- Revert previous patch
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1725 c6295689-39f2-0310-b995-f0e70906c6a9
This commit is contained in:
parent
0e7fa43a29
commit
5c3fbbdfab
|
@ -1,94 +1,94 @@
|
|||
# Configuration file for OpenSC / scldap
|
||||
# Example configuration file
|
||||
|
||||
#ldap example {
|
||||
ldap example {
|
||||
# Hostname for LDAP server (required)
|
||||
#ldaphost = "ldap.foobar.tld";
|
||||
ldaphost = "ldap.foobar.tld";
|
||||
# Port for LDAP server
|
||||
#ldapport = 389;
|
||||
ldapport = 389;
|
||||
# Scope for ldap search
|
||||
# 0 = LDAP_SCOPE_BASE
|
||||
# 1 = LDAP_SCOPE_ONELEVEL
|
||||
# 2 = LDAP_SCOPE_SUBTREE
|
||||
#scope = 2;
|
||||
scope = 2;
|
||||
# Use the Distinguished Name to
|
||||
# bind to the LDAP directory
|
||||
#binddn = "cn=public,dc=cc,dc=foobar,dc=tld";
|
||||
binddn = "cn=public,dc=cc,dc=foobar,dc=tld";
|
||||
# Use passwd as the password for simple authentication
|
||||
#passwd = "bazfoo";
|
||||
passwd = "bazfoo";
|
||||
# Use base as the starting point for the
|
||||
# search instead of the default
|
||||
#base = "dc=foobar,dc=tld";
|
||||
base = "dc=foobar,dc=tld";
|
||||
# Search attribute(s)
|
||||
#attributes = "cert", "user";
|
||||
attributes = "cert", "user";
|
||||
# Search filter. (required)
|
||||
# formatted searches like (user=%s) are accepted
|
||||
#filter = "(identifier=foobarAuthority)";
|
||||
#}
|
||||
filter = "(identifier=foobarAuthority)";
|
||||
}
|
||||
|
||||
# Test cards
|
||||
#card "FINEID S4-1-1", "VRK-FINSIGN" {
|
||||
#ldap "auth certificate" {
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#attributes = userCertificate;
|
||||
#filter = "(uniqueIdentifier=%s)";
|
||||
#}
|
||||
#ldap crl {
|
||||
card "FINEID S4-1-1", "VRK-FINSIGN" {
|
||||
ldap "auth certificate" {
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
attributes = userCertificate;
|
||||
filter = "(uniqueIdentifier=%s)";
|
||||
}
|
||||
ldap crl {
|
||||
# unnecessary, data for crl is usually generated from
|
||||
# auth cert's crlDistributionPoints
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#}
|
||||
#ldap "ca certificate" {
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#attributes = cACertificate;
|
||||
#filter = "(objectClass=fineidCertificationAuthority)";
|
||||
#}
|
||||
#ldap "approx base" {
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#}
|
||||
#}
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
}
|
||||
ldap "ca certificate" {
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
attributes = cACertificate;
|
||||
filter = "(objectClass=fineidCertificationAuthority)";
|
||||
}
|
||||
ldap "approx base" {
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
}
|
||||
}
|
||||
|
||||
#card "FINEID S4-1", "VRK-FINSIGN" {
|
||||
#ldap "auth certificate" {
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#attributes = userCertificate;
|
||||
#filter = "(uniqueIdentifier=%s)";
|
||||
#}
|
||||
#ldap crl {
|
||||
card "FINEID S4-1", "VRK-FINSIGN" {
|
||||
ldap "auth certificate" {
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
attributes = userCertificate;
|
||||
filter = "(uniqueIdentifier=%s)";
|
||||
}
|
||||
ldap crl {
|
||||
# unnecessary, data for crl is usually generated from
|
||||
# auth cert's crlDistributionPoints
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#}
|
||||
#ldap "ca certificate" {
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#attributes = cACertificate;
|
||||
#filter = "(objectClass=fineidCertificationAuthority)";
|
||||
#}
|
||||
#ldap "approx base" {
|
||||
#ldaphost = ldap.example.com;
|
||||
#ldapport = 389;
|
||||
#scope = 2;
|
||||
#base = "dc=example,dc=com";
|
||||
#}
|
||||
##}
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
}
|
||||
ldap "ca certificate" {
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
attributes = cACertificate;
|
||||
filter = "(objectClass=fineidCertificationAuthority)";
|
||||
}
|
||||
ldap "approx base" {
|
||||
ldaphost = ldap.example.com;
|
||||
ldapport = 389;
|
||||
scope = 2;
|
||||
base = "dc=example,dc=com";
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue