The setup tool automatically creates one administrative account when
performing an installation. Users that authenticate to the configuration API or the
administrative console are stored in cn=Root
DNs,cn=config. Accounts can be added or changed with the
dsconfig tool.
Root users are governed by the Root Password Policy and by default, their passwords
never expire. However, if a root user's password must be changed, use the
ldappasswordmodify tool.