| 1 | loglevel 0
|
|---|
| 2 |
|
|---|
| 3 | ### needed for initial content load ###
|
|---|
| 4 | sizelimit unlimited
|
|---|
| 5 |
|
|---|
| 6 | ### Multimaster-ServerIDs and URLs ###
|
|---|
| 7 |
|
|---|
| 8 | ${MMR_SERVERIDS_CONFIG}
|
|---|
| 9 |
|
|---|
| 10 | include ${LDAPDIR}/backend-schema.schema
|
|---|
| 11 |
|
|---|
| 12 | pidfile ${LDAPDIR}/slapd.pid
|
|---|
| 13 | argsfile ${LDAPDIR}/slapd.args
|
|---|
| 14 | sasl-realm ${DNSDOMAIN}
|
|---|
| 15 |
|
|---|
| 16 | #authz-regexp
|
|---|
| 17 | # uid=([^,]*),cn=${DNSDOMAIN},cn=digest-md5,cn=auth
|
|---|
| 18 | # ldap:///${DOMAINDN}??sub?(samAccountName=\$1)
|
|---|
| 19 |
|
|---|
| 20 | #authz-regexp
|
|---|
| 21 | # uid=([^,]*),cn=([^,]*),cn=digest-md5,cn=auth
|
|---|
| 22 | # ldap:///${DOMAINDN}??sub?(samAccountName=\$1)
|
|---|
| 23 |
|
|---|
| 24 | authz-regexp
|
|---|
| 25 | uid=([^,]*),cn=([^,]*),cn=digest-md5,cn=auth
|
|---|
| 26 | ldap:///cn=samba??one?(cn=\$1)
|
|---|
| 27 |
|
|---|
| 28 | authz-regexp
|
|---|
| 29 | uid=([^,]*),cn=([^,]*),cn=ntlm,cn=auth
|
|---|
| 30 | ldap:///cn=samba??one?(cn=\$1)
|
|---|
| 31 |
|
|---|
| 32 | access to dn.base=""
|
|---|
| 33 | by dn=cn=samba-admin,cn=samba manage
|
|---|
| 34 | by anonymous read
|
|---|
| 35 | by * read
|
|---|
| 36 |
|
|---|
| 37 | access to dn.subtree="cn=samba"
|
|---|
| 38 | by anonymous auth
|
|---|
| 39 |
|
|---|
| 40 | access to dn.subtree="${DOMAINDN}"
|
|---|
| 41 | by dn=cn=samba-admin,cn=samba manage${REPLICATOR_ACL}
|
|---|
| 42 | by dn=cn=manager manage
|
|---|
| 43 | by * none
|
|---|
| 44 |
|
|---|
| 45 | password-hash {CLEARTEXT}
|
|---|
| 46 |
|
|---|
| 47 | defaultsearchbase ${DOMAINDN}
|
|---|
| 48 |
|
|---|
| 49 | rootdn cn=Manager
|
|---|
| 50 |
|
|---|
| 51 | moduleload rdnval
|
|---|
| 52 |
|
|---|
| 53 | moduleload deref
|
|---|
| 54 | overlay deref
|
|---|
| 55 |
|
|---|
| 56 | moduleload refint
|
|---|
| 57 | ${REFINT_CONFIG}
|
|---|
| 58 |
|
|---|
| 59 | moduleload memberof
|
|---|
| 60 | ${MEMBEROF_CONFIG}
|
|---|
| 61 |
|
|---|
| 62 | moduleload syncprov
|
|---|
| 63 |
|
|---|
| 64 | database ldif
|
|---|
| 65 | suffix cn=Samba
|
|---|
| 66 | directory ${LDAPDIR}/db/samba
|
|---|
| 67 | rootdn cn=Manager,cn=Samba
|
|---|
| 68 |
|
|---|
| 69 | ########################################
|
|---|
| 70 | ## olc - configuration ###
|
|---|
| 71 | database config
|
|---|
| 72 | rootdn cn=config
|
|---|
| 73 |
|
|---|
| 74 | ${OLC_SYNCREPL_CONFIG}
|
|---|
| 75 | ${OLC_MMR_CONFIG}
|
|---|
| 76 |
|
|---|
| 77 | access to dn.sub="cn=config"
|
|---|
| 78 | by dn="cn=samba-admin,cn=samba" write
|
|---|
| 79 | by dn="cn=replicator,cn=samba" read
|
|---|
| 80 |
|
|---|
| 81 |
|
|---|
| 82 | ########################################
|
|---|
| 83 | ### cn=schema ###
|
|---|
| 84 | database hdb
|
|---|
| 85 | suffix ${SCHEMADN}
|
|---|
| 86 | rootdn cn=Manager,${SCHEMADN}
|
|---|
| 87 | directory ${LDAPDIR}/db/schema
|
|---|
| 88 | ${NOSYNC}
|
|---|
| 89 | ${INDEX_CONFIG}
|
|---|
| 90 |
|
|---|
| 91 | #syncprov is stable in OpenLDAP 2.3, and available in 2.2.
|
|---|
| 92 | #We need this for the contextCSN attribute and mmr.
|
|---|
| 93 | overlay syncprov
|
|---|
| 94 | syncprov-sessionlog 100
|
|---|
| 95 | syncprov-checkpoint 100 10
|
|---|
| 96 |
|
|---|
| 97 | overlay rdnval
|
|---|
| 98 |
|
|---|
| 99 | ### Multimaster-Replication of cn=schema Subcontext ###
|
|---|
| 100 | ${MMR_SYNCREPL_SCHEMA_CONFIG}
|
|---|
| 101 | ${MIRRORMODE}
|
|---|
| 102 |
|
|---|
| 103 | #########################################
|
|---|
| 104 | ### cn=config ###
|
|---|
| 105 | database hdb
|
|---|
| 106 | suffix ${CONFIGDN}
|
|---|
| 107 | rootdn cn=Manager,${CONFIGDN}
|
|---|
| 108 | directory ${LDAPDIR}/db/config
|
|---|
| 109 | ${NOSYNC}
|
|---|
| 110 | ${INDEX_CONFIG}
|
|---|
| 111 |
|
|---|
| 112 | #syncprov is stable in OpenLDAP 2.3, and available in 2.2.
|
|---|
| 113 | #We need this for the contextCSN attribute and mmr.
|
|---|
| 114 | overlay syncprov
|
|---|
| 115 | syncprov-sessionlog 100
|
|---|
| 116 | syncprov-checkpoint 100 10
|
|---|
| 117 |
|
|---|
| 118 | overlay rdnval
|
|---|
| 119 |
|
|---|
| 120 | ### Multimaster-Replication of cn=config Subcontext ###
|
|---|
| 121 | ${MMR_SYNCREPL_CONFIG_CONFIG}
|
|---|
| 122 | ${MIRRORMODE}
|
|---|
| 123 |
|
|---|
| 124 | ########################################
|
|---|
| 125 | ### cn=users /base-dn ###
|
|---|
| 126 | database hdb
|
|---|
| 127 | suffix ${DOMAINDN}
|
|---|
| 128 | rootdn cn=Manager,${DOMAINDN}
|
|---|
| 129 | directory ${LDAPDIR}/db/user
|
|---|
| 130 | ${NOSYNC}
|
|---|
| 131 | ${INDEX_CONFIG}
|
|---|
| 132 |
|
|---|
| 133 | #syncprov is stable in OpenLDAP 2.3, and available in 2.2.
|
|---|
| 134 | #We need this for the contextCSN attribute and mmr.
|
|---|
| 135 | overlay syncprov
|
|---|
| 136 | syncprov-sessionlog 100
|
|---|
| 137 | syncprov-checkpoint 100 10
|
|---|
| 138 |
|
|---|
| 139 | overlay rdnval
|
|---|
| 140 |
|
|---|
| 141 | ### Multimaster-Replication of cn=user/base-dn context ###
|
|---|
| 142 | ${MMR_SYNCREPL_USER_CONFIG}
|
|---|
| 143 | ${MIRRORMODE}
|
|---|
