Users that authenticate to the configuration API or the administrative console are stored in cn=Root DNs,cn=config. Accounts can be added or changed with the dsconfig tool.