f74d513b91
update to 2.4.44 (successfully tested on Tumbleweed x86_64) OBS-URL: https://build.opensuse.org/request/show/358048 OBS-URL: https://build.opensuse.org/package/show/network:ldap/openldap2?expand=0&rev=150
64 lines
1.8 KiB
Plaintext
64 lines
1.8 KiB
Plaintext
diff --git a/servers/slapd/slapd.conf b/servers/slapd/slapd.conf
|
|
index b225fe5..e22e7f2 100644
|
|
--- a/servers/slapd/slapd.conf
|
|
+++ b/servers/slapd/slapd.conf
|
|
@@ -3,6 +3,10 @@
|
|
# This file should NOT be world readable.
|
|
#
|
|
include %SYSCONFDIR%/schema/core.schema
|
|
+include %SYSCONFDIR%/schema/cosine.schema
|
|
+include %SYSCONFDIR%/schema/inetorgperson.schema
|
|
+include %SYSCONFDIR%/schema/rfc2307bis.schema
|
|
+include %SYSCONFDIR%/schema/yast.schema
|
|
|
|
# Define global ACLs to disable default read access.
|
|
|
|
@@ -10,12 +14,12 @@ include %SYSCONFDIR%/schema/core.schema
|
|
# service AND an understanding of referrals.
|
|
#referral ldap://root.openldap.org
|
|
|
|
-pidfile %LOCALSTATEDIR%/run/slapd.pid
|
|
-argsfile %LOCALSTATEDIR%/run/slapd.args
|
|
+pidfile %LOCALSTATEDIR%/slapd.pid
|
|
+argsfile %LOCALSTATEDIR%/slapd.args
|
|
|
|
# Load dynamic backend modules:
|
|
# modulepath %MODULEDIR%
|
|
-# moduleload back_mdb.la
|
|
+moduleload back_mdb.la
|
|
# moduleload back_ldap.la
|
|
|
|
# Sample security restrictions
|
|
@@ -45,6 +49,23 @@ argsfile %LOCALSTATEDIR%/run/slapd.args
|
|
#
|
|
# rootdn can always read and write EVERYTHING!
|
|
|
|
+access to dn.base=""
|
|
+ by * read
|
|
+
|
|
+access to dn.base="cn=Subschema"
|
|
+ by * read
|
|
+
|
|
+access to attrs=userPassword,userPKCS12
|
|
+ by self write
|
|
+ by * auth
|
|
+
|
|
+access to attrs=shadowLastChange
|
|
+ by self write
|
|
+ by * read
|
|
+
|
|
+access to *
|
|
+ by * read
|
|
+
|
|
#######################################################################
|
|
# MDB database definitions
|
|
#######################################################################
|
|
@@ -60,6 +81,6 @@ rootpw secret
|
|
# The database directory MUST exist prior to running slapd AND
|
|
# should only be accessible by the slapd and slap tools.
|
|
# Mode 700 recommended.
|
|
-directory %LOCALSTATEDIR%/openldap-data
|
|
+directory /var/lib/ldap
|
|
# Indices to maintain
|
|
index objectClass eq
|