--- config.inc.php.sample       2021-04-20 21:37:47.000000000 +0200
+++ config.inc.php      2021-05-02 15:45:15.259561000 +0200
@@ -34,14 +34,14 @@
 $debug = false;

 # LDAP
-$ldap_url = "ldap://localhost";
+$ldap_url = "ldap://127.0.0.1";
 $ldap_starttls = false;
-$ldap_binddn = "cn=manager,dc=example,dc=com";
-$ldap_bindpw = 'secret';
-$ldap_base = "dc=example,dc=com";
+$ldap_binddn = "uid=ssp,ou=admins,dc=domena,dc=tld";
+$ldap_bindpw = '_haslo_specjalnego_administratora__';
+$ldap_base = "dc=domena,dc=tld";
 $ldap_login_attribute = "uid";
-$ldap_fullname_attribute = "cn";
-$ldap_filter = "(&(objectClass=person)($ldap_login_attribute={login}))";
+$ldap_fullname_attribute = "displayName";
+$ldap_filter = "(&(|(objectClass=simpleSecurityObject)(objectClass=person))($ldap_login_attribute={login}))";
 $ldap_use_exop_passwd = false;
 $ldap_use_ppolicy_control = false;

@@ -82,7 +82,7 @@ $shadow_options['shadow_expire_days'] = -1;
 # clear (the default)
 # auto (will check the hash of current password)
 # This option is not used with ad_mode = true
-$hash = "clear";
+$hash = "SSHA";

 # Prefix to use for salt with CRYPT
 $hash_options['crypt_salt_prefix'] = "$6$";
@@ -104,15 +104,15 @@ $client_ip_header = 'REMOTE_ADDR';
 # Local password policy
 # This is applied before directory password policy
 # Minimal length
-$pwd_min_length = 0;
+$pwd_min_length = 8;
 # Maximal length
-$pwd_max_length = 0;
+$pwd_max_length = 63;
 # Minimal lower characters
-$pwd_min_lower = 0;
+$pwd_min_lower = 1;
 # Minimal upper characters
-$pwd_min_upper = 0;
+$pwd_min_upper = 1;
 # Minimal digit characters
-$pwd_min_digit = 0;
+$pwd_min_digit = 1;
 # Minimal special characters
 $pwd_min_special = 0;
 # Definition of special characters
@@ -180,7 +180,7 @@ $notify_on_sshkey_change = false;

 ## Questions/answers
 # Use questions/answers?
-$use_questions = true;
+$use_questions = false;
 # Allow to register more than one answer?
 $multiple_answers = false;
 # Store many answers in a single string attribute
@@ -210,7 +210,7 @@ $questions_use_default = true;
 $questions_count = 1;

 # Should the user be able to select registered question(s) by entering only the login?
-$question_populate_enable = false;
+$question_populate_enable = true;

 ## Token
 # Use tokens?
@@ -232,17 +232,17 @@ $mail_attribute = "mail";
 # default = false
 $mail_address_use_ldap = false;
 # Who the email should come from
-$mail_from = "admin@example.com";
-$mail_from_name = "Self Service Password";
+$mail_from = "haslo@domena.tld";
+$mail_from_name = "Samodzielna Zmiana Hasla";
 $mail_signature = "";
 # Notify users anytime their password is changed
 $notify_on_change = false;
 # PHPMailer configuration (see https://github.com/PHPMailer/PHPMailer)
-$mail_sendmailpath = '/usr/sbin/sendmail';
+$mail_sendmailpath = '/usr/local/sbin/sendmail';
 $mail_protocol = 'smtp';
 $mail_smtp_debug = 0;
 $mail_debug_format = 'error_log';
-$mail_smtp_host = 'localhost';
+$mail_smtp_host = 'localhost.domena.tld';
 $mail_smtp_auth = false;
 $mail_smtp_user = '';
 $mail_smtp_pass = '';
@@ -259,7 +259,7 @@ $mail_priority = 3;

 ## SMS
 # Use sms
-$use_sms = true;
+$use_sms = false;
 # SMS method (mail, api)
 $sms_method = "mail";
 $sms_api_lib = "lib/smsapi.inc.php";
@@ -286,16 +286,16 @@ $max_attempts = 3;
 # Encryption, decryption keyphrase, required if $use_tokens = true and $crypt_tokens = true, or $use_sms, or $crypt_answer
 # Please change it to anything long, random and complicated, you do not have to remember it
 # Changing it will also invalidate all previous tokens and SMS codes
-$keyphrase = "secret";
+$keyphrase = "__losowe_haslo_z_apgd__";

 # Reset URL (if behind a reverse proxy)
-#$reset_url = $_SERVER['HTTP_X_FORWARDED_PROTO'] . "://" . $_SERVER['HTTP_X_FORWARDED_HOST'] . $_SERVER['SCRIPT_NAME'];
+# $reset_url = $_SERVER['HTTP_X_FORWARDED_PROTO'] . "://" . $_SERVER['HTTP_X_FORWARDED_HOST'] . $_SERVER['SCRIPT_NAME'];

 # Display help messages
 $show_help = true;

 # Default language
-$lang = "en";
+$lang = "pl";

 # List of authorized languages. If empty, all language are allowed.
 # If not empty and the user's browser language setting is not in that list, language from $lang will be used.
@@ -315,7 +315,7 @@ $display_footer = true;

 # Where to log password resets - Make sure apache has write permission
 # By default, they are logged in Apache log
-#$reset_request_log = "/var/log/self-service-password";
+$reset_request_log = "/var/cache/www/ssp/self-service-password";

 # Invalid characters in login
 # Set at least "*()&|" to prevent LDAP injection
@@ -375,8 +375,8 @@ $use_restapi = false;
 #$header_name_extra_config="SSP-Extra-Config";

 # Cache directory
-#$smarty_compile_dir = "/var/cache/self-service-password/templates_c";
-#$smarty_cache_dir = "/var/cache/self-service-password/cache";
+$smarty_compile_dir = "/var/cache/www/ssp/templates_c";
+$smarty_cache_dir = "/var/cache/www/ssp/cache";

 # Allow to override current settings with local configuration
 if (file_exists (__DIR__ . '/config.inc.local.php')) {