provider config

allow bind_v2

include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
include		/etc/ldap/schema/samba.schema

pidfile         /var/run/slapd/slapd.pid

argsfile        /var/run/slapd/slapd.args

loglevel       0

modulepath	/usr/lib/ldap
moduleload	back_bdb
moduleload	syncprov

sizelimit 500

tool-threads 1

backend		bdb
database        bdb
suffix          "dc=gis,dc=de"
checkpoint 512 15
directory       "/var/lib/ldap"
dbconfig set_lk_max_objects 5000
dbconfig set_lk_max_locks 5000
dbconfig set_lk_max_lockers 5000
dbconfig set_cachesize 0 2097152 0
dbconfig set_lg_max 2097152
dbconfig set_lg_bsize 524288
index		objectclass,entryCSN,entryUUID eq
cachesize	10000
lastmod         on

rootdn cn=admin,ou=ldapadmin,dc=gis,dc=de
overlay syncprov
syncprov-checkpoint 10 100
syncprov-sessionlog 100


access to attrs=userPassword,sambaLMPassword,sambaNTPassword,sambaPwdLastSet,sambaPwdMustChange
	by dn.one="ou=ldapadmin,dc=gis,dc=de" write
	by dn.one="ou=erpadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=nssldap,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
	by dn.one="ou=service-host,dc=gis,dc=de" read
        by anonymous auth
        by self write
        by * none

access to attrs=objectClass,entry,gecos,homeDirectory,uid,uidNumber,gidNumber,cn,memberUid
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by * read

Access to attrs=description,telephoneNumber
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by self write
        by * read

access to attrs=cn,sambaLMPassword,sambaNTPassword,sambaPwdLastSet,sambaLogonTime,sambaLogoffTime,sambaKickoffTime,sambaPwdCanChange,sambaPwdMustChange,sambaAcctFlags,displayName,sambaHomePath,sambaHomeDrive,sambaLogonScript,sambaProfilePath,description,sambaUserWorkstations,sambaPrimaryGroupSID,sambaDomainName,sambaSID,sambaGroupType,sambaNextRid,sambaNextGroupRid,sambaNextUserRid,sambaAlgorithmicRidBase
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by self read
        by * none

access to dn.base="ou=samba,ou=service,dc=gis,dc=de"
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by * none

access to dn.regex="ou=Users,ou=samba,ou=service,dc=gis,dc=de"
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by * none

access to dn.regex="ou=Groups,ou=samba,ou=service,dc=gis,dc=de"
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by * none

access to dn.regex="ou=Computers,ou=samba,ou=service,dc=gis,dc=de"
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by dn="cn=samba,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by dn="cn=smbldap-tools,ou=DSA,ou=samba,ou=service,dc=gis,dc=de" write
        by * none

access to dn="cn=admin,ou=ldapadmin,dc=gis,dc=de"
	by anonymous auth
	by self write
	by * none

access to dn.base="" by * read

access to *
        by dn.one="ou=ldapadmin,dc=gis,dc=de" write
        by * read