Configuring OpenLDAP for roaming Now that you've built and installed OpenLDAP, you can configure it for roaming. The next step is to edit your slapd.conf file. The blue lines indicate my modifications and additions to the default file. The first added line includes the roaming schema we defined in step 1. The last few lines set access control rules for password visibility and updating roaming information in the directory.
People can write to their roaming entries, and can change their own passwords.
They cannot see other people's passwords. Now, we're ready to load the LDAP directory. To make things obvious, I've used cleartext passwords in this article. On a real LDAP server, you'd want to use some kind of encrypted storage. See the ldappasswd command for more information.