Administrace komentářů

Pripadne co tam je jeste spatne.

include		/etc/openldap/schema/core.schema
include		/etc/openldap/schema/cosine.schema
include		/etc/openldap/schema/inetorgperson.schema
include		/etc/openldap/schema/nis.schema
include		/etc/openldap/schema/ppolicy.schema
include		/etc/openldap/schema/isl.schema

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral	ldap://root.openldap.org

pidfile		/var/run/slapd/slapd.pid
argsfile	/var/run/slapd/slapd.args

modulepath	/usr/lib/openldap/modules

access to *
	by dn.exact="uid=mumla,ou=people,dc=stb,dc=acr" write
	by * read

access to dn.base=""
        by * read

access to dn.base="cn=Subschema"
        by * read

access to attrs=userPassword,userPKCS12
        by self write
        by * auth

access to attrs=shadowLastChange
        by self write
        by * read

access to *
	by self write
        by * read

loglevel sync stats

TLSCertificateFile /etc/ssl/servercerts/servercert.pem
TLSCACertificatePath /etc/ssl/certs/
TLSCertificateKeyFile /etc/ssl/servercerts/serverkey.pem

database	config
rootdn		cn=config
rootpw		"{ssha}password"

database	monitor
rootdn		cn=monitor
rootpw		"{ssha}password"	

database	bdb
suffix		"dc=stb,dc=acr"
rootdn		"cn=Administrator,dc=stb,dc=acr"
rootpw		"{ssha}password"

directory	/var/lib/ldap/stb

checkpoint 256 5
cachesize 10000

overlay ppolicy
ppolicy_default "cn=default,ou=Policies,dc=stb,dc=acr"
ppolicy_hash_cleartext
ppolicy_use_lockout

ServerID 1 ldap://cz-250-35
ServerID 2 ldap://cz-250-36

syncrepl rid=001
  provider=ldap://cz-250-35
  uri=ldap://cz-250-35
  binddn="uid=mumla,ou=people,dc=stb,dc=acr"
  bindmethod=simple
  credentials=password
  searchbase="dc=stb,dc=acr"
  type=refreshAndPersist
  starttls=yes
  tls_reqcert=never
  retry="5 5 300 5"
  timeout=1

syncrepl rid=002
  provider=ldap://cz-250-36
  uri=ldap://cz-250-36
  binddn="uid=mumla,ou=people,dc=stb,dc=acr"
  bindmethod=simple
  credentials=password
  searchbase="dc=stb,dc=acr"
  type=refreshAndPersist
  starttls=yes
  tls_reqcert=never
  retry="5 5 300 5"
  timeout=1

mirrormode TRUE

overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

limits dn.exact="uid=mumla,ou=people,dc=stb,dc=acr"
   size=unlimited time=unlimited

index objectClass,uidNumber,gidNumber	eq
index uid				eq,subinitial
index member,cn,memberUid		eq
index entryCSN,entryUUID		eq