include	/usr/share/openldap/schema/core.schema
include	/usr/share/openldap/schema/cosine.schema
include	/usr/share/openldap/schema/corba.schema 
include	/usr/share/openldap/schema/inetorgperson.schema
include	/usr/share/openldap/schema/java.schema 
include	/usr/share/openldap/schema/krb5-kdc.schema
include /usr/share/openldap/schema/kerberosobject.schema
include	/usr/share/openldap/schema/misc.schema
include	/usr/share/openldap/schema/nis.schema
include	/usr/share/openldap/schema/openldap.schema 
include /usr/share/openldap/schema/autofs.schema
include /usr/share/openldap/schema/samba.schema
include /usr/share/openldap/schema/kolab.schema
include /usr/share/openldap/schema/evolutionperson.schema
include /usr/share/openldap/schema/calendar.schema
include /usr/share/openldap/schema/sudo.schema
include /usr/share/openldap/schema/dnszone.schema
include /usr/share/openldap/schema/dhcp.schema
include /usr/share/openldap/schema/phpgwaccount.schema
include /usr/share/openldap/schema/phpgwcontact.schema
include	/usr/share/openldap/schema/RADIUS-LDAPv3.schema
Allow	bind_v2
# Define global ACLs to disable default read access.
include 	/etc/openldap/slapd.access.conf


# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
referral	ldap://kurama.pukey

pidfile		/var/run/ldap/slapd.pid
argsfile	/var/run/ldap/slapd.args

modulepath	/usr/lib/openldap
#moduleload      back_dnssrv.la
#moduleload      back_ldap.la
#moduleload      back_meta.la
#moduleload      back_monitor.la
#moduleload      back_passwd.la
#moduleload      back_sql.la

# overlay modules available:
#moduleload     accesslog.la
#moduleload     denyop.la
#moduleload     dyngroup.la
#moduleload     dynlist.la
#moduleload     glue.la
#moduleload     lastmod.la
#moduleload     pcache.la
#moduleload     ppolicy.la
#moduleload     refint.la
#moduleload     retcode.la
#moduleload     rwm.la
moduleload     syncprov.la
#moduleload     translucent.la
#moduleload     unique.la

# SASL config
#sasl-host ldap.example.com

# To allow TLS-enabled connections, create /etc/ssl/openldap/ldap.pem
# and uncomment the following lines.
#TLSRandFile            /dev/random
#TLSCipherSuite         HIGH:MEDIUM:+SSLv2
TLSCertificateFile      /etc/ssl/openldap/ldap.pem
TLSCertificateKeyFile   /etc/ssl/openldap/ldap.pem
#TLSCACertificatePath   /etc/ssl/openldap/
#TLSCACertificateFile    /etc/ssl/cacert.pem
TLSCACertificateFile    /etc/ssl/openldap/ldap.pem
#TLSVerifyClient never # ([never]|allow|try|demand)

# logging
loglevel 256

database bdb
suffix	"dc=pukey"
rootdn	"cn=Manager,dc=pukey"
rootpw	
directory	/var/lib/ldap

index   cn,mail,surname,givenname               eq,subinitial
index objectclass,entryCSN,entryUUID eq
# nss_ldap
# usual stuff
index   uidNumber,gidNumber,memberuid   eq
# username completion needs sub:
index   uid  eq,subinitial
# nss_ldap rfc2037bis?
index   uniqueMember eq

# samba
index   sambaSID,sambaDomainName,displayName    eq

# autofs
index   nisMapName eq

# For bind sdb_ldap
index   zoneName,relativeDomainName eq

# sudo
index   sudoUser eq
overlay syncprov
	syncprov-checkpoint 100 10
	syncprov-sessionlog 100