Operational overview

Checking slapd

You can use any LDAP client to check that slapd works. The following example uses the ldapsearch(1ldap) tool:

ldapsearch -h 127.0.0.1 'objectclass=' -b "o=organization, c=us"

This command will search for and retrieve every entry in the database. Note the use of single quotes around the filter, which prevents the asterisk () from being interpreted by the shell.

NOTE: The argument to the -b option must match one of the suffix entries in the slapd configuration file.

You are now ready to add more entries (for example, using ldap_add(3ldap) or another LDAP client), experiment with various configuration options, backend arrangements, and so on. Note that by default, the slapd database grants READ access to everybody. So if you want to add or modify entries over LDAP, you will have to bind as the rootdn specified in the configuration file (see ``General backend options''), or change the default access control (see ``Access control'').