security-and-privacy/ldapcherry
security-and-privacy/ldapcherry
1
0
Fork 0
mirror of https://github.com/kakwa/ldapcherry synced 2024-11-22 17:34:21 +01:00
Code Releases Activity

better default configuration and content in test ldap

Browse Source
This commit is contained in:
kakwa 2015-06-02 08:18:05 +02:00
parent fa967431f5
commit af0ac631cb
3 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
conf/ldapcherry.ini
View File

@ -67,13 +67,13 @@ roles.file = '/etc/ldapcherry/roles.yml'
[backends] [backends]
ldap.module = 'ldapcherry.backend.backendLdap' ldap.module = 'ldapcherry.backend.backendLdap'
ldap.groupdn = 'ou=groups,dc=example,dc=com' ldap.groupdn = 'ou=groups,dc=example,dc=org'
ldap.userdn = 'ou=people,dc=example,dc=com' ldap.userdn = 'ou=people,dc=example,dc=org'
ldap.binddn = 'cn=ldapcherry,dc=example,dc=com' ldap.binddn = 'cn=ldapcherry,dc=example,dc=org'
ldap.password = 'password' ldap.password = 'password'
ldap.uri = 'ldaps://ldap.ldapcherry.org' ldap.uri = 'ldaps://ldap.ldapcherry.org'
ldap.ca = '/etc/dnscherry/TEST-cacert.pem' ldap.ca = '/etc/dnscherry/TEST-cacert.pem'
ldap.starttls = 'on' ldap.starttls = 'off'
ldap.checkcert = 'off' ldap.checkcert = 'off'
ldap.user_filter_tmpl = '(uid=%(username)s)' ldap.user_filter_tmpl = '(uid=%(username)s)'
ldap.group_filter_tmpl = '(member=%(username)s)' ldap.group_filter_tmpl = '(member=%(username)s)'

7
tests/test_env/etc/ldap/content.ldif
View File

@ -10,6 +10,13 @@ cn: dnscherry
description: [applicative account] description: [applicative account]
userPassword: password userPassword: password
dn: cn=ldapcherry,dc=example,dc=org
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: ldapcherry
description: [applicative account]
userPassword: password
dn: ou=People,dc=example,dc=org dn: ou=People,dc=example,dc=org
ou: People ou: People
objectClass: top objectClass: top

1
tests/test_env/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif
View File

@ -8,6 +8,7 @@ olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymou
s auth by dn="cn=admin,dc=example,dc=org" write by * none s auth by dn="cn=admin,dc=example,dc=org" write by * none
olcAccess: {1}to dn.base="" by * read olcAccess: {1}to dn.base="" by * read
olcAccess: {2}to * by self write by dn="cn=dnscherry,dc=example,dc=org" write by * read olcAccess: {2}to * by self write by dn="cn=dnscherry,dc=example,dc=org" write by * read
olcAccess: {3}to * by self write by dn="cn=ldapcherry,dc=example,dc=org" write by * read
olcLastMod: TRUE olcLastMod: TRUE
olcRootDN: cn=admin,dc=example,dc=org olcRootDN: cn=admin,dc=example,dc=org
olcRootPW: {SSHA}Fp+rSxe5eFsj0DGITJts4DwdSDFDZG9P olcRootPW: {SSHA}Fp+rSxe5eFsj0DGITJts4DwdSDFDZG9P