diff options
author | Unknwon <joe2010xtmf@163.com> | 2014-09-07 20:11:13 -0400 |
---|---|---|
committer | Unknwon <joe2010xtmf@163.com> | 2014-09-07 20:11:13 -0400 |
commit | d89e630bc0cfb228db632c8b3f369f7dbd80bd02 (patch) | |
tree | b590d51b8a8b76342c3a4190eaa59d9447270f72 /modules/ldap/_examples/slapd.conf | |
parent | 59a7c7c5a530cead1905c0c686869ea0f6a7949c (diff) | |
download | gitea-d89e630bc0cfb228db632c8b3f369f7dbd80bd02.tar.gz gitea-d89e630bc0cfb228db632c8b3f369f7dbd80bd02.zip |
Fix test cases
Diffstat (limited to 'modules/ldap/_examples/slapd.conf')
-rw-r--r-- | modules/ldap/_examples/slapd.conf | 67 |
1 files changed, 67 insertions, 0 deletions
diff --git a/modules/ldap/_examples/slapd.conf b/modules/ldap/_examples/slapd.conf new file mode 100644 index 0000000000..5a66be0152 --- /dev/null +++ b/modules/ldap/_examples/slapd.conf @@ -0,0 +1,67 @@ +# +# See slapd.conf(5) for details on configuration options. +# This file should NOT be world readable. +# +include /private/etc/openldap/schema/core.schema +include /private/etc/openldap/schema/cosine.schema +include /private/etc/openldap/schema/inetorgperson.schema + +# Define global ACLs to disable default read access. + +# Do not enable referrals until AFTER you have a working directory +# service AND an understanding of referrals. +#referral ldap://root.openldap.org + +pidfile /private/var/db/openldap/run/slapd.pid +argsfile /private/var/db/openldap/run/slapd.args + +# Load dynamic backend modules: +# modulepath /usr/libexec/openldap +# moduleload back_bdb.la +# moduleload back_hdb.la +# moduleload back_ldap.la + +# Sample security restrictions +# Require integrity protection (prevent hijacking) +# Require 112-bit (3DES or better) encryption for updates +# Require 63-bit encryption for simple bind +# security ssf=1 update_ssf=112 simple_bind=64 + +# Sample access control policy: +# Root DSE: allow anyone to read it +# Subschema (sub)entry DSE: allow anyone to read it +# Other DSEs: +# Allow self write access +# Allow authenticated users read access +# Allow anonymous users to authenticate +# Directives needed to implement policy: +# access to dn.base="" by * read +# access to dn.base="cn=Subschema" by * read +# access to * +# by self write +# by users read +# by anonymous auth +# +# if no access controls are present, the default policy +# allows anyone and everyone to read anything but restricts +# updates to rootdn. (e.g., "access to * by * read") +# +# rootdn can always read and write EVERYTHING! + +####################################################################### +# BDB database definitions +####################################################################### + +database bdb +suffix "dc=enterprise,dc=org" +rootdn "cn=admin,dc=enterprise,dc=org" +# Cleartext passwords, especially for the rootdn, should +# be avoid. See slappasswd(8) and slapd.conf(5) for details. +# Use of strong authentication encouraged. +rootpw {SSHA}laO00HsgszhK1O0Z5qR0/i/US69Osfeu +# The database directory MUST exist prior to running slapd AND +# should only be accessible by the slapd and slap tools. +# Mode 700 recommended. +directory /private/var/db/openldap/openldap-data +# Indices to maintain +index objectClass eq |