slapd_conf

code
 * 1) This is the main slapd configuration file. See slapd.conf(5) for more
 * 2) info on the configuration options.


 * 1) Global Directives:
 * 1) Global Directives:


 * 1) Features to permit
 * 2) allow bind_v2

include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/samba.schema
 * 1) Schema and objectClass definitions

pidfile /var/run/slapd/slapd.pid
 * 1) Where the pid file is put. The init.d script
 * 2) will not stop the server if you change this.

argsfile /var/run/slapd/slapd.args
 * 1) List of arguments that were passed to the server

loglevel none
 * 1) Read slapd.conf(5) for possible values

modulepath /usr/lib/ldap moduleload back_hdb
 * 1) Where the dynamically loaded modules are stored

sizelimit 500
 * 1) The maximum number of entries that is returned for a search operation

tool-threads 1
 * 1) The tool-threads parameter sets the actual amount of cpu's that is used
 * 2) for indexing.

backend hdb
 * 1) Specific Backend Directives for hdb:
 * 2) Backend specific directives apply to this backend until another
 * 3) 'backend' directive occurs
 * 1) 'backend' directive occurs


 * 1) Specific Backend Directives for 'other':
 * 2) Backend specific directives apply to this backend until another
 * 3) 'backend' directive occurs
 * 4) backend
 * 1) backend

database hdb
 * 1) Specific Directives for database #1, of type hdb:
 * 2) Database specific directives apply to this databasse until another
 * 3) 'database' directive occurs
 * 1) 'database' directive occurs

suffix "dc=gr2,dc=linux"
 * 1) The base of your directory in database #1

rootdn "cn=admin,dc=gr2,dc=linux" rootpw {MD5}Qhz9FD5FDD9YFKBJVAngcw==
 * 1) rootdn directive for specifying a superuser on the database. This is needed
 * 2) for syncrepl.

directory "/var/lib/ldap"
 * 1) Where the database file are physically stored for database #1


 * 1) The dbconfig settings are used to generate a DB_CONFIG file the first
 * 2) time slapd starts. They do NOT override existing an existing DB_CONFIG
 * 3) file. You should therefore change these settings in DB_CONFIG directly
 * 4) or remove DB_CONFIG and restart slapd for changes to take effect.

dbconfig set_cachesize 0 2097152 0
 * 1) For the Debian package we use 2MB as default but be sure to update this
 * 2) value if you have plenty of RAM


 * 1) Sven Hartge reported that he had to set this value incredibly high
 * 2) to get slapd running at all. See [] for more
 * 3) information.

dbconfig set_lk_max_objects 1500 dbconfig set_lk_max_locks 1500 dbconfig set_lk_max_lockers 1500
 * 1) Number of objects that can be locked at the same time.
 * 1) Number of locks (both requested and granted)
 * 1) Number of lockers

index objectClass eq,pres index ou,cn,sn,mail,givenname eq,pres,sub index uidNumber,gidNumber,memberUid eq,pres index loginShell eq,pres index uid pres,sub,eq index displayName pres,sub,eq index nisMapName,nisMapEntry eq,pres,sub index sambaSID eq index sambaPrimaryGroupSID eq index sambaDomainName eq index default sub index uniqueMember eq index sambaGroupType eq index sambaSIDList eq
 * 1) Indices to maintain for this database
 * 1) required to support pdb_getsampwnam
 * 1) required to support pdb_getsambapwrid

lastmod on
 * 1) Save the time that the entry gets modified, for database #1

checkpoint 512 30
 * 1) Checkpoint the BerkeleyDB database periodically in case of system
 * 2) failure and to speed slapd shutdown.


 * 1) Where to store the replica logs for database #1
 * 2) replogfile /var/lib/ldap/replog

access to attrs=userPassword,sambaNTPassword,sambaLMPassword,sambaPwdMustChange,sambaPwdLastSet by self write by anonymous auth by * none
 * 1) users can authenticate and change their password

access to attrs=shadowLastChange,shadowMax by self write by * read
 * 1) those 2 parameters must be world readable for password aging to work correctly
 * 2) (or use a priviledge account in /etc/ldap.conf to bind to the directory)

access to * by * read
 * 1) all others attributes are readable to everybody


 * 1) For Netscape Roaming support, each user gets a roaming
 * 2) profile for which they have write access to
 * 3) access to dn=".*,ou=Roaming,o=morsnet"
 * 4) by dn="cn=admin,dc=example,dc=com" write
 * 5) by dnattr=owner write


 * 1) Specific Directives for database #2, of type 'other' (can be hdb too):
 * 2) Database specific directives apply to this databasse until another
 * 3) 'database' directive occurs
 * 4) database
 * 1) database

code
 * 1) The base of your directory for database #2
 * 2) suffix "dc=debian,dc=org"