access to *
by * read
-# people branch
+# groups branch
database ldap
-suffix "ou=People,dc=example,dc=com"
+suffix "ou=Groups,dc=example,dc=com"
subordinate
-uri "@URI2@"
+uri "@URI3@"
# FIXME: doesn't work with authz=native
#sasl#idassert-bind bindmethod=sasl authcid=proxy credentials=proxy @SASL_MECH@ mode=self
-#nosasl#idassert-bind bindmethod=simple binddn="uid=proxy,ou=People,dc=example,dc=com" credentials=proxy mode=self
+#nosasl#idassert-bind bindmethod=simple binddn="uid=proxy,ou=Groups,dc=example,dc=com" credentials=proxy mode=self
-# groups branch
+# people branch
database ldap
-suffix "ou=Groups,dc=example,dc=com"
+suffix "ou=People,dc=example,dc=com"
subordinate
-uri "@URI3@"
+uri "@URI2@"
# FIXME: doesn't work with authz=native
#sasl#idassert-bind bindmethod=sasl authcid=proxy credentials=proxy @SASL_MECH@ mode=self
-#nosasl#idassert-bind bindmethod=simple binddn="uid=proxy,ou=Groups,dc=example,dc=com" credentials=proxy mode=self
+#nosasl#idassert-bind bindmethod=simple binddn="uid=proxy,ou=People,dc=example,dc=com" credentials=proxy mode=self
# root
database @BACKEND@