55a29dc539
Smbldap-tools is a set of scripts designed to help integrate Samba and a LDAP directory. They target both users and administrators of unix systems. Users can change their password in a way similar to the standard `passwd' command. Administrators can perform user and group management command line actions and synchronise Samba account management consistently. A version of these tools are bundled with samba, but this set is from the master development site and is generally more up to date.
96 lines
3.7 KiB
Text
96 lines
3.7 KiB
Text
$NetBSD: patch-ab,v 1.1.1.1 2008/06/16 16:04:25 taca Exp $
|
|
|
|
--- doc/slapd.conf.orig 2008-04-22 17:13:30.000000000 +0900
|
|
+++ doc/slapd.conf
|
|
@@ -2,11 +2,11 @@
|
|
# See slapd.conf(5) for details on configuration options.
|
|
# This file should NOT be world readable.
|
|
#
|
|
-include /etc/openldap/schema/core.schema
|
|
-include /etc/openldap/schema/cosine.schema
|
|
-include /etc/openldap/schema/inetorgperson.schema
|
|
-include /etc/openldap/schema/nis.schema
|
|
-include /etc/openldap/schema/samba.schema
|
|
+include @PREFIX@/etc/openldap/schema/core.schema
|
|
+include @PREFIX@/etc/openldap/schema/cosine.schema
|
|
+include @PREFIX@/etc/openldap/schema/inetorgperson.schema
|
|
+include @PREFIX@/etc/openldap/schema/nis.schema
|
|
+include @PREFIX@/etc/openldap/schema/samba.schema
|
|
|
|
schemacheck on
|
|
|
|
@@ -17,11 +17,11 @@ allow bind_v2
|
|
# service AND an understanding of referrals.
|
|
#referral ldap://root.openldap.org
|
|
|
|
-pidfile /var/run/slapd.pid
|
|
-argsfile /var/run/slapd.args
|
|
+pidfile @OPENLDAP_VARDIR@/run/slapd.pid
|
|
+argsfile @OPENLDAP_VARDIR@/run/slapd.args
|
|
|
|
# Load dynamic backend modules:
|
|
-# modulepath /usr/sbin/openldap
|
|
+# modulepath @PREFIX@/lib/openldap
|
|
# moduleload back_bdb.la
|
|
# moduleload back_ldap.la
|
|
# moduleload back_ldbm.la
|
|
@@ -33,9 +33,9 @@ argsfile /var/run/slapd.args
|
|
# /usr/share/ssl/certs, running "make slapd.pem", and fixing permissions on
|
|
# slapd.pem so that the ldap user or group can read it. Your client software
|
|
# may balk at self-signed certificates, however.
|
|
-#TLSCertificateFile /etc/openldap/ldap.company.com.pem
|
|
-#TLSCertificateKeyFile /etc/openldap/ldap.company.com.key
|
|
-#TLSCACertificateFile /etc/openldap/ca.pem
|
|
+#TLSCertificateFile @PREFIX@/etc/openldap/ldap.example.com.pem
|
|
+#TLSCertificateKeyFile @PREFIX@/etc/openldap/ldap.example.com.key
|
|
+#TLSCACertificateFile @PREFIX@/etc/openldap/ca.pem
|
|
#TLSCipherSuite :SSLv3
|
|
|
|
# Sample security restrictions
|
|
@@ -70,8 +70,8 @@ argsfile /var/run/slapd.args
|
|
#######################################################################
|
|
|
|
database bdb
|
|
-suffix "dc=company,dc=com"
|
|
-rootdn "cn=Manager,dc=company,dc=com"
|
|
+suffix "dc=example,dc=com"
|
|
+rootdn "cn=Manager,dc=example,dc=com"
|
|
# Cleartext passwords, especially for the rootdn, should
|
|
# be avoided. See slappasswd(8) and slapd.conf(5) for details.
|
|
# Use of strong authentication encouraged.
|
|
@@ -81,7 +81,7 @@ rootpw secret
|
|
# The database directory MUST exist prior to running slapd AND
|
|
# should only be accessible by the slapd and slap tools.
|
|
# Mode 700 recommended.
|
|
-directory /var/lib/ldap
|
|
+directory @OPENLDAP_VARDIR@/openldap-data
|
|
lastmod on
|
|
|
|
# Indices to maintain for this database
|
|
@@ -102,7 +102,7 @@ index default sub
|
|
|
|
# users can authenticate and change their password
|
|
access to attrs=userPassword,sambaNTPassword,sambaLMPassword,sambaPwdMustChange,sambaPwdLastSet
|
|
- by dn="cn=Manager,dc=company,dc=com" write
|
|
+ by dn="cn=Manager,dc=example,dc=com" write
|
|
by self write
|
|
by anonymous auth
|
|
by * none
|
|
@@ -110,7 +110,7 @@ access to attrs=userPassword,sambaNTPass
|
|
# those 2 parameters must be world readable for password aging to work correctly
|
|
# (or use a priviledge account in /etc/ldap.conf to bind to the directory)
|
|
access to attrs=shadowLastChange,shadowMax
|
|
- by dn="cn=Manager,dc=company,dc=com" write
|
|
+ by dn="cn=Manager,dc=example,dc=com" write
|
|
by self write
|
|
by * read
|
|
|
|
@@ -119,7 +119,7 @@ access to *
|
|
by * read
|
|
|
|
# Replicas of this database
|
|
-#replogfile /var/lib/ldap/openldap-master-replog
|
|
+#replogfile @OPENLDAP_VARDIR@/openldap-data/openldap-master-replog
|
|
#replica host=ldap-1.example.com:389 starttls=critical
|
|
# bindmethod=sasl saslmech=GSSAPI
|
|
# authcId=host/ldap-master.example.com@EXAMPLE.COM
|