Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm currently configuring permissions on an existing openldap server using ldapadd | ldapmodify and ldif files (created following these examples). I'm then testing using ldapsearch. All the tests I run as cn=admin are successful (not very difficult I guess since it's the built-in all mighty admin account) but I'm just unable to give special permissions to other users (though the bind works). Bottom line is, I found the management of ldap permissions being very painful.

[Q1] What tools do you use to visualize existing permissions on an LDAP server and change them as needed?

To manipulate the LDAP directory I use Apache directory studio

[Q2] What other tools to you use to manipulate the LDAP directory?

share|improve this question
up vote 1 down vote accepted

To visualize and administer LDAP, there are many options, here are some.

I personally use ldapsh to perform some quick ldap edits. It visualizes your ldap tree as directory structure which is easy to navigate and make edits using vim or your fav editor.

share|improve this answer

I use LdapAdmin. It is windows application and it is pretty good for routine tasks. But it has some limitations if you require full control over your directory.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.