Managing LDAP schema

About this section

This section discusses the following topics:

Extending the RFC 2307 schema

Your RFC 2307-compliant schema must be extended on the LDAP servers that you want to use for LDAP queries.

For more information refer to RFC 2307 or to documentation by third-party directory integration vendors.

About custom LDAP schemas

By default, Data ONTAP supports LDAP servers that comply with RFC 2307, which specifies a Network Information Service (NIS)-style schema. You can replace the default values of LDAP options with your custom attribute names to configure Data ONTAP to query your custom (not RFC 2307-compliant) schema.

Custom LDAP schema options in Data ONTAP

The following new options are set by default to the attribute names specified in RFC 2307.

Option	Default value (per RFC 2307)
ldap.nssmap.objectClass.posixAccount	posixAccount
ldap.nssmap.objectClass.posixGroup	posixGroup
ldap.nssmap.attribute.groupname	cn
ldap.nssmap.attribute.netgroupname	cn
ldap.nssmap.attribute.nisNetGroupTriple	nisNetGroupTriple
ldap.nssmap.attribute.memberUid	memberUid
ldap.nssmap.attribute.uid	uid
ldap.nssmap.attribute.uidNumber	uidNumber
ldap.nssmap.attribute.gidNumber	gidNumber
ldap.nssmap.attribute.userPassword	userPassword
ldap.nssmap.attribute.homeDirectory	homeDirectory
ldap.nssmap.attribute.loginShell	loginShell
ldap.nssmap.attribute.gecos	gecos

Configuring Data ONTAP for custom LDAP schemas

From the command line, you can modify the string value of Data ONTAP custom schema options to match the corresponding objects in your LDAP schema.

For example, for a custom LDAP schema in which the object containing Group ID (GID) numbers is "groupid," you would enter the following command:

options ldap.nssmap.attribute.gidNumber groupid

To configure Data ONTAP to query your custom schema, complete the following step.

Step	Action
1	Configure the Data ONTAP `ldap.nssmap` options to match your custom LDAP server schema. Example options ldap.nssmap.objectClass.posixAccount Users Specify values for each Data ONTAP schema option that corresponds to a customized object in your LDAP schema.