The Directory Server app is where you can view and manage your LDAP server settings. If you plan on connecting external applications to access your ClearOS directory, you can control access and find LDAP connection information.

If your system does not have this app available, you can install it via the Marketplace.

You can find this feature in the menu system at the following location:

<navigation>Server|Directory|Directory Server</navigation>

In the settings widget, the following parameters can be configured:

• The Base Domain should be set to your primary Internet domain, for example example.com

The mode is shown for convenience only – the setting is part of the Master Slave Synchronization app.

There are two security policies that can be configured:

• The Publish Policy should be enabled if you have external applications accessing the directory, for example network-attached storage servers.
  • Not Published - Accessible only from within ClearOS
  • Local Network - Secure (636) - Accessible from LAN interfaces only. Access is using ldaps:// on port TCP 636.
  • Local Network - Non-secure (389/636) - Accessible from LAN interfaces only. Access is using either ldap:// on port 389 or ldaps:// on port 636.
  • All Networks - Secure (636) - Accessible from all interfaces. Access is using the ldaps:// on port 636.
  • All Networks - Non-secure (389/636) - Accessible from all interfaces. Access is using either ldap:// on port 389 or ldaps:// on port 636.

netstat -npl | grep slapd

• The Accounts Access should be enabled if you have external applications requiring account information, for example adding the Global Address book feature in the Thunderbird mail client.

General directory information is shown to help you connect external applications to the ClearOS directory.

Webconfig uses the LDAP Directory transparently for many functions. For the most part, adding users, creating groups, setting passwords or changing information about the server will modify the directory in all the ways you need it to without needing to manually enter records.

You can use tools like the Apache Directory Studio or phpLDAPadmin to browse or change directory information. Use the information shown in the app to connect the client to the ClearOS directory.

You can also use command line tools to manage the directory. For these examples we will use the following data:

• Hostname: localhost
• Base DN: dc=clearos,dc=lan
• Bind DN: cn=manager,ou=internal,dc=clearos,dc=lan
• Bind Password: gbGKD86gEWXLYNRm

A simple search will reveal our entire LDAP directory.

ldapsearch -h localhost -b "dc=clearos,dc=lan" \
-D "cn=manager,ou=internal,dc=clearos,dc=lan" \
-s sub "objectclass=*" -x -w gbGKD86gEWXLYNRm

You can also limit the results to include only specific information. For example, the following show all the groups on the system:

ldapsearch -h localhost -b "dc=clearos,dc=lan" \
-D "cn=manager,ou=internal,dc=clearos,dc=lan" \
-s sub "objectclass=GroupOfNames" -x -w gbGKD86gEWXLYNRm

• Apache Directory Studio
• Account Synchronization
• Account Synchronization - Deployment Walkthrough
• Change Standalone Mode to Master Without Losing Directory
• Users
• Groups

search?q=clearos%2C%20clearos%20content%2C%20Directory%20Server%2C%20userguide%2C%20app-openldap_directory%2C%20account%20synchronisation%2C%20master%2C%20slave%2C%20clearos7%2C%20categoryserver%2C%20subcategorydirectory%2C%20maintainer_dloper&amp;btnI=lucky