index 3c9cdde085205531c9c77581bc9ad057b896b523..e542522d1a0568bb3483ff7031c5bed8170d07d3 100644 (file)
include /etc/ldap/schema/gosa+samba3.schema
include /etc/ldap/schema/gofax.schema
include /etc/ldap/schema/goserver.schema
+include /etc/ldap/schema/goto-mime.schema
# Schema check allows for forcing entries to
# match schemas for their objectClasses's
#limits anonymous size.soft=500 time.soft=5
#limits user size=none time.soft=30
-#######################################################################
-# database definitions
-#######################################################################
-
-# Monitor backend
-database monitor
+access to dn.base=""
+ by * read
access to dn.subtree=cn=Monitor
by * read
# Access to schema information
-access to dn.subtree=""
- by dn="cn=ldapadmin,dc=gonicus,dc=de" read
-
-# The backend type, ldbm, is the default standard
-database bdb
-cachesize 5000
-checkpoint 512 720
-mode 0600
-
-# The base of your directory
-suffix "dc=gonicus,dc=de"
-
-# Sample password is "tester", generate a new one using the mkpasswd
-# utility and put the string after {crypt}
-rootdn "cn=ldapadmin,dc=gonicus,dc=de"
-rootpw {crypt}OuorOLd3VqvC2
-
-# Indexing
-index default sub
-index uid,mail eq
-index gosaMailAlternateAddress,gosaMailForwardingAddress eq
-index cn,sn,givenName,ou pres,eq,sub
-index objectClass pres,eq
-index uidNumber,gidNumber,memberuid eq
-index gosaSubtreeACL,gosaObject,gosaUser pres,eq
-
-# Indexing for Samba 3
-index sambaSID eq
-index sambaPrimaryGroupSID eq
-index sambaDomainName eq
-
-
-# Where the database file are physically stored
-directory "/var/lib/ldap"
-
-# Make mods (writes entryUuid for kolab...)
-lastmod on
+#access to dn.subtree=""
+# by * read
# The userPassword/shadow Emtries by default can be
# changed by the entry owning it if they are authenticated.
by dn="cn=terminal-admin,dc=gonicus,dc=de" write
by dn="cn=ldapadmin,dc=gonicus,dc=de" write
by dn.regex="uid=[^/]+/admin\+(realm=GONICUS.LOCAL)?" write
+ by * none
access to dn.sub="ou=incoming,dc=gonicus,dc=de"
by dn="cn=terminal-admin,dc=gonicus,dc=de" write
by dn="cn=ldapadmin,dc=gonicus,dc=de" write
by dn.regex="uid=[^/]+/admin\+(realm=GONICUS.LOCAL)?" write
+ by * none
# What trees should be readable, depends on your policy. Either
# use this entry and specify what should be readable, or leave
# by peername="ip=127\.0\.0\.1" read
# by * none
+#######################################################################
+# database definitions
+#######################################################################
+
+# Monitor backend
+database monitor
+
+# The backend type, ldbm, is the default standard
+database bdb
+cachesize 5000
+mode 0600
+
+# The base of your directory
+suffix "dc=gonicus,dc=de"
+checkpoint 512 720
+
+# Sample password is "tester", generate a new one using the mkpasswd
+# utility and put the string after {crypt}
+rootdn "cn=ldapadmin,dc=gonicus,dc=de"
+rootpw {crypt}OuorOLd3VqvC2
+
+# Indexing
+index default sub
+index uid,mail eq
+index gosaMailAlternateAddress,gosaMailForwardingAddress eq
+index cn,sn,givenName,ou pres,eq,sub
+index objectClass pres,eq
+index uidNumber,gidNumber,memberuid eq
+index gosaSubtreeACL,gosaObject,gosaUser pres,eq
+
+# Indexing for Samba 3
+index sambaSID eq
+index sambaPrimaryGroupSID eq
+index sambaDomainName eq
+
+
+# Where the database file are physically stored
+directory "/var/lib/ldap"
+
+# Make mods (writes entryUuid for kolab...)
+lastmod on
+
# Example replication using admin account. This will require taking the
# out put of this database using slapcat(8C), and then importing that into