rabbitmq-server/deps/rabbitmq_auth_backend_ldap/example/global.ldif

# Load modules for database type
dn: cn=module,cn=config
objectclass: olcModuleList
cn: module
olcModuleLoad: back_mdb.la

# Create directory database
dn: olcDatabase=mdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcMdbConfig
olcDatabase: mdb
# Domain name (e.g. rabbitmq.com)
olcSuffix: dc=rabbitmq,dc=com
# Location on system where database is stored
olcDbDirectory: /var/lib/ldap
# Manager of the database
olcRootDN: cn=admin,dc=rabbitmq,dc=com
olcRootPW: admin
olcAccess: to attrs=userPassword
  by self write
  by anonymous auth
  by dn.base="cn=admin,dc=rabbitmq,dc=com" write
  by * none
olcAccess: to *
  by self write
  by dn.base="cn=admin,dc=rabbitmq,dc=com" write
  by * read
The simplest thing that could possibly work. You can authenticate as an LDAP user, but there are plenty of limitations. 2010-11-22 22:15:00 +08:00			`# Load modules for database type`
			`dn: cn=module,cn=config`
			`objectclass: olcModuleList`
			`cn: module`
Switch slapd backend from bdb to mdb Slapd 2.5 removed bdb, so switching to mdb Debian bookworm, to which the buildbuddy CI image was recently updated, installs slapd 2.5 2024-05-01 19:41:49 +08:00			`olcModuleLoad: back_mdb.la`
The simplest thing that could possibly work. You can authenticate as an LDAP user, but there are plenty of limitations. 2010-11-22 22:15:00 +08:00
			`# Create directory database`
Switch slapd backend from bdb to mdb Slapd 2.5 removed bdb, so switching to mdb Debian bookworm, to which the buildbuddy CI image was recently updated, installs slapd 2.5 2024-05-01 19:41:49 +08:00			`dn: olcDatabase=mdb,cn=config`
The simplest thing that could possibly work. You can authenticate as an LDAP user, but there are plenty of limitations. 2010-11-22 22:15:00 +08:00			`objectClass: olcDatabaseConfig`
Switch slapd backend from bdb to mdb Slapd 2.5 removed bdb, so switching to mdb Debian bookworm, to which the buildbuddy CI image was recently updated, installs slapd 2.5 2024-05-01 19:41:49 +08:00			`objectClass: olcMdbConfig`
			`olcDatabase: mdb`
setup openldap as part of vagrant provisioning seed openldap as part of the test run 2016-06-29 16:51:28 +08:00			`# Domain name (e.g. rabbitmq.com)`
			`olcSuffix: dc=rabbitmq,dc=com`
The simplest thing that could possibly work. You can authenticate as an LDAP user, but there are plenty of limitations. 2010-11-22 22:15:00 +08:00			`# Location on system where database is stored`
			`olcDbDirectory: /var/lib/ldap`
			`# Manager of the database`
setup openldap as part of vagrant provisioning seed openldap as part of the test run 2016-06-29 16:51:28 +08:00			`olcRootDN: cn=admin,dc=rabbitmq,dc=com`
The simplest thing that could possibly work. You can authenticate as an LDAP user, but there are plenty of limitations. 2010-11-22 22:15:00 +08:00			`olcRootPW: admin`
			`olcAccess: to attrs=userPassword`
			`by self write`
			`by anonymous auth`
setup openldap as part of vagrant provisioning seed openldap as part of the test run 2016-06-29 16:51:28 +08:00			`by dn.base="cn=admin,dc=rabbitmq,dc=com" write`
The simplest thing that could possibly work. You can authenticate as an LDAP user, but there are plenty of limitations. 2010-11-22 22:15:00 +08:00			`by * none`
			`olcAccess: to *`
			`by self write`
setup openldap as part of vagrant provisioning seed openldap as part of the test run 2016-06-29 16:51:28 +08:00			`by dn.base="cn=admin,dc=rabbitmq,dc=com" write`
The simplest thing that could possibly work. You can authenticate as an LDAP user, but there are plenty of limitations. 2010-11-22 22:15:00 +08:00			`by * read`