mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-21 03:10:25 +08:00
74fa239a20
- librewrite, for string rewriting; it may be used in back-ldap
by configuring with '--enable-rewrite'. It must be used in
back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
that explains the usage and the features. More comprehensive
documentation will follow.
- enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
including dn rewriting, a fix to group acl matching and so
- back-meta: a new backend that proxies a set of remote servers
by spawning queries. It uses portions of back-ldap and the rewrite
capabilities of librewrite. It can be compiled by configuring
with `--enable-ldap --enable-rewrite --enable-meta'.
There's a text file, 'servers/slapd/back-meta/Documentation', that
describes the main features and config statements.
Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)
45 lines
1.2 KiB
Plaintext
45 lines
1.2 KiB
Plaintext
#
|
|
# master slapd config -- for testing of ldap metadirectory rewrite
|
|
#
|
|
ucdata-path ./ucdata
|
|
include ./schema/core.schema
|
|
include ./schema/cosine.schema
|
|
include ./schema/inetorgperson.schema
|
|
#
|
|
schemacheck off
|
|
#
|
|
pidfile ./meta-db/slapd.pid
|
|
argsfile ./meta-db/slapd.args
|
|
|
|
access to attr=userPassword
|
|
by anonymous auth
|
|
by self write
|
|
|
|
access to dn.regex="[^,]+,ou=People,dc=[^,]+,o=Foo Bar,c=US" attr=sn
|
|
by group.exact="cn=Users,ou=Groups,dc=bar,o=Foo Bar,c=US" read
|
|
by * none
|
|
|
|
access to dn.regex="[^,]+,ou=Groups,dc=[^,]+,o=Foo Bar,c=US" attr=cn
|
|
by group.exact="cn=Users,ou=Groups,dc=bar,o=Foo Bar,c=US" read
|
|
by * none
|
|
|
|
#access to dn.regex="[^,]+,ou=Groups,dc=[^,]+,o=Foo Bar,c=US" attr=cn
|
|
# by dnattr=member read
|
|
# by * none
|
|
|
|
access to *
|
|
by * read
|
|
|
|
#######################################################################
|
|
# ldbm database definitions
|
|
#######################################################################
|
|
|
|
include ./slapd-ldbm.conf
|
|
|
|
#######################################################################
|
|
# ldap database with suffix massage definitions
|
|
#######################################################################
|
|
|
|
include ./slapd-ldap.conf
|
|
|