Configuring the suffixes on a directory server

Edit online

You must create and configure at least one suffix before you add an LDAP entry to a directory server instance.

Before you begin

You must ensure that the directory server instance is running in normal mode.

About this task

For optimum directory server authentication performance, you must define another suffix to hold all directory server user entries. You can define more than one suffix, and distribute the user entries among multiple suffixes. In such a hierarchy, the server might need more time to search and determine under which suffix a user entry exists during authentication. Instead of storing users in multiple suffixes, you must store users entries in multiple LDAP containers under the same suffix for better performance.

Procedure

  1. Log in as the directory server instance owner.
  2. To determine the existing suffixes, run the following command: 
    ldapsearch -p port -L -D cn=root -w password -s base \ 
-b "cn=Directory, cn=RDBM Backends, cn=IBM Directory, cn=Schemas, \ 
cn=Configuration" "objectclass=*" ibm-slapdSuffix
    In addition to any user created suffixes, the output from the command returns the following suffixes:
    ibm-slapdSuffix: cn=localhost 
ibm-slapdSuffix: cn=ibmpolicies
ibm-slapdSuffix: cn=Deleted Objects
  3. Run the following command to create a suffix:
    ldapmodify -p port -D cn=root -w password 
dn: cn=Directory, cn=RDBM Backends, cn=IBM Directory, cn=Schemas, cn=Configuration 
changetype: modify 
add: ibm-slapdSuffix 
ibm-slapdSuffix: suffix_name
    where, password is the password for the primary administrator, and suffix_name is the LDAP suffix to configure.
  4. Run one the following commands to effect the changes that are made to the directory server configuration file:
    • Restart the directory server instance and the administration server.
      ibmslapd -I instance -k
ibmdiradm -I instance -k
ibmslapd -I instance 
ibmdiradm -I instance
    • Run the ldapexop command to reread the attribute.
      ldapexop -p port -D cn=root -w password -op readconfig -scope single \ 
"cn=Directory,cn=RDBM Backends,cn=IBM Directory, cn=Schemas,cn=Configuration" \
ibm-slapdSuffix