samba.git/source4/setup/slapd.conf, branch talloc-2.3.0

OpenLDAP provisioning tweaks

2013-09-18T19:39:51+00:00

Remove BerkeleyDB-specific setup.
Streamline cn=samba partition initialization - allow any backend type for it.
Use back-mdb instead of back-ldif for cn=samba partition

Signed-off-by: Howard Chu 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Nadezhda Ivanova 

Autobuild-User(master): Nadezhda Ivanova 
Autobuild-Date(master): Wed Sep 18 21:39:51 CEST 2013 on sn-devel-104

Use SASL/EXTERNAL over ldapi://

2013-09-18T17:47:55+00:00

The provision script will map the uid of the user running the
script to the samba-admin LDAP DN.

Signed-off-by: Howard Chu 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Nadezhda Ivanova

Fix OpenLDAP partition configs

2013-09-17T03:56:56+00:00

Update to use LMDB backend, BDB is deprecated
Update to support DomainDNSZones and ForestDNSZones partitions.

Signed-off-by: Howard Chu 
Reviewed-by: Andrew Bartlett

s4-openldap-backend Don't set 'dbnosync' on cn=config

2010-10-18T11:13:04+00:00

This isn't valid in current OpenLDAP versions.

Andrew Bartlett

s4:provision Remove moduleload for 'hdb' (wrong name).

2010-04-22T09:55:06+00:00

The backends are not normally modules anyway

s4:provision Make OpenLDAP backend more robust

2010-04-22T08:37:19+00:00

With the extra moduleload lines (which succeed if it's already
staticly linked), we now work with OpenLDAP overlays as modules.

Andrew Bartlett

s4:provison Pass nosync in for the OpenLDAP cn=config too

2010-04-22T08:37:19+00:00

s4:OpenLDAP-backend Use the new rdnval module in OpenLDAP

2010-04-22T08:37:18+00:00

This is rather than rdn_name, which tries to do the job on the client
side.  We need to leave this module in the stack for Fedora DS (and of
course the LDB backend).

Andrew Bartlett

s4:provision Rework provision-backend into provision

2009-08-16T23:50:58+00:00

This removes a *lot* of duplicated code and the cause of much
administrator frustration.  We now handle starting and stopping the
slapd (at least for the provision), and ensure that there is only one
'right' way to configure the OpenLDAP and Fedora DS backend

We now run OpenLDAP in 'cn=config' mode for online configuration.

To test what was the provision-backend code, a new --ldap-dryrun-mode
option has been added to provision.  It quits the provision just
before it would start the LDAP binaries

Andrew Bartlett

s4:provision Assume the OpenLDAP backend can find it's own modules

2009-08-12T00:01:48+00:00