LFCS · Question #147
After analyzing a slapd.conf file, an administrator noted that the rootdn and rootpw directives are not present. Where is the LDAP administrator account defined?
The correct answer is B. The account is defined by an ACL in slapd.conf. If rootdn and rootpw are absent in slapd.conf, the LDAP administrator account and its permissions must be established through an Access Control List (ACL).
Question
Options
- AIt is using the default account admin with the password admin.
- BThe account is defined by an ACL in slapd.conf.
- CIt is using the default account admin with a null password.
- DThe account is defined in the file /etc/ldap.secret.
- EThe account is defined in the file /etc/ldap.root.conf.
How the community answered
(53 responses)- A2% (1)
- B83% (44)
- C2% (1)
- D8% (4)
- E6% (3)
Why each option
If `rootdn` and `rootpw` are absent in `slapd.conf`, the LDAP administrator account and its permissions must be established through an Access Control List (ACL).
OpenLDAP does not have a default 'admin' account with a password 'admin' that is automatically active if `rootdn` and `rootpw` are missing; administrator access must be explicitly configured.
Without `rootdn` and `rootpw` directives, OpenLDAP relies entirely on configured Access Control Lists (ACLs) to define who has administrative privileges and what operations they are permitted to perform on the directory.
OpenLDAP does not have a default 'admin' account with a null password that is automatically active if `rootdn` and `rootpw` are missing; administrator access must be explicitly configured.
The `/etc/ldap.secret` file is typically used for storing the LDAP root password for client utilities, not for defining the administrator account itself within the `slapd` configuration.
The file `/etc/ldap.root.conf` is not a standard OpenLDAP configuration file for defining administrator accounts.
Concept tested: OpenLDAP administrator definition without rootdn/rootpw
Source: https://www.openldap.org/doc/admin24/access.html
Topics
Community Discussion
No community discussion yet for this question.