1# provider slapd config -- for testing
2# $OpenLDAP$
3## This work is part of OpenLDAP Software <http://www.openldap.org/>.
4##
5## Copyright 1998-2021 The OpenLDAP Foundation.
6## All rights reserved.
7##
8## Redistribution and use in source and binary forms, with or without
9## modification, are permitted only as authorized by the OpenLDAP
10## Public License.
11##
12## A copy of this license is available in the file LICENSE in the
13## top-level directory of the distribution or, alternatively, at
14## <http://www.OpenLDAP.org/license.html>.
15
16#ucdata-path	./ucdata
17include		@SCHEMADIR@/core.schema
18include		@SCHEMADIR@/cosine.schema
19include		@SCHEMADIR@/inetorgperson.schema
20include		@SCHEMADIR@/openldap.schema
21include		@SCHEMADIR@/nis.schema
22pidfile		@TESTDIR@/slapd.1.pid
23argsfile	@TESTDIR@/slapd.1.args
24
25#mod#modulepath	../servers/slapd/back-@BACKEND@/
26#mod#moduleload	back_@BACKEND@.la
27#ldapmod#modulepath ../servers/slapd/back-ldap/
28#ldapmod#moduleload back_ldap.la
29
30#######################################################################
31# database definitions
32#######################################################################
33
34authz-regexp	"^uid=([^,]+),.*" "uid=$1,ou=People,dc=example,dc=com"
35
36#
37# normal installations should protect root dse,
38# cn=monitor, cn=schema, and cn=config
39#
40
41access to attrs=userpassword
42	by self =wx
43	by anonymous =x
44
45access to *
46	by * read
47
48# groups branch
49database        ldap
50suffix          "ou=Groups,dc=example,dc=com"
51subordinate
52uri             "@URI3@"
53# FIXME: doesn't work with authz=native
54#sasl#idassert-bind	bindmethod=sasl authcid=proxy credentials=proxy @SASL_MECH@ mode=self
55#nosasl#idassert-bind	bindmethod=simple binddn="uid=proxy,ou=Groups,dc=example,dc=com" credentials=proxy mode=self
56
57# people branch
58database        ldap
59suffix          "ou=People,dc=example,dc=com"
60subordinate
61uri             "@URI2@"
62# FIXME: doesn't work with authz=native
63#sasl#idassert-bind	bindmethod=sasl authcid=proxy credentials=proxy @SASL_MECH@ mode=self
64#nosasl#idassert-bind	bindmethod=simple binddn="uid=proxy,ou=People,dc=example,dc=com" credentials=proxy mode=self
65
66# root
67database        @BACKEND@
68suffix          "dc=example,dc=com"
69rootdn		"cn=Manager,dc=example,dc=com"
70rootpw		secret
71#~null~#directory	@TESTDIR@/db.1.a
72#indexdb#index		objectClass	eq
73#indexdb#index		cn,sn,uid	pres,eq,sub
74#ndb#dbname db_1
75#ndb#include @DATADIR@/ndb.conf
76
77database	monitor
78