mirror of
https://github.com/Stichting-MINIX-Research-Foundation/pkgsrc-ng.git
synced 2025-09-16 16:00:55 -04:00
97 lines
3.7 KiB
Plaintext
97 lines
3.7 KiB
Plaintext
$NetBSD: patch-ab,v 1.1.1.1 2008/06/16 16:04:25 taca Exp $
|
|
|
|
--- doc/slapd.conf.orig 2008-04-22 17:13:30.000000000 +0900
|
|
+++ doc/slapd.conf
|
|
@@ -2,11 +2,11 @@
|
|
# See slapd.conf(5) for details on configuration options.
|
|
# This file should NOT be world readable.
|
|
#
|
|
-include /etc/openldap/schema/core.schema
|
|
-include /etc/openldap/schema/cosine.schema
|
|
-include /etc/openldap/schema/inetorgperson.schema
|
|
-include /etc/openldap/schema/nis.schema
|
|
-include /etc/openldap/schema/samba.schema
|
|
+include @PREFIX@/etc/openldap/schema/core.schema
|
|
+include @PREFIX@/etc/openldap/schema/cosine.schema
|
|
+include @PREFIX@/etc/openldap/schema/inetorgperson.schema
|
|
+include @PREFIX@/etc/openldap/schema/nis.schema
|
|
+include @PREFIX@/etc/openldap/schema/samba.schema
|
|
|
|
schemacheck on
|
|
|
|
@@ -17,11 +17,11 @@ allow bind_v2
|
|
# service AND an understanding of referrals.
|
|
#referral ldap://root.openldap.org
|
|
|
|
-pidfile /var/run/slapd.pid
|
|
-argsfile /var/run/slapd.args
|
|
+pidfile @OPENLDAP_VARDIR@/run/slapd.pid
|
|
+argsfile @OPENLDAP_VARDIR@/run/slapd.args
|
|
|
|
# Load dynamic backend modules:
|
|
-# modulepath /usr/sbin/openldap
|
|
+# modulepath @PREFIX@/lib/openldap
|
|
# moduleload back_bdb.la
|
|
# moduleload back_ldap.la
|
|
# moduleload back_ldbm.la
|
|
@@ -33,9 +33,9 @@ argsfile /var/run/slapd.args
|
|
# /usr/share/ssl/certs, running "make slapd.pem", and fixing permissions on
|
|
# slapd.pem so that the ldap user or group can read it. Your client software
|
|
# may balk at self-signed certificates, however.
|
|
-#TLSCertificateFile /etc/openldap/ldap.company.com.pem
|
|
-#TLSCertificateKeyFile /etc/openldap/ldap.company.com.key
|
|
-#TLSCACertificateFile /etc/openldap/ca.pem
|
|
+#TLSCertificateFile @PREFIX@/etc/openldap/ldap.example.com.pem
|
|
+#TLSCertificateKeyFile @PREFIX@/etc/openldap/ldap.example.com.key
|
|
+#TLSCACertificateFile @PREFIX@/etc/openldap/ca.pem
|
|
#TLSCipherSuite :SSLv3
|
|
|
|
# Sample security restrictions
|
|
@@ -70,8 +70,8 @@ argsfile /var/run/slapd.args
|
|
#######################################################################
|
|
|
|
database bdb
|
|
-suffix "dc=company,dc=com"
|
|
-rootdn "cn=Manager,dc=company,dc=com"
|
|
+suffix "dc=example,dc=com"
|
|
+rootdn "cn=Manager,dc=example,dc=com"
|
|
# Cleartext passwords, especially for the rootdn, should
|
|
# be avoided. See slappasswd(8) and slapd.conf(5) for details.
|
|
# Use of strong authentication encouraged.
|
|
@@ -81,7 +81,7 @@ rootpw secret
|
|
# The database directory MUST exist prior to running slapd AND
|
|
# should only be accessible by the slapd and slap tools.
|
|
# Mode 700 recommended.
|
|
-directory /var/lib/ldap
|
|
+directory @OPENLDAP_VARDIR@/openldap-data
|
|
lastmod on
|
|
|
|
# Indices to maintain for this database
|
|
@@ -102,7 +102,7 @@ index default sub
|
|
|
|
# users can authenticate and change their password
|
|
access to attrs=userPassword,sambaNTPassword,sambaLMPassword,sambaPwdMustChange,sambaPwdLastSet
|
|
- by dn="cn=Manager,dc=company,dc=com" write
|
|
+ by dn="cn=Manager,dc=example,dc=com" write
|
|
by self write
|
|
by anonymous auth
|
|
by * none
|
|
@@ -110,7 +110,7 @@ access to attrs=userPassword,sambaNTPass
|
|
# those 2 parameters must be world readable for password aging to work correctly
|
|
# (or use a priviledge account in /etc/ldap.conf to bind to the directory)
|
|
access to attrs=shadowLastChange,shadowMax
|
|
- by dn="cn=Manager,dc=company,dc=com" write
|
|
+ by dn="cn=Manager,dc=example,dc=com" write
|
|
by self write
|
|
by * read
|
|
|
|
@@ -119,7 +119,7 @@ access to *
|
|
by * read
|
|
|
|
# Replicas of this database
|
|
-#replogfile /var/lib/ldap/openldap-master-replog
|
|
+#replogfile @OPENLDAP_VARDIR@/openldap-data/openldap-master-replog
|
|
#replica host=ldap-1.example.com:389 starttls=critical
|
|
# bindmethod=sasl saslmech=GSSAPI
|
|
# authcId=host/ldap-master.example.com@EXAMPLE.COM
|