#schema
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
####allow ldapv2 client connection, this is not the default
#allow bind_v2
#loggin options
loglevel 296
pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args
#TLS options
TLSCipherSuite          HIGH
TLSCertificateFile      /etc/openldap/ssl/slapd-cert.crt
TLSCertificateKeyFile   /etc/openldap/ssl/slapd-key.pem
#Set high security
security ssf=128
#Miscellaneous security option
password-hash   {SSHA}
#default access
defaultaccess   search
#database
database        bdb
#root suffix for direcoty
suffix          "dc=lightportal"
#root DN for admin
rootdn          "cn=Manager,dc=lightportal"
rootpw          {SSHA}DnXPdfdsadfvxczdfgdvxcvoL4vwRJmY
#directory where ldap database is stored
directory       /var/lib/ldap/lightportal/
#ensure that files are read only by their owner
mode    0600
#ACLs to control accessto the directory
#Allow users to authenticate agains and modify their own passwords
access to attrs=userPassword
        by self write
        by * auth
#Allow users to read all non password data
access to *
        by * read

index objectClass                       eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub