Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

From the documentation:

Use your favorite editor to edit the provided slapd.conf(5) example (usually installed as /usr/local/etc/openldap/slapd.conf) to contain a BDB database definition of the form:

  database bdb
  suffix "dc=<MY-DOMAIN>,dc=<COM>"
  rootdn "cn=Manager,dc=<MY-DOMAIN>,dc=<COM>"
  rootpw secret
  directory /usr/local/var/openldap-data

But, my domain is either or localhost,
What should I put instead of MY-DOMAIN and in COM ?

share|improve this question
up vote 4 down vote accepted

You can put whatever you want. Suffix has nothing to do with what IPs/interfaces slapd listens on. Suffix is the top level of the data tree, it doesn't have to be DNS/network names. Think of it as your database name. So while you could use:

suffix "dc=localhost,dc=localdomain"


suffix "dc=example,dc=com"

you could also use:

suffix "dc=my,dc=ldap"

You can have more than two parts if you want

suffix "dc=my,dc=ldap,dc=server"

share|improve this answer
Since dc explicitly means domain-component, and is for those new-fangled DNS users who think that Internet domains matter :) you could always revert to an old-style setup based on components other than dc=. This has the advantage of not causing confusion when systems try to locate servers with SRV records based on the dc path. – Phil P Jan 2 '10 at 2:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.