1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
# Database settings
dn: olcDatabase=mdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcMdbConfig
olcDatabase: {1}mdb
olcSuffix: dc=example,dc=com
olcDbDirectory: /tmp/ldap/db
olcRootDN: cn=admin,dc=example,dc=com
olcRootPW: {SSHA}SgCZuAcGQA5HlgKi+g5xwVyI2NhXRFYh
olcDbIndex: objectClass eq
olcLastMod: TRUE
olcDbCheckpoint: 512 30
olcAccess: to attrs=userPassword by dn="cn=admin,dc=example,dc=com" write by anonymous auth by self write by * none
olcAccess: to * by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" manage by dn="cn=admin,cn=config" manage
olcAccess: to attrs=shadowLastChange by self write by * read
olcAccess: to dn.base="" by * read
olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by * read
# Create top-level object in domain
dn: dc=example,dc=com
objectClass: top
objectClass: dcObject
objectclass: organization
o: Example Organization
dc: Example
description: LDAP Example
dn: ou=people,dc=example,dc=com
objectClass: organizationalUnit
ou: people
dn: ou=groups,dc=example,dc=com
objectClass: organizationalUnit
ou: groups
# foo, groups, example.com
dn: cn=foo,ou=groups,dc=example,dc=com
cn: foo
objectClass: groupOfNames
objectClass: top
member: uid=john,ou=people,dc=example,dc=com
dn: ou=profiles,dc=example,dc=com
objectClass: organizationalUnit
ou: profiles
dn: cn=radprofile,ou=profiles,dc=example,dc=com
objectClass: radiusObjectProfile
objectClass: radiusprofile
cn: radprofile
radiusFramedIPNetmask: 255.255.255.0
dn: cn=profile1,ou=profiles,dc=example,dc=com
objectClass: radiusObjectProfile
objectClass: radiusprofile
cn: profile1
radiusReplyAttribute: Framed-IP-Netmask := 255.255.0.0
radiusReplyAttribute: Acct-Interim-Interval := 1800
radiusRequestAttribute: Service-Type := Framed-User
radiusControlAttribute: Framed-IP-Address == 1.2.3.4
radiusControlAttribute: Reply-Message == "Hello world"
dn: uid=john,ou=people,dc=example,dc=com
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: radiusprofile
uid: john
sn: Doe
givenName: John
cn: John Doe
displayName: John Doe
userPassword: {cleartext}password
uidNumber: 100
gidNumber: 100
homeDirectory: /home/john
radiusIdleTimeout: 3600
radiusAttribute: reply:Session-Timeout := 7200
radiusAttribute: control:NAS-IP-Address := 1.2.3.4
radiusProfileDN: cn=profile1,ou=profiles,dc=example,dc=com
|
