summaryrefslogtreecommitdiffstats
path: root/confskel/openldap/ldif
diff options
context:
space:
mode:
authorTimothy Pearson <[email protected]>2013-06-27 23:09:11 +0000
committerTimothy Pearson <[email protected]>2013-06-27 23:09:11 +0000
commit43ef321b01e39053ca1a4d386995ca3c3c1a732e (patch)
treef83bdfd1f1fcd84b8821891b7f912f1cd2ee5f37 /confskel/openldap/ldif
parent3b25ffc998fc0f34e8edb10e97727967adcfe06a (diff)
downloadkcmldapcontroller-43ef321b01e39053ca1a4d386995ca3c3c1a732e.tar.gz
kcmldapcontroller-43ef321b01e39053ca1a4d386995ca3c3c1a732e.zip
Add ability to set up multi-master replication
Diffstat (limited to 'confskel/openldap/ldif')
-rw-r--r--confskel/openldap/ldif/config.ldif1
-rw-r--r--confskel/openldap/ldif/olcConfig.ldif8
2 files changed, 8 insertions, 1 deletions
diff --git a/confskel/openldap/ldif/config.ldif b/confskel/openldap/ldif/config.ldif
index 291975a..2c07bb9 100644
--- a/confskel/openldap/ldif/config.ldif
+++ b/confskel/openldap/ldif/config.ldif
@@ -27,6 +27,7 @@ olcReverseLookup: FALSE
olcSaslHost: @@@ADMINSERVER@@@
olcSaslRealm: @@@REALM_UCNAME@@@
olcSaslSecProps: noplain,noanonymous
+olcSizeLimit: 1000000
olcSockbufMaxIncoming: 262143
olcSockbufMaxIncomingAuth: 16777215
olcThreads: 16
diff --git a/confskel/openldap/ldif/olcConfig.ldif b/confskel/openldap/ldif/olcConfig.ldif
index 86d5267..a705bae 100644
--- a/confskel/openldap/ldif/olcConfig.ldif
+++ b/confskel/openldap/ldif/olcConfig.ldif
@@ -1,7 +1,13 @@
dn: olcDatabase={0}config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
-olcAccess: {0}to * by * none
+olcAccess: {0}to *
+ by group/groupOfNames/member.exact="cn=@@@ADMINGROUP@@@,ou=groups,ou=core,ou=realm,@@@REALM_DCNAME@@@" write
+ by dn.base="uid=@@@ADMINUSER@@@,ou=users,ou=core,ou=realm,@@@REALM_DCNAME@@@" write
+ by dn.base="cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@" write
+ by sockurl.regex="^ldapi:///$" write
+ by dynacl/aci write
+ by * none
olcAddContentAcl: TRUE
olcLastMod: TRUE
olcMaxDerefDepth: 15