[olug] OpenLDAP
Brian Roberson
roberson at olug.org
Wed Jul 30 04:09:18 UTC 2003
here is a very basic openldap2.2 server I have just for data migration:
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27 20:00:31
kur
t Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /var/run/slapd.pid
argsfile /var/run/slapd.args
sizelimit 1500
# Load dynamic backend modules:
# modulepath /usr/lib/openldap/openldap
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
#
# Sample Access Control
# Allow read access of root DSE
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
#
#access to dn="" by * read
#access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default is:
# Allow read by all
#
# rootdn can always write!
#######################################################################
# ldbm database definitions
#######################################################################
database ldbm
# the below did not suit my needs - long story
#rootdn "cn=Manager,dc=dtnenergy,dc=com"
#suffix "dc=dtnenergy,dc=com"
suffix "o=DTN, c=US"
rootdn "cn=ldapadmin, o=DTN, c=US"
rootpw <some-plain-text-here>
#suffix "o=My Organization Name,c=US"
#rootdn "cn=Manager,dc=dtnenergy,dc=com"
#rootdn "cn=Manager,o=My Organization Name,c=US"
#rootdn "cn=Manager,o=DTN,c=US"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
#rootpw secret
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory /var/lib/ldap
# Indices to maintain
#index cn,sn
index objectClass eq
----- Original Message -----
From: "Jon H. Larsen" <relayer at levania.org>
To: <olug at olug.org>
Sent: Tuesday, July 29, 2003 8:38 AM
Subject: [olug] OpenLDAP
> Hi Everybody,
>
> Can someone post a sample copy of their slapd.conf so I can compare it
> against the one I'm building?
>
> Sometimes reference is the best teacher...
> Jon L.
>
> --
> Jon H. Larsen - email: relayer at levania dot org
> Omaha Linux Users Group - http://www.olug.org
> ICQ#: 10412618 - http://www.levania.org/~relayer/
> PGP Pubkey - http://www.levania.org/~relayer/relayerpubkey.txt
>
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> http://lists.olug.org/mailman/listinfo/olug
>
More information about the OLUG
mailing list