openldap integration

# extended LDIF
#
# LDAPv3
# base <cn=config> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# config
dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /var/run/slapd/slapd.args
olcLogLevel: none
olcPidFile: /var/run/slapd/slapd.pid
olcToolThreads: 1

# module{0}, config
dn: cn=module{0},cn=config
objectClass: olcModuleList
cn: module{0}
olcModulePath: /usr/lib/ldap
olcModuleLoad: {0}back_hdb
olcModuleLoad: {1}back_ldap
olcModuleLoad: {2}back_bdb
olcModuleLoad: {3}rwm

# {0}hdb, config
dn: olcBackend={0}hdb,cn=config
objectClass: olcBackendConfig
olcBackend: {0}hdb

# {-1}frontend, config
dn: olcDatabase={-1}frontend,cn=config
objectClass: olcDatabaseConfig
objectClass: olcFrontendConfig
olcDatabase: {-1}frontend
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external
 ,cn=auth manage by * break
olcAccess: {1}to dn.exact="" by * read
olcAccess: {2}to dn.base="cn=Subschema" by * read
olcSizeLimit: 500

# {0}chain, {-1}frontend, config
dn: olcOverlay={0}chain,olcDatabase={-1}frontend,cn=config
objectClass: olcOverlayConfig
objectClass: olcChainConfig
olcOverlay: {0}chain
olcChainReturnError: TRUE

# {0}ldap, {0}chain, {-1}frontend, config
dn: olcDatabase={0}ldap,olcOverlay={0}chain,olcDatabase={-1}frontend,cn=config
objectClass: olcLDAPConfig
objectClass: olcChainDatabase
olcDatabase: {0}ldap
olcDbURI: ldap://test-rwdc01.ad.domain.com:389
olcDbRebindAsUser: TRUE
olcSuffix: dc=ad,dc=domain,dc=com
olcDbIDAssertBind: bindmethod=simple binddn="cn=Binder,cn=Users,dc=ad,dc=dom
 ain,dc=com" credentials="ldappass" mode=none

# {0}config, config
dn: olcDatabase={0}config,cn=config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external
 ,cn=auth manage by * break

# {1}hdb, config
dn: olcDatabase={1}hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcDbDirectory: /var/lib/ldap
olcSuffix: dc=nodomain
olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymou
 s auth by dn="cn=admin,dc=nodomain" write by * none
olcAccess: {1}to dn.base="" by * read
olcAccess: {2}to * by self write by dn="cn=admin,dc=nodomain" write by * read
olcLastMod: TRUE
olcRootDN: cn=admin,dc=nodomain
olcRootPW: {SSHA}Lwz1vCC/tBR/Nwo9pWbs2R5OfICfsfM3
olcDbCheckpoint: 512 30
olcDbConfig: {0}set_cachesize 0 2097152 0
olcDbConfig: {1}set_lk_max_objects 1500
olcDbConfig: {2}set_lk_max_locks 1500
olcDbConfig: {3}set_lk_max_lockers 1500
olcDbIndex: objectClass eq

# {2}ldap, config
dn: olcDatabase={2}ldap,cn=config
objectClass: olcLDAPConfig
olcDatabase: {2}ldap
olcSuffix: dc=ad,dc=domain,dc=com
olcSubordinate: TRUE
olcDbURI: ldap://test-rwdc01.ad.domain.com:389
olcDbIDAssertBind: bindmethod=simple binddn="cn=Bind Guy,cn=Users,dc=ad,dc=dom
 ain,dc=com" credentials="ldappass" mode=none
olcDbRebindAsUser: TRUE
olcDbChaseReferrals: TRUE

# {3}bdb, config
dn: olcDatabase={3}bdb,cn=config
objectClass: olcBdbConfig
olcDatabase: {3}bdb
olcDbDirectory: /var/lib/ldap2
olcSuffix: dc=domain,dc=com
olcAccess: {0}to attrs=userPassword by self write by anonymous auth by dn.base
 ="cn=admin,dc=domain,dc=com" write   by * none
olcAccess: {1}to *   by self write   by dn.base="cn=admin,dc=domain,dc=
 com" write   by * read
olcRootDN: cn=admin,dc=domain,dc=com
olcRootPW: testpass
olcDbIndex: uid pres,eq
olcDbIndex: cn,sn,mail pres,eq,approx,sub
olcDbIndex: objectClass eq

# search result
search: 2
result: 0 Success

# numResponses: 16
# numEntries: 15