Skip to content

Commit f6e9152

Browse files
djthorpedjthorpe
committed
Updated LDAP
1 parent 273735a commit f6e9152

File tree

2 files changed

+361
-0
lines changed

2 files changed

+361
-0
lines changed

‎openldap/ldif/tree.ldif

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
# TODO
2+
# Root
3+
dn: ${LDAP_ROOT}
4+
objectClass: dcObject
5+
objectClass: organization
6+
dc: ${ DC }
7+
o: ${ O }
8+
description: Organization
9+
10+
# Groups
11+
dn: ou=groups,${LDAP_ROOT}
12+
ou: groups
13+
objectClass: top
14+
objectClass: organizationalUnit
15+
description: User groups
16+
17+
# Users
18+
dn: ou=users,${LDAP_ROOT}
19+
ou: users
20+
objectClass: top
21+
objectClass: organizationalUnit
22+
description: Users
23+
24+
# Create a test user in the people unit
25+
#dn: uid=test,ou=users,${LDAP_ROOT}
26+
#objectClass: top
27+
#objectClass: person
28+
#objectClass: posixAccount
29+
#uid: test
30+
#cn: Test User
31+
#sn: Test
32+
#uidNumber: 10001
33+
#gidNumber: 100
34+
#homeDirectory: /home/test
35+
#loginShell: /bin/bash
36+
37+
# Group example
38+
#dn: cn=staff,ou=groups,${LDAP_ROOT}
39+
#objectClass: top
40+
#objectClass: posixGroup
41+
#objectClass: groupOfMembers
42+
#cn: staff
43+
#gidNumber: 10001
44+
#description: Staff Group
45+
46+
# Add person into group
47+
#dn: cn=staff,ou=groups,${LDAP_ROOT}
48+
#changetype: modify
49+
#add: member
50+
#member: uid=test,ou=users,${LDAP_ROOT}
51+
LDIF

‎openldap/schema/rfc2307bis.schema

Lines changed: 310 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,310 @@
1+
###
2+
# Extracted from: http://tools.ietf.org/html/draft-howard-rfc2307bis-02
3+
###
4+
5+
# Builtin
6+
#attributeType ( 1.3.6.1.1.1.1.0 NAME 'uidNumber'
7+
# DESC 'An integer uniquely identifying a user in an
8+
# administrative domain'
9+
# EQUALITY integerMatch
10+
# ORDERING integerOrderingMatch
11+
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
12+
# SINGLE-VALUE )
13+
14+
# Builtin
15+
#attributeType ( 1.3.6.1.1.1.1.1 NAME 'gidNumber'
16+
# DESC 'An integer uniquely identifying a group in an
17+
# administrative domain'
18+
# EQUALITY integerMatch
19+
# ORDERING integerOrderingMatch
20+
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
21+
# SINGLE-VALUE )
22+
23+
attributeType ( 1.3.6.1.1.1.1.2 NAME 'gecos'
24+
DESC 'The GECOS field; the common name'
25+
EQUALITY caseIgnoreMatch
26+
SUBSTR caseIgnoreSubstringsMatch
27+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
28+
SINGLE-VALUE )
29+
30+
attributeType ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory'
31+
DESC 'The absolute path to the home directory'
32+
EQUALITY caseExactIA5Match
33+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
34+
SINGLE-VALUE )
35+
36+
attributeType ( 1.3.6.1.1.1.1.4 NAME 'loginShell'
37+
DESC 'The path to the login shell'
38+
EQUALITY caseExactIA5Match
39+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
40+
SINGLE-VALUE )
41+
42+
attributeType ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange'
43+
EQUALITY integerMatch
44+
ORDERING integerOrderingMatch
45+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
46+
SINGLE-VALUE )
47+
48+
attributeType ( 1.3.6.1.1.1.1.6 NAME 'shadowMin'
49+
EQUALITY integerMatch
50+
ORDERING integerOrderingMatch
51+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
52+
SINGLE-VALUE )
53+
54+
attributeType ( 1.3.6.1.1.1.1.7 NAME 'shadowMax'
55+
EQUALITY integerMatch
56+
ORDERING integerOrderingMatch
57+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
58+
SINGLE-VALUE )
59+
60+
attributeType ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning'
61+
EQUALITY integerMatch
62+
ORDERING integerOrderingMatch
63+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
64+
SINGLE-VALUE )
65+
66+
attributeType ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive'
67+
EQUALITY integerMatch
68+
ORDERING integerOrderingMatch
69+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
70+
SINGLE-VALUE )
71+
72+
attributeType ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire'
73+
EQUALITY integerMatch
74+
ORDERING integerOrderingMatch
75+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
76+
SINGLE-VALUE )
77+
78+
attributeType ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag'
79+
EQUALITY integerMatch
80+
ORDERING integerOrderingMatch
81+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
82+
SINGLE-VALUE )
83+
84+
attributeType ( 1.3.6.1.1.1.1.12 NAME 'memberUid'
85+
EQUALITY caseExactMatch
86+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
87+
88+
attributeType ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
89+
EQUALITY caseExactMatch
90+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
91+
92+
attributeType ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
93+
DESC 'Netgroup triple'
94+
EQUALITY caseIgnoreMatch
95+
SUBSTR caseIgnoreSubstringsMatch
96+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
97+
98+
attributeType ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort'
99+
DESC 'Service port number'
100+
EQUALITY integerMatch
101+
ORDERING integerOrderingMatch
102+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
103+
SINGLE-VALUE )
104+
105+
attributeType ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol'
106+
DESC 'Service protocol name'
107+
EQUALITY caseIgnoreMatch
108+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
109+
110+
attributeType ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber'
111+
DESC 'IP protocol number'
112+
EQUALITY integerMatch
113+
ORDERING integerOrderingMatch
114+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
115+
SINGLE-VALUE )
116+
117+
attributeType ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber'
118+
DESC 'ONC RPC number'
119+
EQUALITY integerMatch
120+
ORDERING integerOrderingMatch
121+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
122+
SINGLE-VALUE )
123+
124+
attributeType ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber'
125+
DESC 'IPv4 addresses as a dotted decimal omitting leading
126+
zeros or IPv6 addresses as defined in RFC2373'
127+
EQUALITY caseIgnoreIA5Match
128+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
129+
130+
attributeType ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber'
131+
DESC 'IP network omitting leading zeros, eg. 192.168'
132+
EQUALITY caseIgnoreIA5Match
133+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
134+
SINGLE-VALUE )
135+
136+
attributeType ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber'
137+
DESC 'IP netmask omitting leading zeros, eg. 255.255.255.0'
138+
EQUALITY caseIgnoreIA5Match
139+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
140+
SINGLE-VALUE )
141+
142+
attributeType ( 1.3.6.1.1.1.1.22 NAME 'macAddress'
143+
DESC 'MAC address in maximal, colon separated hex
144+
notation, eg. 00:00:92:90:ee:e2'
145+
EQUALITY caseIgnoreIA5Match
146+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
147+
148+
attributeType ( 1.3.6.1.1.1.1.23 NAME 'bootParameter'
149+
DESC 'rpc.bootparamd parameter'
150+
EQUALITY caseExactIA5Match
151+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
152+
153+
attributeType ( 1.3.6.1.1.1.1.24 NAME 'bootFile'
154+
DESC 'Boot image name'
155+
EQUALITY caseExactIA5Match
156+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
157+
158+
attributeType ( 1.3.6.1.1.1.1.26 NAME 'nisMapName'
159+
DESC 'Name of a generic NIS map'
160+
EQUALITY caseIgnoreMatch
161+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{64} )
162+
163+
attributeType ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry'
164+
DESC 'A generic NIS entry'
165+
EQUALITY caseExactMatch
166+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024}
167+
SINGLE-VALUE )
168+
169+
attributeType ( 1.3.6.1.1.1.1.28 NAME 'nisPublicKey'
170+
DESC 'NIS public key'
171+
EQUALITY octetStringMatch
172+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
173+
SINGLE-VALUE )
174+
175+
attributeType ( 1.3.6.1.1.1.1.29 NAME 'nisSecretKey'
176+
DESC 'NIS secret key'
177+
EQUALITY octetStringMatch
178+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
179+
SINGLE-VALUE )
180+
181+
attributeType ( 1.3.6.1.1.1.1.30 NAME 'nisDomain'
182+
DESC 'NIS domain'
183+
EQUALITY caseIgnoreIA5Match
184+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
185+
186+
attributeType ( 1.3.6.1.1.1.1.31 NAME 'automountMapName'
187+
DESC 'automount Map Name'
188+
EQUALITY caseExactMatch
189+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
190+
SINGLE-VALUE )
191+
192+
attributeType ( 1.3.6.1.1.1.1.32 NAME 'automountKey'
193+
DESC 'Automount Key value'
194+
EQUALITY caseExactMatch
195+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
196+
SINGLE-VALUE )
197+
198+
attributeType ( 1.3.6.1.1.1.1.33 NAME 'automountInformation'
199+
DESC 'Automount information'
200+
EQUALITY caseExactMatch
201+
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
202+
SINGLE-VALUE )
203+
204+
objectClass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' SUP top AUXILIARY
205+
DESC 'Abstraction of an account with POSIX attributes'
206+
MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory )
207+
MAY ( userPassword $ loginShell $ gecos $
208+
description ) )
209+
210+
objectClass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' SUP top AUXILIARY
211+
DESC 'Additional attributes for shadow passwords'
212+
MUST uid
213+
MAY ( userPassword $ description $
214+
shadowLastChange $ shadowMin $ shadowMax $
215+
shadowWarning $ shadowInactive $
216+
shadowExpire $ shadowFlag ) )
217+
218+
objectClass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' SUP top AUXILIARY
219+
DESC 'Abstraction of a group of accounts'
220+
MUST gidNumber
221+
MAY ( userPassword $ memberUid $
222+
description ) )
223+
224+
objectClass ( 1.3.6.1.1.1.2.3 NAME 'ipService' SUP top STRUCTURAL
225+
DESC 'Abstraction an Internet Protocol service.
226+
Maps an IP port and protocol (such as tcp or udp)
227+
to one or more names; the distinguished value of
228+
the cn attribute denotes the services canonical
229+
name'
230+
MUST ( cn $ ipServicePort $ ipServiceProtocol )
231+
MAY description )
232+
233+
objectClass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' SUP top STRUCTURAL
234+
DESC 'Abstraction of an IP protocol. Maps a protocol number
235+
to one or more names. The distinguished value of the cn
236+
attribute denotes the protocol canonical name'
237+
MUST ( cn $ ipProtocolNumber )
238+
MAY description )
239+
240+
objectClass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' SUP top STRUCTURAL
241+
DESC 'Abstraction of an Open Network Computing (ONC)
242+
[RFC1057] Remote Procedure Call (RPC) binding.
243+
This class maps an ONC RPC number to a name.
244+
The distinguished value of the cn attribute denotes
245+
the RPC service canonical name'
246+
MUST ( cn $ oncRpcNumber )
247+
MAY description )
248+
249+
objectClass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' SUP top AUXILIARY
250+
DESC 'Abstraction of a host, an IP device. The distinguished
251+
value of the cn attribute denotes the hosts canonical
252+
name. Device SHOULD be used as a structural class'
253+
MUST ( cn $ ipHostNumber )
254+
MAY ( userPassword $ l $ description $
255+
manager ) )
256+
257+
objectClass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' SUP top STRUCTURAL
258+
DESC 'Abstraction of a network. The distinguished value of
259+
the cn attribute denotes the network canonical name'
260+
MUST ipNetworkNumber
261+
MAY ( cn $ ipNetmaskNumber $ l $ description $ manager ) )
262+
263+
objectClass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL
264+
DESC 'Abstraction of a netgroup. May refer to other
265+
netgroups'
266+
MUST cn
267+
MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) )
268+
269+
objectClass ( 1.3.6.1.1.1.2.9 NAME 'nisMap' SUP top STRUCTURAL
270+
DESC 'A generic abstraction of a NIS map'
271+
MUST nisMapName
272+
MAY description )
273+
274+
objectClass ( 1.3.6.1.1.1.2.10 NAME 'nisObject' SUP top STRUCTURAL
275+
DESC 'An entry in a NIS map'
276+
MUST ( cn $ nisMapEntry $ nisMapName ) )
277+
278+
objectClass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' SUP top AUXILIARY
279+
DESC 'A device with a MAC address; device SHOULD be
280+
used as a structural class'
281+
MAY macAddress )
282+
283+
objectClass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' SUP top AUXILIARY
284+
DESC 'A device with boot parameters; device SHOULD be
285+
used as a structural class'
286+
MAY ( bootFile $ bootParameter ) )
287+
288+
objectClass ( 1.3.6.1.1.1.2.14 NAME 'nisKeyObject' SUP top AUXILIARY
289+
DESC 'An object with a public and secret key'
290+
MUST ( cn $ nisPublicKey $ nisSecretKey )
291+
MAY ( uidNumber $ description ) )
292+
293+
objectClass ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top AUXILIARY
294+
DESC 'Associates a NIS domain with a naming context'
295+
MUST nisDomain )
296+
297+
objectClass ( 1.3.6.1.1.1.2.16 NAME 'automountMap' SUP top STRUCTURAL
298+
MUST ( automountMapName )
299+
MAY description )
300+
301+
objectClass ( 1.3.6.1.1.1.2.17 NAME 'automount' SUP top STRUCTURAL
302+
DESC 'Automount information'
303+
MUST ( automountKey $ automountInformation )
304+
MAY description )
305+
306+
objectClass ( 1.3.6.1.1.1.2.18 NAME 'groupOfMembers' SUP top STRUCTURAL
307+
DESC 'A group with members (DNs)'
308+
MUST cn
309+
MAY ( businessCategory $ seeAlso $ owner $ ou $ o $
310+
description $ member ) )

0 commit comments

Comments
 (0)