mirror of
https://github.com/iredmail/iRedMail
synced 2026-06-08 14:51:59 +00:00
Zhang Huangbin
59 lines
1.4 KiB
Plaintext
59 lines
1.4 KiB
Plaintext
schema "/etc/ldap/core.schema"
|
|
schema "/etc/ldap/inetorgperson.schema"
|
|
schema "/etc/ldap/nis.schema"
|
|
schema "/etc/ldap/amavisd.schema"
|
|
schema "/etc/ldap/iredmail.schema"
|
|
|
|
listen on lo0 secure
|
|
#listen on 127.0.0.1 secure
|
|
listen on "/var/run/ldapi"
|
|
|
|
namespace "PH_LDAP_SUFFIX" {
|
|
rootdn "PH_LDAP_ROOTDN"
|
|
rootpw "PH_LDAP_ROOTPW"
|
|
|
|
index objectClass
|
|
index accountStatus
|
|
|
|
index sn
|
|
index givenName
|
|
index cn
|
|
index mail
|
|
index uid
|
|
index shadowLastChange
|
|
index userSenderBccAddress
|
|
index userRecipientBccAddress
|
|
|
|
index domainName
|
|
index domainAliasName
|
|
index domainPendingAliasName
|
|
index domainAdmin
|
|
index domainGlobalAdmin
|
|
index domainBackupMX
|
|
index domainSenderBccAddress
|
|
index domainRecipientBccAddress
|
|
index domainStatus
|
|
|
|
index accessPolicy
|
|
index memberOfGroup
|
|
index member
|
|
index uniqueMember
|
|
index mailingListID
|
|
|
|
#
|
|
# Access policies
|
|
#
|
|
# Deny by default.
|
|
deny read,write access to subtree root by any
|
|
|
|
# Allow bind/read/write by self
|
|
allow read,write access to subtree root by self
|
|
|
|
# Read all mail accounts
|
|
allow read access to subtree "PH_LDAP_BASEDN" by "PH_LDAP_BINDDN"
|
|
|
|
# Allow to manage (read+write) mail accounts
|
|
allow read,write access to subtree "PH_LDAP_BASEDN" by "PH_LDAP_ADMIN_DN"
|
|
allow read,write access to subtree "PH_LDAP_ADMIN_BASEDN" by "PH_LDAP_ADMIN_DN"
|
|
}
|