Skip to content

Instantly share code, notes, and snippets.

@valentinbud
Created August 2, 2013 08:55
Show Gist options
  • Save valentinbud/6138463 to your computer and use it in GitHub Desktop.
Save valentinbud/6138463 to your computer and use it in GitHub Desktop.
openldap-server:
{% if grains['os'] == 'Debian' %}
package:
name: slapd
version: 2.4.23-7.3
service: slapd
{% endif %}
cn:
config:
olcLogLevel: 0
module:
back_hdb:
dn: "cn=module{0}"
objectClass: olcModuleList
cn: "module{0}"
olcModulePath: "/usr/lib/ldap"
olcModuleLoad: "{0}back_hdb"
structuralObjectClass: olcModuleList
schema:
dn: "cn=schema"
objectClass: olcSchemaConfig
cn: schema
structuralObjectClass: olcSchemaConfig
olcBackend:
hdb:
dn: olcBackend="{0}hdb"
objectClass: olcBackendConfig
olcBackend: "{0}hdb"
structuralObjectClass: olcBackendConfig
olcDatabase:
config:
dn: olcDatabase="{0}config"
objectClass: olcDatabaseConfig
olcDatabase: "{0}config"
olcRootDN: "cn=admin,cn=config"
olcRootPW: "{SSHA}xxxxxx"
structuralObjectClass: olcDatabaseConfig
olcAccess:
- "{0}to * dn.exact=cn=admin,cn=config manage by * break"
frontend:
dn: "olcDatabase={-1}frontend"
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: "{-1}frontend"
olcAccess:
- "{0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage by * break"
- "{1}to dn.exact="" by * read"
- "{2}to dn.base="cn=Subschema" by * read"
olcSizeLimit: 500
structuralObjectClass: olcDatabaseConfig
hdb:
dn: "olcDatabase={1}hdb"
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: "{1}hdb"
olcDbDirectory: "/var/lib/ldap"
olcSuffix: "dc=example,dc=net"
olcLastMod: TRUE
olcRootDN: "cn=admin,dc=example,dc=net"
olcRootPW: "{SSHA}xxx"
olcDbCheckpoint: "512 30"
olcDbConfig:
- "{0}set_cachesize 0 2097152 0"
- "{1}set_lk_max_objects 1500"
- "{2}set_lk_max_locks 1500"
- "{3}set_lk_max_lockers 1500"
structuralObjectClass: olcHdbConfig
olcDbIndex:
- objectClass,uid,memberUid,uniqueMember eq
olcAccess:
- "{0}to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=net" write by * none"
- "{1}to dn.base="" by * read"
- "{2}to * by self write by dn="cn=admin,dc=example,dc=net" write by * read"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment