I'm implementing Kerberos with OpenLDAP manually and according to the MIT Documentation, I've to set manually this ACL:
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
# Provide access to the realm container.
access to dn.subtree= "cn=EXAMPLE.COM,cn=krbcontainer,dc=example,dc=com"
by dn.exact="cn=kdc-service,dc=example,dc=com" write
by dn.exact="cn=adm-service,dc=example,dc=com" write
by * none
# Provide access to principals, if not underneath the realm container.
access to dn.subtree= "ou=users,dc=example,dc=com"
by dn.exact="cn=kdc-service,dc=example,dc=com" write
by dn.exact="cn=adm-service,dc=example,dc=com" write
by * none
access to *
by * read
According to what I read, I've to set that in slapd.conf.
I think Suse does not use slapd.conf so I'm figuring out how should I add these entries. I'm totally stucked.
Could anybody help me?
Thank you so much.