Change file type of LDAP schema from 'schema' to ldif

This commit is contained in:
Josué Tille 2020-05-07 00:22:53 +02:00 committed by Alexandre Aubin
parent ca20eda9ca
commit 7099750323
3 changed files with 61 additions and 53 deletions

View file

@ -2,58 +2,62 @@
## Version 0.1 ## Version 0.1
## Adrien Beudin ## Adrien Beudin
dn: cn=mailserver,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: mailserver
#
# Attributes # Attributes
attributetype ( 1.3.6.1.4.1.40328.1.20.2.1 olcAttributeTypes: ( 1.3.6.1.4.1.40328.1.20.2.1
NAME 'maildrop' NAME 'maildrop'
DESC 'Mail addresses where mails are forwarded -- ie forwards' DESC 'Mail addresses where mails are forwarded -- ie forwards'
EQUALITY caseIgnoreMatch EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512}) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512})
#
attributetype ( 1.3.6.1.4.1.40328.1.20.2.2 olcAttributeTypes: ( 1.3.6.1.4.1.40328.1.20.2.2
NAME 'mailalias' NAME 'mailalias'
DESC 'Mail addresses accepted by this account -- ie aliases' DESC 'Mail addresses accepted by this account -- ie aliases'
EQUALITY caseIgnoreMatch EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512}) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512})
#
attributetype ( 1.3.6.1.4.1.40328.1.20.2.3 olcAttributeTypes: ( 1.3.6.1.4.1.40328.1.20.2.3
NAME 'mailenable' NAME 'mailenable'
DESC 'Mail Account validity' DESC 'Mail Account validity'
EQUALITY caseIgnoreMatch EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{8}) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{8})
#
attributetype ( 1.3.6.1.4.1.40328.1.20.2.4 olcAttributeTypes: ( 1.3.6.1.4.1.40328.1.20.2.4
NAME 'mailbox' NAME 'mailbox'
DESC 'Mailbox path where mails are delivered' DESC 'Mailbox path where mails are delivered'
EQUALITY caseIgnoreMatch EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512}) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512})
#
attributetype ( 1.3.6.1.4.1.40328.1.20.2.5 olcAttributeTypes: ( 1.3.6.1.4.1.40328.1.20.2.5
NAME 'virtualdomain' NAME 'virtualdomain'
DESC 'A mail domain name' DESC 'A mail domain name'
EQUALITY caseIgnoreMatch EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512}) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512})
#
attributetype ( 1.3.6.1.4.1.40328.1.20.2.6 olcAttributeTypes: ( 1.3.6.1.4.1.40328.1.20.2.6
NAME 'virtualdomaindescription' NAME 'virtualdomaindescription'
DESC 'Virtual domain description' DESC 'Virtual domain description'
EQUALITY caseIgnoreMatch EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512}) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512})
#
attributetype ( 1.3.6.1.4.1.40328.1.20.2.7 olcAttributeTypes: ( 1.3.6.1.4.1.40328.1.20.2.7
NAME 'mailuserquota' NAME 'mailuserquota'
DESC 'Mailbox quota for a user' DESC 'Mailbox quota for a user'
EQUALITY caseIgnoreMatch EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{16} SINGLE-VALUE ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{16} SINGLE-VALUE )
#
# Mail Account Objectclass # Mail Account Objectclass
objectclass ( 1.3.6.1.4.1.40328.1.1.2.1 olcObjectClasses: ( 1.3.6.1.4.1.40328.1.1.2.1
NAME 'mailAccount' NAME 'mailAccount'
DESC 'Mail Account' DESC 'Mail Account'
SUP top SUP top
@ -65,9 +69,9 @@ objectclass ( 1.3.6.1.4.1.40328.1.1.2.1
mailalias $ maildrop $ mailenable $ mailbox $ mailuserquota mailalias $ maildrop $ mailenable $ mailbox $ mailuserquota
) )
) )
#
# Mail Domain Objectclass # Mail Domain Objectclass
objectclass ( 1.3.6.1.4.1.40328.1.1.2.2 olcObjectClasses: ( 1.3.6.1.4.1.40328.1.1.2.2
NAME 'mailDomain' NAME 'mailDomain'
DESC 'Domain mail entry' DESC 'Domain mail entry'
SUP top SUP top
@ -79,9 +83,9 @@ objectclass ( 1.3.6.1.4.1.40328.1.1.2.2
virtualdomaindescription $ mailuserquota virtualdomaindescription $ mailuserquota
) )
) )
#
# Mail Group Objectclass # Mail Group Objectclass
objectclass ( 1.3.6.1.4.1.40328.1.1.2.3 olcObjectClasses: ( 1.3.6.1.4.1.40328.1.1.2.3
NAME 'mailGroup' SUP top AUXILIARY NAME 'mailGroup' SUP top AUXILIARY
DESC 'Mail Group' DESC 'Mail Group'
MUST ( mail ) MUST ( mail )

View file

@ -1,33 +1,35 @@
#dn: cn=yunohost,cn=schema,cn=config # Yunohost schema for group and permission support
#objectClass: olcSchemaConfig
#cn: yunohost dn: cn=yunohost,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: yunohost
# ATTRIBUTES # ATTRIBUTES
# For Permission # For Permission
attributetype ( 1.3.6.1.4.1.17953.9.1.1 NAME 'permission' olcAttributeTypes: ( 1.3.6.1.4.1.17953.9.1.1 NAME 'permission'
DESC 'Yunohost permission on user and group side' DESC 'Yunohost permission on user and group side'
SUP distinguishedName ) SUP distinguishedName )
attributetype ( 1.3.6.1.4.1.17953.9.1.2 NAME 'groupPermission' olcAttributeTypes: ( 1.3.6.1.4.1.17953.9.1.2 NAME 'groupPermission'
DESC 'Yunohost permission for a group on permission side' DESC 'Yunohost permission for a group on permission side'
SUP distinguishedName ) SUP distinguishedName )
attributetype ( 1.3.6.1.4.1.17953.9.1.3 NAME 'inheritPermission' olcAttributeTypes: ( 1.3.6.1.4.1.17953.9.1.3 NAME 'inheritPermission'
DESC 'Yunohost permission for user on permission side' DESC 'Yunohost permission for user on permission side'
SUP distinguishedName ) SUP distinguishedName )
attributetype ( 1.3.6.1.4.1.17953.9.1.4 NAME 'URL' olcAttributeTypes: ( 1.3.6.1.4.1.17953.9.1.4 NAME 'URL'
DESC 'Yunohost application URL' DESC 'Yunohost application URL'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
# OBJECTCLASS # OBJECTCLASS
# For Applications # For Applications
objectclass ( 1.3.6.1.4.1.17953.9.2.1 NAME 'groupOfNamesYnh' olcObjectClasses: ( 1.3.6.1.4.1.17953.9.2.1 NAME 'groupOfNamesYnh'
DESC 'Yunohost user group' DESC 'Yunohost user group'
SUP top AUXILIARY SUP top AUXILIARY
MAY ( member $ businessCategory $ seeAlso $ owner $ ou $ o $ permission ) ) MAY ( member $ businessCategory $ seeAlso $ owner $ ou $ o $ permission ) )
objectclass ( 1.3.6.1.4.1.17953.9.2.2 NAME 'permissionYnh' olcObjectClasses: ( 1.3.6.1.4.1.17953.9.2.2 NAME 'permissionYnh'
DESC 'a Yunohost application' DESC 'a Yunohost application'
SUP top AUXILIARY SUP top AUXILIARY
MUST cn MUST cn
MAY ( groupPermission $ inheritPermission $ URL ) ) MAY ( groupPermission $ inheritPermission $ URL ) )
# For User # For User
objectclass ( 1.3.6.1.4.1.17953.9.2.3 NAME 'userPermissionYnh' olcObjectClasses: ( 1.3.6.1.4.1.17953.9.2.3 NAME 'userPermissionYnh'
DESC 'a Yunohost application' DESC 'a Yunohost application'
SUP top AUXILIARY SUP top AUXILIARY
MAY ( permission ) ) MAY ( permission ) )

View file

@ -1,76 +1,78 @@
# #
# OpenLDAP schema file for Sudo # OpenLDAP schema file for Sudo
# Save as /etc/openldap/schema/sudo.schema # Save as /etc/openldap/schema/sudo.ldif
# #
attributetype ( 1.3.6.1.4.1.15953.9.1.1 dn: cn=sudo,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: sudo
olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.1
NAME 'sudoUser' NAME 'sudoUser'
DESC 'User(s) who may run sudo' DESC 'User(s) who may run sudo'
EQUALITY caseExactIA5Match EQUALITY caseExactIA5Match
SUBSTR caseExactIA5SubstringsMatch SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.2 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.2
NAME 'sudoHost' NAME 'sudoHost'
DESC 'Host(s) who may run sudo' DESC 'Host(s) who may run sudo'
EQUALITY caseExactIA5Match EQUALITY caseExactIA5Match
SUBSTR caseExactIA5SubstringsMatch SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.3 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.3
NAME 'sudoCommand' NAME 'sudoCommand'
DESC 'Command(s) to be executed by sudo' DESC 'Command(s) to be executed by sudo'
EQUALITY caseExactIA5Match EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.4 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.4
NAME 'sudoRunAs' NAME 'sudoRunAs'
DESC 'User(s) impersonated by sudo (deprecated)' DESC 'User(s) impersonated by sudo (deprecated)'
EQUALITY caseExactIA5Match EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.5 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.5
NAME 'sudoOption' NAME 'sudoOption'
DESC 'Options(s) followed by sudo' DESC 'Options(s) followed by sudo'
EQUALITY caseExactIA5Match EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.6 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.6
NAME 'sudoRunAsUser' NAME 'sudoRunAsUser'
DESC 'User(s) impersonated by sudo' DESC 'User(s) impersonated by sudo'
EQUALITY caseExactIA5Match EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.7 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.7
NAME 'sudoRunAsGroup' NAME 'sudoRunAsGroup'
DESC 'Group(s) impersonated by sudo' DESC 'Group(s) impersonated by sudo'
EQUALITY caseExactIA5Match EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.8 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.8
NAME 'sudoNotBefore' NAME 'sudoNotBefore'
DESC 'Start of time interval for which the entry is valid' DESC 'Start of time interval for which the entry is valid'
EQUALITY generalizedTimeMatch EQUALITY generalizedTimeMatch
ORDERING generalizedTimeOrderingMatch ORDERING generalizedTimeOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
#
attributetype ( 1.3.6.1.4.1.15953.9.1.9 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.9
NAME 'sudoNotAfter' NAME 'sudoNotAfter'
DESC 'End of time interval for which the entry is valid' DESC 'End of time interval for which the entry is valid'
EQUALITY generalizedTimeMatch EQUALITY generalizedTimeMatch
ORDERING generalizedTimeOrderingMatch ORDERING generalizedTimeOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
#
attributeTypes ( 1.3.6.1.4.1.15953.9.1.10 olcAttributeTypes: ( 1.3.6.1.4.1.15953.9.1.10
NAME 'sudoOrder' NAME 'sudoOrder'
DESC 'an integer to order the sudoRole entries' DESC 'an integer to order the sudoRole entries'
EQUALITY integerMatch EQUALITY integerMatch
ORDERING integerOrderingMatch ORDERING integerOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
#
objectclass ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL olcObjectClasses: ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL
DESC 'Sudoer Entries' DESC 'Sudoer Entries'
MUST ( cn ) MUST ( cn )
MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $ sudoRunAsUser $ sudoRunAsGroup $ sudoOption $ sudoOrder $ sudoNotBefore $ sudoNotAfter $ MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $ sudoRunAsUser $ sudoRunAsGroup $ sudoOption $ sudoOrder $ sudoNotBefore $ sudoNotAfter $ description )
description )
) )