diff --git a/ldap/patchs/slapd.conf.patch b/ldap/patchs/slapd.conf.patch index 8b50562..913653e 100644 --- a/ldap/patchs/slapd.conf.patch +++ b/ldap/patchs/slapd.conf.patch @@ -1,26 +1,50 @@ --- distrib/slapd.conf 2019-06-04 11:18:04.000000000 +0200 -+++ modif/slapd.conf 2020-03-24 09:10:44.724586266 +0100 -@@ -23,6 +23,7 @@ ++++ modif/slapd.conf 2021-01-12 11:06:19.496162295 +0100 +@@ -23,11 +23,19 @@ %elif %%ldap_schema == 'zephir' include /etc/ldap/schema/openldap.schema %end if +include /etc/ldap/schema/cadoles.schema - + ## Support du TLS ++%if cert_type == "manuel" ++TLSCertificateFile %%server_cert ++TLSCertificateKeyFile %%server_key ++TLSCACertificateFile %%server_pem ++%else TLSCertificateFile /etc/ldap/ssl/certs/openldap.crt -@@ -46,6 +47,7 @@ + TLSCertificateKeyFile /etc/ldap/ssl/private/openldap.key + TLSCACertificateFile /etc/ssl/certs/ca.crt ++%end if ++ + TLSVerifyClient never + TLSCipherSuite SECURE256:+SIGN-ALL:-VERS-SSL3.0:!AES-128-CBC:!3DES-CBC:!DES-CBC:!ARCFOUR-128:!ARCFOUR-40:!RC2-40:!CAMELLIA-128-CBC:!NULL + +@@ -46,6 +54,7 @@ %if %%ldap_replication == 'oui' or %%ldap_replication_client == 'oui' moduleload syncprov %end if +moduleload memberof - + # Sample security restrictions # Require integrity protection (prevent hijacking) -@@ -219,3 +221,7 @@ - %if %%ldap_replication_client == 'oui' - include /etc/ldap/replication.conf +@@ -80,6 +89,7 @@ + + # compatibilite EAD1 et appli PHP + allow bind_v2 ++allow bind_anon_dn + + database bdb + # The base of your directory +@@ -216,6 +226,10 @@ + syncprov-sessionlog 100 %end if -+ + +overlay memberof +memberof-group-oc cadolesGroup +memberof-member-ad cadolesMember ++ + %if %%ldap_replication_client == 'oui' + include /etc/ldap/replication.conf + %end if +