1 # slave slapd config -- for testing of replication
3 ## This work is part of OpenLDAP Software <http://www.openldap.org/>.
5 ## Copyright 1998-2005 The OpenLDAP Foundation.
6 ## All rights reserved.
8 ## Redistribution and use in source and binary forms, with or without
9 ## modification, are permitted only as authorized by the OpenLDAP
12 ## A copy of this license is available in the file LICENSE in the
13 ## top-level directory of the distribution or, alternatively, at
14 ## <http://www.OpenLDAP.org/license.html>.
16 include @SCHEMADIR@/core.schema
17 include @SCHEMADIR@/cosine.schema
18 include @SCHEMADIR@/inetorgperson.schema
19 include @SCHEMADIR@/openldap.schema
20 include @SCHEMADIR@/nis.schema
22 pidfile @TESTDIR@/slapd.2.pid
23 argsfile @TESTDIR@/slapd.2.args
25 #mod#modulepath ../servers/slapd/back-@BACKEND@/
26 #mod#moduleload back_@BACKEND@.la
27 #monitormod#modulepath ../servers/slapd/back-monitor/
28 #monitormod#moduleload back_monitor.la
29 #ldapmod#modulepath ../servers/slapd/back-ldap/
30 #ldapmod#moduleload back_ldap.la
32 #ldapyes#overlay chain
33 #ldapyes#chain-uri @URI1@
34 #ldapyes#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
35 #ldapmod#overlay chain
36 #ldapmod#chain-uri @URI1@
37 #ldapmod#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
39 #######################################################################
40 # database definitions
41 #######################################################################
48 suffix "dc=example,dc=com"
49 directory @TESTDIR@/db.2.a
50 rootdn "cn=Replica,dc=example,dc=com"
52 # HACK: use the RootDN of the monitor database as UpdateDN so ACLs apply
53 # whithout the need to write the UpdateDN before starting replication
56 #bdb#index objectClass eq
57 #bdb#index cn,sn,uid pres,eq,sub
58 #bdb#index entryUUID pres,eq
59 #hdb#index objectClass eq
60 #hdb#index cn,sn,uid pres,eq,sub
61 #hdb#index entryUUID pres,eq
63 # Need to strip hasSubordinates from internal searches otherwise
64 # syncrepl will try to delete it, since syncprov is not sending
65 # it because it's generated
66 access to dn.subtree="dc=example,dc=com" attrs=hasSubordinates
67 by dn.exact="cn=Monitor" none
70 access to dn.subtree="dc=example,dc=com"
71 by dn.exact="cn=Monitor" write
74 #monitor#database monitor
75 #monitor#rootdn "cn=Monitor"
76 #monitor#rootpw monitor