UNPKG

napi-ldap

Version:

OpenLDAP bindings for node

github.com/jjhoughton/napi-ldap

jjhoughton/napi-ldap

83 lines (69 loc) • 2.47 kB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema # Define global ACLs to disable default read access. TLSCACertificateFile certs/ca.crt TLSCertificateFile certs/server.crt TLSCertificateKeyFile certs/server.key # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap://root.openldap.org pidfile ./slapd.pid argsfile ./slapd.args # Load dynamic backend modules: #modulepath /usr/local/libexec/openldap #moduleload back_mdb # moduleload back_hdb # moduleload back_ldap timelimit 10 TLSCACertificateFile certs/ca.crt TLSCertificateFile certs/server.crt TLSCertificateKeyFile certs/server.key # Sample security restrictions # Require integrity protection (prevent hijacking) # Require 112-bit (3DES or better) encryption for updates # Require 63-bit encryption for simple bind # security ssf=1 update_ssf=112 simple_bind=64 # Sample access control policy: # Root DSE: allow anyone to read it # Subschema (sub)entry DSE: allow anyone to read it # Other DSEs: # Allow self write access # Allow authenticated users read access # Allow anonymous users to authenticate # Directives needed to implement policy: access to dn.base="" by * read access to dn.base="cn=Subschema" by * read access to * by self write by users read by anonymous read # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! idletimeout 100 ####################################################################### # BDB database definitions ####################################################################### database mdb # overlay syncprov # syncprov-checkpoint 10 10 suffix "dc=sample,dc=com" rootdn "cn=Manager,dc=sample,dc=com" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw secret # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory ./openldap-data # Indices to maintain index objectClass,cn,contextCSN eq