include		/etc/openldap/schema/core.schema
include		/etc/openldap/schema/cosine.schema
include		/etc/openldap/schema/inetorgperson.schema
include		/etc/openldap/schema/openldap.schema
include         /etc/openldap/schema/nis.schema
include		/etc/openldap/schema/custom.schema
pidfile		/run/openldap/slapd.pid
argsfile	/run/openldap/slapd.args
modulepath	/usr/lib/openldap
moduleload	auditlog.so
moduleload	back_mdb.so
moduleload	pw-pbkdf2.so
database config
rootdn		"gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth"
database        mdb
access to attrs=userPassword
        by self write
	by self read
        by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage
	by anonymous auth
	by set="[cn=admins,ou=groups,${LDAP_SUFFIX}]/memberUid & user/uid" manage
        by * none
access to *
        by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage
	by dn.exact="cn=readonly,${LDAP_SUFFIX}" read
	by set="[cn=admins,ou=groups,${LDAP_SUFFIX}]/memberUid & user/uid" manage
	by self read
        by * none
maxsize		1073741824
suffix		"${LDAP_SUFFIX}"
rootdn		"${LDAP_ROOTDN}"
rootpw		${LDAP_ROOTPW_HASH}
password-hash	{PBKDF2-SHA512}
directory	${LDAP_DATA_DIR}