index e8cf0484ce7baf9dfefe62753bcc4abc89dfd75d..ba0c98680dc7163279d432c59ce82ce573fb19c8 100644 (file)
include /etc/ldap/schema/openldap.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/misc.schema
+include /etc/ldap/schema/trust.schema
#include /etc/ldap/schema/krb5-kdc.schema
-#include /etc/ldap/schema/trust.schema
# These should be present for GOsa. In case of samba3,
# replace samba.schema and gosa.schema by samba3.schema
# Where the dynamically loaded modules are stored
modulepath /usr/lib/ldap
-moduleload back_bdb
+moduleload back_hdb
moduleload back_monitor
#moduleload back_shell
by * read
# Access to schema information
-access to dn.subtree=""
- by dn="cn=ldapadmin,dc=gonicus,dc=de" read
+#access to dn.subtree=""
+# by * read
# The userPassword/shadow Emtries by default can be
# changed by the entry owning it if they are authenticated.
by dn="cn=terminal-admin,dc=gonicus,dc=de" write
by dn="cn=ldapadmin,dc=gonicus,dc=de" write
by dn.regex="uid=[^/]+/admin\+(realm=GONICUS.LOCAL)?" write
+ by * none
access to dn.sub="ou=incoming,dc=gonicus,dc=de"
by dn="cn=terminal-admin,dc=gonicus,dc=de" write
by dn="cn=ldapadmin,dc=gonicus,dc=de" write
by dn.regex="uid=[^/]+/admin\+(realm=GONICUS.LOCAL)?" write
+ by * none
# What trees should be readable, depends on your policy. Either
# use this entry and specify what should be readable, or leave
database monitor
# The backend type, ldbm, is the default standard
-database bdb
-cachesize 5000
-checkpoint 512 720
-mode 0600
+database hdb
+cachesize 5000
+mode 0600
# The base of your directory
suffix "dc=gonicus,dc=de"
+checkpoint 512 720
# Sample password is "tester", generate a new one using the mkpasswd
# utility and put the string after {crypt}
# Indexing
index default sub
index uid,mail eq
+index gosaSnapshotDN eq
+index gosaSnapshotTimestamp eq,sub
index gosaMailAlternateAddress,gosaMailForwardingAddress eq
index cn,sn,givenName,ou pres,eq,sub
index objectClass pres,eq
index uidNumber,gidNumber,memberuid eq
index gosaSubtreeACL,gosaObject,gosaUser pres,eq
+# Indexing for Kolab
+#index alias eq,sub
+#index kolabDeleteFlag eq
+#index kolabHomeServer eq
+#index member pres,eq
+
# Indexing for Samba 3
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
+# Indexing for DHCP
+#index dhcpHWAddress eq
+#index dhcpClassData eq
+
+# Indexing for DNS
+#index zoneName eq
+#index relativeDomainName eq
# Where the database file are physically stored
directory "/var/lib/ldap"
-# Make mods (writes entryUuid for kolab...)
+# Log modifications and write entryUUID
lastmod on