[Summary view] [Print] [Text view]

   1  # This is the main ldapd configuration file. See slapd.conf(5) for more
   2  # info on the configuration options.
   3  
   4  # Schema and objectClass definitions
   5  include         #SCHEMADIR#/core.schema
   6  include         #SCHEMADIR#/cosine.schema
   7  include         #SCHEMADIR#/nis.schema
   8  include         #SCHEMADIR#/inetorgperson.schema
   9  include         #SCHEMADIR#/ltsp.schema
  10  include         #SCHEMADIR#/samba.schema
  11  include         #SCHEMADIR#/samba3.schema
  12  include         #SCHEMADIR#/printer.schema
  13  
  14  # Schema check allows for forcing entries to
  15  # match schemas for their objectClasses's
  16  # schemacheck    off
  17  # pas de scheme schek off sous etch ... on rigole plus
  18  
  19  allow bind_v2
  20  
  21  # Where clients are refered to if no
  22  # match is found locally
  23  #referral    ldap://some.other.ldap.server
  24  
  25  # Where the pid file is put. The init.d script
  26  # will not stop the server if you change this.
  27  pidfile        /var/run/slapd.pid
  28  
  29  # List of arguments that were passed to the server
  30  argsfile    /var/run/slapd.args
  31  
  32  # Read slapd.conf(5) for possible values
  33  loglevel    0
  34  
  35  # Where the dynamically loaded modules are stored
  36  modulepath    /usr/lib/ldap
  37  moduleload    back_bdb
  38  
  39  #######################################################################
  40  # Specific Backend Directives for bdb:
  41  # Backend specific directives apply to this backend until another
  42  # 'backend' directive occurs
  43  backend        bdb
  44  # Specific Directives for database #1, of type bdb:
  45  # Database specific directives apply to this databasse until another
  46  # 'database' directive occurs
  47  database        bdb
  48  
  49  # The base of your directory
  50  suffix        "#BASEDN#"
  51  rootdn        "#ADMINRDN#,#BASEDN#"
  52  rootpw        #ADMINPW#
  53  
  54  # Where the database file are physically stored
  55  directory    "/var/lib/ldap"
  56  
  57  checkpoint 512 30
  58  
  59  index      objectClass,uidNumber,gidNumber                  eq
  60  index      cn,sn,uid,displayName                            pres,sub,eq
  61  index      memberUid,mail,givenname                 eq,subinitial
  62  index      sambaSID,sambaPrimaryGroupSID,sambaDomainName    eq
  63  
  64  # Save the time that the entry gets modified
  65  lastmod on
  66  
  67  # For Netscape Roaming support, each user gets a roaming
  68  # profile for which they have write access to
  69  #access to dn=".*,ou=Roaming,@SUFFIX@"
  70  #    by dnattr=owner write
  71  
  72  # The userPassword by default can be changed
  73  # by the entry owning it if they are authenticated.
  74  # Others should not be able to see it, except the
  75  # admin entry below
  76  access to attr=userPassword
  77      by dn="#ADMINRDN#,#BASEDN#" write
  78      by anonymous auth
  79      by self write
  80      by * none
  81  
  82  # ACLs proposées par Bruno Bzeznic
  83  
  84  access to attr=userpassword
  85          by dn="#ADMINRDN#,#BASEDN#" write
  86          by self write
  87          by users none
  88          by anonymous auth
  89  
  90  access to attr=sambaLmPassword
  91         by dn="#ADMINRDN#,#BASEDN#" write
  92         by self write
  93         by users none
  94         by anonymous auth
  95  
  96  access to attr=sambaNtPassword
  97         by dn="#ADMINRDN#,#BASEDN#" write
  98         by self write
  99         by users none
 100         by anonymous auth
 101  
 102  # The admin dn has full write access
 103  access to *
 104      by dn="#ADMINRDN#,#BASEDN#" write
 105      by * read
 106  
 107  # Example replication using admin account. This will require taking the
 108  # out put of this database using slapcat(8C), and then importing that into
 109  # the replica using slapadd(8C).
 110  #
 111  # replogfile /var/lib/slurp/replog
 112  # replica host=ldap-rep.foo.com bindmethod=simple
 113  #    binddn="@ADMIN@"
 114  #    credentials="XXXXXX"
 115  
 116  # End of ldapd configuration file
 117  sizelimit    3500