1 # slave slapd config -- for testing of replication
3 ## This work is part of OpenLDAP Software <http://www.openldap.org/>.
5 ## Copyright 1998-2014 The OpenLDAP Foundation.
6 ## All rights reserved.
8 ## Redistribution and use in source and binary forms, with or without
9 ## modification, are permitted only as authorized by the OpenLDAP
12 ## A copy of this license is available in the file LICENSE in the
13 ## top-level directory of the distribution or, alternatively, at
14 ## <http://www.OpenLDAP.org/license.html>.
16 include @SCHEMADIR@/core.schema
17 include @SCHEMADIR@/cosine.schema
18 include @SCHEMADIR@/inetorgperson.schema
19 include @SCHEMADIR@/openldap.schema
20 include @SCHEMADIR@/nis.schema
22 pidfile @TESTDIR@/slapd.2.pid
23 argsfile @TESTDIR@/slapd.2.args
25 #mod#modulepath ../servers/slapd/back-@BACKEND@/
26 #mod#moduleload back_@BACKEND@.la
27 #monitormod#modulepath ../servers/slapd/back-monitor/
28 #monitormod#moduleload back_monitor.la
29 #ldapmod#modulepath ../servers/slapd/back-ldap/
30 #ldapmod#moduleload back_ldap.la
32 #ldapyes#overlay chain
33 #ldapyes#chain-uri @URI1@
34 #ldapyes#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
35 #ldapmod#overlay chain
36 #ldapmod#chain-uri @URI1@
37 #ldapmod#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
39 #######################################################################
40 # database definitions
41 #######################################################################
43 access to dn.base="" attrs=children
44 by dn.exact="cn=Monitor" write
52 suffix "dc=example,dc=com"
53 rootdn "cn=Replica,dc=example,dc=com"
55 # HACK: use the RootDN of the monitor database as UpdateDN so ACLs apply
56 # without the need to write the UpdateDN before starting replication
60 #~null~#directory @TESTDIR@/db.2.a
61 #indexdb#index objectClass eq
62 #indexdb#index cn,sn,uid pres,eq,sub
63 #indexdb#index entryUUID pres,eq
65 #ndb#include @DATADIR@/ndb.conf
67 # Need to strip hasSubordinates from internal searches otherwise
68 # syncrepl will try to delete it, since syncprov is not sending
69 # it because it's generated
70 access to dn.subtree="dc=example,dc=com" attrs=hasSubordinates
71 by dn.exact="cn=Monitor" none
74 access to dn.subtree="dc=example,dc=com"
75 by dn.exact="cn=Monitor" write
78 #monitor#database monitor
79 #monitor#rootdn "cn=Monitor"
80 #monitor#rootpw monitor