Citation :
# Specific Backend Directives for bdb:
# Backend specific directives apply to this backend until another
# 'backend' directive occurs
backend bdb
checkpoint 512 30
#######################################################################
# Specific Backend Directives for 'other':
# Backend specific directives apply to this backend until another
# 'backend' directive occurs
#backend <other>
#######################################################################
# Specific Directives for database #1, of type bdb:
# Database specific directives apply to this databasse until another
# 'database' directive occurs
database bdb
# The base of your directory in database #1
######## Donnez le nom de votre base LDAP (normalement debconf a rajouté pour vous cette ligne)
suffix "dc=XXXXXXX,dc=XXXXXXXX"
######## Donnez le nom de votre base LDAP avec le nom Admin. ( ligne à créer)
rootdn "cn=admin,dc=XXXXXXXXXXXx,dc=XXXXXXXX"
######## Dans une console root lancez la commande slappasswd, donnez votre mot de passe que vous aviez
######## mis à l'installation de slapd (dans debconf), la commande vous renvoie le mot de passe crypté,
######## copiez le. ( ligne à créer)
rootpw {SSHA}ecUmYLMqgXsSyx3yQODiXkimaoZkAzdk
# Where the database file are physically stored for database #1
directory "/var/lib/ldap"
# Indexing options for database #1
index objectClass eq
# Save the time that the entry gets modified, for database #1
lastmod on
# Where to store the replica logs for database #1
# replogfile /var/lib/ldap/replog
# The userPassword by default can be changed
# by the entry owning it if they are authenticated.
# Others should not be able to see it, except the
# admin entry below
# These access lines apply to database #1 only
access to attrs=userPassword
by dn="cn=admin,dc=XXXXXXX,dc=XXXX" write
by anonymous auth
by self write
by * none
# Ensure read access to the base for things like
# supportedSASLMechanisms. Without this you may
# have problems with SASL not knowing what
# mechanisms are available and the like.
# Note that this is covered by the 'access to *'
# ACL below too but if you change that as people
# are wont to do you'll still need this if you
# want SASL (and possible other things) to work
# happily.
access to dn.base="" by * read
# The admin dn has full write access, everyone else
# can read everything.
access to *
by dn="cn=admin,dc=XXXXXX,dc=XXX" write
by * read
|