# This is the main ldapd configuration file. See slapd.conf(5) for more
# info on the configuration options.

# Schema and objectClass definitions
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema

# Schema check allows for forcing entries to
# match schemas for their objectClasses's
schemacheck     on

# Where the pid file is put. The init.d script
# will not stop the server if you change this.
pidfile         /var/run/slapd.pid

# List of arguments that were passed to the server
argsfile        /var/run/slapd.args

# Where to store the replica logs
replogfile	/var/lib/ldap/replog

# Read slapd.conf(5) for possible values
loglevel        0

#######################################################################
# ldbm database definitions
#######################################################################

# The backend type, ldbm, is the default standard
database        ldbm

# The base of your directory
suffix          "dc=whistle"

# Where the database file are physically stored
directory       "/var/lib/ldap"

# Indexing options
index objectClass eq

# Save the time that the entry gets modified
lastmod on

# Default is no access for all
defaultaccess none

# Access rules
access to attribute=userPassword
	by dn="cn=admin,dc=whistle" write
	by dn="cn=admin,dc=whistle" read
	by self write
	by self read
	by anonymous auth

access to attribute=loginShell
	by dn="cn=admin,dc=whistle" write
	by self write
	by * read

access to attribute=gecos
	by dn="cn=admin,dc=whistle" write
	by self write
	by * read

access to *
	by dn="cn=admin,dc=whistle" write
	by * read