# Database settings dn: olcDatabase=mdb,cn=config objectClass: olcDatabaseConfig objectClass: olcMdbConfig olcDatabase: {1}mdb olcSuffix: dc=example,dc=com olcDbDirectory: /tmp/ldap2/db olcRootDN: cn=admin,dc=example,dc=com olcRootPW: {SSHA}SgCZuAcGQA5HlgKi+g5xwVyI2NhXRFYh olcDbIndex: objectClass eq olcLastMod: TRUE olcDbCheckpoint: 512 30 olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none olcAccess: to * by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage by dn="cn=admin,cn=config" manage olcAccess: to attrs=shadowLastChange by self write by * read olcAccess: to dn.base="" by * read olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read # Create top-level object in domain dn: dc=example,dc=com objectClass: top objectClass: dcObject objectclass: organization o: Example Organization dc: Example description: LDAP Example Two dn: dc=subdept,dc=example,dc=com objectClass: organization objectClass: dcObject o: Sub org dc: subdept dn: ou=people,dc=subdept,dc=example,dc=com objectClass: organizationalUnit ou: people dn: ou=groups,dc=subdept,dc=example,dc=com objectClass: organizationalUnit ou: groups dn: ou=profiles,dc=subdept,dc=example,dc=com objectClass: organizationalUnit ou: profiles dn: cn=radprofile,ou=profiles,dc=subdept,dc=example,dc=com objectClass: radiusObjectProfile objectClass: radiusprofile cn: radprofile radiusFramedIPNetmask: 255.255.255.0 dn: uid=fred,ou=people,dc=subdept,dc=example,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: radiusprofile uid: fred sn: Jones givenName: Fred cn: Fred Jones displayName: Fred Jones userPassword: password uidNumber: 100 gidNumber: 100 homeDirectory: /home/fred radiusIdleTimeout: 3600 radiusAttribute: reply.Session-Timeout := 7200 radiusAttribute: control.NAS-IP-Address := 1.2.3.4 radiusProfileDN: cn=radprofile,ou=profiles,ou=subdept,dc=example,dc=com dn: ou=offsite,dc=subdept,dc=example,dc=com objectClass: referral objectClass: extensibleObject ou: offsite ref: ldap://127.0.0.1:3890/dc=example,dc=com??sub dn: ou=bounce1,dc=subdept,dc=example,dc=com objectClass: referral objectClass: extensibleObject ou: bounce1 ref: ldap://127.0.0.1:3890/ou=bounce2,dc=example,dc=com??sub