mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-01-06 10:46:21 +08:00
rework according to table-driven, back-config enabled back-ldap and related overlays
This commit is contained in:
parent
fc148e8e54
commit
eee9efbd1e
@ -84,11 +84,8 @@ database ldap
|
|||||||
suffix "o=Example,c=US"
|
suffix "o=Example,c=US"
|
||||||
uri "@URI1@"
|
uri "@URI1@"
|
||||||
|
|
||||||
#sasl#idassert-method "sasl" "authcDN=cn=Proxy US,ou=Admin,dc=example,dc=com" "authcID=admin/proxy US" "cred=proxy" @SASL_MECH@
|
#sasl#idassert-bind bindmethod=sasl binddn="cn=Proxy US,ou=Admin,dc=example,dc=com" authcId="admin/proxy US" credentials="proxy" @SASL_MECH@ mode=self
|
||||||
#nosasl#idassert-method "simple"
|
#nosasl#idassert-bind bindmethod=simple binddn="cn=Proxy US,ou=Admin,dc=example,dc=com" credentials="proxy" mode=self
|
||||||
#nosasl#idassert-authcDN "cn=Proxy US,ou=Admin,dc=example,dc=com"
|
|
||||||
#nosasl#idassert-passwd proxy
|
|
||||||
idassert-mode self
|
|
||||||
|
|
||||||
# authorizes database
|
# authorizes database
|
||||||
idassert-authzFrom "dn.subtree:dc=example,dc=it"
|
idassert-authzFrom "dn.subtree:dc=example,dc=it"
|
||||||
@ -103,10 +100,7 @@ uri "@URI1@"
|
|||||||
acl-authcDN "cn=Proxy IT,ou=Admin,dc=example,dc=com"
|
acl-authcDN "cn=Proxy IT,ou=Admin,dc=example,dc=com"
|
||||||
acl-passwd proxy
|
acl-passwd proxy
|
||||||
|
|
||||||
idassert-method "simple"
|
idassert-bind bindmethod=simple binddn="cn=Proxy IT,ou=Admin,dc=example,dc=com" credentials="proxy" authzId="dn:cn=Sandbox,ou=Admin,dc=example,dc=com"
|
||||||
idassert-authcDN "cn=Proxy IT,ou=Admin,dc=example,dc=com"
|
|
||||||
idassert-passwd proxy
|
|
||||||
idassert-mode "dn:cn=Sandbox,ou=Admin,dc=example,dc=com"
|
|
||||||
|
|
||||||
# authorizes database
|
# authorizes database
|
||||||
idassert-authzFrom "dn.subtree:dc=example,dc=com"
|
idassert-authzFrom "dn.subtree:dc=example,dc=com"
|
||||||
|
@ -54,22 +54,16 @@ database ldap
|
|||||||
suffix "ou=People,dc=example,dc=com"
|
suffix "ou=People,dc=example,dc=com"
|
||||||
uri "@URI2@"
|
uri "@URI2@"
|
||||||
# FIXME: doesn't work with authz=native
|
# FIXME: doesn't work with authz=native
|
||||||
#sasl#idassert-method sasl authcid=proxy cred=proxy @SASL_MECH@
|
#sasl#idassert-bind bindmethod=sasl authcid=proxy credentials=proxy @SASL_MECH@ mode=self
|
||||||
#nosasl#idassert-method simple
|
#nosasl#idassert-bind bindmethod=simple binddn"uid=proxy,ou=People,dc=example,dc=com" credentials=proxy mode=self
|
||||||
#nosasl#idassert-authcDN "uid=proxy,ou=People,dc=example,dc=com"
|
|
||||||
#nosasl#idassert-passwd proxy
|
|
||||||
idassert-mode self
|
|
||||||
|
|
||||||
# groups branch
|
# groups branch
|
||||||
database ldap
|
database ldap
|
||||||
suffix "ou=Groups,dc=example,dc=com"
|
suffix "ou=Groups,dc=example,dc=com"
|
||||||
uri "@URI3@"
|
uri "@URI3@"
|
||||||
# FIXME: doesn't work with authz=native
|
# FIXME: doesn't work with authz=native
|
||||||
#sasl#idassert-method sasl authcid=proxy cred=proxy @SASL_MECH@
|
#sasl#idassert-bind bindmethod=sasl authcid=proxy credentials=proxy @SASL_MECH@ mode=self
|
||||||
#nosasl#idassert-method simple
|
#nosasl#idassert-bind bindmethod=simple binddn="uid=proxy,ou=Groups,dc=example,dc=com" credentials=proxy mode=self
|
||||||
#nosasl#idassert-authcDN "uid=proxy,ou=Groups,dc=example,dc=com"
|
|
||||||
#nosasl#idassert-passwd proxy
|
|
||||||
idassert-mode self
|
|
||||||
|
|
||||||
# root
|
# root
|
||||||
database @BACKEND@
|
database @BACKEND@
|
||||||
|
@ -45,7 +45,7 @@ rootdn "cn=Manager,o=Example,c=US"
|
|||||||
rootpw secret
|
rootpw secret
|
||||||
chase-referrals no
|
chase-referrals no
|
||||||
#nretries forever
|
#nretries forever
|
||||||
nretries 1000
|
#nretries 1000
|
||||||
|
|
||||||
# local
|
# local
|
||||||
uri "@URI2@ou=Meta,o=Example,c=US"
|
uri "@URI2@ou=Meta,o=Example,c=US"
|
||||||
|
@ -32,16 +32,10 @@ argsfile ./testrun/slapd.2.args
|
|||||||
|
|
||||||
#ldapyes#overlay chain
|
#ldapyes#overlay chain
|
||||||
#ldapyes#chain-uri @URI1@
|
#ldapyes#chain-uri @URI1@
|
||||||
#ldapyes#chain-idassert-method "simple"
|
#ldapyes#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
|
||||||
#ldapyes#chain-idassert-authcDN "cn=Manager,dc=example,dc=com"
|
|
||||||
#ldapyes#chain-idassert-passwd secret
|
|
||||||
#ldapyes#chain-idassert-mode self
|
|
||||||
#ldapmod#overlay chain
|
#ldapmod#overlay chain
|
||||||
#ldapmod#chain-uri @URI1@
|
#ldapmod#chain-uri @URI1@
|
||||||
#ldapmod#chain-idassert-method "simple"
|
#ldapmod#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
|
||||||
#ldapmod#chain-idassert-authcDN "cn=Manager,dc=example,dc=com"
|
|
||||||
#ldapmod#chain-idassert-passwd secret
|
|
||||||
#ldapmod#chain-idassert-mode self
|
|
||||||
|
|
||||||
#######################################################################
|
#######################################################################
|
||||||
# database definitions
|
# database definitions
|
||||||
|
@ -34,16 +34,10 @@ argsfile ./testrun/slapd.4.args
|
|||||||
|
|
||||||
#ldapyes#overlay chain
|
#ldapyes#overlay chain
|
||||||
#ldapyes#chain-uri @URI1@
|
#ldapyes#chain-uri @URI1@
|
||||||
#ldapyes#chain-idassert-method "simple"
|
#ldapyes#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
|
||||||
#ldapyes#chain-idassert-authcDN "cn=Manager,dc=example,dc=com"
|
|
||||||
#ldapyes#chain-idassert-passwd secret
|
|
||||||
#ldapyes#chain-idassert-mode self
|
|
||||||
#ldapmod#overlay chain
|
#ldapmod#overlay chain
|
||||||
#ldapmod#chain-uri @URI1@
|
#ldapmod#chain-uri @URI1@
|
||||||
#ldapmod#chain-idassert-method "simple"
|
#ldapmod#chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=example,dc=com" credentials=secret mode=self
|
||||||
#ldapmod#chain-idassert-authcDN "cn=Manager,dc=example,dc=com"
|
|
||||||
#ldapmod#chain-idassert-passwd secret
|
|
||||||
#ldapmod#chain-idassert-mode self
|
|
||||||
|
|
||||||
#######################################################################
|
#######################################################################
|
||||||
# consumer database definitions
|
# consumer database definitions
|
||||||
|
@ -51,5 +51,4 @@ translucent_no_glue
|
|||||||
# XXX this uri really shouldn't be hardcoded
|
# XXX this uri really shouldn't be hardcoded
|
||||||
uri @URI1@
|
uri @URI1@
|
||||||
lastmod off
|
lastmod off
|
||||||
acl-authcDN uid=binder,o=translucent
|
acl-bind binddn="uid=binder,o=translucent" credentials="bindtest"
|
||||||
acl-passwd bindtest
|
|
||||||
|
@ -27,7 +27,7 @@ if [ x"$WITH_SASL" = x"yes" -a x"$USE_SASL" != x"no" ] ; then
|
|||||||
if [ x"$USE_SASL" = x"yes" ] ; then
|
if [ x"$USE_SASL" = x"yes" ] ; then
|
||||||
USE_SASL=DIGEST-MD5
|
USE_SASL=DIGEST-MD5
|
||||||
fi
|
fi
|
||||||
SASL_MECH="\"mech=$USE_SASL\""
|
SASL_MECH="\"saslmech=$USE_SASL\""
|
||||||
else
|
else
|
||||||
SASL="nosasl"
|
SASL="nosasl"
|
||||||
SASL_MECH=
|
SASL_MECH=
|
||||||
|
Loading…
Reference in New Issue
Block a user