consumer config

allow bind_v2

include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
include		/etc/ldap/schema/samba.schema

pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args

modulepath	/usr/lib/ldap
moduleload	back_bdb


backend		bdb
database config
rootdn "cn=admin,cn=config"
rootpw config

database        bdb
suffix          dc=gis,dc=de
checkpoint 512 30
directory       "/var/lib/ldap"
index		objectclass,entryCSN,entryUUID eq
cachesize       10000
lastmod         on

rootdn cn=admin,ou=ldapadmin,dc=gis,dc=de
syncrepl rid=1
    provider=ldap://192.168.9.3:389
    type=refreshAndPersist
    retry="60 10 300 +"
    searchbase="dc=gis,dc=de"
    filter="(objectClass=*)"
    attrs="*,+"
    schemachecking=off
    bindmethod=simple
    binddn="cn=syncuser,ou=ldapadmin,dc=gis,dc=de"
    credentials=secret

access to attrs=userPassword
	by dn.regex=".*,ou=ldapadmin,dc=gis,dc=de" write
	by dn.regex=".*,ou=service-host,dc=gis,dc=de" read
	by anonymous auth
	by self write
	by * none

access to dn.regex="cn=admin,ou=ldapadmin,dc=gis,dc=de"
	by anonymous auth
	by self write
	by * none

access to dn.base="" by * read

access to *
        by dn.regex="ou=ldapadmin,dc=gis,dc=de" write
        by * read