git.sur5r.net Git - openldap/blob - tests/data/slapd-acl.conf

   1 # master slapd config -- for testing
   2 # $OpenLDAP$
   3 ## This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4 ##
   5 ## Copyright 1998-2004 The OpenLDAP Foundation.
   6 ## All rights reserved.
   7 ##
   8 ## Redistribution and use in source and binary forms, with or without
   9 ## modification, are permitted only as authorized by the OpenLDAP
  10 ## Public License.
  11 ##
  12 ## A copy of this license is available in the file LICENSE in the
  13 ## top-level directory of the distribution or, alternatively, at
  14 ## <http://www.OpenLDAP.org/license.html>.
  15
  16 ucdata-path     ./ucdata
  17 include ./schema/core.schema
  18 include ./schema/cosine.schema
  19 include ./schema/inetorgperson.schema
  20 include ./schema/openldap.schema
  21 include ./schema/nis.schema
  22 pidfile     ./testrun/slapd.1.pid
  23 argsfile    ./testrun/slapd.1.args
  24
  25 # global ACLs
  26 access to dn.base="" attr=objectClass by users read
  27 access to * by * read
  28
  29 #mod#modulepath ../servers/slapd/back-@BACKEND@/
  30 #mod#moduleload back_@BACKEND@.la
  31
  32 #######################################################################
  33 # ldbm database definitions
  34 #######################################################################
  35
  36 database        @BACKEND@
  37 #ldbm#cachesize 0
  38 suffix          "o=University of Michigan,c=US"
  39 directory       ./testrun/db.1.a
  40 rootdn          "cn=Manager,o=University of Michigan,c=US"
  41 rootpw          secret
  42 #ldbm#index             objectClass     eq
  43 #ldbm#index             cn,sn,uid       pres,eq,sub
  44 #bdb#index              objectClass     eq
  45 #bdb#index              cn,sn,uid       pres,eq,sub
  46
  47 #
  48 # normal installations should protect root dse, cn=monitor, cn=subschema
  49 #
  50
  51 access to dn="" by * read
  52 access to dn.base="" by * read
  53
  54 access          to attr=objectclass
  55                 by * =rsc stop
  56
  57 access          to filter="(objectclass=person)" attr=userpassword dn.subtree=""
  58                 by anonymous auth
  59                 by self write
  60
  61 access          to dn.children="ou=Alumni Association,ou=People,o=University of Michigan,c=US"
  62                 by dn.regex=".+,o=University of Michigan,c=US" +c continue
  63                 by dn.subtree="o=University of Michigan,c=US" +rs continue
  64                 by * stop
  65
  66 access          to attr=member,uniquemember
  67                 by dnattr=member selfwrite
  68                 by dnattr=uniquemember selfwrite
  69                 by * read
  70
  71 access to attr=member,uniquemember filter=(mail=*edu)
  72                 by * read
  73
  74 access to filter="(&(objectclass=groupofnames)(objectClass=groupofuniquenames))"
  75                 by dn.base="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US" =sc continue
  76                 by dn.regex="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
  77                 by * break
  78
  79 access          to dn.children="ou=Information Technology Division,ou=People,o=University of Michigan,c=US"
  80                 by group/groupOfUniqueNames/uniqueMember.exact="cn=ITD Staff,ou=Groups,o=University of Michigan,c=US" write
  81                 by * read
  82
  83 access  to filter="(name=X*Y*Z)"
  84                 by * continue
  85
  86 # fall into global ACLs