Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages


home | help

       slapauth	- Check	a list of string-represented IDs for LDAP authc/authz

       /usr/local/sbin/slapauth	 [-d debug-level] [-f slapd.conf] [-F confdir]
       [-M mech] [-o option[=value]] [-R realm]	[-U authcID] [-v] [-X authzID]
       ID [...]

       Slapauth	 is used to check the behavior of the slapd in mapping identi-
       ties for	authentication and authorization  purposes,  as	 specified  in
       slapd.conf(5).	It  opens  the slapd.conf(5) configuration file	or the
       slapd-config(5) backend,	reads in the  authz-policy/olcAuthzPolicy  and
       authz-regexp/olcAuthzRegexp  directives,	 and  then  parses the ID list
       given on	the command-line.

       -d debug-level
	      enable debugging messages	as defined  by	the  specified	debug-
	      level; see slapd(8) for details.

       -f slapd.conf
	      specify an alternative slapd.conf(5) file.

       -F confdir
	      specify  a  config  directory.  If both -f and -F	are specified,
	      the config file will be read and converted to  config  directory
	      format  and  written to the specified directory.	If neither op-
	      tion is specified, an attempt to read the	default	config	direc-
	      tory  will be made before	trying to use the default config file.
	      If a valid config	directory exists then the default config  file
	      is ignored.

       -M mech
	      specify a	mechanism.

       -o option[=value]
	      Specify  an  option  with	a(n optional) value.  Possible generic
	      options/values are:

		     syslog=<subsystems>  (see `-s' in slapd(8))
		     syslog-level=<level> (see `-S' in slapd(8))
		     syslog-user=<user>	  (see `-l' in slapd(8))

       -R realm
	      specify a	realm.

       -U authcID
	      specify an ID to be used as authcID throughout the test session.
	      If  present,  and	if no authzID is given,	the IDs	in the ID list
	      are treated as authzID.

       -X authzID
	      specify an ID to be used as authzID throughout the test session.
	      If  present,  and	if no authcID is given,	the IDs	in the ID list
	      are treated as authcID.  If both authcID and authzID  are	 given
	      via command line switch, the ID list cannot be present.

       -v     enable verbose mode.

       The command

	    /usr/local/sbin/slapauth -f	//usr/local/etc/openldap/slapd.conf -v \
		   -U bjorn -X u:bjensen

       tests  whether  the  user  bjorn	 can  assume  the identity of the user
       bjensen provided	the directives

	    authz-policy from
	    authz-regexp "^uid=([^,]+).*,cn=auth$"

       are defined in slapd.conf(5).

       ldap(3),	slapd(8), slaptest(8)

       "OpenLDAP Administrator's Guide"	(

       OpenLDAP	Software is developed and maintained by	The  OpenLDAP  Project
       <>.  OpenLDAP Software is derived from the Uni-
       versity of Michigan LDAP	3.3 Release.

OpenLDAP 2.4.57			  2021/01/18			  SLAPAUTH(8C)


Want to link to this manual page? Use this URL:

home | help