olcDbConfig:    set_lk_max_locks    1500

olcDbConfig:    set_lk_max_lockers  1500

olcDbIndex: objectClass eq

olcLastMod: TRUE

olcDbCheckpoint:    512 30

olcAccess:  to  attrs=userPassword  by

dn="cn=admin,dc=matthewhelmke,dc=com"   write   by

anonymous   auth    by  self    write   by  *   none

olcAccess:  to  attrs=shadowLastChange  by  self    write   by  *   read

olcAccess:  to  dn.base=""  by  *   read

olcAccess:  to  *   by  dn="cn=admin,dc=matthewhelmke,dc=com"   write   by  *

read

Make sure you change all instances of matthewhelmke and com to fit your
FQDN and change the entry for olcRootPW to a more secure password of
your choosing. Then add the new file to the directory, which you do as
follows, assuming that you are entering this command from the directory
where the file was created:

Click here to view code image
matthew@seymour:~$ sudo ldapadd -Y EXTERNAL -H ldapi:/// -f
backend.example.com.ldif

Populating Your Directory

The back end is ready. Now you need to populate the front-end directory to
make this useful. Create another file called
frontend.matthewhelmke.com.ldif with the following contents:

Click here to view code image

Create top-level object in domain

dn: dc=matthewhelmke,dc=com
objectClass: top
objectClass: dcObject
objectclass: organization
o: Example Organization
dc: Example
description: LDAP Example

#   Admin   user.

dn: cn=admin,dc=matthewhelmke,dc=com

objectClass:    simpleSecurityObject

objectClass:    organizationalRole

cn: admin

description:    LDAP    administrator

userPassword:   changeMEtoSOMETHINGbetter

dn: ou=people,dc=example,dc=com