git.sur5r.net Git - openldap/blob - tests/data/slapd-idassert.conf

   1 # master slapd config -- for testing
   2 # $OpenLDAP: pkg/ldap/tests/data/slapd-pw.conf,v 1.19.2.4 2003/12/15 22:05:29
   3  kurt Exp $
   4 ## This work is part of OpenLDAP Software <http://www.openldap.org/>.
   5 ##
   6 ## Copyright 1998-2003 The OpenLDAP Foundation.
   7 ## All rights reserved.
   8 ##
   9 ## Redistribution and use in source and binary forms, with or without
  10 ## modification, are permitted only as authorized by the OpenLDAP
  11 ## Public License.
  12 ##
  13 ## A copy of this license is available in the file LICENSE in the
  14 ## top-level directory of the distribution or, alternatively, at
  15 ## <http://www.OpenLDAP.org/license.html>.
  16
  17 #ucdata-path    ./ucdata
  18 include ./schema/core.schema
  19 include ./schema/cosine.schema
  20 include ./schema/inetorgperson.schema
  21 include ./schema/openldap.schema
  22 include ./schema/nis.schema
  23 pidfile     ./testrun/slapd.1.pid
  24 argsfile    ./testrun/slapd.1.args
  25
  26 # password-hash {md5}
  27
  28 #mod#modulepath ../servers/slapd/back-@BACKEND@/
  29 #mod#moduleload back_@BACKEND@.la
  30
  31 #######################################################################
  32 # ldbm database definitions
  33 #######################################################################
  34
  35 authz-policy    both
  36 authz-regexp    "^uid=admin/([^,]+),.*" "ldap:///ou=Admin,dc=example,dc=com??sub?cn=$1"
  37 authz-regexp    "^uid=it/([^,]+),.*" "ldap:///ou=People,dc=example,dc=it??sub?uid=$1"
  38 authz-regexp    "^uid=(us/)*([^,]+),.*" "ldap:///ou=People,dc=example,dc=com??sub?uid=$2"
  39
  40 #
  41 # normal installations should protect root dse,
  42 # cn=monitor, cn=schema, and cn=config
  43 #
  44
  45 access to attr=userpassword
  46         by self =wx
  47         by anonymous =x
  48
  49 access to *
  50         by users read
  51         by * search
  52
  53 database        @BACKEND@
  54 #ldbm#cachesize 0
  55 suffix          "dc=example,dc=com"
  56 directory       ./testrun/db.1.a
  57 rootdn          "cn=Manager,dc=example,dc=com"
  58 rootpw          secret
  59 index           objectClass     eq
  60 index           cn,sn,uid       pres,eq,sub
  61
  62 access to dn.exact="cn=Proxy,ou=Admin,dc=example,dc=com"
  63                 attr=authzTo
  64         by dn.exact="cn=Proxy,ou=Admin,dc=example,dc=com" =wx
  65         by * =x
  66
  67 database        @BACKEND@
  68 #ldbm#cachesize 0
  69 suffix          "dc=example,dc=it"
  70 directory       ./testrun/db.2.a
  71 rootdn          "cn=Manager,dc=example,dc=it"
  72 rootpw          secret
  73 index           objectClass     eq
  74 index           cn,sn,uid       pres,eq,sub
  75
  76 database        ldap
  77 suffix          "o=Example,c=US"
  78 suffixmassage   "o=Example,c=US" "dc=example,dc=com"
  79 uri             "ldap://:9011/"
  80
  81 #sasl#idassert-method "sasl" "authcDN=cn=Proxy US,ou=Admin,dc=example,dc=com" "authcID=admin/proxy US" "cred=proxy" "mech=DIGEST-MD5"
  82 #nosasl#idassert-method "simple"
  83 #nosasl#idassert-authcDN        "cn=Proxy US,ou=Admin,dc=example,dc=com"
  84 #nosasl#idassert-passwd         proxy
  85 idassert-mode   self
  86
  87 # authorizes database
  88 idassert-authz  "dn.subtree:dc=example,dc=it"
  89
  90 database        ldap
  91 suffix          "o=Esempio,c=IT"
  92 suffixmassage   "o=Esempio,c=IT" "dc=example,dc=com"
  93 uri             "ldap://:9011/"
  94
  95 acl-authcDN     "cn=Proxy IT,ou=Admin,dc=example,dc=com"
  96 acl-passwd      proxy
  97
  98 idassert-method "simple"
  99 idassert-authcDN        "cn=Proxy IT,ou=Admin,dc=example,dc=com"
 100 idassert-passwd         proxy
 101 idassert-mode   "dn:cn=Sandbox,ou=Admin,dc=example,dc=com"
 102
 103 # authorizes database
 104 idassert-authz  "dn.subtree:dc=example,dc=com"
 105 # authorizes anonymous
 106 idassert-authz  "dn.exact:"
 107
 108 access to attrs=entry,cn,sn,mail
 109         by users read
 110
 111 access to *
 112         by dn.exact="cn=Proxy IT,ou=Admin,o=Esempio,c=IT" read
 113         by group.exact="cn=Authorizable,ou=Groups,o=Esempio,c=IT" read
 114         by dn.exact="cn=Sandbox,ou=Admin,dc=example,dc=com" search
 115         by * none
 116
 117