view mod_lib_ldap/dev/slapd.conf @ 5617:d8622797e315

mod_http_oauth2: Shorten default token validity periods With refresh tokens, short lifetime for access tokens is not a problem. The arbitrary choice of one hour seems reasonable. RFC 6749 has it as example value. One week for refresh tokens matching the default archive retention period. This means that a client that remains unused for one week will have to sign in again. An actively used client will continually push that forward with each used refresh token.
author Kim Alvefur <zash@zash.se>
date Mon, 24 Jul 2023 01:30:14 +0200
parents 1f45cef9e5c7
children
line wrap: on
line source

include		/etc/openldap/schema/core.schema
# I needed the following two schema definitions for posixGroup; if you don't
# need it, don't include them
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
# needed for inetOrgPerson so I can test jpegPhoto
include         /etc/openldap/schema/inetorgperson.schema

pidfile		/var/run/openldap/slapd.pid
argsfile	/var/run/openldap/slapd.args
database	bdb
suffix		"dc=example,dc=com"
rootdn		"cn=Manager,dc=example,dc=com"
rootpw		prosody
directory	/var/lib/openldap/openldap-data
index	objectClass	eq