############## /etc/pam.d/system.auth #####################
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      /lib/security/$ISA/pam_env.so
auth        sufficient    /lib/security/$ISA/pam_unix.so likeauth nullok
auth        sufficient    /lib/security/$ISA/pam_ldap.so use_first_pass
auth        required      /lib/security/$ISA/pam_deny.so

account     required      /lib/security/$ISA/pam_unix.so
account     sufficient    /lib/security/$ISA/pam_localuser.so
account     [default=bad success=ok user_unknown=ignore service_err=ignore system_err=ignore] /lib/security/$ISA/pam_ldap.so

password    required      /lib/security/$ISA/pam_cracklib.so retry=3 type=
password    sufficient    /lib/security/$ISA/pam_unix.so nullok use_authtok
password    sufficient    /lib/security/$ISA/pam_ldap.so use_authtok
password    required      /lib/security/$ISA/pam_deny.so

session     required      /lib/security/$ISA/pam_limits.so
session     required      /lib/security/$ISA/pam_unix.so
session     optional      /lib/security/$ISA/pam_ldap.so
############## /etc/pam.d/system.auth #####################

############## /etc/ldap.conf #####################
host localhost
base dc=example,dc=com
bindpw xxxx
binddn cn=Manager,dc=example,dc=com
#rootbinddn cn=Manager,dc=example,dc=com
ssl no
pam_filter objectclass=posixAccount
pam_login_attribute uid
pam_password md5
#tls_cacertdir /etc/openldap/cacerts
timelimit 30
bind_timelimit 30
bind_policy soft
nss_initgroups_ignoreusers root,ldap
############## /etc/ldap.conf #####################

############## /etc/openldap/sldap.conf #####################
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/samba.schema
include         /usr/local/ox/share/openxchange.schema
include         /etc/openldap/schema/lmc.schema

loglevel        4

checkpoint 128 15

allow bind_v2
pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

database        bdb
suffix          dc=example,dc=com
rootdn          cn=Manager,dc=example,dc=com
rootpw          xxxxxxx

directory       /var/lib/ldap

index objectClass eq
index cn pres,sub,eq
index sn pres,sub,eq
index uid pres,sub,eq
index mailEnabled eq,sub
index givenname eq,sub
index lnetMailAccess eq,sub
index alias eq,sub
index loginDestination eq,sub
index displayName pres,sub,eq
index uidNumber eq
index gidNumber eq
index memberUID eq
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub

#TLSCertificateFile /etc/openldap/ldapcert.pem
#TLSCertificateKeyFile /etc/openldap/ldapkey.pem
#TLSCACertificateFile /etc/openldap/cacert-ldap.pem

# Basic rules :
# * the creator of an account keeps write access
# * members of the Account Operators group can create objects
# * members of the Domain Admins group can create objects
# This prevents Account Operators from hijacking the domain
# (see also from http://www.microsoft.com/technet/prodtechnol/winntas/plan/network.mspx)

Some access setting removed 

access to *
    by self write
    by users read
    by anonymous read
############## /etc/openldap/sldap.conf #####################

############## /etc/openldap/ldap.conf #####################
BASE dc=example,dc=com
HOST localhost
ROOTBINDDN cn=Manager,dc=example,dc=com
#TLS_CACERTDIR /etc/openldap/cacerts
############## /etc/openldap/ldap.conf #####################