Next, create directory entries for JDeveloper developers under the organizational unit jdeveloper. Attributes sn and cn are required attributes for the object class person. An example directory entry is shown in following listing:

#Steve's Directory Entry
dn: cn=Steve Muench,ou=jdeveloper,dc=example,dc=com
objectclass: top
objectclass: person
objectclass: organizationalPerson
cn: Steve Muench
sn: Muench
title: JDeveloper Developer

The LDIF file jdevDir.ldif is listed in Listing 1. Copy the ldif file to the C:\Program Files\OpenLDAP directory. Next, start the OpenLDAP slapd server with the following command from the OpenLDAP installation directory:

C:\Program Files\OpenLDAP> .\slapd -d 1

OpenLDAP provides the ldapadd tool to add a directory entry. Run the ldapadd command on the jdevDir.ldif file as shown below. The -d argument specifies the bind DN for authenticating the connection to the directory. The -w argument specifies the password for authenticating to the bind DN. The -file argument specifies the LDIF file that contains the directory entries.

C:\Program Files\OpenLDAP>ldapadd -D "cn=Manager,dc=example,dc=com" -v -w openldap -f jdevDir.ldif

Directory entries get added to the LDAP server.

Searching a Directory
The ldapsearch tool is used to search an LDAP directory and display the results in LDIF text format. As directory entries are identified by DNs, directory entries are searched by DNs. As an example, search the directory for DN "cn=Steve Muench,ou=jdeveloper,dc=example,dc=com." The ldap command to authenticate to the base DN and search the directory entry for DN "cn=Steve Muench,ou=jdeveloper,dc=example,dc=com" is as follows:

>ldapsearch -D "cn=Manager,dc=example,dc=com" -w openldap -b "cn=Steve Muench,ou=jdeveloper,dc=example,dc=com"

The -b argument specifies the base DN to search. The output of the ldapsearch operation is listed below.

# extended LDIF
#
# LDAPv3
# base <cn=Steve Muench,ou=jdeveloper,dc=example,dc=com> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# Steve Muench, jdeveloper, example.com
dn: cn=Steve Muench,ou=jdeveloper,dc=example,dc=com
objectClass: top
objectClass: person
objectClass: organizationalPerson
cn: Steve Muench
sn: Muench
title: JDeveloper Developer

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

Modifying a Directory
OpenLDAP provides the ldapmodify tool to modify a directory. With the ldapmodify tool a new entry can be added, an entry can be modified, and an entry can be deleted. The modifications to be made can be specified on a command line or in an LDIF file. An LDIF file is recommended for specifying modifications since a large number of modifications can be specified in an LDIF file. As an example add a new entry specified in addEntry.ldif in Listing 2.

Listing 2 addEntry.ldif
dn: cn=Deepak Vohra,ou=jdeveloper,dc=example,dc=com
objectclass: top
objectclass: person
objectclass: organizationalPerson
cn: Deepak Vohra
sn: Vohra
title: JDeveloper Developer

The -a option of the ldapmodify command is used to add a new entry. Run the ldapmodify command as shown below. The LDIF file is specified with the -f option.

ldapmodify -D "cn=Manager,dc=example,dc=com" -w openldap -a -f addEntry.ldif