1 # This is the main ldapd configuration file. See slapd.conf(5) for more
2 # info on the configuration options.
4 # Schema and objectClass definitions
5 include /etc/ldap/schema/core.schema
6 include /etc/ldap/schema/cosine.schema
7 include /etc/ldap/schema/nis.schema
8 include /etc/ldap/schema/inetorgperson.schema
9 include /etc/ldap/schema/ldapab.schema
12 # Schema check allows for forcing entries to
13 # match schemas for their objectClasses's
16 # Where the pid file is put. The init.d script
17 # will not stop the server if you change this.
18 pidfile /var/run/slapd.pid
20 # List of arguments that were passed to the server
21 argsfile /var/run/slapd.args
23 # Where to store the replica logs
24 replogfile /var/lib/ldap/replog
26 # Read slapd.conf(5) for possible values
30 #######################################################################
31 # ldbm database definitions
32 #######################################################################
34 # The backend type, ldbm, is the default standard
37 # The base of your directory
38 suffix "o=cosmocode,c=de"
40 # Where the database file are physically stored
41 directory "/var/lib/ldap"
46 # Folgende Indizies sind im samba-LDAP-HOWTO empfohlen;
48 ## support pbb_getsampwnam()
50 ## support pdb_getsampwrid()
53 ## uncomment these if you are storing posixAccount and
54 ## posixGroup entries in the directory as well
60 # Save the time that the entry gets modified
63 # The userPassword by default can be changed
64 # by the entry owning it if they are authenticated.
65 # Others should not be able to see it, except the
67 access to attribute=userPassword
68 by dn="cn=admin,o=cosmocode,c=de" write
73 access to attribute=lmPassword
74 by dn="cn=admin,o=cosmocode,c=de" write
79 access to attribute=ntPassword
80 by dn="cn=admin,o=cosmocode,c=de" write
85 # private LDAP Addressbook is readable and writable for the owner only
86 access to dn="(.*,)?ou=contacts,cn=([^,]+),ou=people,(.*)$"
87 by dn="cn=$2,ou=people,$3" write
90 # global LDAP Addressbook is writable for all authenticated users
91 # This entry has to be _before_ any other entry that matches the contact
92 # tree eg. the * entry
93 access to dn.subtree="ou=contacts,o=cosmocode,c=de"
97 # The admin dn has full write access
99 by dn="cn=admin,o=cosmocode,c=de" write
102 # For Netscape Roaming support, each user gets a roaming
103 # profile for which they have write access to
104 #access to dn=".*,ou=Roaming,o=morsnet"
105 # by dn="cn=admin,o=cosmocode,c=de" write
106 # by dnattr=owner write