examples/slapd.conf

   1 #TLSCipherSuite HIGH:MEDIUM:+SSLv3
   2 #TLSCertificateFile      /etc/ldap/TLS/ldapserver.crt
   3 #TLSCertificateKeyFile   /etc/ldap/TLS/ldapserver.key
   4 #TLSCACertificateFile    /etc/ldap/TLS/ca.crt
   5
   6 #allow bind_v2
   7 disallow bind_anon tls_2_anon
   8
   9 include         /etc/ldap/schema/core.schema
  10 include         /etc/ldap/schema/cosine.schema
  11 include         /etc/ldap/schema/nis.schema
  12 include         /etc/ldap/schema/inetorgperson.schema
  13 include         /etc/ldap/schema/misc.schema
  14 include         /etc/ldap/schema/local.schema
  15 include         /etc/ldap/schema/mod_vhost_ldap.schema
  16 include         /etc/ldap/schema/apache_ext.schema
  17 include         /etc/ldap/schema/apache_alias.schema
  18
  19 pidfile         /var/run/slapd/slapd.pid
  20 argsfile        /var/run/slapd.args
  21 modulepath      /usr/lib/ldap
  22 moduleload      back_bdb
  23 backend         bdb
  24 schemacheck     on
  25
  26 checkpoint      1 5
  27
  28 #sum values as ldap level
  29 # 1      trace function calls
  30 # 2      debug packet handling
  31 # 4      heavy trace debugging
  32 # 8      connection management
  33 # 16     print out packets sent and received
  34 # 32     search filter processing
  35 # 64     configuration file processing
  36 # 128    access control list processing
  37 # 256    stats log connections/operations/results
  38 # 512    stats log entries sent
  39 # 1024   print communication with shell backends
  40 # 2048   entry parsing
  41
  42 #loglevel       768
  43 loglevel       0
  44
  45 database        bdb
  46 lastmod         on
  47 suffix          "dc=ROOT"
  48 directory       "/var/lib/ldap"
  49 sizelimit       unlimited
  50 timelimit       unlimited
  51
  52 include /etc/ldap/indexes
  53
  54 rootdn          "cn=admin,dc=foo,dc=bar"
  55
  56 access to dn.base=""
  57         by * read
  58
  59 access to *
  60         by dn="cn=admin,dc=foo,dc=bar"
  61         by dn="cn=nobody,dc=foo,dc=bar" read
  62     by * none