| <?xml version="1.0" encoding="UTF-8"?> |
| |
| <!-- |
| Licensed to the Apache Software Foundation (ASF) under one |
| or more contributor license agreements. See the NOTICE file |
| distributed with this work for additional information |
| regarding copyright ownership. The ASF licenses this file |
| to you under the Apache License, Version 2.0 (the |
| "License"); you may not use this file except in compliance |
| with the License. You may obtain a copy of the License at |
| |
| http://www.apache.org/licenses/LICENSE-2.0 |
| |
| Unless required by applicable law or agreed to in writing, |
| software distributed under the License is distributed on an |
| "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| KIND, either express or implied. See the License for the |
| specific language governing permissions and limitations |
| under the License. |
| --> |
| |
| |
| <spring:beans xmlns="http://apacheds.org/config/1.5.7" |
| xmlns:spring="http://xbean.apache.org/schemas/spring/1.0" |
| xmlns:s="http://www.springframework.org/schema/beans"> |
| |
| <defaultDirectoryService id="directoryService" instanceId="default" |
| replicaId="1" |
| workingDirectory="example.com" |
| allowAnonymousAccess="true" |
| accessControlEnabled="false" |
| denormalizeOpAttrsEnabled="false" |
| syncPeriodMillis="15000" |
| maxPDUSize="2000000"> |
| <systemPartition> |
| <!-- use the following partitionConfiguration to override defaults for --> |
| <!-- the system partition --> |
| <jdbmPartition id="system" cacheSize="100" suffix="ou=system" optimizerEnabled="true" syncOnWrite="true"> |
| <indexedAttributes> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.1" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.2" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.3" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.4" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.5" cacheSize="10"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.6" cacheSize="10"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.7" cacheSize="10"/> |
| <jdbmIndex attributeId="ou" cacheSize="100"/> |
| <jdbmIndex attributeId="uid" cacheSize="100"/> |
| <jdbmIndex attributeId="objectClass" cacheSize="100"/> |
| </indexedAttributes> |
| </jdbmPartition> |
| </systemPartition> |
| |
| <partitions> |
| <!-- NOTE: when specifying new partitions you need not include those --> |
| <!-- attributes below with OID's which are the system indices, if left --> |
| <!-- out they will be automatically configured for you with defaults. --> |
| <jdbmPartition id="example" cacheSize="100" suffix="dc=example,dc=com" optimizerEnabled="true" |
| syncOnWrite="true"> |
| <indexedAttributes> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.1" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.2" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.3" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.4" cacheSize="100"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.5" cacheSize="10"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.6" cacheSize="10"/> |
| <jdbmIndex attributeId="1.3.6.1.4.1.18060.0.4.1.2.7" cacheSize="10"/> |
| <jdbmIndex attributeId="dc" cacheSize="100"/> |
| <jdbmIndex attributeId="ou" cacheSize="100"/> |
| <jdbmIndex attributeId="krb5PrincipalName" cacheSize="100"/> |
| <jdbmIndex attributeId="uid" cacheSize="100"/> |
| <jdbmIndex attributeId="objectClass" cacheSize="100"/> |
| </indexedAttributes> |
| </jdbmPartition> |
| </partitions> |
| |
| <interceptors> |
| <normalizationInterceptor/> |
| <authenticationInterceptor/> |
| <referralInterceptor/> |
| <aciAuthorizationInterceptor/> |
| <defaultAuthorizationInterceptor/> |
| <exceptionInterceptor/> |
| <operationalAttributeInterceptor/> |
| <!-- |
| <passwordPolicyInterceptor/> |
| --> |
| <keyDerivationInterceptor/> |
| |
| <schemaInterceptor/> |
| <subentryInterceptor/> |
| <collectiveAttributeInterceptor/> |
| <eventInterceptor/> |
| <triggerInterceptor/> |
| |
| <!-- Uncomment to enable replication interceptor |
| <replicationInterceptor> |
| <configuration> |
| <replicationConfiguration serverPort="10390" peerReplicas="instance_b@localhost:10392"> |
| <replicaId> |
| <replicaId id="instance_a"/> |
| </replicaId> |
| </replicationConfiguration> |
| </configuration> |
| </replicationInterceptor> |
| --> |
| </interceptors> |
| |
| <!-- Uncomment to enable replication configuration --> |
| <!--replicationConfiguration> |
| <providers> |
| <provider id="1 type="refreshAndPersist" timeLimit="1000" sizeLimit="1000"> |
| <url> |
| ldap://ldap1.acme.com:10389/ou=data,dc=acme,dc=com?*, +?sub?(objectClass=*) |
| </url> |
| <connection bindMethod="simple"> |
| <principal> |
| uid=admin,ou=system |
| </principal> |
| <credentials>secret</credentials> |
| </bind> |
| </provider> |
| <provider id="2 type="refreshAndPersist" timeLimit="1000" sizeLimit="1000"> |
| <url> |
| ldaps://ldap2.acme.com:10389/ou=data,dc=acme,dc=com?*, +?sub?(objectClass=*) |
| </url> |
| <connection bindMethod="simple"> |
| <principal> |
| uid=admin,ou=system |
| </principal> |
| <credentials>secret</credentials> |
| </bind> |
| </provider> |
| </providers> |
| </replicationConfiguration--> |
| |
| </defaultDirectoryService> |
| |
| |
| <!-- |
| +============================================================+ |
| | ChangePassword server configuration | |
| +============================================================+ |
| --> |
| <!-- missing atou=users,dc=example,dc=com |
| <changePasswordServer id="changePasswordServer"> |
| <transports> |
| <tcpTransport port="60464" nbThreads="2" backLog="50"/> |
| <udpTransport port="60464" nbThreads="2" backLog="50"/> |
| </transports> |
| <directoryService>#directoryService</directoryService> |
| </changePasswordServer> |
| --> |
| |
| <!-- |
| +============================================================+ |
| | Kerberos server configuration | |
| +============================================================+ |
| --> |
| |
| <kdcServer id="kdcServer" searchBaseDn="ou=Users,dc=example,dc=com"> |
| <transports> |
| <tcpTransport port="60088" nbThreads="4" backLog="50"/> |
| <udpTransport port="60088" nbThreads="4" backLog="50"/> |
| </transports> |
| <directoryService>#directoryService</directoryService> |
| </kdcServer> |
| |
| |
| <!-- |
| +============================================================+ |
| | NtpServer configuration | |
| +============================================================+ |
| --> |
| <!--ntpServer> |
| <transports> |
| <tcpTransport port="60123"/> |
| <udpTransport port="60123" nbThreads="1"/> |
| </transports> |
| </ntpServer--> |
| |
| <!-- |
| +============================================================+ |
| | DnsServer configuration | |
| +============================================================+ |
| --> |
| <!-- missing atou=users,dc=example,dc=com |
| <dnsServer> |
| <transports> |
| <tcpTransport port="8053"/> |
| <udpTransport port="8053"/> |
| </transports> |
| <directoryService>#directoryService</directoryService> |
| </dnsServer> |
| --> |
| |
| <!-- |
| +============================================================+ |
| | LDAP Service configuration | |
| +============================================================+ |
| --> |
| |
| <ldapServer id="ldapServer" |
| allowAnonymousAccess="false" |
| saslHost="localhost" |
| saslPrincipal="ldap/localhost@EXAMPLE.COM" |
| searchBaseDn="ou=users,dc=example,dc=com" |
| maxTimeLimit="15000" |
| maxSizeLimit="1000"> |
| <transports> |
| <tcpTransport address="0.0.0.0" port="10389" nbThreads="8" backLog="50" enableSSL="false"/> |
| <tcpTransport address="localhost" port="10636" enableSSL="true"/> |
| </transports> |
| |
| <directoryService>#directoryService</directoryService> |
| |
| <!-- The list of supported authentication mechanisms. --> |
| <saslMechanismHandlers> |
| <simpleMechanismHandler mech-name="SIMPLE"/> |
| <cramMd5MechanismHandler mech-name="CRAM-MD5" /> |
| <digestMd5MechanismHandler mech-name="DIGEST-MD5" /> |
| <gssapiMechanismHandler mech-name="GSSAPI" /> |
| <ntlmMechanismHandler mech-name="NTLM" ntlmProviderFqcn="com.foo.Bar"/> |
| <ntlmMechanismHandler mech-name="GSS-SPNEGO" ntlmProviderFqcn="com.foo.Bar"/> |
| </saslMechanismHandlers> |
| |
| <!-- The realms serviced by this SASL host, used by DIGEST-MD5 and GSSAPI. --> |
| <saslRealms> |
| <s:value>example.com</s:value> |
| <s:value>apache.org</s:value> |
| </saslRealms> |
| |
| <!-- the collection of extended operation handlers to install --> |
| <extendedOperationHandlers> |
| <startTlsHandler/> |
| <gracefulShutdownHandler/> |
| <launchDiagnosticUiHandler/> |
| <!-- The Stored Procedure Extended Operation is not stable yet and it may cause security risks.--> |
| <!--storedProcedureExtendedOperationHandler/--> |
| </extendedOperationHandlers> |
| </ldapServer> |
| |
| <apacheDS id="apacheDS" ldifDirectory="ldif"> |
| <ldapServer>#ldapServer</ldapServer> |
| </apacheDS> |
| |
| <!-- uncomment the below line to start the jetty(v6.1.14) http server |
| This can be used to provide access to the data present in DIT via http |
| using a web application |
| --> |
| <!-- |
| <httpServer id="httpServer" port="7009" > |
| <webApps> |
| <webApp warFile="/path/to/war/file" contextPath="/myApp"/> |
| </webApps> |
| </httpServer> |
| --> |
| </spring:beans> |
