git.sur5r.net Git - openldap/blob - tests/data/slapd-acl.conf

   1 # $OpenLDAP$
   2 #
   3 # master slapd config -- for testing
   4 #
   5 ucdata-path     ./ucdata
   6 include ./schema/core.schema
   7 include ./schema/cosine.schema
   8 include ./schema/inetorgperson.schema
   9 schemacheck     off
  10 pidfile     ./test-db/slapd.pid
  11 argsfile    ./test-db/slapd.args
  12
  13 #######################################################################
  14 # ldbm database definitions
  15 #######################################################################
  16
  17 backend @BACKEND@
  18 #ldbm#directory ./test-db
  19
  20 database        @BACKEND@
  21 cachesize       0
  22 suffix          "o=University of Michigan, c=US"
  23 directory       ./test-db
  24 rootdn          "cn=Manager, o=University of Michigan, c=US"
  25 rootpw          secret
  26 index           objectClass     eq
  27 index           cn,sn,uid       pres,eq,sub
  28 lastmod         on
  29
  30 #
  31 # normal installations should protect root dse,
  32 # cn=monitor, cn=schema, and cn=config
  33 #
  34
  35 access          to attr=objectclass
  36                 by * =rsc stop
  37
  38 access          to filter="objectclass=person" attr=userpassword
  39                 by anonymous auth
  40                 by self write
  41
  42 access          to dn.children="ou=Alumni Association, ou=People, o=University of Michigan, c=US"
  43                 by dn.regex=".+,o=University of Michigan,c=US" +c continue
  44                 by dn.subtree="o=University of Michigan, c=US" +rs continue
  45                 by * stop
  46
  47 access          to attr=member
  48                 by dnattr=member selfwrite
  49                 by * read
  50
  51 access          to filter="objectclass=groupofnames"
  52                 by dn.base="cn=Bjorn Jensen, ou=Information Technology Division, ou=People, o=University of Michigan,c=US" =sc continue
  53                 by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
  54                 by * break
  55
  56 access          to * by * read