - ASN.1 - better link. Additional Entries.
Appendix E - Added cn=config cn=schema.ldif file.

Version 0.1.8 December 21st 2007

General - Progressive addition of Open Source ApacheDS material.
Chapter 4 - Addition of OpenLDAP and ApacheDS installation.
Chapter 5 - Removal of version: 1 tag and associated comments in LDIF files due to problems with OpenLDAP 2.2+
Chapter 8 - error in newrdn statements - must include the objectclass
Appendix B - Addition of Apache Directory Server and other tools, Update to LDAPBrowser/Editor link
Appendix C - update of RFC list

Version 0.1.7 22nd March 2007

General - progressive change from mydomain.com to example.com.
Chapter 3 - ABSTRACT typo (was ABTRACT)
Chapter 5 - minor typo
Chapter 6 - bdb searchstack prototype incorrect
Appendix A - Root Name Angst - clarification of wording
Appendix A - OID - correction of OpenLDAP OID to 1.3.6.1.4.1.4203 (incorrectly defined as 4303) and minor typos
Appendix D - Addition of Organizational Unit to definitions.

Version 0.1.6 19th January 2006

General - progressive change from mydomain.com to example.com.
Chapter 3 - objectClass is an attribute and can be searched on
Chapter 5 - Steps 1, 2, 3, 4 - slapd.conf added note on index objectClass

Version 0.1.5 January 2006

Contents
General - progressive change from mydomain.com to example.com.
Chapter 5 - Step 1, 2, 3 and 4 - removal of dbnoync, dirtyread, searchstack directives from slad.conf files
Chapter 5 - Step 1, 2, 3 and 4 - change to index sn eq,sub (removes superfluous subinitial, subany and subfinal) directive from slad.conf files
Chapter 5 - Step 4 - addition of comments to objectclass and attributes
Chapter 5 - Step 4 - change location of slapd.sh start/stop script for [bsd]
Chapter 5 - Step 5 - single-sign-on SSO - incomplete placeholder
Chapter 11 - Minor corrections to multi-dit explantion
Appendix A - RDN-DN clarification of when a DN must be unique and when not.

Version 0.1.4 24th October 2004

Contents
Chapter 1 and 2 - many grammatical corrections and clarifications - thanks to Seemant Kulleen
Chapter 6 - minor corrections to rootDSE parameter
Appendix E - addition of userPassword to x-refed list

Version 0.1.3 5th September 2004

Contents
Contents - corrections to Chapter 5 numbering
Chapter 5 - corrections to section numbering
Appendix E - LDAP Objects and Schemas - cross referenced samba, courier and qmail schema.

Version 0.1.2 10th August 2004

Contents
Chapter 5 - Major error in LDIF for step 1 rejected by LDAP 2.2
Appendix B - LDAP Resources - added some web site references.
Appendix C - LDAP RFCs - added RFC 3829, 3866 and 3045.
Appendix E - LDAP Objects and Schemas - added samba3 and courier (email) schemas.

Version 0.1.1 24 July 2004

Contents
Chapter 5 - Samples - Create & Add ObjectClasses, Attributes and Schemas
Chapter 11 - HOWTO Configure Groups of Users
Chapter 11 - HOWTO Configure Multiple DITs
Appendix B - LDAP Resources - bad URL for LDAP Browser/editor - added some comments about tools.

Version 0.1.0 21 June 2004

Contents
Chapter 1 - Boiler Plate and Terminology
Chapter 2 - LDAP Overview
Chapter 3 - LDAP Schemas, objectClasses, Attributes
Chapter 5 - Samples - basic directory
Chapter 5 - Samples - security enhancement
Chapter 5 - Samples - Expanding Hierarchy
Chapter 6 - slapd.conf - access
Chapter 6 - slapd.conf - argsfile
Chapter 6 - slapd.conf - attributetype
Chapter 6 - slapd.conf - concurrency
Chapter 6 - slapd.conf - conn_max_pending
Chapter 6 - slapd.conf - conn_max_auth
Chapter 6 - slapd.conf - defaultsearchbase
Chapter 6 - slapd.conf - gentlehup
Chapter 6 - slapd.conf - idletimeout
Chapter 6 - slapd.conf - include
Chapter 6 - slapd.conf - loglevel
Chapter 6 - slapd.conf - objectclass
Chapter 6 - slapd.conf - pidfile
Chapter 6 - slapd.conf - referral
Chapter 6 - slapd.conf - schemadn
Chapter 6 - slapd.conf - sizelimit
Chapter 6 - slapd.conf - sockbuf_max_incoming
Chapter 6 - slapd.conf - sockbuf_max_incoming_auth
Chapter 6 - slapd.conf - threads
Chapter 6 - slapd.conf - timelimit
Chapter 6 - slapd.conf - database - bdb
Chapter 6 - slapd.conf - rootpw
Chapter 6 - slapd.conf - suffix
Chapter 6 - slapd.conf - rootdn
Chapter 8 - LDIF - format
Chapter 9 - LDAP URLs
Appendix A - Notes and Explanations - Root Angst
Appendix A - Notes and Explanations - DN and RDN
Appendix A - Notes and Explanations - Multiple DITs
Appendix A - Notes and Explanations - Search Filters
Appendix A - Notes and Explanations - OIDs
Appendix A - Notes and Explanations - LDIF defining the object hierarchy
Appendix A - Notes and Explanations - LDAP Data types
Appendix B - LDAP Resources
Appendix C - RFC's and X.500 Standards
Appendix D - Glossary
Appendix E - Common Object Classes and Attributes

Problems, comments, suggestions, corrections (including broken links) or something to add? Please take the time from a busy life to 'mail us' (at top of screen), the webmaster (below) or info-support at zytrax. You will have a warm inner glow for the rest of the day.