1 dn: olcOverlay={0}remoteauth,olcDatabase={1}@BACKEND@,cn=config 2 objectClass: olcOverlayConfig 3 objectclass: olcRemoteAuthCfg 4 olcOverlay: {0}remoteauth 5 olcRemoteAuthRetryCount: 3 6 olcRemoteAuthTLS: starttls=critical 7 tls_cert="@TESTDIR@/tls/certs/localhost.crt" 8 tls_key="@TESTDIR@/tls/private/localhost.key" 9 tls_cacert="@TESTDIR@/tls/ca/certs/testsuiteCA.crt" 10 tls_reqcert=demand tls_reqsan=allow 11 #openssl# tls_crlcheck=none 12 olcRemoteAuthDNAttribute: seeAlso 13 olcRemoteAuthDomainAttribute: o 14 olcRemoteAuthDefaultDomain: default 15 olcRemoteAuthDefaultRealm: @SURIP3@ 16 olcRemoteAuthStore: FALSE 17 olcRemoteAuthMapping: default file://@TESTDIR@/default_domain 18 olcRemoteAuthMapping: working_ldaps @SURIP3@ 19 olcRemoteAuthMapping: failing_ldaps @SURIP2@ 20 olcRemoteAuthMapping: self @URIP1@ 21 22