diff --git a/conf/ldapcherry.ini b/conf/ldapcherry.ini index ebc1da7..57d2b34 100644 --- a/conf/ldapcherry.ini +++ b/conf/ldapcherry.ini @@ -67,13 +67,13 @@ roles.file = '/etc/ldapcherry/roles.yml' [backends] ldap.module = 'ldapcherry.backend.backendLdap' -ldap.groupdn = 'ou=groups,dc=example,dc=com' -ldap.userdn = 'ou=people,dc=example,dc=com' -ldap.binddn = 'cn=ldapcherry,dc=example,dc=com' +ldap.groupdn = 'ou=groups,dc=example,dc=org' +ldap.userdn = 'ou=people,dc=example,dc=org' +ldap.binddn = 'cn=ldapcherry,dc=example,dc=org' ldap.password = 'password' ldap.uri = 'ldaps://ldap.ldapcherry.org' ldap.ca = '/etc/dnscherry/TEST-cacert.pem' -ldap.starttls = 'on' +ldap.starttls = 'off' ldap.checkcert = 'off' ldap.user_filter_tmpl = '(uid=%(username)s)' ldap.group_filter_tmpl = '(member=%(username)s)' diff --git a/tests/test_env/etc/ldap/content.ldif b/tests/test_env/etc/ldap/content.ldif index 98a0682..b55714b 100644 --- a/tests/test_env/etc/ldap/content.ldif +++ b/tests/test_env/etc/ldap/content.ldif @@ -10,6 +10,13 @@ cn: dnscherry description: [applicative account] userPassword: password +dn: cn=ldapcherry,dc=example,dc=org +objectClass: simpleSecurityObject +objectClass: organizationalRole +cn: ldapcherry +description: [applicative account] +userPassword: password + dn: ou=People,dc=example,dc=org ou: People objectClass: top diff --git a/tests/test_env/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif b/tests/test_env/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif index f767ece..d158577 100644 --- a/tests/test_env/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif +++ b/tests/test_env/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif @@ -8,6 +8,7 @@ olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymou s auth by dn="cn=admin,dc=example,dc=org" write by * none olcAccess: {1}to dn.base="" by * read olcAccess: {2}to * by self write by dn="cn=dnscherry,dc=example,dc=org" write by * read +olcAccess: {3}to * by self write by dn="cn=ldapcherry,dc=example,dc=org" write by * read olcLastMod: TRUE olcRootDN: cn=admin,dc=example,dc=org olcRootPW: {SSHA}Fp+rSxe5eFsj0DGITJts4DwdSDFDZG9P