~/.ldaprc
für root:
URI ldapi:/// BASE cn=config SASL_MECH EXTERNAL
ldapsearch -LLL dn
ldapsearch -b cn=schema,cn=config -LLL dn
ldapsearch -LLL '(olcSuffix=*)' olcSuffix
ldapsearch -b 'olcDatabase={1}mdb,cn=config' -LLL
ldapsearch -LL -b olcDatabase={1}mdb,cn=config olcAccess
dn: olcDatabase={1}mdb,cn=config changetype: modify replace: olcAccess olcAccess: {0}to attrs=userPassword by self write by dn="cn=admin,dc=example,dc=org" write by anonymous auth by * none olcAccess: {1}to attrs=shadowLastChange by self write by dn="cn=admin,dc=example,dc=org" write by * read olcAccess: {2}to * by dn="cn=admin,dc=example,dc=org" write by * read
ldapmodify -f olcAccess.ldif
ldapvi -Y EXTERNAL -b 'olcDatabase={1}mdb,cn=config'