1 | # This is the main slapd configuration file. See slapd.conf(5) for more |
---|
2 | # info on the configuration options. |
---|
3 | |
---|
4 | ####################################################################### |
---|
5 | # Global Directives: |
---|
6 | |
---|
7 | # Features to permit |
---|
8 | #allow bind_v2 |
---|
9 | |
---|
10 | # Schema and objectClass definitions |
---|
11 | include /etc/ldap/schema/core.schema |
---|
12 | include /etc/ldap/schema/cosine.schema |
---|
13 | include /etc/ldap/schema/nis.schema |
---|
14 | include /etc/ldap/schema/inetorgperson.schema |
---|
15 | include /etc/ldap/schema/qmailuser.schema |
---|
16 | include /etc/ldap/schema/phpgwaccount.schema |
---|
17 | include /etc/ldap/schema/samba.schema |
---|
18 | include /etc/ldap/schema/phpgwcontact.schema |
---|
19 | |
---|
20 | # Where the pid file is put. The init.d script |
---|
21 | # will not stop the server if you change this. |
---|
22 | pidfile /var/run/slapd/slapd.pid |
---|
23 | |
---|
24 | # List of arguments that were passed to the server |
---|
25 | argsfile /var/run/slapd/slapd.args |
---|
26 | |
---|
27 | # Read slapd.conf(5) for possible values |
---|
28 | loglevel none |
---|
29 | |
---|
30 | # Where the dynamically loaded modules are stored |
---|
31 | modulepath /usr/lib/ldap |
---|
32 | moduleload back_hdb |
---|
33 | |
---|
34 | # The maximum number of entries that is returned for a search operation |
---|
35 | sizelimit 500 |
---|
36 | |
---|
37 | # The tool-threads parameter sets the actual amount of cpu's that is used |
---|
38 | # for indexing. |
---|
39 | tool-threads 1 |
---|
40 | |
---|
41 | ####################################################################### |
---|
42 | # Specific Backend Directives for hdb: |
---|
43 | # Backend specific directives apply to this backend until another |
---|
44 | # 'backend' directive occurs |
---|
45 | backend hdb |
---|
46 | |
---|
47 | ####################################################################### |
---|
48 | # Specific Backend Directives for 'other': |
---|
49 | # Backend specific directives apply to this backend until another |
---|
50 | # 'backend' directive occurs |
---|
51 | #backend <other> |
---|
52 | |
---|
53 | ####################################################################### |
---|
54 | # Specific Directives for database #1, of type hdb: |
---|
55 | # Database specific directives apply to this databasse until another |
---|
56 | # 'database' directive occurs |
---|
57 | database hdb |
---|
58 | |
---|
59 | # The base of your directory in database #1 |
---|
60 | suffix "LDAP_DN" |
---|
61 | |
---|
62 | # rootdn directive for specifying a superuser on the database. This is needed |
---|
63 | # for syncrepl. |
---|
64 | rootdn "cn=admin,LDAP_DN" |
---|
65 | rootpw LDAP_PWD_MD5 |
---|
66 | |
---|
67 | # Where the database file are physically stored for database #1 |
---|
68 | directory "/var/lib/ldap" |
---|
69 | |
---|
70 | # The dbconfig settings are used to generate a DB_CONFIG file the first |
---|
71 | # time slapd starts. They do NOT override existing an existing DB_CONFIG |
---|
72 | # file. You should therefore change these settings in DB_CONFIG directly |
---|
73 | # or remove DB_CONFIG and restart slapd for changes to take effect. |
---|
74 | |
---|
75 | # For the Debian package we use 2MB as default but be sure to update this |
---|
76 | # value if you have plenty of RAM |
---|
77 | dbconfig set_cachesize 0 2097152 0 |
---|
78 | |
---|
79 | # Sven Hartge reported that he had to set this value incredibly high |
---|
80 | # to get slapd running at all. See http://bugs.debian.org/303057 for more |
---|
81 | # information. |
---|
82 | |
---|
83 | # Number of objects that can be locked at the same time. |
---|
84 | dbconfig set_lk_max_objects 1500 |
---|
85 | # Number of locks (both requested and granted) |
---|
86 | dbconfig set_lk_max_locks 1500 |
---|
87 | # Number of lockers |
---|
88 | dbconfig set_lk_max_lockers 1500 |
---|
89 | |
---|
90 | # Indexing options for database #1 |
---|
91 | index mailAlternateAddress,objectClass,memberUid,uidNumber,deliveryMode,accountStatus,phpgwAccountType,gidNumber,phpgwAccountStatus,ou pres,eq |
---|
92 | index mail,uid,cn,sn,givenName pres,eq,sub |
---|
93 | |
---|
94 | # Save the time that the entry gets modified, for database #1 |
---|
95 | lastmod on |
---|
96 | |
---|
97 | # Checkpoint the BerkeleyDB database periodically in case of system |
---|
98 | # failure and to speed slapd shutdown. |
---|
99 | checkpoint 512 30 |
---|
100 | |
---|
101 | # Where to store the replica logs for database #1 |
---|
102 | # replogfile /var/lib/ldap/replog |
---|
103 | |
---|
104 | # The userPassword by default can be changed |
---|
105 | # by the entry owning it if they are authenticated. |
---|
106 | # Others should not be able to see it, except the |
---|
107 | # admin entry below |
---|
108 | # These access lines apply to database #1 only |
---|
109 | access to attrs=userPassword,shadowLastChange |
---|
110 | by dn="cn=admin,LDAP_DN" write |
---|
111 | by anonymous auth |
---|
112 | by self write |
---|
113 | by * none |
---|
114 | |
---|
115 | # Ensure read access to the base for things like |
---|
116 | # supportedSASLMechanisms. Without this you may |
---|
117 | # have problems with SASL not knowing what |
---|
118 | # mechanisms are available and the like. |
---|
119 | # Note that this is covered by the 'access to *' |
---|
120 | # ACL below too but if you change that as people |
---|
121 | # are wont to do you'll still need this if you |
---|
122 | # want SASL (and possible other things) to work |
---|
123 | # happily. |
---|
124 | access to dn.base="" by * read |
---|
125 | |
---|
126 | # The admin dn has full write access, everyone else |
---|
127 | # can read everything. |
---|
128 | access to * |
---|
129 | by dn="cn=admin,LDAP_DN" write |
---|
130 | by * read |
---|
131 | |
---|
132 | # For Netscape Roaming support, each user gets a roaming |
---|
133 | # profile for which they have write access to |
---|
134 | #access to dn=".*,ou=Roaming,o=morsnet" |
---|
135 | # by dn="cn=admin,LDAP_DN" write |
---|
136 | # by dnattr=owner write |
---|
137 | |
---|
138 | ####################################################################### |
---|
139 | # Specific Directives for database #2, of type 'other' (can be hdb too): |
---|
140 | # Database specific directives apply to this databasse until another |
---|
141 | # 'database' directive occurs |
---|
142 | #database <other> |
---|
143 | |
---|
144 | # The base of your directory for database #2 |
---|
145 | #suffix "dc=debian,dc=org" |
---|