The configuration of the LDAP server slapd of openLDAP is in /etc/ldap/slapd.conf
A basic configuration would be like this:
Basic LDAP COnfiguration | |
# Schema and objectClass definitions, basic configuration | |
include /etc/ldap/schema/core.schema | |
include /etc/ldap/schema/cosine.schema | |
include /etc/ldap/schema/inetorgperson.schema | |
include /etc/ldap/schema/openldap.schema | |
include /etc/ldap/schema/nis.schema | |
include /etc/ldap/schema/misc.schema | |
# Force entries to match schemas for their ObjectClasses | |
schemacheck on | |
# Password hash, default crypt type | |
# Puede ser: {SHA}, {MD5}, {MD4}, {CRYPT}, {CLEARTEXT} | |
password-hash {CRYPT} | |
# Default search base | |
defaultsearchbase "dc=CHAOSDIMENSION,dc=ORG" | |
#Used by init scripts to stop and to start the server. | |
pidfile /var/run/slapd.pid | |
# Arguments passed to the server. | |
argsfile /var/run/slapd.args | |
# Level of log information | |
loglevel 1024 | |
# Where and which modules load | |
modulepath /usr/lib/ldap | |
moduleload back_bdb # Berkeley BD version 4 | |
#definitions of the database | |
database bdb | |
# The base of the directory | |
suffix "dc=CHAOSDIMENSION,dc=ORG" | |
# Here is the definition of the administrator of the directory and his key | |
# In this example is " tester" | |
# The crypt key can be extract with | |
# makepasswd -crypt -clearfrom file_with_user_name | |
rootdn "cn=ldapadmin,dc=CHAOSDIMENSION,dc=ORG" | |
rootpw {crypt}OuorOLd3VqvC2 | |
# here are the attributes that we indexed to make searchs | |
index default sub | |
index uid,mail eq | |
index cn,sn,givenName,ou pres,eq,sub | |
index objectClass pres,eq | |
# Directory where the database is located | |
directory " /var/lib/ldap" | |
# We say if wished to keep the date of the last modification | |
lastmod off | |
#Administrator access | |
access to * | |
by dn="cn=ldapadmin,dc=CHAOSDIMENSION,dc=ORG" =wrscx | |
by dn.regex="uid=[^{}/]+/admin\+(realm=CHAOSDIMENSION.LOCAL)?" =wrscx | |
by * read | |
End |
aescanero AT gmail.com