| version: 1 |
| dn: ou=config |
| ou: config |
| objectclass: top |
| objectclass: organizationalUnit |
| |
| dn: ads-directoryServiceId=default,ou=config |
| objectclass: top |
| objectclass: ads-directoryService |
| ads-directoryserviceid: default |
| ads-dsreplicaid: 1 |
| ads-dssyncperiodmillis: 15000 |
| ads-dsmaxpdusize: 2000000 |
| ads-dsallowanonymousaccess: true |
| ads-dsaccesscontrolenabled: false |
| ads-dsdenormalizeopattrsenabled: false |
| ads-servers: changepasswordserver |
| ads-servers: dns |
| ads-servers: httpserver |
| ads-servers: kerberos |
| ads-servers: ldapserver |
| ads-servers: ntp |
| ads-partitions: example |
| ads-partitions: system |
| ads-interceptors: aciAuthorizationInterceptor |
| ads-interceptors: authenticationInterceptor |
| ads-interceptors: collectiveAttributeInterceptor |
| ads-interceptors: defaultAuthorizationInterceptor |
| ads-interceptors: eventInterceptor |
| ads-interceptors: exceptionInterceptor |
| ads-interceptors: keyderivationinterceptor |
| ads-interceptors: normalizationInterceptor |
| ads-interceptors: operationalAttributeInterceptor |
| ads-interceptors: passwordpolicyinterceptor |
| ads-interceptors: referralInterceptor |
| ads-interceptors: schemaInterceptor |
| ads-interceptors: subentryInterceptor |
| ads-interceptors: triggerInterceptor |
| ads-enabled: true |
| |
| dn: ou=servers,ads-directoryServiceId=default,ou=config |
| ou: servers |
| objectclass: organizationalUnit |
| objectclass: top |
| |
| dn: ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config |
| objectclass: top |
| objectclass: ads-server |
| objectclass: ads-dsBasedServer |
| objectclass: ads-kdcServer |
| ads-serverId: kerberosServer |
| description: a Kerberos server instance |
| ads-krbAllowableClockSkew: 1000 |
| ads-krbEncryptionTypes: SPNEGO |
| ads-krbEncryptionTypes: MD5 |
| ads-krbEncryptionTypes: SSHA |
| ads-krbEmptyAddressesAllowed: TRUE |
| ads-krbForwardableAllowed: TRUE |
| ads-krbPaEncTimestampRequired: TRUE |
| ads-krbPostdatedAllowed: TRUE |
| ads-krbProxiableAllowed: TRUE |
| ads-krbRenewableAllowed: TRUE |
| ads-krbKdcPrincipal: uid=admin |
| ads-krbMaximumRenewableLifetime: 100 |
| ads-krbMaximumTicketLifetime: 200 |
| ads-krbPrimaryRealm: EXAMPLE.COM |
| ads-krbBodyChecksumVerified: TRUE |
| |
| dn: ou=transports,ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config |
| ou: transports |
| objectclass: organizationalUnit |
| objectclass: top |
| |
| dn: ads-transportid=ldap1,ou=transports,ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config |
| ads-systemport: 10389 |
| ads-transportenablessl: false |
| ads-transportbacklog: 50 |
| ads-transportnbthreads: 8 |
| ads-transportaddress: 0.0.0.0 |
| ads-transportid: ldap1 |
| objectclass: ads-transport |
| objectclass: ads-tcpTransport |
| objectclass: top |
| ads-enabled: true |
| |
| dn: ads-transportid=ldaps,ou=transports,ads-serverId=kdcServer,ou=servers,ads-directoryServiceId=default,ou=config |
| ads-systemport: 10636 |
| ads-transportenablessl: true |
| ads-transportaddress: localhost |
| ads-transportid: ldaps |
| objectclass: ads-transport |
| objectclass: ads-tcpTransport |
| objectclass: top |
| ads-enabled: true |
