Chapter 16. Managing default options for Directory Server command-line utilities using .dsrc file

You can specify the LDAP URL of an instance and a bind DN in a ~/.dsrc file:

server1

# server1
uri = ldap://server1.example.com
binddn = cn=Directory Manager
basedn = dc=example,dc=com

You can use shorter Directory Server commands with these settings. For example, to create a user account:

dsidm server1 user create

# dsidm server1 user create

Without the ~/.dsrc file, you must specify the bind DN, LDAP URL, and base DN in the command:

dsidm -D cn=Directory Manager ldap://server1.example.com -b "dc=example,dc=com" user create

# dsidm -D cn=Directory Manager ldap://server1.example.com -b "dc=example,dc=com" user create

You can use the dsctl utility to create a ~/.dsrc file instead of creating it manually.

dsctl instance_name dsrc create ...

# dsctl instance_name dsrc create ...

You can add these options in the command:

When using the --uri option, sets the URL to the instance in the format protocol://host_name_or_IP_address_or_socket

For example:

When you set the path to the Directory Server socket, use %%02 instead of slashes (/) in the path.

When using the --starttls option, configures the utilities to connect to an LDAP port and then send the STARTTLS command to switch to an encrypted connection.

When using the --basedn option, sets the base distinguished name (DN).

For example: --basedn dc=example,dc=com

When using the --basedn option, sets the bind DN.

For example: --binddn cn=Directory Manager

When using the --pwdfile, sets the path to a file that contains the password of bind DN.

For example: --pwdfile /root/rhds.pwd

When using the --tls-cacertdir option, sets the path in this parameter which defines the directory with the certificate authority (CA) certificate that is required to verify the server’s certificate if you use the LDAPS connection.

For example: --tls-cacertdir /etc/pki/CA/certs/

When using the --tls-certl option, sets the absolute path to the server’s certificate.

For example: --tls-cert /etc/dirsrv/slapd-instance_name/Server-Cert.crt

When using the --tls-key option, sets the absolute path to the server’s private key.

For example: --tls-key /etc/dirsrv/slapd-instance_name/Server-Cert.key

When using the --tls-reqcert option, sets what checks the client utilities perform on server certificates in a TLS session.

For example: --tls-reqcert hard

These parameters are available:

When using the --saslmech option, sets the SASL mechanism to use to PLAIN or EXTERNAL.

For example: --saslmech PLAIN

You can call Directory Server commands remotely and locally when securing the Directory Server connection. When you run a Directory Server command with an LDAP URL specified, the server considers it as a remote connection and checks the /etc/openldap/ldap.conf configuration file along with system-wide settings to proceed with the command.

When you run a Directory Server command with an instance name specified, the server checks if the ~/.dsrc file is present and applies the following logic to proceed: