diff options
author | Timothy Pearson <[email protected]> | 2013-06-27 23:09:11 +0000 |
---|---|---|
committer | Timothy Pearson <[email protected]> | 2013-06-27 23:09:11 +0000 |
commit | 43ef321b01e39053ca1a4d386995ca3c3c1a732e (patch) | |
tree | f83bdfd1f1fcd84b8821891b7f912f1cd2ee5f37 /confskel/openldap/ldif | |
parent | 3b25ffc998fc0f34e8edb10e97727967adcfe06a (diff) | |
download | kcmldapcontroller-43ef321b01e39053ca1a4d386995ca3c3c1a732e.tar.gz kcmldapcontroller-43ef321b01e39053ca1a4d386995ca3c3c1a732e.zip |
Add ability to set up multi-master replication
Diffstat (limited to 'confskel/openldap/ldif')
-rw-r--r-- | confskel/openldap/ldif/config.ldif | 1 | ||||
-rw-r--r-- | confskel/openldap/ldif/olcConfig.ldif | 8 |
2 files changed, 8 insertions, 1 deletions
diff --git a/confskel/openldap/ldif/config.ldif b/confskel/openldap/ldif/config.ldif index 291975a..2c07bb9 100644 --- a/confskel/openldap/ldif/config.ldif +++ b/confskel/openldap/ldif/config.ldif @@ -27,6 +27,7 @@ olcReverseLookup: FALSE olcSaslHost: @@@ADMINSERVER@@@ olcSaslRealm: @@@REALM_UCNAME@@@ olcSaslSecProps: noplain,noanonymous +olcSizeLimit: 1000000 olcSockbufMaxIncoming: 262143 olcSockbufMaxIncomingAuth: 16777215 olcThreads: 16 diff --git a/confskel/openldap/ldif/olcConfig.ldif b/confskel/openldap/ldif/olcConfig.ldif index 86d5267..a705bae 100644 --- a/confskel/openldap/ldif/olcConfig.ldif +++ b/confskel/openldap/ldif/olcConfig.ldif @@ -1,7 +1,13 @@ dn: olcDatabase={0}config objectClass: olcDatabaseConfig olcDatabase: {0}config -olcAccess: {0}to * by * none +olcAccess: {0}to * + by group/groupOfNames/member.exact="cn=@@@ADMINGROUP@@@,ou=groups,ou=core,ou=realm,@@@REALM_DCNAME@@@" write + by dn.base="uid=@@@ADMINUSER@@@,ou=users,ou=core,ou=realm,@@@REALM_DCNAME@@@" write + by dn.base="cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@" write + by sockurl.regex="^ldapi:///$" write + by dynacl/aci write + by * none olcAddContentAcl: TRUE olcLastMod: TRUE olcMaxDerefDepth: 15 |