You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
60 lines
2.3 KiB
60 lines
2.3 KiB
dn: olcDatabase={@@@LDIFSCHEMANUMBER@@@}hdb
|
|
objectClass: olcDatabaseConfig
|
|
objectClass: olcHdbConfig
|
|
olcDatabase: {@@@LDIFSCHEMANUMBER@@@}hdb
|
|
olcDbDirectory: /var/lib/ldap
|
|
olcSuffix: @@@REALM_DCNAME@@@
|
|
olcAccess: {0}to attrs=userPassword,shadowLastChange,krb5Key,krb5PrincipalName,krb5KeyVersionNumber,krb5MaxLife,krb5MaxRenew,krb5KDCFlags,privateRootCertificateKey
|
|
by group/groupOfNames/member.exact="cn=@@@ADMINGROUP@@@,ou=groups,ou=core,ou=realm,@@@REALM_DCNAME@@@" write
|
|
by dn.base="uid=@@@ADMINUSER@@@,ou=users,ou=core,ou=realm,@@@REALM_DCNAME@@@"
|
|
by sockurl.regex="^ldapi:///$" write
|
|
by anonymous auth
|
|
by self write
|
|
by * none
|
|
olcAccess: {1}to dn.base=""
|
|
by * read
|
|
olcAccess: {2}to *
|
|
by group/groupOfNames/member.exact="cn=@@@ADMINGROUP@@@,ou=groups,ou=core,ou=realm,@@@REALM_DCNAME@@@" write
|
|
by dn.base="uid=@@@ADMINUSER@@@,ou=users,ou=core,ou=realm,@@@REALM_DCNAME@@@" write
|
|
by sockurl.regex="^ldapi:///$" write
|
|
by dynacl/aci write
|
|
olcAddContentAcl: FALSE
|
|
olcLastMod: TRUE
|
|
olcLimits: dn.exact="cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@" time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited
|
|
olcMaxDerefDepth: 15
|
|
olcReadOnly: FALSE
|
|
olcRootDN: cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@
|
|
olcRootPW: {SHA}@@@ROOTPW_SHA@@@
|
|
olcMonitoring: TRUE
|
|
olcDbCacheSize: 1000
|
|
olcDbCheckpoint: 512 30
|
|
olcDbConfig: {0}set_cachesize 0 67108864 1
|
|
olcDbConfig: {1}set_lg_regionmax 262144
|
|
olcDbConfig: {2}set_lg_bsize 2097152
|
|
olcDbNoSync: FALSE
|
|
olcDbDirtyRead: FALSE
|
|
olcDbIDLcacheSize: 0
|
|
olcDbIndex: entryCSN eq
|
|
olcDbIndex: entryUUID eq
|
|
olcDbIndex: objectClass eq
|
|
olcDbIndex: krb5PrincipalName eq,pres
|
|
olcDbIndex: cn eq,pres,subinitial
|
|
olcDbIndex: mail eq,pres
|
|
olcDbIndex: uid pres,eq,sub
|
|
olcDbIndex: uidNumber eq
|
|
olcDbIndex: gidNumber eq
|
|
olcDbLinearIndex: FALSE
|
|
olcDbMode: 0600
|
|
olcDbSearchStack: 16
|
|
olcDbShmKey: 0
|
|
olcDbCacheFree: 1
|
|
olcDbDNcacheSize: 0
|
|
olcPlugin: postoperation @@@TDELIBDIR@@@/slapi-acl-manager.so plugin_init admingroup-dn:=cn=@@@ADMINGROUP@@@,ou=groups,ou=core,ou=realm,@@@REALM_DCNAME@@@ realm:=@@@REALM_UCNAME@@@ aclfile:=@@@HEIMDALACLFILE@@@ builtinadmin:=@@@ROOTUSER@@@
|
|
structuralObjectClass: olcHdbConfig
|
|
creatorsName: cn=config
|
|
createTimestamp: @@@TIMESTAMP@@@Z
|
|
entryCSN: @@@TIMESTAMP@@@.@@@TIMESTAMP_MICROSECONDS@@@Z#000000#000#000000
|
|
entryUUID: @@@ENTRYUUID@@@
|
|
modifiersName: cn=config
|
|
modifyTimestamp: @@@TIMESTAMP@@@Z
|