diff --git a/ldap/.calculate_directory b/ldap/.calculate_directory new file mode 100644 index 0000000..6e78990 --- /dev/null +++ b/ldap/.calculate_directory @@ -0,0 +1 @@ +# Calculate append=skip cl_name==calculate-ldap diff --git a/ldap/setup/.calculate_directory b/ldap/setup/.calculate_directory new file mode 100644 index 0000000..d57f195 --- /dev/null +++ b/ldap/setup/.calculate_directory @@ -0,0 +1 @@ +# Calculate append=skip cl_ldap_setup_action==up diff --git a/ldap/setup/openldap/.calculate_directory b/ldap/setup/openldap/.calculate_directory new file mode 100644 index 0000000..0e18bc3 --- /dev/null +++ b/ldap/setup/openldap/.calculate_directory @@ -0,0 +1,2 @@ +# Calculate belong()!=&&pkg(net-nds/openldap)!= path=/etc name=openldap + diff --git a/ldap/setup/openldap/step-1/.calculate_directory b/ldap/setup/openldap/step-1/.calculate_directory new file mode 100644 index 0000000..06514e4 --- /dev/null +++ b/ldap/setup/openldap/step-1/.calculate_directory @@ -0,0 +1,2 @@ +# Calculate append=skip cl_pass_step==1 + diff --git a/ldap/setup/openldap/step-1/slapd.conf b/ldap/setup/openldap/step-1/slapd.conf new file mode 100644 index 0000000..97810b2 --- /dev/null +++ b/ldap/setup/openldap/step-1/slapd.conf @@ -0,0 +1,60 @@ +# Calculate format=ldap chmod=0640 chown=root:ldap append=replace +include /etc/openldap/schema/core.schema +include /etc/openldap/schema/cosine.schema +include /etc/openldap/schema/nis.schema +include /etc/openldap/schema/inetorgperson.schema +include /etc/openldap/schema/misc.schema +#?pkg(net-nds/openldap)<2.4#schemacheck on#pkg# + +pidfile /var/run/openldap/slapd.pid +argsfile /var/run/openldap/slapd.arg + +# Уровень отладочных сообщений +loglevel 0 +allow bind_v2 +modulepath /usr/lib/openldap/openldap + +# Доступ к аттрибуту userPassword +access to attrs=userPassword + by self write + by dn="#-ld_admin_dn-#" write + by * auth + +# Доступ к администратору сервера LDAP +access to dn.base="#-ld_admin_dn-#" + by dn="#-ld_admin_dn-#" write + by * none + +# Закрываем доступ к веткам +access to dn.regex=".*,#-ld_services_dn-#" + by dn="#-ld_admin_dn-#" write + by * none + +# Доступ ко всем аттрибутам +access to * + by dn="#-ld_admin_dn-#" write + by self write + by * read + +# Доступ по умолчанию только для чтения +#?pkg(net-nds/openldap)<2.4#defaultaccess none#pkg# + +# Тип базы данных +#?pkg(net-nds/openldap)<2.4#database ldbm#pkg# +#?pkg(net-nds/openldap)>2.4#database bdb#pkg# +suffix "#-ld_base_dn-#" +rootdn "#-ld_temp_dn-#" +rootpw #-ld_temp_hash-# +checkpoint 1024 5 +cachesize 10000 +# Размер ответа на запрос +sizelimit unlimited +directory /var/lib/openldap-data + +index objectClass eq +index cn pres,sub,eq +index sn pres,sub,eq +index uid pres,sub,eq +index uidNumber eq +index gidNumber eq +index default sub \ No newline at end of file diff --git a/ldap/setup/openldap/step-2/.calculate_directory b/ldap/setup/openldap/step-2/.calculate_directory new file mode 100644 index 0000000..2605632 --- /dev/null +++ b/ldap/setup/openldap/step-2/.calculate_directory @@ -0,0 +1,2 @@ +# Calculate append=skip cl_pass_step==2 + diff --git a/ldap/setup/openldap/step-2/slapd.conf b/ldap/setup/openldap/step-2/slapd.conf new file mode 100644 index 0000000..8a1c25d --- /dev/null +++ b/ldap/setup/openldap/step-2/slapd.conf @@ -0,0 +1,3 @@ +# Calculate format=ldap chmod=0640 chown=root:ldap append=join +!rootdn del +!rootpw del \ No newline at end of file