git.sur5r.net Git - openldap/blob - tests/data/slapd-acl.conf

   1 # $OpenLDAP$
   2 #
   3 # master slapd config -- for testing
   4 #
   5 include         ./data/slapd.at.conf
   6 include         ./data/slapd.oc.conf
   7 schemacheck     off
   8 pidfile     ./test-db/slapd.pid
   9 argsfile    ./test-db/slapd.args
  10
  11 #######################################################################
  12 # ldbm database definitions
  13 #######################################################################
  14
  15 database        ldbm
  16 cachesize       0
  17 suffix          "o=University of Michigan, c=US"
  18 directory       ./test-db
  19 rootdn          "cn=Manager, o=University of Michigan, c=US"
  20 rootpw          secret
  21 index           cn,sn,uid       pres,eq,approx
  22 index           default         none
  23 lastmod         on
  24 defaultaccess   none
  25
  26 #
  27 # normal installations should protect root dse,
  28 # cn=monitor, cn=schema, and cn=config
  29 #
  30
  31 access          to attr=objectclass
  32                 by * =rsc stop
  33
  34 access          to filter="objectclass=person" attr=userpassword
  35                 by anonymous auth
  36                 by self write
  37
  38 access          to dn=".*,ou=Alumni Association,ou=People,o=University of Michigan,c=US$"
  39                 by dn="^$" +x continue
  40                 by dn=".*,o=University of Michigan,c=US$" +rsc continue
  41                 by * stop
  42
  43 access          to attr=member
  44                 by dnattr=member selfwrite
  45                 by * read
  46
  47 access          to filter="objectclass=rfc822mailgroup"
  48                 by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" =sc continue
  49                 by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
  50                 by * break
  51
  52 access          to * by * read