new structure
This kicks off the basic tree structure, where the docs all mirror the reality, like an ascii penumbra.
This commit is contained in:
45
krov/serverko/slapd12/etc/default/slapd
Normal file
45
krov/serverko/slapd12/etc/default/slapd
Normal file
@@ -0,0 +1,45 @@
|
||||
# Default location of the slapd.conf file or slapd.d cn=config directory. If
|
||||
# empty, use the compiled-in default (/etc/ldap/slapd.d with a fallback to
|
||||
# /etc/ldap/slapd.conf).
|
||||
SLAPD_CONF=
|
||||
|
||||
# System account to run the slapd server under. If empty the server
|
||||
# will run as root.
|
||||
SLAPD_USER="openldap"
|
||||
|
||||
# System group to run the slapd server under. If empty the server will
|
||||
# run in the primary group of its user.
|
||||
SLAPD_GROUP="openldap"
|
||||
|
||||
# Path to the pid file of the slapd server. If not set the init.d script
|
||||
# will try to figure it out from $SLAPD_CONF (/etc/ldap/slapd.d by
|
||||
# default)
|
||||
SLAPD_PIDFILE=
|
||||
|
||||
# slapd normally serves ldap only on all TCP-ports 389. slapd can also
|
||||
# service requests on TCP-port 636 (ldaps) and requests via unix
|
||||
# sockets.
|
||||
# Example usage:
|
||||
# SLAPD_SERVICES="ldap://127.0.0.1:389/ ldaps:/// ldapi:///"
|
||||
SLAPD_SERVICES="ldaps:/// ldapi:///"
|
||||
|
||||
# If SLAPD_NO_START is set, the init script will not start or restart
|
||||
# slapd (but stop will still work). Uncomment this if you are
|
||||
# starting slapd via some other means or if you don't want slapd normally
|
||||
# started at boot.
|
||||
#SLAPD_NO_START=1
|
||||
|
||||
# If SLAPD_SENTINEL_FILE is set to path to a file and that file exists,
|
||||
# the init script will not start or restart slapd (but stop will still
|
||||
# work). Use this for temporarily disabling startup of slapd (when doing
|
||||
# maintenance, for example, or through a configuration management system)
|
||||
# when you don't want to edit a configuration file.
|
||||
SLAPD_SENTINEL_FILE=/etc/ldap/noslapd
|
||||
|
||||
# For Kerberos authentication (via SASL), slapd by default uses the system
|
||||
# keytab file (/etc/krb5.keytab). To use a different keytab file,
|
||||
# uncomment this line and change the path.
|
||||
#export KRB5_KTNAME=/etc/krb5.keytab
|
||||
|
||||
# Additional options to pass to slapd
|
||||
SLAPD_OPTIONS=""
|
4
krov/serverko/slapd12/root/aclupdate.sh
Executable file
4
krov/serverko/slapd12/root/aclupdate.sh
Executable file
@@ -0,0 +1,4 @@
|
||||
#!/bin/bash
|
||||
|
||||
./modify.sh ldifs/acldel.ldif
|
||||
./modify.sh ldifs/acladd.ldif
|
18
krov/serverko/slapd12/root/ldifs/acladd.ldif
Normal file
18
krov/serverko/slapd12/root/ldifs/acladd.ldif
Normal file
@@ -0,0 +1,18 @@
|
||||
dn: olcDatabase={1}mdb,cn=config
|
||||
add: olcAccess
|
||||
olcAccess: {1}to attrs=userPassword by self write by anonymous auth
|
||||
|
||||
dn: olcDatabase={1}mdb,cn=config
|
||||
add: olcAccess
|
||||
#olcAccess: {2}to * by * none
|
||||
olcAccess: {2}to * by self write by dn="uid=readonlykrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=wikildapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=forumldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=gitealdapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=xmppldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=dovecotldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=postfixldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=smtpdldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=kralizecslapd,ou=Users,dc=dmz,dc=rs" read by anonymous none
|
||||
|
||||
dn: olcDatabase={-1}frontend,cn=config
|
||||
add: olcAccess
|
||||
olcAccess: {1}to attrs=userPassword by self write by anonymous auth
|
||||
|
||||
dn: olcDatabase={-1}frontend,cn=config
|
||||
add: olcAccess
|
||||
#olcAccess: {2}to * by * none
|
||||
olcAccess: {2}to * by self write by dn="uid=readonlykrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=wikildapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=forumldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=gitealdapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=xmppldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=dovecotldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=postfixldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=smtpdldapkrov,ou=Users,dc=dmz,dc=rs" read by dn="uid=kralizecslapd,ou=Users,dc=dmz,dc=rs" read by anonymous none
|
||||
|
5
krov/serverko/slapd12/root/ldifs/acldel.ldif
Normal file
5
krov/serverko/slapd12/root/ldifs/acldel.ldif
Normal file
@@ -0,0 +1,5 @@
|
||||
dn: olcDatabase={-1}frontend,cn=config
|
||||
delete: olcAccess
|
||||
|
||||
dn: olcDatabase={1}mdb,cn=config
|
||||
delete: olcAccess
|
10
krov/serverko/slapd12/root/ldifs/tls.ldif
Normal file
10
krov/serverko/slapd12/root/ldifs/tls.ldif
Normal file
@@ -0,0 +1,10 @@
|
||||
dn: cn=config
|
||||
changetype: modify
|
||||
replace: olcTLSCertificateFile
|
||||
olcTLSCertificateFile: /etc/ssl/certs/ldap.krov.dmz.rs/cert.pem
|
||||
-
|
||||
replace: olcTLSCertificateKeyFile
|
||||
olcTLSCertificateKeyFile: /etc/ssl/certs/ldap.krov.dmz.rs/privkey.pem
|
||||
-
|
||||
replace: olcTLSCACertificateFile
|
||||
olcTLSCACertificateFile: /etc/ssl/certs/ldap.krov.dmz.rs/chain.pem
|
3
krov/serverko/slapd12/root/modify.sh
Executable file
3
krov/serverko/slapd12/root/modify.sh
Executable file
@@ -0,0 +1,3 @@
|
||||
#!/bin/bash
|
||||
|
||||
ldapmodify -H ldapi:/// -Y EXTERNAL -f $1
|
4
krov/serverko/slapd12/root/setup.sh
Executable file
4
krov/serverko/slapd12/root/setup.sh
Executable file
@@ -0,0 +1,4 @@
|
||||
#!/bin/bash
|
||||
|
||||
./modify.sh ldifs/tls.ldif
|
||||
./aclupdate.sh
|
Reference in New Issue
Block a user