annotate mod_lib_ldap/dev/slapd.conf @ 5424:b45d9a81b3da

mod_http_oauth2: Revert role selector, going to try something else Back out f2c7bb3af600 Allowing only a single role to be encoded into the grant takes away the possibility of having multiple roles in the grant, one of which is selected when issuing an access token. It also takes away the ability to have zero roles granted, which could be useful e.g. when you only need OIDC scopes.
author Kim Alvefur <zash@zash.se>
date Sun, 07 May 2023 19:40:57 +0200
parents 1f45cef9e5c7
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
809
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
1 include /etc/openldap/schema/core.schema
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
2 # I needed the following two schema definitions for posixGroup; if you don't
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
3 # need it, don't include them
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
4 include /etc/openldap/schema/cosine.schema
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
5 include /etc/openldap/schema/nis.schema
822
1f45cef9e5c7 Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents: 809
diff changeset
6 # needed for inetOrgPerson so I can test jpegPhoto
1f45cef9e5c7 Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents: 809
diff changeset
7 include /etc/openldap/schema/inetorgperson.schema
809
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
8
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
9 pidfile /var/run/openldap/slapd.pid
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
10 argsfile /var/run/openldap/slapd.args
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
11 database bdb
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
12 suffix "dc=example,dc=com"
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
13 rootdn "cn=Manager,dc=example,dc=com"
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
14 rootpw prosody
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
15 directory /var/lib/openldap/openldap-data
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
16 index objectClass eq