1 # This is the main ldapd configuration file. See slapd.conf(5) for more
2 # info on the configuration options.
4 # Schema and objectClass definitions
5 include /etc/ldap/schema/core.schema
6 include /etc/ldap/schema/cosine.schema
7 include /etc/ldap/schema/nis.schema
8 include /etc/ldap/schema/inetorgperson.schema
9 include /etc/ldap/schema/samba.schema
10 include /etc/ldap/schema/courierimap.schema
11 include /etc/ldap/schema/phpgwaccount.schema
12 include /etc/ldap/schema/phpgwcontact.schema
13 include /etc/ldap/schema/ldapab.schema
16 # Schema check allows for forcing entries to
17 # match schemas for their objectClasses's
20 # Where the pid file is put. The init.d script
21 # will not stop the server if you change this.
22 pidfile /var/run/slapd.pid
24 # List of arguments that were passed to the server
25 argsfile /var/run/slapd.args
27 # Where to store the replica logs
28 replogfile /var/lib/ldap/replog
30 # Read slapd.conf(5) for possible values
34 #######################################################################
35 # ldbm database definitions
36 #######################################################################
38 # The backend type, ldbm, is the default standard
41 # The base of your directory
42 suffix "o=cosmocode,c=de"
44 # Where the database file are physically stored
45 directory "/var/lib/ldap"
50 # Folgende Indizies sind im samba-LDAP-HOWTO empfohlen;
52 ## support pbb_getsampwnam()
54 ## support pdb_getsampwrid()
57 ## uncomment these if you are storing posixAccount and
58 ## posixGroup entries in the directory as well
64 # Save the time that the entry gets modified
67 # The userPassword by default can be changed
68 # by the entry owning it if they are authenticated.
69 # Others should not be able to see it, except the
71 access to attribute=userPassword
72 by dn="cn=admin,o=cosmocode,c=de" write
77 access to attribute=lmPassword
78 by dn="cn=admin,o=cosmocode,c=de" write
83 access to attribute=ntPassword
84 by dn="cn=admin,o=cosmocode,c=de" write
89 # private LDAP Addressbook is readable and writable for the owner only
90 access to dn="(.*,)?ou=contacts,cn=([^,]+),ou=people,(.*)$"
91 by dn="cn=$2,ou=people,$3" write
94 # global LDAP Addressbook is writable for all authenticated users
95 # This entry has to be _before_ any other entry that matches the contact
96 # tree eg. the * entry
97 access to dn.subtree="ou=contacts,o=cosmocode,c=de"
101 # The admin dn has full write access
103 by dn="cn=admin,o=cosmocode,c=de" write
106 # For Netscape Roaming support, each user gets a roaming
107 # profile for which they have write access to
108 #access to dn=".*,ou=Roaming,o=morsnet"
109 # by dn="cn=admin,o=cosmocode,c=de" write
110 # by dnattr=owner write