LDAP entries for suffixes

Edit online

You must create a suffix entry to represent as the parent entry in an LDAP directory information tree (DIT) hierarchy.

You can create LDAP entries for the suffixes by one of the following ways:

  • Use the ldapadd command to create the LDAP entries for suffixes.
  • Restore a directory database that contains the LDAP entries for suffixes.
  • Load the directory server with an LDIF file that contains the LDAP entries for suffixes.

To create suffix entry for an o=sample suffix, run the ldapadd command. For example:

ldapadd -h host -p port -D cn=root -w admin_passwd 
dn: o=sample 
objectClass: organization 
objectclass: top 
o: sample

where, the variables indicate:

  • cn=root is the primary administrator of an instance
  • admin_passwd is the password credentials of the administrator
  • host is the host name where the directory server instance is running
  • port is the port number of the directory server instance

In the example, access control lists (ACLs) are not assigned to the suffix object. You can assign the appropriate ACLs based on your LDAP environment requirement.