diff --git a/hosts/mail/modules/openldap.nix b/hosts/mail/modules/openldap.nix index be00dea..81e63e1 100644 --- a/hosts/mail/modules/openldap.nix +++ b/hosts/mail/modules/openldap.nix @@ -111,52 +111,6 @@ in { ]; }; - "olcDatabase={3}mdb".attrs = { - objectClass = ["olcDatabaseConfig" "olcMdbConfig"]; - - olcDatabase = "{3}mdb"; - olcDbDirectory = "/var/lib/openldap/data"; - - olcSuffix = "dc=ghetto,dc=at"; - - olcAccess = [ - '' - {0}to attrs=userPassword - by self write - by anonymous auth - by dn="cn=owncloud,ou=system,ou=users,dc=cloonar,dc=com" write - by dn="cn=authelia,ou=system,ou=users,dc=cloonar,dc=com" write - by dn.subtree="ou=system,ou=users,dc=cloonar,dc=com" read - by group.exact="cn=Administrators,ou=groups,dc=cloonar,dc=com" write - by * none - '' - '' - {1}to attrs=pgpPublicKey - by self write - by anonymous read - by dn.subtree="ou=system,ou=users,dc=cloonar,dc=com" read - by group.exact="cn=Administrators,ou=groups,dc=cloonar,dc=com" write - by * read - '' - '' - {2}to * - by dn.subtree="ou=system,ou=users,dc=cloonar,dc=com" read - by group.exact="cn=Administrators,ou=groups,dc=cloonar,dc=com" write - by * read - '' - ]; - }; - "olcOverlay=memberof,olcDatabase={3}mdb".attrs = { - objectClass = [ "olcOverlayConfig" "olcMemberOf" ]; - olcOverlay = "memberof"; - olcMemberOfRefint = "TRUE"; - }; - "olcOverlay=ppolicy,olcDatabase={3}mdb".attrs = { - objectClass = [ "olcOverlayConfig" "olcPPolicyConfig" ]; - olcOverlay = "ppolicy"; - olcPPolicyHashCleartext = "TRUE"; - }; - "olcDatabase={4}mdb".attrs = { objectClass = ["olcDatabaseConfig" "olcMdbConfig"];