tmakinen/puppet
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Refactored ldap::server class.

Browse source
This commit is contained in:
Timo Mkinen 2012-03-13 14:50:00 +02:00
parent 742008eee8
commit 756cbeb4f5
8 changed files with 4051 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

32
ldap/templates/slapd-acl.conf.erb Normal file
View file

@ -0,0 +1,32 @@
# database replication
access to *
by dn="uid=replicator,cn=config,<%= name %>" read
by * break
# allow everyone to get naming context
access to dn.base=""
by * read
# allow everyone to get directory root object
access to dn.base="<%= name %>"
by * read
# schema browsing requires authentication
access to dn.base="cn=Subschema"
by users read
by anonymous auth
by * none
# restrict user password
access to attrs=userPassword
by self write
by anonymous auth
by * none
# allow logged in users to read rest of data
access to *
by self read
by users read
by anonymous auth
by * none