Slapd conf
Autor: ThomasF
Die slapd.conf ist die Steuerdatei für den LDAP-Server.
Sie liegt auf einem SUSE System unter /etc/openldap
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/samba3.schema
include /etc/openldap/schema/misc.schema
pidfile /var/run/slapd/run/slapd.pid
argsfile /var/run/slapd/run/slapd.args
loglevel 256
schemacheck on
sizelimit 500
timelimit 3600
# Sample access control policy:
# Root DSE: allow anyone to read it
# Subschema (sub)entry DSE: allow anyone to read it
# Other DSEs:
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
# Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn. (e.g., "access to * by * read")
#
# rootdn can always read and write EVERYTHING!
access to attr=userpassword
by self write
by anonymous auth
access to dn="cn=admin, o=meineFirma, c=de"
by none
access to attr=sambaNTPassword
by self write
by anonymous auth
access to attr=sambaLMPassword
by self write
by anonymous auth
access to *
by * read
#######################################################################
# bdb database definitions
#######################################################################
database bdb
checkpoint 1024 5
cachesize 10000
######################################################################
suffix "o=meineFirma,c=de"
rootdn "cn=admin,o=meineFirma,c=de"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw {SSHA}w31rbfsjdOHw/2SJFGnQyVrcE5MKOS1C
### Passwd = test
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /var/lib/ldap
