Data hosted with ♥ by Pastebin.com - Download Raw - See Original
  1. #
  2. # See slapd.conf(5) for details on configuration options.
  3. # This file should NOT be world readable.
  4. #
  5. include     /etc/openldap/schema/core.schema
  6. include     /etc/openldap/schema/cosine.schema
  7. include     /etc/openldap/schema/inetorgperson.schema
  8. include     /etc/openldap/schema/nis.schema
  9. include     /etc/openldap/schema/ppolicy.schema
  10.  
  11. # Define global ACLs to disable default read access.
  12.  
  13. # Do not enable referrals until AFTER you have a working directory
  14. # service AND an understanding of referrals.
  15. #referral   ldap://root.openldap.org
  16.  
  17. pidfile     /var/lib/run/slapd.pid
  18. argsfile    /var/lib/run/slapd.args
  19.  
  20. # Load dynamic backend modules:
  21. # modulepath    /usr/libexec/openldap
  22. # moduleload    back_bdb.la
  23. # moduleload    back_hdb.la
  24. # moduleload    back_ldap.la
  25. moduleload  ppolicy.la
  26. # Sample security restrictions
  27. #   Require integrity protection (prevent hijacking)
  28. #   Require 112-bit (3DES or better) encryption for updates
  29. #   Require 63-bit encryption for simple bind
  30. # security ssf=1 update_ssf=112 simple_bind=64
  31. #   Subschema (sub)entry DSE: allow anyone to read it
  32. #   Other DSEs:
  33. #       Allow self write access
  34. #       Allow authenticated users read access
  35. #       Allow anonymous users to authenticate
  36. #   Directives needed to implement policy:
  37. # access to dn.base="" by * read
  38. # access to dn.base="cn=Subschema" by * read
  39. # access to *
  40. #   by self write
  41. #   by users read
  42. #   by anonymous auth
  43. #
  44. # if no access controls are present, the default policy
  45. # allows anyone and everyone to read anything but restricts
  46. # updates to rootdn.  (e.g., "access to * by * read")
  47. #
  48. # rootdn can always read and write EVERYTHING!
  49. access to attrs=userPassword
  50.         by anonymous auth
  51.         by self write
  52.         by * none
  53.  
  54. access to dn.base="" by * read
  55.  
  56. access to dn.subtree="cn=Monitor"
  57.         by dn.exact="uid=admin,dc=laurito,dc=local" write
  58.         by users read
  59.         by * none
  60.  
  61. access to *
  62.         by * read
  63.  
  64. # TLS Authentication
  65. TLSCACertificateFile    /etc/openldap/certs/cacert.pem
  66. TLSCertificateFile      /etc/openldap/certs/newcert.pem
  67. TLSCertificateKeyFile   /etc/openldap/certs/newreq.pem
  68. TLSVerifyClient never
  69.  
  70. #sizelimit - Numero maximo de entradas que uma pesquisa pode devolver (default 500)
  71. sizelimit 5000
  72.  
  73. #sockbuf_max_incoming - Especificação do tamanho máximo para incoming ldap PDU's
  74. #de sessoes anónimas (default (262143)
  75. sockbuf_max_incoming 262143
  76.  
  77. #sockbuf_max_incoming_auth - Especificação do tamanho máximo para incoming ldap PDU'S
  78. #de sessoes autenticadas (4194303)
  79. sockbuf_max_incoming_auth 4194303
  80.  
  81. #######################################################################
  82. # BDB database definitions
  83. #######################################################################
  84. database    monitor
  85. rootdn      "cn=monitoring,cn=Monitor"
  86. rootpw      {SSHA}ZyU6328+oxfRoCkGVaVtgCPbAWTWqIw8 
  87.  
  88. database    bdb
  89. suffix      "dc=laurito,dc=local"
  90. rootdn      "cn=admin,dc=laurito,dc=local"
  91.  
  92. overlay ppolicy
  93. ppolicy_default "cn=ppolicy,dc=laurito,dc=local"
  94. ppolicy_use_lockout
  95.  
  96. # Cleartext passwords, especially for the rootdn, should
  97. # be avoid.  See slappasswd(8) and slapd.conf(5) for details.
  98. # Use of strong authentication encouraged.
  99. rootpw  {SSHA}n1u3kHQrY7Z62H/JydARah7O/t9ae196 
  100.  
  101. # The database directory MUST exist prior to running slapd AND
  102. # should only be accessible by the slapd and slap tools.
  103. # Mode 700 recommended.
  104. directory   /var/lib/openldap-data
  105.  
  106. # Indices to maintain
  107. index objectClass   eq
  108. index default pres,eq
  109. index uid,uidNumber,gidNumber
  110. index cn,sn,givenname pres,eq,sub
  111.