Annotate

mod_lib_ldap/dev/slapd.conf @ 5448:9d542e86e19a

mod_http_oauth2: Allow requesting a subset of scopes on token refresh This enables clients to request access tokens with fewer permissions than the grant they were given, reducing impact of token leak. Clients could e.g. request access tokens with some privileges and immediately revoke them after use, or other strategies.
author Kim Alvefur <zash@zash.se>
date Thu, 11 May 2023 21:40:09 +0200
parent 822:1f45cef9e5c7
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
809
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
1 include /etc/openldap/schema/core.schema
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
2 # I needed the following two schema definitions for posixGroup; if you don't
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
3 # need it, don't include them
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
4 include /etc/openldap/schema/cosine.schema
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
5 include /etc/openldap/schema/nis.schema
822
1f45cef9e5c7 Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents: 809
diff changeset
6 # needed for inetOrgPerson so I can test jpegPhoto
1f45cef9e5c7 Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents: 809
diff changeset
7 include /etc/openldap/schema/inetorgperson.schema
809
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
8
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
9 pidfile /var/run/openldap/slapd.pid
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
10 argsfile /var/run/openldap/slapd.args
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
11 database bdb
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
12 suffix "dc=example,dc=com"
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
13 rootdn "cn=Manager,dc=example,dc=com"
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
14 rootpw prosody
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
15 directory /var/lib/openldap/openldap-data
1d51c5e38faa Add LDAP plugin suite
rob@hoelz.ro
parents:
diff changeset
16 index objectClass eq