debug = true
[ldap]
  enabled = true
  listen = "0.0.0.0:3893"

[ldaps]
  enabled = true
  listen = "0.0.0.0:3894"
  cert = "tests/assets/glauth.crt"
  key = "tests/assets/glauth.key"



[backend]
  datastore = "config"
  baseDN = "dc=example,dc=com"
  nameformat = "cn"
  groupformat = "ou"

# to create a passSHA256:   echo -n "mysecret" | openssl dgst -sha256

[[users]]
  name = "test1"
  givenname="Test 1"
  sn="User"
  mail = "test1@example.com"
  uidnumber = 1001
  primarygroup = 1000
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password

[[users]]
  name = "test2"
  givenname="Test 2"
  sn="User"
  mail = "test2@example.com"
  uidnumber = 1002
  primarygroup = 1000
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password

[[users]]
  name = "test3"
  givenname="Test 3"
  sn="User"
  mail = "test3@example.com"
  uidnumber = 1003
  primarygroup = 1000
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password


[[users]]
  name = "serviceuser"
  mail = "serviceuser@example.com"
  uidnumber = 1111
  primarygroup = 1001
  passsha256 = "5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8" # password
    [[users.capabilities]]
    action = "search"
    object = "*"

[[groups]]
  name = "testgroup"
  gidnumber = 1000

[[groups]]
  name = "svcaccts"
  gidnumber = 1001