From: Nick Porter <nick@portercomputing.co.uk>
Date: Thu, 24 Aug 2023 10:23:36 +0000 (+0100)
Subject: Add regex to allow ldapi:// peercred admin binds in tests
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=209cf1c90ed6f5c24fab7932ef6f5e79068c6f96;p=thirdparty%2Ffreeradius-server.git

Add regex to allow ldapi:// peercred admin binds in tests
---

diff --git a/scripts/ci/ldap/slapd.conf b/scripts/ci/ldap/slapd.conf
index 14ee54eeb0e..31f5d761523 100644
--- a/scripts/ci/ldap/slapd.conf
+++ b/scripts/ci/ldap/slapd.conf
@@ -39,6 +39,12 @@ authz-regexp
   uid=([^,]*),cn=[^,]*,cn=auth
   uid=$1,ou=people,dc=example,dc=com
 
+# Simple mapping of all peercred users to the admin user - to allow for ldapi:// "anonymous" admin connections
+# Definitely testing only as this lets any local user be admin.
+authz-regexp
+  gidNumber=([0-9]*)+uidNumber=([0-9])*,cn=peercred,cn=external,cn=auth
+  cn=admin,dc=example,dc=com
+
 #######################################################################
 # mdb database definitions can be added here, or added by ldapadd
 #######################################################################