How to Create OpenLDAP schema

I have configured the openldap (2.4.23) server in centos 6 and running successfully. I want to store secret question and answer in ldap for all user, by using this user can able to reset their password by answering the secret question.  For this i need to create a custom schema. i don't know how to create a own schema for this. Please help.
rajasekarramasamyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

farzanjCommented:
It depends upon your current set up.  Is the current schema accessible by the users?  Can they query the LDAP and see at least the hashes of their passwords?  Basically, your questions and answers should be hidden just like the password hashes.

There is no complicated schema.  Just add
secret question:
secret answer:

Just like the password field.
0
rajasekarramasamyAuthor Commented:
Can they query the LDAP and see at least the hashes of their passwords?

Yes.

Having any sample schema for my requirement?
0
farzanjCommented:
This might be a little help
http://publib.boulder.ibm.com/infocenter/iseries/v5r3/index.jsp?topic=%2Frzahy%2Frzahyunderdn.htm

First you have to see which object class is the password stored in or a member of.  Use your object browser to see that.
http://publib.boulder.ibm.com/infocenter/iseries/v5r3/index.jsp?topic=%2Frzahy%2Frzahyunderdn.htm

In that object class, you need to add two more fields, secretQuestion and secretAnswer.  Since this object class would also be a part of person's LDIF, you will have to make minimal changes.  You will only need to add these attributes.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux

From novice to tech pro — start learning today.