<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<meta charset="utf-8">
</head>
<body>
<div class="markdown-here-wrapper">
<p style="margin-bottom: 20.4px; margin-top: 0px;">Hi Ryan,</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">thanks for the
quick reply.</p>
<blockquote
style="border-block-color: rgb(119, 119, 119); border-bottom-color: rgb(119, 119, 119); border-inline-color: rgb(114, 159, 207) rgb(119, 119, 119); border-inline-start: 2px solid rgb(114, 159, 207); border-left: 2px solid rgb(114, 159, 207); border-right-color: rgb(119, 119, 119); border-top-color: rgb(119, 119, 119); color: rgb(119, 119, 119); column-rule-color: rgb(119, 119, 119); margin: 20.4px 0px; outline-color: rgb(119, 119, 119); padding-inline: 17px; padding-left: 17px; padding-right: 17px; quotes: none; text-decoration-color: rgb(119, 119, 119); text-emphasis-color: rgb(119, 119, 119);">
<p
style="border-block-color: rgb(119, 119, 119); border-bottom-color: rgb(119, 119, 119); border-inline-color: rgb(119, 119, 119); border-left-color: rgb(119, 119, 119); border-right-color: rgb(119, 119, 119); border-top-color: rgb(119, 119, 119); color: rgb(119, 119, 119); column-rule-color: rgb(119, 119, 119); margin-bottom: 20.4px; margin-top: 0px; outline-color: rgb(119, 119, 119); quotes: none; text-decoration-color: rgb(119, 119, 119); text-emphasis-color: rgb(119, 119, 119);">Would
it be a challenge for Debian Edu to adapt and handle creating
its desired database directory itself?</p>
</blockquote>
<p style="margin-bottom: 20.4px; margin-top: 0px;">No. See this
simple debian-edu-config patch:</p>
<pre
style="font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; line-height: 20.4px; margin-bottom: 20.4px; margin-top: 20.4px;"><code
class="hljs language-patch"
style="background-color: rgb(255, 255, 255); border-block: 1px solid rgb(204, 204, 204); border-bottom: 1px solid rgb(204, 204, 204); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-inline: 1px solid rgb(204, 204, 204); border-left: 1px solid rgb(204, 204, 204); border-right: 1px solid rgb(204, 204, 204); border-start-end-radius: 3px; border-start-start-radius: 3px; border-top: 1px solid rgb(204, 204, 204); border-top-left-radius: 3px; border-top-right-radius: 3px; display: block; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px; margin-left: 2.55px; margin-right: 2.55px; overflow-block: auto; overflow-inline: auto; overflow: auto; padding-block: 17px; padding-bottom: 17px; padding-inline: 17px; padding-left: 17px; padding-right: 17px; padding-top: 17px;"><span
class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">---</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">diff --git a/cf3/cf.ldapserver b/cf3/cf.ldapserver</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">index b973dfb3..78051d64 100644</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">--- a/cf3/cf.ldapserver</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">+++ b/cf3/cf.ldapserver</span>
<span class="hljs-meta"
style="border-block-color: rgb(34, 102, 153); border-bottom-color: rgb(34, 102, 153); border-inline-color: rgb(34, 102, 153); border-left-color: rgb(34, 102, 153); border-right-color: rgb(34, 102, 153); border-top-color: rgb(34, 102, 153); color: rgb(34, 102, 153); column-rule-color: rgb(34, 102, 153); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px; outline-color: rgb(34, 102, 153); text-decoration-color: rgb(34, 102, 153); text-emphasis-color: rgb(34, 102, 153);">@@ -8,6 +8,12 @@</span> files:
debian.server.installation::
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ "/var/lib/ldap/."</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ create => "true",</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ perms => mog("700","openldap","openldap");</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+</span>
"/etc/ldap/slapd.conf"
link_from => ln_s("/etc/ldap/slapd-debian-edu-mdb.conf"),
move_obstructions => "true";
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">diff --git a/debian/debian-edu-config.postinst b/debian/debian-edu-config.postinst</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">index e4ba32c2..bfc1b6bf 100755</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">--- a/debian/debian-edu-config.postinst</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">+++ b/debian/debian-edu-config.postinst</span>
<span class="hljs-meta"
style="border-block-color: rgb(34, 102, 153); border-bottom-color: rgb(34, 102, 153); border-inline-color: rgb(34, 102, 153); border-left-color: rgb(34, 102, 153); border-right-color: rgb(34, 102, 153); border-top-color: rgb(34, 102, 153); color: rgb(34, 102, 153); column-rule-color: rgb(34, 102, 153); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px; outline-color: rgb(34, 102, 153); text-decoration-color: rgb(34, 102, 153); text-emphasis-color: rgb(34, 102, 153);">@@ -153,6 +153,15 @@</span> configure)
chmod 0755 /var/lib/debian-edu/
fi
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ mkdir -p /var/lib/ldap</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ if getent passwd openldap >/dev/null && getent group openldap >/dev/null; then</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ chown openldap:openldap /var/lib/ldap</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ fi</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ chmod 0700 /var/lib/ldap</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+</span>
fi
# silence dovecot's message: if you have trouble with authentication failures,
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">diff --git a/ldap-tools/ldap-debian-edu-install b/ldap-tools/ldap-debian-edu-install</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">index f1a8c762..908fbf77 100755</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">--- a/ldap-tools/ldap-debian-edu-install</span>
<span class="hljs-comment"
style="border-block-color: rgb(0, 119, 0); border-bottom-color: rgb(0, 119, 0); border-inline-color: rgb(0, 119, 0); border-left-color: rgb(0, 119, 0); border-right-color: rgb(0, 119, 0); border-top-color: rgb(0, 119, 0); color: rgb(0, 119, 0); column-rule-color: rgb(0, 119, 0); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-style: italic; font-weight: 550; line-height: 20.4px; outline-color: rgb(0, 119, 0); text-decoration-color: rgb(0, 119, 0); text-emphasis-color: rgb(0, 119, 0);">+++ b/ldap-tools/ldap-debian-edu-install</span>
<span class="hljs-meta"
style="border-block-color: rgb(34, 102, 153); border-bottom-color: rgb(34, 102, 153); border-inline-color: rgb(34, 102, 153); border-left-color: rgb(34, 102, 153); border-right-color: rgb(34, 102, 153); border-top-color: rgb(34, 102, 153); color: rgb(34, 102, 153); column-rule-color: rgb(34, 102, 153); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px; outline-color: rgb(34, 102, 153); text-decoration-color: rgb(34, 102, 153); text-emphasis-color: rgb(34, 102, 153);">@@ -183,6 +183,16 @@</span> dns_stop() {
# Init tree
init_ldap () {
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ mkdir -p /var/lib/ldap</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ if getent passwd openldap | grep -q openldap ; then</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ chown openldap:openldap /var/lib/ldap</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ fi</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+ chmod 0700 /var/lib/ldap</span>
<span class="hljs-addition"
style="background-color: rgb(187, 238, 187); font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; line-height: 20.4px;">+</span>
rm -f /var/lib/ldap/*
if [ -f /etc/shadow ] ; then
</code></pre>
<p style="margin-bottom: 20.4px; margin-top: 0px;">We can apply it
on our side if you prefer not to create the directory from
slapd.</p>
<h1
style="border-block-end: 2px solid rgb(119, 119, 119); border-bottom: 2px solid rgb(119, 119, 119); font-size: 27.2px; margin-bottom: 27.2px; margin-top: 35.36px;">Why
slapd/no_configuration</h1>
<p style="margin-bottom: 20.4px; margin-top: 0px;">slapd’s
first-time wizard would create a generic <code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-wrap-mode: wrap;">cn=config</code>
and an initial MDB (suffix/admin from debconf) that we would
then have to tear down.<br>
We ship a complete slapd.conf with extra schemas, ACLs, suffix <code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-wrap-mode: wrap;">dc=skole,dc=skolelinux,dc=no</code>,
and admin DN <code
style="background-color: rgba(175, 184, 193, 0.2); border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-end-end-radius: 3px; border-end-start-radius: 3px; border-start-end-radius: 3px; border-start-start-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; font-weight: 550; margin-left: 2.55px; margin-right: 2.55px; padding-inline: 5.1px; padding-left: 5.1px; padding-right: 5.1px; text-wrap-mode: wrap;">cn=admin,ou=ldap-access,...,</code>
and we slapadd a set of LDIFs during the main-server (Tjener)
install using cfengine.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">That is exactly
what slapd/no_configuration is for: skip slapd’s initial
configuration and database, we will do it ourselves.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">Relevant files:</p>
<ul
style="margin-bottom: 20.4px; margin-top: 20.4px; padding-inline-start: 34px; padding-left: 34px;">
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">Preseed
(skip slapd’s wizard):
<ul
style="list-style-type: circle; margin-bottom: 0px; margin-top: 0px; padding-inline-start: 17px; padding-left: 17px; text-align: left;">
<li
style="list-style-type: circle; margin-bottom: 8.5px; margin-top: 8.5px;"><a
href="https://salsa.debian.org/debian-edu/debian-edu-install/-/blob/master/preseed-values/defaults.main-server"
class="moz-txt-link-freetext">https://salsa.debian.org/debian-edu/debian-edu-install/-/blob/master/preseed-values/defaults.main-server</a></li>
</ul>
</li>
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">Installer
runs ldap-debian-edu-install via cfengine:
<ul
style="list-style-type: circle; margin-bottom: 0px; margin-top: 0px; padding-inline-start: 17px; padding-left: 17px; text-align: left;">
<li
style="list-style-type: circle; margin-bottom: 8.5px; margin-top: 8.5px;"><a
href="https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/cf3/cf.ldapserver"
class="moz-txt-link-freetext">https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/cf3/cf.ldapserver</a></li>
</ul>
</li>
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">Our
slapd.conf, still using directory “/var/lib/ldap”:
<ul
style="list-style-type: circle; margin-bottom: 0px; margin-top: 0px; padding-inline-start: 17px; padding-left: 17px; text-align: left;">
<li
style="list-style-type: circle; margin-bottom: 8.5px; margin-top: 8.5px;"><a
href="https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/etc/ldap/slapd-debian-edu-mdb.conf"
class="moz-txt-link-freetext">https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/etc/ldap/slapd-debian-edu-mdb.conf</a></li>
</ul>
</li>
<li style="margin-bottom: 8.5px; margin-top: 8.5px;">Bootstrap:
wipe /var/lib/ldap, slapadd the LDIFs, chown:
<ul
style="list-style-type: circle; margin-bottom: 0px; margin-top: 0px; padding-inline-start: 17px; padding-left: 17px; text-align: left;">
<li
style="list-style-type: circle; margin-bottom: 8.5px; margin-top: 8.5px;"><a
href="https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/ldap-tools/ldap-debian-edu-install"
class="moz-txt-link-freetext">https://salsa.debian.org/debian-edu/debian-edu-config/-/blob/master/ldap-tools/ldap-debian-edu-install</a></li>
</ul>
</li>
</ul>
<p style="margin-bottom: 20.4px; margin-top: 0px;">We do still use
the documented Debian default path.<br>
The template for slapd/no_configuration says no initial
configuration or database will be created; it does not say the
default data directory will be withheld.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">Also
/var/lib/ldap remains the openldap home in slapd.sysusers,
olcDbDirectory in slapd.init.ldif, and “The slapd database
location is /var/lib/ldap” in README.Debian.</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">An empty 0700
directory owned by openldap does not commit the admin to using
it.<br>
Not creating it would drop a side effect of adduser from before
I was born. :)</p>
<p style="margin-bottom: 20.4px; margin-top: 0px;">thanks,<br>
Daniel<br>
</p>
<pre class="moz-signature" cols="0"
style="font-family: Consolas, Inconsolata, Courier, monospace; font-size: 17px; line-height: 20.4px; margin-bottom: 20.4px; margin-top: 20.4px;">--
Daniel Teichmann
DAS-NETZWERKTEAM
Telefon: 0176 322 774 51
GnuPG Key ID: ED9F2F7A36E0D99349CC1940B500EFC78100A778
<a class="moz-txt-link-abbreviated" href="mailto:daniel.teichmann@das-netzwerkteam.de">daniel.teichmann@das-netzwerkteam.de</a>, <a class="moz-txt-link-freetext" href="https://das-netzwerkteam.de">https://das-netzwerkteam.de</a></pre>
</div>
<div class="mdhr-raw"
style="height:0;width:0;max-height:0;max-width:0;overflow:hidden;font-size:0;padding:0;margin:0;"
aria-hidden="true"
title="MDH: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">​</div>
</body>
</html>