bjr
j’ai un probléme sur la configuration de slapd.conf
voila mon configuration:
$OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.8 2003/05/24 23:19:14 kurt Exp $
See slapd.conf(5) for details on configuration options.
This file should NOT be world readable.
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
Define global ACLs to disable default read access.
schemacheck on
Do not enable referrals until AFTER you have a working directory
service AND an understanding of referrals.
#referral root.openldap.org…
pidfile /var/run/slapd.pid
argsfile /var/run/slapd.args
Load dynamic backend modules:
modulepath /usr/local/libexec/openldap
moduleload back_bdb.la
moduleload back_ldap.la
moduleload back_ldbm.la
moduleload back_passwd.la
moduleload back_shell.la
Sample security restrictions
Require integrity protection (prevent hijacking)
Require 112-bit (3DES or better) encryption for updates
Require 63-bit encryption for simple bind
security ssf=1 update_ssf=112 simple_bind=64
Sample access control policy:
Root DSE: allow anyone to read it
Subschema (sub)entry DSE: allow anyone to read it
Other DSEs:
Allow self write access
Allow authenticated users read access
Allow anonymous users to authenticate
Directives needed to implement policy
Root DSE: allow anyone to read it
Subschema (sub)entry DSE: allow anyone to read it
Other DSEs:
Allow self write access
Allow authenticated users read access
Allow anonymous users to authenticate
Directives needed to implement policy:
access to dn.base=“cn=manager,dc=stage,dc=com” by * read
access to dn.base=“cn=Subschema” by * read
#access to *
by dn=“cn=manager,dc=stage,dc=com” write
by * read
access to attrs=uidNumber,gidNumber,loginShell
by dn=“manager,dc=stage,dc=fr” write
by * none
if no access controls are present, the default policy is:
Allow read by all
rootdn can always write!
#######################################################################
ldbm database definitions
#######################################################################
database ldbm
suffix “dc=stage,dc=com”
rootdn “cn=Manager,dc=stage,dc=com”
Cleartext passwords, especially for the rootdn, should
be avoid. See slappasswd(8) and slapd.conf(5) for details.
Use of strong authentication encouraged.
rootpw {SSHA}
The database directory MUST exist prior to running slapd AND
should only be accessible by the slapd and slap tools.
Mode 700 recommended.
directory /var/lib/ldap
Indices to maintain
index objectClass eq,pres
index uidNumber eq,pres,sub
index gidNumber eqpres
index cn,uid eq,sub
"
alors lorsque je lance le serveur voila le message :
[root@localhost openldap]# /etc/rc.d/init.d/ldap start
Vérification des fichiers de configuration pour slapd : [ÉCHOUÉ]
could not open config file “/etc/openldap/slapd.conf”: Permission denied (13)
slaptest: bad configuration file!
:ouch: