# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.4 2000/08/26 17:06:18 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema

# Define global ACLs to disable default read access.

access to * by * read

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
referral        ldap://iris.cica.es

pidfile         /var/run/slapd.pid
argsfile        /var/run/slapd.args

# Load dynamic backend modules:
# modulepath    /usr/sbin/openldap
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la

# backend definition
backend         ldbm

#######################################################################
# ldbm database definitions
#######################################################################

# Base de Datos para el esquema basado en el RFC 2377

database        ldbm
cachesize       100
dbcachesize     500000
suffix          "dc=um, dc=es"
rootdn          "cn=root, dc=um, dc=es"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          murcia
# The database directory MUST exist prior to running slapd AND 
# should only be accessable by the slapd/tools. Mode 700 recommended.
directory       /etc/openldap/um
# Indices to maintain
index           cn,sn,uid,mail  pres,eq,sub
index           objectClass     pres,eq
# ldbm access control definitions
access to attr=userPassword
                by self write
                by anonymous auth
                by dn="cn=root, dc=um, dc=es" write
                by * none
access to *
                by self write
                by dn="cn=root, dc=um, dc=es" write
                by * read
lastmod         on
readonly        off
mode            0600

