From f87811f6b39bfa8bdef906256cf7752e4a6fd999 Mon Sep 17 00:00:00 2001
From: Andrew Bartlett <abartlet@samba.org>
Date: Thu, 13 Aug 2009 17:01:27 +1000
Subject: s4:provision Rework provision-backend into provision

This removes a *lot* of duplicated code and the cause of much
administrator frustration.  We now handle starting and stopping the
slapd (at least for the provision), and ensure that there is only one
'right' way to configure the OpenLDAP and Fedora DS backend

We now run OpenLDAP in 'cn=config' mode for online configuration.

To test what was the provision-backend code, a new --ldap-dryrun-mode
option has been added to provision.  It quits the provision just
before it would start the LDAP binaries

Andrew Bartlett
---
 source4/setup/slapd.conf | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

(limited to 'source4/setup/slapd.conf')

diff --git a/source4/setup/slapd.conf b/source4/setup/slapd.conf
index 6174121c77..0077a224fb 100644
--- a/source4/setup/slapd.conf
+++ b/source4/setup/slapd.conf
@@ -61,10 +61,16 @@ rootdn          cn=Manager,cn=Samba
 
 ########################################
 ## olc - configuration ###
-${OLC_CONFIG_PASS}
+database	config
+rootdn		cn=config
+
 ${OLC_SYNCREPL_CONFIG}
 ${OLC_MMR_CONFIG}
-${OLC_CONFIG_ACL}
+
+access to dn.sub="cn=config"
+	by dn="cn=samba-admin,cn=samba" write
+	by dn="cn=replicator,cn=samba" read
+
 
 ########################################
 ### cn=schema ###
-- 
cgit