From: Michael Tremer Date: Fri, 14 Aug 2009 08:53:58 +0000 (+0200) Subject: openldap: Add configuration file. X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ba87b2e20d1fb71fea633dd4554acac567da2b8e;p=ipfire-3.x.git openldap: Add configuration file. --- diff --git a/lfs/openldap b/lfs/openldap index 3c7c09dd8..76c8c2ccc 100644 --- a/lfs/openldap +++ b/lfs/openldap @@ -115,7 +115,11 @@ $(OBJECT): $(objects) chmod -v 0755 /usr/lib/$$(readlink /usr/lib/lib$${LINK}.so); \ rm -vf /usr/lib/lib$${LINK}.la; \ done + + # Install configuration $(INSTALL_INITSCRIPT) + $(INSTALL_CONFIG) $(DIR_SOURCE)/$(PKG_NAME)/slapd.conf \ + > /etc/$(PKG_NAME)/slapd.conf -mkdir -pv /var/lib/ldap chmod 700 -Rv /var/lib/ldap diff --git a/src/openldap/slapd.conf b/src/openldap/slapd.conf new file mode 100644 index 000000000..4bb08806f --- /dev/null +++ b/src/openldap/slapd.conf @@ -0,0 +1,53 @@ +# _ ___ _ +# (_) / __|_) +# _ ____ | |__ _ ____ ____ +# | | _ \| __) |/ ___) _ ) +# | | | | | | | | | ( (/ / +# |_| ||_/|_| |_|_| \____) +# |_| +# +# OpenLDAP configuration +# +# www.ipfire.org - Licensed under the GPLv3 +# + +include /etc/openldap/schema/core.schema +include /etc/openldap/schema/cosine.schema +include /etc/openldap/schema/inetorgperson.schema +include /etc/openldap/schema/nis.schema + +pidfile /var/run/slapd.pid +argsfile /var/run/slapd.args + +loglevel 2048 + +####################################################################### +# ACL +####################################################################### + +access to attrs=userPassword,userPKCS12 + by self write + by * auth +access to attrs=shadowLastChange + by self write + by * read +access to * + by * read + +####################################################################### +# BDB database definitions +####################################################################### + +database hdb +suffix "dc=my-domain,dc=com" +rootdn "cn=Manager,dc=my-domain,dc=com" +rootpw secret + +directory /var/lib/ldap + +# Indices to maintain for this database +index objectClass eq,pres +index ou,cn,mail,surname,givenname eq,pres,sub +index uidNumber,gidNumber,loginShell eq,pres +index uid,memberUid eq,pres,sub +index nisMapName,nisMapEntry eq,pres,sub