git.sur5r.net Git - openldap/blob - tests/data/slapd-acl.conf

   1 # $OpenLDAP$
   2 #
   3 # master slapd config -- for testing
   4 #
   5 ucdata-path     ./ucdata
   6 include ./schema/core.schema
   7 include ./schema/cosine.schema
   8 include ./schema/inetorgperson.schema
   9 include ./schema/openldap.schema
  10 schemacheck     off
  11 pidfile     ./test-db/slapd.pid
  12 argsfile    ./test-db/slapd.args
  13
  14 # global ACLs
  15 access to dn.base="" attr=objectClass by users read
  16 access to * by * read
  17
  18 #######################################################################
  19 # ldbm database definitions
  20 #######################################################################
  21
  22 database        @BACKEND@
  23 cachesize       0
  24 suffix          "o=University of Michigan,c=US"
  25 directory       ./test-db
  26 rootdn          "cn=Manager,o=University of Michigan,c=US"
  27 rootpw          secret
  28 #ldbm#index             objectClass     eq
  29 #ldbm#index             cn,sn,uid       pres,eq,sub
  30 #bdb#index              objectClass     eq
  31 #bdb#index              cn,sn,uid       pres,eq,sub
  32 lastmod         on
  33
  34 #
  35 # normal installations should protect root dse,
  36 # cn=monitor, cn=schema, and cn=config
  37 #
  38
  39 access          to attr=objectclass
  40                 by * =rsc stop
  41
  42 access          to filter="objectclass=person" attr=userpassword
  43                 by anonymous auth
  44                 by self write
  45
  46 access          to dn.children="ou=Alumni Association,ou=People,o=University of Michigan,c=US"
  47                 by dn.regex=".+,o=University of Michigan,c=US" +c continue
  48                 by dn.subtree="o=University of Michigan,c=US" +rs continue
  49                 by * stop
  50
  51 access          to attr=member
  52                 by dnattr=member selfwrite
  53                 by * read
  54
  55 access          to filter="objectclass=groupofnames"
  56                 by dn.base="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US" =sc continue
  57                 by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
  58                 by * break
  59
  60 # fall into global ACLs