# $OpenLDAP$
## This work is part of OpenLDAP Software <http://www.openldap.org/>.
##
-## Copyright 1998-2005 The OpenLDAP Foundation.
+## Copyright 1998-2007 The OpenLDAP Foundation.
## All rights reserved.
##
## Redistribution and use in source and binary forms, with or without
rootdn "cn=Manager,o=Example,c=US"
rootpw secret
chase-referrals no
-nretries forever
-#nretries 1000
+#nretries forever
+nretries 100
+# 1 sec timeout for binds
+bind-timeout 1000000
# local
uri "@URI2@ou=Meta,o=Example,c=US"
suffixmassage "ou=Meta,o=Example,c=US" "ou=Meta,dc=example,dc=com"
-pseudorootdn "cn=manager,ou=meta,dc=example,dc=com"
-pseudorootpw secret
+###pseudorootdn "cn=manager,ou=meta,dc=example,dc=com"
+###pseudorootpw secret
+idassert-bind bindmethod=simple
+ binddn="cn=manager,ou=meta,dc=example,dc=com"
+ credentials="secret"
+ mode=none
+ flags=non-prescriptive
+idassert-authzFrom "dn.exact:cn=Manager,o=Example,c=US"
# remote
uri "@URI1@o=Example,c=US"
suffixmassage "o=Example,c=US" "dc=example,dc=com"
-pseudorootdn "cn=manager,dc=example,dc=com"
-pseudorootpw secret
+###pseudorootdn "cn=manager,dc=example,dc=com"
+###pseudorootpw secret
+idassert-bind bindmethod=simple
+ binddn="cn=manager,dc=example,dc=com"
+ credentials="secret"
+ mode=none
+ flags=non-prescriptive
+idassert-authzFrom "dn.exact:cn=Manager,o=Example,c=US"
limits dn.exact="cn=Bjorn Jensen,ou=Information Technology Division,ou=People,o=Example,c=US" time=1 size=8