nerdexam
Linux_Foundation

LFCS · Question #147

After analyzing a slapd.conf file, an administrator noted that the rootdn and rootpw directives are not present. Where is the LDAP administrator account defined?

The correct answer is B. The account is defined by an ACL in slapd.conf. If rootdn and rootpw are absent in slapd.conf, the LDAP administrator account and its permissions must be established through an Access Control List (ACL).

Submitted by fatima_kr· Apr 18, 2026Service Configuration

Question

After analyzing a slapd.conf file, an administrator noted that the rootdn and rootpw directives are not present. Where is the LDAP administrator account defined?

Options

  • AIt is using the default account admin with the password admin.
  • BThe account is defined by an ACL in slapd.conf.
  • CIt is using the default account admin with a null password.
  • DThe account is defined in the file /etc/ldap.secret.
  • EThe account is defined in the file /etc/ldap.root.conf.

How the community answered

(53 responses)
  • A
    2% (1)
  • B
    83% (44)
  • C
    2% (1)
  • D
    8% (4)
  • E
    6% (3)

Why each option

If `rootdn` and `rootpw` are absent in `slapd.conf`, the LDAP administrator account and its permissions must be established through an Access Control List (ACL).

AIt is using the default account admin with the password admin.

OpenLDAP does not have a default 'admin' account with a password 'admin' that is automatically active if `rootdn` and `rootpw` are missing; administrator access must be explicitly configured.

BThe account is defined by an ACL in slapd.conf.Correct

Without `rootdn` and `rootpw` directives, OpenLDAP relies entirely on configured Access Control Lists (ACLs) to define who has administrative privileges and what operations they are permitted to perform on the directory.

CIt is using the default account admin with a null password.

OpenLDAP does not have a default 'admin' account with a null password that is automatically active if `rootdn` and `rootpw` are missing; administrator access must be explicitly configured.

DThe account is defined in the file /etc/ldap.secret.

The `/etc/ldap.secret` file is typically used for storing the LDAP root password for client utilities, not for defining the administrator account itself within the `slapd` configuration.

EThe account is defined in the file /etc/ldap.root.conf.

The file `/etc/ldap.root.conf` is not a standard OpenLDAP configuration file for defining administrator accounts.

Concept tested: OpenLDAP administrator definition without rootdn/rootpw

Source: https://www.openldap.org/doc/admin24/access.html

Topics

#LDAP#OpenLDAP#slapd.conf#Access Control Lists

Community Discussion

No community discussion yet for this question.

Full LFCS Practice