openldap/tests/data/slapd-acl.conf

# $OpenLDAP$
#
# master slapd config -- for testing
#
include		./data/slapd.at.conf
include		./data/slapd.oc.conf
schemacheck	off
pidfile     ./test-db/slapd.pid
argsfile    ./test-db/slapd.args

#######################################################################
# ldbm database definitions
#######################################################################

database	ldbm
cachesize	0
suffix		"o=University of Michigan, c=US"
directory	./test-db
rootdn		"cn=Manager, o=University of Michigan, c=US"
rootpw		secret
index		cn,sn,uid	pres,eq,approx
index		default		none
lastmod		on
defaultaccess	none

#
# normal installations should protect root dse,
# cn=monitor, cn=schema, and cn=config
#

access		to attr=objectclass
		by * read

access		to filter="objectclass=person" attr=userpassword
		by self write
		by anonymous auth
		by * none

access		to dn="^.*,ou=Alumni Association,ou=People,o=University of Michigan,c=US$"
		by dn="^.*,o=University of Michigan,c=US$" read
		by anonymous auth
		by * none

access		to attr=member
		by dnattr=member selfwrite
		by * read

access		to filter="objectclass=rfc822mailgroup"
		by dn="Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US" write
		by * read

access		to * by * read
Add OpenLDAP RCSid 1999-09-09 06:52:19 +08:00			`# $OpenLDAP$`
Initial revision 1998-08-09 08:43:13 +08:00			`#`
			`# master slapd config -- for testing`
			`#`
			`include ./data/slapd.at.conf`
			`include ./data/slapd.oc.conf`
			`schemacheck off`
Place the arg and pid files into the test-* directories. 1999-01-22 02:08:33 +08:00			`pidfile ./test-db/slapd.pid`
			`argsfile ./test-db/slapd.args`
Initial revision 1998-08-09 08:43:13 +08:00
			`#######################################################################`
			`# ldbm database definitions`
			`#######################################################################`

			`database ldbm`
Use 'cachesize 0' for repl and acl tests. Remove disable write sync (dbcachenowsync) in master (for concurrency test). 1999-04-10 09:40:33 +08:00			`cachesize 0`
Initial revision 1998-08-09 08:43:13 +08:00			`suffix "o=University of Michigan, c=US"`
			`directory ./test-db`
			`rootdn "cn=Manager, o=University of Michigan, c=US"`
			`rootpw secret`
			`index cn,sn,uid pres,eq,approx`
			`index default none`
			`lastmod on`
			`defaultaccess none`
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH 1999-07-05 14:26:26 +08:00
Import experimental referral implementation from OPENLDAP_DEVEL_REFERRALS. Includes support for update referral for each replicated backend. Reworked replication test to use update referral. Includes major rewrite of response encoding codes (result.c). Includes reworked alias support and eliminates old suffix alias codes (can be emulated using named alias). Includes (untested) support for the Manage DSA IT control. Works in LDAPv2 world. Still testing in LDAPv3 world. Added default referral (test009) test. 1999-07-16 10:45:46 +08:00			`#`
			`# normal installations should protect root dse,`
			`# cn=monitor, cn=schema, and cn=config`
			`#`

Initial revision 1998-08-09 08:43:13 +08:00			`access to attr=objectclass`
			`by * read`
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH 1999-07-05 14:26:26 +08:00
			`access to filter="objectclass=person" attr=userpassword`
Initial revision 1998-08-09 08:43:13 +08:00			`by self write`
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH 1999-07-05 14:26:26 +08:00			`by anonymous auth`
			`by * none`

Add '^' and '$' to ACLs RE's. 1999-06-16 03:41:42 +08:00			`access to dn="^.*,ou=Alumni Association,ou=People,o=University of Michigan,c=US$"`
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH 1999-07-05 14:26:26 +08:00			`by dn="^.*,o=University of Michigan,c=US$" read`
			`by anonymous auth`
Initial revision 1998-08-09 08:43:13 +08:00			`by * none`
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH 1999-07-05 14:26:26 +08:00
Initial revision 1998-08-09 08:43:13 +08:00			`access to attr=member`
			`by dnattr=member selfwrite`
			`by * read`
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH 1999-07-05 14:26:26 +08:00
Initial revision 1998-08-09 08:43:13 +08:00			`access to filter="objectclass=rfc822mailgroup"`
			`by dn="Bjorn Jensen,ou=Information Technology Division,ou=People,o=University of Michigan,c=US" write`
			`by * read`
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH 1999-07-05 14:26:26 +08:00
Initial revision 1998-08-09 08:43:13 +08:00			`access to * by * read`