mirror of https://github.com/gogits/gogs.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
67 lines
2.2 KiB
67 lines
2.2 KiB
# |
|
# See slapd.conf(5) for details on configuration options. |
|
# This file should NOT be world readable. |
|
# |
|
include /private/etc/openldap/schema/core.schema |
|
include /private/etc/openldap/schema/cosine.schema |
|
include /private/etc/openldap/schema/inetorgperson.schema |
|
|
|
# Define global ACLs to disable default read access. |
|
|
|
# Do not enable referrals until AFTER you have a working directory |
|
# service AND an understanding of referrals. |
|
#referral ldap://root.openldap.org |
|
|
|
pidfile /private/var/db/openldap/run/slapd.pid |
|
argsfile /private/var/db/openldap/run/slapd.args |
|
|
|
# Load dynamic backend modules: |
|
# modulepath /usr/libexec/openldap |
|
# moduleload back_bdb.la |
|
# moduleload back_hdb.la |
|
# moduleload back_ldap.la |
|
|
|
# Sample security restrictions |
|
# Require integrity protection (prevent hijacking) |
|
# Require 112-bit (3DES or better) encryption for updates |
|
# Require 63-bit encryption for simple bind |
|
# security ssf=1 update_ssf=112 simple_bind=64 |
|
|
|
# Sample access control policy: |
|
# Root DSE: allow anyone to read it |
|
# Subschema (sub)entry DSE: allow anyone to read it |
|
# Other DSEs: |
|
# Allow self write access |
|
# Allow authenticated users read access |
|
# Allow anonymous users to authenticate |
|
# Directives needed to implement policy: |
|
# access to dn.base="" by * read |
|
# access to dn.base="cn=Subschema" by * read |
|
# access to * |
|
# by self write |
|
# by users read |
|
# by anonymous auth |
|
# |
|
# if no access controls are present, the default policy |
|
# allows anyone and everyone to read anything but restricts |
|
# updates to rootdn. (e.g., "access to * by * read") |
|
# |
|
# rootdn can always read and write EVERYTHING! |
|
|
|
####################################################################### |
|
# BDB database definitions |
|
####################################################################### |
|
|
|
database bdb |
|
suffix "dc=enterprise,dc=org" |
|
rootdn "cn=admin,dc=enterprise,dc=org" |
|
# Cleartext passwords, especially for the rootdn, should |
|
# be avoid. See slappasswd(8) and slapd.conf(5) for details. |
|
# Use of strong authentication encouraged. |
|
rootpw {SSHA}laO00HsgszhK1O0Z5qR0/i/US69Osfeu |
|
# The database directory MUST exist prior to running slapd AND |
|
# should only be accessible by the slapd and slap tools. |
|
# Mode 700 recommended. |
|
directory /private/var/db/openldap/openldap-data |
|
# Indices to maintain |
|
index objectClass eq
|
|
|