slapd.conf

include		schema/core.schema
include		schema/cosine.schema
include		schema/inetorgperson.schema
include		schema/misc.schema
include		schema/openldap.schema
include		schema/nis.schema
include		schema/oidc-schema.schema

pidfile		slapd.pid
argsfile	slapd.args

# Load dynamic backend modules:
# modulepath	/usr/libexec/openldap
# moduleload	back_bdb.la
# moduleload	back_hdb.la
# moduleload	back_ldap.la

database	ldif
suffix		dc=my-domain,dc=com
rootdn		uid=root,dc=my-domain,dc=com
#               secret
rootpw		{SSHA}onFTP6X7P03o00dzgb43svQvQ9mRGT2I
directory	data
##index	objectClass	eq

# Allow users to change their own password
# Allow anonymous to authenciate against the password
# Allow admin to change anyone's password
access to attrs=userPassword
   by self write
   by anonymous auth
   by dn.base="uid=root,dc=my-domain,dc=com" write
   by dn.base="uid=bind,dc=my-domain,dc=com" write
   by * none

access to *
   by self write
   by dn.base="uid=root,dc=my-domain,dc=com" write
   by dn.base="uid=bind,dc=my-domain,dc=com" write
   by * read