&def_service(ldapadmin, ldapadmin, tcp, 9000); &allow_service_for(ldapadmin, web); &allow_service_for(ldap, ldapadmin);