git.sur5r.net Git - openldap/blob - tests/data/slapd-acl.conf

   1 # $OpenLDAP$
   2 #
   3 # master slapd config -- for testing
   4 #
   5 #include                ./data/slapd.at.conf
   6 #include                ./data/slapd.oc.conf
   7 include ./schema/core.schema
   8 include ./schema/cosine.schema
   9 include ./schema/inetorgperson.schema
  10 schemacheck     off
  11 pidfile     ./test-db/slapd.pid
  12 argsfile    ./test-db/slapd.args
  13
  14 #######################################################################
  15 # ldbm database definitions
  16 #######################################################################
  17
  18 database        ldbm
  19 cachesize       0
  20 suffix          "o=University of Michigan, c=US"
  21 directory       ./test-db
  22 rootdn          "cn=Manager, o=University of Michigan, c=US"
  23 rootpw          secret
  24 index           cn,sn,uid       pres,eq,approx
  25 index           default         none
  26 lastmod         on
  27 defaultaccess   none
  28
  29 #
  30 # normal installations should protect root dse,
  31 # cn=monitor, cn=schema, and cn=config
  32 #
  33
  34 access          to attr=objectclass
  35                 by * =rsc stop
  36
  37 access          to filter="objectclass=person" attr=userpassword
  38                 by anonymous auth
  39                 by self write
  40
  41 access          to dn=".*,ou=Alumni Association,ou=People,o=University of Michigan,c=US$"
  42                 by dn="^$" +x continue
  43                 by dn=".*,o=University of Michigan,c=US$" +rsc continue
  44                 by * stop
  45
  46 access          to attr=member
  47                 by dnattr=member selfwrite
  48                 by * read
  49
  50 access          to filter="objectclass=groupofnames"
  51                 by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" =sc continue
  52                 by dn="^cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US$" +rw stop
  53                 by * break
  54
  55 access          to * by * read