summaryrefslogtreecommitdiff
path: root/source4/setup/slapd.conf
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2009-08-13 17:01:27 +1000
committerAndrew Bartlett <abartlet@samba.org>2009-08-17 09:50:58 +1000
commitf87811f6b39bfa8bdef906256cf7752e4a6fd999 (patch)
tree6b6a36de1546d8cc08074f78eea5279f7dcd7551 /source4/setup/slapd.conf
parent7a9030b7ce164460e662d0798c2490ec5929442d (diff)
downloadsamba-f87811f6b39bfa8bdef906256cf7752e4a6fd999.tar.gz
samba-f87811f6b39bfa8bdef906256cf7752e4a6fd999.tar.bz2
samba-f87811f6b39bfa8bdef906256cf7752e4a6fd999.zip
s4:provision Rework provision-backend into provision
This removes a *lot* of duplicated code and the cause of much administrator frustration. We now handle starting and stopping the slapd (at least for the provision), and ensure that there is only one 'right' way to configure the OpenLDAP and Fedora DS backend We now run OpenLDAP in 'cn=config' mode for online configuration. To test what was the provision-backend code, a new --ldap-dryrun-mode option has been added to provision. It quits the provision just before it would start the LDAP binaries Andrew Bartlett
Diffstat (limited to 'source4/setup/slapd.conf')
-rw-r--r--source4/setup/slapd.conf10
1 files changed, 8 insertions, 2 deletions
diff --git a/source4/setup/slapd.conf b/source4/setup/slapd.conf
index 6174121c77..0077a224fb 100644
--- a/source4/setup/slapd.conf
+++ b/source4/setup/slapd.conf
@@ -61,10 +61,16 @@ rootdn cn=Manager,cn=Samba
########################################
## olc - configuration ###
-${OLC_CONFIG_PASS}
+database config
+rootdn cn=config
+
${OLC_SYNCREPL_CONFIG}
${OLC_MMR_CONFIG}
-${OLC_CONFIG_ACL}
+
+access to dn.sub="cn=config"
+ by dn="cn=samba-admin,cn=samba" write
+ by dn="cn=replicator,cn=samba" read
+
########################################
### cn=schema ###