35 lines
1.2 KiB
Plaintext
35 lines
1.2 KiB
Plaintext
include /etc/openldap/schema/core.schema
|
|
include /etc/openldap/schema/cosine.schema
|
|
include /etc/openldap/schema/inetorgperson.schema
|
|
include /etc/openldap/schema/openldap.schema
|
|
include /etc/openldap/schema/nis.schema
|
|
include /etc/openldap/schema/custom.schema
|
|
pidfile /run/openldap/slapd.pid
|
|
argsfile /run/openldap/slapd.args
|
|
modulepath /usr/lib/openldap
|
|
moduleload auditlog.so
|
|
moduleload back_mdb.so
|
|
moduleload pw-pbkdf2.so
|
|
database config
|
|
rootdn "gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth"
|
|
database mdb
|
|
access to attrs=userPassword
|
|
by self write
|
|
by self read
|
|
by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage
|
|
by anonymous auth
|
|
by set="[cn=admins,ou=groups,${LDAP_SUFFIX}]/memberUid & user/uid" manage
|
|
by * none
|
|
access to *
|
|
by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage
|
|
by dn.exact="cn=readonly,${LDAP_SUFFIX}" read
|
|
by set="[cn=admins,ou=groups,${LDAP_SUFFIX}]/memberUid & user/uid" manage
|
|
by self read
|
|
by * none
|
|
maxsize 1073741824
|
|
suffix "${LDAP_SUFFIX}"
|
|
rootdn "${LDAP_ROOTDN}"
|
|
rootpw ${LDAP_ROOTPW_HASH}
|
|
password-hash {PBKDF2-SHA512}
|
|
directory ${LDAP_DATA_DIR}
|