You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
62 lines
1.6 KiB
62 lines
1.6 KiB
# Calculate format=ldap\
|
|
chmod=0640\
|
|
chown=root:ldap\
|
|
append=replace
|
|
include /etc/openldap/schema/core.schema
|
|
include /etc/openldap/schema/cosine.schema
|
|
include /etc/openldap/schema/nis.schema
|
|
include /etc/openldap/schema/inetorgperson.schema
|
|
include /etc/openldap/schema/misc.schema
|
|
#?pkg(openldap)<2.4#schemacheck on#pkg#
|
|
|
|
pidfile /var/run/openldap/slapd.pid
|
|
argsfile /var/run/openldap/slapd.arg
|
|
|
|
# Уровень отладочных сообщений
|
|
loglevel 0
|
|
allow bind_v2
|
|
modulepath /usr/lib/openldap/openldap
|
|
|
|
# Доступ к аттрибуту userPassword
|
|
access to attrs=userPassword
|
|
by self write
|
|
by dn="#-ld_admin_dn-#" write
|
|
by * auth
|
|
|
|
# Доступ к администратору сервера LDAP
|
|
access to dn.base="#-ld_admin_dn-#"
|
|
by dn="#-ld_admin_dn-#" write
|
|
by * none
|
|
|
|
# Закрываем доступ к веткам
|
|
access to dn.regex=".*,#-ld_services_dn-#"
|
|
by dn="#-ld_admin_dn-#" write
|
|
by * none
|
|
|
|
# Доступ ко всем аттрибутам
|
|
access to *
|
|
by dn="#-ld_admin_dn-#" write
|
|
by self write
|
|
by * read
|
|
|
|
# Доступ по умолчанию только для чтения
|
|
#?pkg(openldap)<2.4#defaultaccess none#pkg#
|
|
|
|
# Тип базы данных
|
|
#?pkg(openldap)<2.6#database bdb#pkg#
|
|
#?pkg(openldap)>2.6#database mdb#pkg#
|
|
suffix "#-ld_base_dn-#"
|
|
rootdn "#-ld_temp_dn-#"
|
|
rootpw #-ld_temp_hash-#
|
|
# Размер ответа на запрос
|
|
sizelimit unlimited
|
|
directory /var/lib/openldap-data
|
|
|
|
index objectClass eq
|
|
index cn pres,sub,eq
|
|
index sn pres,sub,eq
|
|
index uid pres,sub,eq
|
|
index uidNumber eq
|
|
index gidNumber eq
|
|
index default sub
|