forked from ungleich-public/ungleich-user
Alpine 3.24 based slapd with the production directory layout (dc=ungleich,dc=ch, ou=customers, ou=users) and the openssh-lpk schema. The app runs natively against it on ldap://localhost:3389. Includes dev/env.dev with dev-only settings (cp dev/env.dev .env).
53 lines
1.3 KiB
Text
53 lines
1.3 KiB
Text
dn: cn=config
|
|
objectClass: olcGlobal
|
|
cn: config
|
|
olcArgsFile: /run/openldap/slapd.args
|
|
olcPidFile: /run/openldap/slapd.pid
|
|
|
|
dn: cn=module,cn=config
|
|
objectClass: olcModuleList
|
|
cn: module
|
|
olcModulepath: /usr/lib/openldap
|
|
olcModuleload: back_mdb.so
|
|
|
|
dn: cn=schema,cn=config
|
|
objectClass: olcSchemaConfig
|
|
cn: schema
|
|
|
|
include: file:///etc/openldap/schema/core.ldif
|
|
include: file:///etc/openldap/schema/cosine.ldif
|
|
include: file:///etc/openldap/schema/inetorgperson.ldif
|
|
include: file:///etc/openldap/schema/nis.ldif
|
|
|
|
dn: olcDatabase={-1}frontend,cn=config
|
|
objectClass: olcDatabaseConfig
|
|
objectClass: olcFrontendConfig
|
|
olcDatabase: {-1}frontend
|
|
olcPasswordHash: {SSHA}
|
|
|
|
dn: olcDatabase={0}config,cn=config
|
|
objectClass: olcDatabaseConfig
|
|
olcDatabase: {0}config
|
|
olcAccess: {0}to * by * none
|
|
|
|
dn: olcDatabase={1}mdb,cn=config
|
|
objectClass: olcDatabaseConfig
|
|
objectClass: olcMdbConfig
|
|
olcDatabase: {1}mdb
|
|
olcSuffix: dc=ungleich,dc=ch
|
|
olcRootDN: cn=admin,dc=ungleich,dc=ch
|
|
olcRootPW: @ADMIN_PW_HASH@
|
|
olcDbDirectory: /var/lib/openldap/openldap-data
|
|
olcDbMaxSize: 1073741824
|
|
olcDbIndex: objectClass eq
|
|
olcDbIndex: uid eq
|
|
olcDbIndex: uidNumber eq
|
|
olcDbIndex: mail eq
|
|
olcAccess: {0}to attrs=userPassword
|
|
by self write
|
|
by anonymous auth
|
|
by * none
|
|
olcAccess: {1}to *
|
|
by self write
|
|
by users read
|
|
by * none
|