13.5. The /etc/openldap/schema/ Directory
/etc/openldap/schema/directory holds LDAP definitions, previously located in the
/etc/openldap/schema/redhat/directory holds customized schemas distributed by Red Hat for Red Hat Enterprise Linux.
All attribute syntax definitions and objectclass definitions are now located in the different schema files. The various schema files are referenced in
includelines, as shown in this example:
include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/rfc822-MailMember.schema include /etc/openldap/schema/redhat/autofs.schema
Do not modify schema items defined in the schema files installed by OpenLDAP.
It is possible to extend the schema used by OpenLDAP to support additional attribute types and object classes using the default schema files as a guide. To do this, create a
local.schemafile in the
/etc/openldap/schema/directory. Reference this new schema within
slapd.confby adding the following line below the default
Next, define new attribute types and object classes within the
local.schemafile. Many organizations use existing attribute types from the schema files installed by default and add new object classes to the
Extending the schema to match certain specialized requirements is quite involved and beyond the scope of this chapter. Refer to http://www.openldap.org/doc/admin/schema.html for information.