Updated FAI release management.

[gosa.git] / contrib / opensides / ldap / slapd.conf

diff --git a/contrib/opensides/ldap/slapd.conf b/contrib/opensides/ldap/slapd.conf
index 558a2eed47d2288818bad26c49e9c6b3a462d080..689bceae1ab6e23c08193b1aa30df5e5b9e7ff7d 100644 (file)
--- a/contrib/opensides/ldap/slapd.conf
+++ b/contrib/opensides/ldap/slapd.conf
@@ -37,6 +37,9 @@ include               /etc/ldap/schema/gofirewall.schema
 #include               /etc/ldap/schema/phpgwaccount.schema
 #include               /etc/ldap/schema/phpgwcontact.schema
 
+# These should be present for nagios plugin to work
+#include               /etc/ldap/schema/nagios.schema
+
 # Schema check allows for forcing entries to
 # match schemas for their objectClasses's
 schemacheck            on
@@ -64,7 +67,7 @@ allow                 bind_v2
 password-hash          {CRYPT}
 
 # Search base
-defaultsearchbase      dc=ccib,dc=be
+defaultsearchbase      dc=opensides,dc=be
 
 
 # Where clients are refered to if no
@@ -80,7 +83,7 @@ defaultsearchbase     dc=ccib,dc=be
 #sasl-authz-policy
 #sasl-host     gosa.sweatshop.local
 #sasl-realm    sweatshop.LOCAL
-#sasl-regexp   cn=(.*),ou=(.*) cn=$1,ou=$2,ou=people,dc=ccib,dc=be
+#sasl-regexp   cn=(.*),ou=(.*) cn=$1,ou=$2,ou=people,dc=opensides,dc=be
 #sasl-secprops noanonymous
 
 ## Kerberos setup
@@ -128,11 +131,11 @@ checkpoint        512 720
 mode           0600
 
 # The base of your directory
-suffix         "dc=ccib,dc=be"
+suffix         "dc=opensides,dc=be"
 
 # Sample password is "tester", generate a new one using the mkpasswd
 # utility and put the string after {crypt}
-rootdn "cn=ldapadmin,dc=ccib,dc=be"
+rootdn "cn=ldapadmin,dc=opensides,dc=be"
 rootpw  {crypt}2wTonoD6DWM/A
 
 # Indexing
@@ -161,7 +164,7 @@ lastmod off
 # Others should not be able to see it, except the admin
 # entry below
 access to attrs=userPassword,sambaPwdLastSet,sambaPwdMustChange,sambaPwdCanChange,shadowMax,shadowExpire
-       by dn="cn=ldapadmin,dc=ccib,dc=be" write
+       by dn="cn=ldapadmin,dc=opensides,dc=be" write
        by anonymous auth
        by self write
        by self read
@@ -170,13 +173,13 @@ access to attrs=userPassword,sambaPwdLastSet,sambaPwdMustChange,sambaPwdCanChang
 # Deny access to imap/fax/kerberos admin passwords stored
 # in ldap tree
 access to attrs=goImapPassword
-       by dn="cn=ldapadmin,dc=ccib,dc=be" write
+       by dn="cn=ldapadmin,dc=opensides,dc=be" write
        by * none 
 access to attrs=goKrbPassword
-       by dn="cn=ldapadmin,dc=ccib,dc=be" write
+       by dn="cn=ldapadmin,dc=opensides,dc=be" write
        by * none 
 access to attrs=goFaxPassword
-       by dn="cn=ldapadmin,dc=ccib,dc=be" write
+       by dn="cn=ldapadmin,dc=opensides,dc=be" write
        by * none 
 
 # Let servers write last user attribute
@@ -188,20 +191,16 @@ access to attrs=gotoLastUser
 # Others should not be able to see it, except the
 # admin entry below
 access to attrs=sambaLmPassword,sambaNtPassword
-       by dn="cn=ldapadmin,dc=ccib,dc=be" write
+       by dn="cn=ldapadmin,dc=opensides,dc=be" write
        by anonymous auth
        by self write
        by self read
        by * none 
 
 # Enable write create access for the terminal admin
-access to dn="ou=incoming,dc=ccib,dc=be"
-       by dn="cn=terminal-admin,dc=ccib,dc=be" write
-       by dn="cn=ldapadmin,dc=ccib,dc=be" write
-
-#access to dn=".*,ou=incoming,dc=ccib,dc=be"
-#      by dn="cn=terminal-admin,dc=ccib,dc=be" write
-#      by dn="cn=ldapadmin,dc=ccib,dc=be" write
+access to dn="ou=incoming,dc=opensides,dc=be"
+       by dn="cn=terminal-admin,dc=opensides,dc=be" write
+       by dn="cn=ldapadmin,dc=opensides,dc=be" write
 
 # What trees should be readable, depends on your policy. Either
 # use this entry and specify what should be readable, or leave
@@ -211,7 +210,7 @@ access to dn="ou=incoming,dc=ccib,dc=be"
 
 # The admin dn has full write access
 access to *
-       by dn="cn=ldapadmin,dc=ccib,dc=be" =wrscx
+       by dn="cn=ldapadmin,dc=opensides,dc=be" =wrscx
        by * read
 
 # Example replication using admin account. This will require taking the
@@ -221,11 +220,11 @@ access to *
 # Replication setup
 #replogfile /var/log/ldap-replicalog
 #replica host=ldap-2.sweatshop.local
-#      binddn="cn=replicator,dc=ccib,dc=be bindmethod=simple credentials=secret
+#      binddn="cn=replicator,dc=opensides,dc=be bindmethod=simple credentials=secret
 
 # Dummy database for config replication
 #database        shell
-#suffix          "dc=ccib,dc=shell"
+#suffix          "dc=opensides,dc=shell"
 #search          /etc/ldap/shell/process.pl
 #add            /etc/ldap/shell/process.pl