git.sur5r.net Git - openldap/blob - tests/data/slapd-idassert.conf

   1 # master slapd config -- for testing
   2 # $OpenLDAP: pkg/ldap/tests/data/slapd-pw.conf,v 1.19.2.4 2003/12/15 22:05:29
   3  kurt Exp $
   4 ## This work is part of OpenLDAP Software <http://www.openldap.org/>.
   5 ##
   6 ## Copyright 1998-2005 The OpenLDAP Foundation.
   7 ## All rights reserved.
   8 ##
   9 ## Redistribution and use in source and binary forms, with or without
  10 ## modification, are permitted only as authorized by the OpenLDAP
  11 ## Public License.
  12 ##
  13 ## A copy of this license is available in the file LICENSE in the
  14 ## top-level directory of the distribution or, alternatively, at
  15 ## <http://www.OpenLDAP.org/license.html>.
  16
  17 #ucdata-path    ./ucdata
  18 include         @SCHEMADIR@/core.schema
  19 include         @SCHEMADIR@/cosine.schema
  20 include         @SCHEMADIR@/inetorgperson.schema
  21 include         @SCHEMADIR@/openldap.schema
  22 include         @SCHEMADIR@/nis.schema
  23 pidfile         @TESTDIR@/slapd.1.pid
  24 argsfile        @TESTDIR@/slapd.1.args
  25
  26 #mod#modulepath ../servers/slapd/back-@BACKEND@/
  27 #mod#moduleload back_@BACKEND@.la
  28 #ldapmod#modulepath ../servers/slapd/back-ldap/
  29 #ldapmod#moduleload back_ldap.la
  30 #monitormod#modulepath ../servers/slapd/back-monitor/
  31 #monitormod#moduleload back_monitor.la
  32 #rwmmod#modulepath ../servers/slapd/overlays/
  33 #rwmmod#moduleload rwm.la
  34
  35 #######################################################################
  36 # database definitions
  37 #######################################################################
  38
  39 authz-policy    both
  40 authz-regexp    "^uid=admin/([^,]+),.+" "ldap:///ou=Admin,dc=example,dc=com??sub?(cn=$1)"
  41 authz-regexp    "^uid=it/([^,]+),.+" "ldap:///ou=People,dc=example,dc=it??sub?(uid=$1)"
  42 authz-regexp    "^uid=(us/)?([^,]+),.+" "ldap:///ou=People,dc=example,dc=com??sub?(uid=$2)"
  43
  44 #
  45 # normal installations should protect root dse,
  46 # cn=monitor, cn=schema, and cn=config
  47 #
  48
  49 access to attr=userpassword
  50         by self =wx
  51         by anonymous =x
  52
  53 access to dn.exact=""
  54         by * read
  55
  56 access to *
  57         by users read
  58         by * search
  59
  60 database        @BACKEND@
  61 #ldbm#cachesize 0
  62 suffix          "dc=example,dc=com"
  63 directory       @TESTDIR@/db.1.a
  64 rootdn          "cn=Manager,dc=example,dc=com"
  65 rootpw          secret
  66 #bdb#index              objectClass     eq
  67 #bdb#index              cn,sn,uid       pres,eq,sub
  68 #hdb#index              objectClass     eq
  69 #hdb#index              cn,sn,uid       pres,eq,sub
  70 #ldbm#index             objectClass     eq
  71 #ldbm#index             cn,sn,uid       pres,eq,sub
  72
  73 access to dn.exact="cn=Proxy,ou=Admin,dc=example,dc=com"
  74                 attr=authzTo
  75         by dn.exact="cn=Proxy,ou=Admin,dc=example,dc=com" =wx
  76         by * =x
  77
  78 database        @BACKEND@
  79 #ldbm#cachesize 0
  80 suffix          "dc=example,dc=it"
  81 directory       @TESTDIR@/db.2.a
  82 rootdn          "cn=Manager,dc=example,dc=it"
  83 rootpw          secret
  84 #bdb#index              objectClass     eq
  85 #bdb#index              cn,sn,uid       pres,eq,sub
  86 #hdb#index              objectClass     eq
  87 #hdb#index              cn,sn,uid       pres,eq,sub
  88 #ldbm#index             objectClass     eq
  89 #ldbm#index             cn,sn,uid       pres,eq,sub
  90
  91 database        ldap
  92 suffix          "o=Example,c=US"
  93 uri             "@URI1@"
  94
  95 #sasl#idassert-bind     bindmethod=sasl binddn="cn=Proxy US,ou=Admin,dc=example,dc=com" authcId="admin/proxy US" credentials="proxy" @SASL_MECH@ mode=self
  96 #nosasl#idassert-bind   bindmethod=simple binddn="cn=Proxy US,ou=Admin,dc=example,dc=com" credentials="proxy" mode=self
  97
  98 # authorizes database
  99 idassert-authzFrom      "dn.subtree:dc=example,dc=it"
 100
 101 overlay         rwm
 102 rwm-suffixmassage       "dc=example,dc=com"
 103
 104 database        ldap
 105 suffix          "o=Esempio,c=IT"
 106 uri             "@URI1@"
 107
 108 acl-authcDN     "cn=Proxy IT,ou=Admin,dc=example,dc=com"
 109 acl-passwd      proxy
 110
 111 idassert-bind   bindmethod=simple binddn="cn=Proxy IT,ou=Admin,dc=example,dc=com" credentials="proxy" authzId="dn:cn=Sandbox,ou=Admin,dc=example,dc=com"
 112
 113 # authorizes database
 114 idassert-authzFrom      "dn.subtree:dc=example,dc=com"
 115 # authorizes anonymous
 116 idassert-authzFrom      "dn.exact:"
 117
 118 overlay         rwm
 119 rwm-suffixmassage       "dc=example,dc=com"
 120
 121 access to attrs=entry,cn,sn,mail
 122         by users read
 123
 124 access to *
 125         by dn.exact="cn=Proxy IT,ou=Admin,o=Esempio,c=IT" read
 126         by group.exact="cn=Authorizable,ou=Groups,o=Esempio,c=IT" read
 127         by dn.exact="cn=Sandbox,ou=Admin,dc=example,dc=com" search
 128         by * none
 129
 130 #monitor#database       monitor