7. Administration (continued)
7.2.3 Remote OSD Administration Tab (continued)
Customizing the OpenLDAP Schema
The schema that slapd uses may be extended to support additional syntaxes, matching rules, attribute types, and object classes. In the case of the KVM, the User class and the permission attribute are extended to define a new schema. The extended schema file used to authenticate and authorize users logging in to the KVM switch is shown in the following figure:
LDAP Data Stucture
An LDAP directory stores information in a tree structure known as the Directory Information Tree (DIT). The nodes in the tree are directory entries, and each entry contains information in
DIT Creation
The LDAP Data Interchange Format (LDIF) is used to represent LDAP entries in a simple text format (please refer to RFC 2849). The following figure illustrates an LDIF file that creates the DIT for the KVM directory tree:
The following figure illustrates an LDIF file that defines the OpenLDAP group for the KVM.
39
