dn: olcDatabase={2}hdb,cn=config
changetype: modify

dn: olcDatabase={2}hdb,cn=config
replace: olcSuffix
olcSuffix: dc=ldap,dc=s,dc=tremoureux,dc=fr

dn: olcDatabase={2}hdb,cn=config
replace: olcRootDN
olcRootDN: cn=admin,dc=ldap,dc=s,dc=tremoureux,dc=fr

dn: olcDatabase={1}monitor,cn=config
replace: olcAccess
olcAccess: {0}to attrs=userPassword
  by dn.base="cn=dovecot,dc=ldap,dc=s,dc=tremoureux,dc=fr" read
  by dn.base="cn=admin,dc=ldap,dc=s,dc=tremoureux,dc=fr" write 
  by anonymous auth
  by self write
  by * none
olcAccess: {1}to dn.sub="ou=users,dc=ldap,dc=s,dc=tremoureux,dc=fr" 
  by dn.base="cn=dovecot,dc=ldap,dc=s,dc=tremoureux,dc=fr" read 
  by dn.base="cn=postfix,dc=ldap,dc=s,dc=tremoureux,dc=fr" read 
  by dn.base="cn=prosody,dc=ldap,dc=s,dc=tremoureux,dc=fr" read 
  by anonymous auth 
  by self write 
  by * none
olcAccess: {2}to * 
  by self write 
  by dn.base="cn=admin,dc=ldap,dc=s,dc=tremoureux,dc=fr" write

dn: olcDatabase={2}hdb,cn=config
replace: olcDbIndex
olcDbIndex: mail,objectClass eq

dn: cn=config
replace: olcTLSCertificateFile
olcTLSCertificateFile: /srv/certs/ldap.crt

dn: cn=config
replace: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: /srv/certs/ldap.key

dn: cn=config
replace: olcTLSCACertificateFile
olcTLSCACertificateFile: /srv/certs/ldap.pem