#------------------------------------------------------------------------------
# Modified Calculate-server 2.1.16
# File of a profile "profile/samba"
#------------------------------------------------------------------------------

include		/etc/openldap/schema/core.schema
include		/etc/openldap/schema/cosine.schema
include		/etc/openldap/schema/nis.schema
include		/etc/openldap/schema/inetorgperson.schema
include		/etc/openldap/schema/misc.schema
include		/etc/openldap/schema/samba.schema
pidfile		/var/run/openldap/slapd.pid
argsfile	/var/run/openldap/slapd.arg
loglevel	0
allow		bind_v2
modulepath	/usr/lib/openldap/openldap
access to attrs=userPassword
    by dn="cn=ldapadmin,dc=calculate" write
    by dn="ou=Samba,ou=Services,dc=calculate" write
    by dn="ou=Unix,ou=Services,dc=calculate" write
    by dn="ou=Replication,ou=LDAP,ou=Services,dc=calculate" write
    by self read
    by * auth
access to attrs=sambaLMPassword,sambaNTPassword
    by dn="cn=ldapadmin,dc=calculate" write
    by dn="ou=Samba,ou=Services,dc=calculate" write
    by dn="ou=Replication,ou=LDAP,ou=Services,dc=calculate" write
    by * none
access to dn.base="cn=proxyuser,dc=calculate"
    by dn="cn=ldapadmin,dc=calculate" write
    by dn="cn=proxyuser,dc=calculate" read
    by * none
access to dn.base="cn=ldapadmin,dc=calculate"
    by dn="cn=ldapadmin,dc=calculate" write
    by * none
access to dn.regex=".*ou=Samba,ou=Services,dc=calculate$"
    by dn="cn=ldapadmin,dc=calculate" write
    by dn="ou=Samba,ou=Services,dc=calculate" write
    by dn="ou=Unix,ou=Services,dc=calculate" write
    by dn="ou=Replication,ou=LDAP,ou=Services,dc=calculate" write
    by dn="cn=proxyuser,dc=calculate" read
    by * none
access to dn.regex=".*ou=Unix,ou=Services,dc=calculate$"
    by dn="cn=ldapadmin,dc=calculate" write
    by dn="ou=Samba,ou=Services,dc=calculate" write
    by dn="ou=Unix,ou=Services,dc=calculate" write
    by dn="ou=Replication,ou=LDAP,ou=Services,dc=calculate" write
    by dn="cn=proxyuser,dc=calculate" read
    by * none
access to dn.regex=".*ou=LDAP,ou=Services,dc=calculate$"
    by dn="cn=ldapadmin,dc=calculate" write
    by dn="ou=Replication,ou=LDAP,ou=Services,dc=calculate" read
    by dn="cn=proxyuser,dc=calculate" read
    by dn="ou=Mail,ou=Services,dc=calculate" read
    by * none
access to dn.regex=".*ou=Replication,ou=LDAP,ou=Services,dc=calculate$"
    by dn="cn=ldapadmin,dc=calculate" write
    by dn="ou=Replication,ou=LDAP,ou=Services,dc=calculate" write
    by dn="cn=proxyuser,dc=calculate" read
    by dn="ou=Mail,ou=Services,dc=calculate" read
    by * none
access to dn.regex=".*ou=([^,]+),ou=Services,dc=calculate$"
    by dn="cn=ldapadmin,dc=calculate" write
    by dn.regex="ou=$1,ou=Services,dc=calculate" write
    by * none
access to dn.regex=".*,ou=Services,dc=calculate"
    by dn="cn=ldapadmin,dc=calculate" write
    by * none
access to *
    by dn="cn=ldapadmin,dc=calculate" write
    by self write
    by * read
database	bdb
suffix		"dc=calculate"
checkpoint	1024	5
cachesize	10000
sizelimit	unlimited
directory	/var/lib/openldap-data
rootdn "cn=ldaproot,dc=calculate"
syncrepl rid=430
    provider=ldap://s-post.rictelecom.local
    type=refreshAndPersist
    retry="5 5 300 +"
    filter="(&(|(|(ou:dn:=Samba)(ou:dn:=Unix))(ou:dn:=Replication))(!(&(ou:dn:=Replication)(ou:dn:=Mail))))"
    searchbase="ou=Services,dc=calculate"
    attrs="*,+"
    schemachecking=on
    bindmethod=simple
    binddn="ou=Replication,ou=LDAP,ou=Services,dc=calculate"
    credentials=IwrwDRPsz
syncrepl rid=207
    provider=ldap://s-main.rictelecom.local
    type=refreshAndPersist
    retry="5 5 300 +"
    filter="(&(|(|(ou:dn:=Samba)(ou:dn:=Unix))(ou:dn:=Replication))(!(&(ou:dn:=Replication)(ou:dn:=Mail))))"
    searchbase="ou=Services,dc=calculate"
    attrs="*,+"
    schemachecking=on
    bindmethod=simple
    binddn="ou=Replication,ou=LDAP,ou=Services,dc=calculate"
    credentials=IwrwDRPsz
updateref ldap://s-post.rictelecom.local:389
updateref ldap://s-main.rictelecom.local:389
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
mirrormode on
serverID 551
index	objectClass	eq
index	cn		pres,sub,eq
index	sn		pres,sub,eq
index	uid		pres,sub,eq
index	uidNumber	eq
index	gidNumber	eq
index	default		sub