1 Most of the configuration of the ldap server has to do with getting correct
2 access controls to keep the data safe. Here is a sample:
5 # only allow plain text auth when we do crypto
6 security simple_bind=128
8 # and the database definition
9 include /etc/ldap/userdir-ldap-slapd.conf
11 # Overlays are useful to enforce constraints:
13 moduleload /usr/lib/ldap/unique.so
15 unique_uri ldap:///ou=users,dc=debian,dc=org?uidNumber,uid,keyFingerPrint?sub
16 unique_uri ldap:///ou=groups,dc=debian,dc=org?gidNumber,cn?sub
20 Note that in more modern versions of slapd, the "by addr" and "by domain"
21 syntax has changed and the following should be used instead:
22 by peername.ip=127.0.0.1 read
23 by domain.subtree=debian.org read
27 Here is the initial seed file to import and setup the proper entries:
39 dn: ou=users,dc=debian,dc=org
42 objectClass: organizationalUnit
44 dn: uid=admin,ou=users,dc=debian,dc=org
46 cn: LDAP administrator
48 objectClass: groupOfNames
49 userPassword: {crypt}?????
50 member: uid=jgg,ou=users,dc=debian,dc=org
51 member: uid=joey,ou=users,dc=debian,dc=org
52 member: uid=troup,ou=users,dc=debian,dc=org
53 mail: debian-admin@debian.org