[861] | 1 | --- o-f.config.ldif 2008-07-05 06:24:48.000000000 -0400 |
---|
| 2 | +++ b-m.config.ldif 2008-07-05 06:25:34.000000000 -0400 |
---|
| 3 | @@ -123,7 +123,7 @@ |
---|
| 4 | passwordMaxFailure: 3 |
---|
| 5 | nsslapd-accesslog: /var/log/dirsrv/slapd-scripts/access |
---|
| 6 | nsslapd-lastmod: on |
---|
| 7 | -nsslapd-security: off |
---|
| 8 | +nsslapd-security: on |
---|
| 9 | passwordMaxAge: 8640000 |
---|
| 10 | nsslapd-auditlog-logrotationtimeunit: day |
---|
| 11 | passwordResetFailureCount: 600 |
---|
| 12 | @@ -180,7 +180,7 @@ |
---|
| 13 | nsslapd-referralmode: |
---|
| 14 | nsslapd-maxdescriptors: 1024 |
---|
| 15 | nsslapd-conntablesize: 1024 |
---|
| 16 | -nsslapd-sslclientauth: off |
---|
| 17 | +nsslapd-sslclientauth: allowed |
---|
| 18 | nsslapd-config: cn=config |
---|
| 19 | nsslapd-instancedir: |
---|
| 20 | nsslapd-schemadir: /etc/dirsrv/slapd-scripts/schema |
---|
| 21 | @@ -217,7 +217,8 @@ |
---|
| 22 | nsSSLSessionTimeout: 0 |
---|
| 23 | nsSSLClientAuth: allowed |
---|
| 24 | nsSSL2: off |
---|
| 25 | -nsSSL3: off |
---|
| 26 | +nsSSL3: on |
---|
| 27 | +nsSSL3Ciphers: +rsa_rc4_128_md5 |
---|
| 28 | nsSSLSupportedCiphers: SSL3::rc4::RC4::MD5::128 |
---|
| 29 | nsSSLSupportedCiphers: SSL3::rc4export::RC4::MD5::128 |
---|
| 30 | nsSSLSupportedCiphers: SSL3::rc2::RC2::MD5::128 |
---|
| 31 | @@ -315,6 +316,15 @@ |
---|
| 32 | objectClass: extensibleObject |
---|
| 33 | cn: uniqueid generator |
---|
| 34 | |
---|
| 35 | +# RSA, encryption, config |
---|
| 36 | +dn: cn=RSA,cn=encryption,cn=config |
---|
| 37 | +objectClass: top |
---|
| 38 | +objectClass: nsEncryptionModule |
---|
| 39 | +cn: RSA |
---|
| 40 | +nsSSLPersonalitySSL: ldap/better-mousetrap |
---|
| 41 | +nsSSLToken: internal (software) |
---|
| 42 | +nsSSLActivation: on |
---|
| 43 | + |
---|
| 44 | # options, features, config |
---|
| 45 | dn: cn=options,cn=features,cn=config |
---|
| 46 | objectClass: top |
---|
| 47 | @@ -1264,3 +1274,12 @@ |
---|
| 48 | nsslapd-pluginVendor: Fedora Project |
---|
| 49 | nsslapd-pluginDescription: Salted Secure Hashing Algorithm (SSHA512) |
---|
| 50 | |
---|
| 51 | +# mapname, mapping, sasl, config |
---|
| 52 | +dn: cn=mapname,cn=mapping,cn=sasl,cn=config |
---|
| 53 | +objectClass: top |
---|
| 54 | +objectClass: nsSaslMapping |
---|
| 55 | +cn: mapname |
---|
| 56 | +nsSaslMapRegexString: \(.*\) |
---|
| 57 | +nsSaslMapBaseDNTemplate: uid=\1,ou=People,dc=scripts,dc=mit,dc=edu |
---|
| 58 | +nsSaslMapFilterTemplate: (objectClass=posixAccount) |
---|
| 59 | + |
---|