@@/etc/ldap/sldap.conf# This is the main slapd configuration file. See slapd.conf(5) for more# info on the configuration options.######################################################################## Global Directives:# Features to permit#allow bind_v2# Schema and objectClass definitionsinclude /etc/ldap/schema/core.schemainclude /etc/ldap/schema/cosine.schemainclude /etc/ldap/schema/nis.schemainclude /etc/ldap/schema/inetorgperson.schema# Where the pid file is put. The init.d script# will not stop the server if you change this.pidfile /var/run/slapd/slapd.pid# List of arguments that were passed to the serverargsfile /var/run/slapd/slapd.args# Read slapd.conf(5) for possible valuesloglevel 0# Where the dynamically loaded modules are storedmodulepath /usr/lib/ldapmoduleload back_bdb# The maximum number of entries that is returned for a search operationsizelimit 500# The tool-threads parameter sets the actual amount of cpu's that is used# for indexing.tool-threads 1######################################################################## Specific Backend Directives for bdb:# Backend specific directives apply to this backend until another# 'backend' directive occursbackend bdbcheckpoint 512 30######################################################################## Specific Backend Directives for 'other':# Backend specific directives apply to this backend until another# 'backend' directive occurs#backend <other>######################################################################## Specific Directives for database #1, of type bdb:# Database specific directives apply to this databasse until another# 'database' directive occursdatabase bdb# The base of your directory in database #1suffix "dc=hope,dc=cat"# rootdn directive for specifying a superuser on the database. This is needed# for syncrepl.# rootdn "cn=admin,dc=hope,dc=cat"# Where the database file are physically stored for database #1directory "/var/lib/ldap"# For the Debian package we use 2MB as default but be sure to update this# value if you have plenty of RAMdbconfig set_cachesize 0 2097152 0# Sven Hartge reported that he had to set this value incredibly high# to get slapd running at all. See http://bugs.debian.org/303057# for more information.# Number of objects that can be locked at the same time.dbconfig set_lk_max_objects 1500# Number of locks (both requested and granted)dbconfig set_lk_max_locks 1500# Number of lockersdbconfig set_lk_max_lockers 1500# Indexing options for database #1index objectClass eq# Save the time that the entry gets modified, for database #1lastmod on# Where to store the replica logs for database #1# replogfile /var/lib/ldap/replog# The userPassword by default can be changed# by the entry owning it if they are authenticated.# Others should not be able to see it, except the# admin entry below# These access lines apply to database #1 onlyaccess to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=hope,dc=cat" write by anonymous auth by self write by * none# Ensure read access to the base for things like# supportedSASLMechanisms. Without this you may# have problems with SASL not knowing what# mechanisms are available and the like.# Note that this is covered by the 'access to *'# ACL below too but if you change that as people# are wont to do you'll still need this if you# want SASL (and possible other things) to work # happily.access to dn.base="" by * read# The admin dn has full write access, everyone else# can read everything.access to * by dn="cn=admin,dc=hope,dc=cat" write by * read# For Netscape Roaming support, each user gets a roaming# profile for which they have write access to#access to dn=".*,ou=Roaming,o=morsnet"# by dn="cn=admin,dc=hope,dc=cat" write# by dnattr=owner write######################################################################## Specific Directives for database #2, of type 'other' (can be bdb too):# Database specific directives apply to this databasse until another# 'database' directive occurs#database <other># The base of your directory for database #2#suffix "dc=debian,dc=org"@@/etc/ldap/ldap.conf $OpenLDAP: pkg/ldap/libraries/libldap/ldap.conf,v 1.9 2000/09/04 19:57:01 kurt Exp $## LDAP Defaults## See ldap.conf(5) for details# This file should be world readable but not world writable.#BASE dc=hope, dc=cat#URI ldap://hope.cat#SIZELIMIT 12#TIMELIMIT 15#DEREF never# Your LDAP server. Must be resolvable without using LDAP.#HOST hope.catHOST 192.168.1.2# The distinguished name of the search base.BASE dc=hope,dc=cat# The port.# Optional: default is 389. 636 is for ldapsPORT 389#PORT 636#TLS_CACERT /etc/ldap/ssl/certs/cacert.pem #TLS_REQCERT demand