]> git.sur5r.net Git - openldap/blobdiff - tests/data/slapd-acl.conf
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH
[openldap] / tests / data / slapd-acl.conf
index 5e56dea19c4f65759ed6425af7d0d5b2bed06481..69fb8b260127a5a1e8fc66979a016e72db4c4814 100644 (file)
@@ -4,12 +4,15 @@
 include                ./data/slapd.at.conf
 include                ./data/slapd.oc.conf
 schemacheck    off
+pidfile     ./test-db/slapd.pid
+argsfile    ./test-db/slapd.args
 
 #######################################################################
 # ldbm database definitions
 #######################################################################
 
 database       ldbm
+cachesize      0
 suffix         "o=University of Michigan, c=US"
 directory      ./test-db
 rootdn         "cn=Manager, o=University of Michigan, c=US"
@@ -18,19 +21,26 @@ index               cn,sn,uid       pres,eq,approx
 index          default         none
 lastmod                on
 defaultaccess  none
+
 access         to attr=objectclass
                by * read
-access         to attr=userpassword
+
+access         to filter="objectclass=person" attr=userpassword
                by self write
-               by * compare
-access         to dn=".*,ou=Alumni Association,ou=People,o=University of Michigan,c=US"
-               by dn=".*,o=University of Michigan,c=US"
-               read
+               by anonymous auth
+               by * none
+
+access         to dn="^.*,ou=Alumni Association,ou=People,o=University of Michigan,c=US$"
+               by dn="^.*,o=University of Michigan,c=US$" read
+               by anonymous auth
                by * none
+
 access         to attr=member
                by dnattr=member selfwrite
                by * read
+
 access         to filter="objectclass=rfc822mailgroup"
                by dn="Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US" write
                by * read
+
 access         to * by * read