-
Notifications
You must be signed in to change notification settings - Fork 10
/
Copy pathconfig-template-2.6.conf
115 lines (84 loc) · 2.97 KB
/
config-template-2.6.conf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /usr/local/openldap/etc/openldap/schema/core.schema
include /usr/local/openldap/etc/openldap/schema/cosine.schema
include /usr/local/openldap/etc/openldap/schema/inetorgperson.schema
include /usr/local/openldap/etc/openldap/schema/dyngroup.schema
logfile CONFIG_LOGFILE
logfile-only TRUE
logfile-rotate 30 1024 24
logLevel CONFIG_LOGLEVEL
sasl-host CONFIG_FQDN
pidfile /usr/local/openldap/var/run/slapd.pid
argsfile /usr/local/openldap/var/run/slapd.args
# Load dynamic backend modules:
# moduleload back_ldap.la
modulepath /usr/local/openldap/libexec/openldap
moduleload argon2.la
moduleload back_mdb.la
moduleload dynlist.la
moduleload memberof.la
moduleload ppolicy.la
moduleload syncprov.la
moduleload unique.la
access to dn.base="" by * read
access to dn.base="cn=subschema" by * read
#######################################################################
# config database definitions
#######################################################################
database config
rootdn CONFIG_CONFIGROOTDN
rootpw CONFIG_CONFIGROOTPW
access to attrs="userPassword"
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth =wdx
by * auth
access to *
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
#######################################################################
# MDB database definitions
#######################################################################
database mdb
maxsize 4294967296
suffix CONFIG_SUFFIX
rootdn CONFIG_MANAGERROOTDN
rootpw CONFIG_MANAGERROOTPW
directory CONFIG_DATADIR
index objectClass eq
index cn eq,sub
index uid pres,eq
index givenName pres,eq,sub
index l pres,eq
index employeeType pres,eq
index mail pres,eq,sub
index sn pres,eq,sub
limits group="cn=admin,ou=groups,CONFIG_SUFFIX" size=unlimited time=unlimited
access to attrs="userPassword"
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth =wdx
by group.exact="cn=admin,ou=groups,CONFIG_SUFFIX" =wdx
by self =wdx
by * auth
access to *
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
by group.exact="cn=admin,ou=groups,CONFIG_SUFFIX" write
by users read
password-hash {ARGON2}
multival member 1000,100
multival uniqueMember 1000,100
overlay ppolicy
ppolicy_default cn=default,ou=ppolicies,CONFIG_SUFFIX
ppolicy_hash_cleartext TRUE
ppolicy_check_module /usr/local/openldap/libexec/openldap/ppm.so
overlay dynlist
dynlist-attrset groupOfURLs memberURL member+memberOf@groupOfNames
overlay unique
unique_uri ldap:///?mail?sub?
#######################################################################
# monitor database definitions
#######################################################################
database monitor
rootdn CONFIG_MONITORROOTDN
rootpw CONFIG_MONITORROOTPW
access to *
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage