The setup
tool automatically creates one administrative account when
performing an installation. Users that authenticate to the configuration API or the
administrative console are stored in cn=Root
DNs
,cn=config
. Accounts can be added or changed with the
dsconfig
tool.
Root users are governed by the Root Password Policy and by default, their passwords
never expire. However, if a root user's password must be changed, use the
ldappasswordmodify
tool.