Démarrage des scripts pour le lot1
This commit is contained in:
root
parent
5a65d1fd55
commit
8e2a5b6dc5
|
|
@ -0,0 +1,23 @@
|
|||
#!/bin/sh
|
||||
# Backup all ldap databases to $1/<data-iso>/
|
||||
|
||||
set -e
|
||||
|
||||
DEST=$1
|
||||
shift
|
||||
|
||||
if [ ! -d "$DEST" ]; then
|
||||
echo First argument must be an existing directory
|
||||
exit 1
|
||||
fi
|
||||
|
||||
BACKUPDIR="$DEST/`date +%Y%m%dT%H:%M:%S`"
|
||||
mkdir -p "$BACKUPDIR"
|
||||
slapcat -n0 -l"$BACKUPDIR/config.ldif"
|
||||
for i in `seq 1 20`; do
|
||||
echo slapcat -n$i -l"$BACKUPDIR/db-$i.ldif"
|
||||
if ! slapcat -n$i -l"$BACKUPDIR/db-$i.ldif"; then
|
||||
true
|
||||
fi
|
||||
done
|
||||
find "$BACKUPDIR" -size 0 -delete
|
||||
|
|
@ -0,0 +1,42 @@
|
|||
modify cn=module{0},cn=config
|
||||
replace: olcServerId
|
||||
: 1
|
||||
add: olcModuleLoad
|
||||
: back_monitor
|
||||
: back_mdb
|
||||
: accesslog
|
||||
: unique
|
||||
: refint
|
||||
: constraint
|
||||
: syncprov
|
||||
|
||||
# *FIXME: configure olsTLSCipherSuite pour interdire SSL 3.0
|
||||
# config accesslog
|
||||
add: olcDatabase={1}mdb,cn=config
|
||||
objectClass: olcDatabaseConfig
|
||||
objectClass: olcMdbConfig
|
||||
olcSuffix: cn=config-accesslog
|
||||
olcDbDirectory: /var/lib/ldap/config-accesslog/
|
||||
# Allow reading accesslog only by root
|
||||
olcAccess: {0}to * by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read by * break
|
||||
|
||||
add: olcDatabase={1}monitor,cn=config
|
||||
objectClass: olcDatabaseConfig
|
||||
objectClass: olcMonitorConfig
|
||||
olcDatabase: {1}monitor
|
||||
# Allow reading monitoring only by root
|
||||
olcAccess: {0}to * by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read by * break
|
||||
|
||||
# Log all writes to the configuration
|
||||
add: olcOverlay={0}accesslog,olcDatabase={0}config,cn=config
|
||||
objectClass: olcAccesslogConfig
|
||||
objectClass: olcOverlayConfig
|
||||
objectClass: olcConfig
|
||||
objectClass: top
|
||||
olcOverlay: {0}accesslog
|
||||
olcAccessLogDB: cn=config-accesslog
|
||||
olcAccessLogOps: writes
|
||||
# log are conserved one year and purged every day
|
||||
olcAccessLogPurge: 365+00:00 1+00:00
|
||||
olcAccessLogOld: objectClass=olcConfig
|
||||
|
||||
|
|
@ -0,0 +1,12 @@
|
|||
#!/bin/sh
|
||||
# Do initial configuration of slapd
|
||||
|
||||
BASEDIR=`dirname $0`
|
||||
|
||||
echo Load overlay modules, configure auditlog for cn=config, create cn=monitor db
|
||||
ldapvi --profile config --ldapvi --add --ldapmodify "$BASEDIR/configure-slapd.ldif"
|
||||
|
||||
echo Load supann and eduperson schema
|
||||
ldapvi --profile config --ldapvi --add --ldapmodify "$BASEDIR/supann-2009.ldif"
|
||||
ldapvi --profile config --ldapvi --add --ldapmodify "$BASEDIR/eduperson.ldif"
|
||||
ldapvi --profile config --ldapvi --add --ldapmodify "$BASEDIR/eduorg-200210-openldap.ldif"
|
||||
|
|
@ -0,0 +1,110 @@
|
|||
|
||||
0 cn=config
|
||||
objectClass: olcGlobal
|
||||
cn: config
|
||||
olcArgsFile: /var/run/slapd/slapd.args
|
||||
olcLogLevel: none
|
||||
olcPidFile: /var/run/slapd/slapd.pid
|
||||
olcToolThreads: 1
|
||||
structuralObjectClass: olcGlobal
|
||||
entryUUID: 44277d70-eca9-1033-8f4d-c5b1bfaf8a78
|
||||
creatorsName: cn=config
|
||||
createTimestamp: 20141020133222Z
|
||||
entryCSN: 20141020133222.430994Z#000000#000#000000
|
||||
modifiersName: cn=config
|
||||
modifyTimestamp: 20141020133222Z
|
||||
entryDN: cn=config
|
||||
subschemaSubentry: cn=Subschema
|
||||
auditContext: cn=config-accesslog
|
||||
|
||||
1 cn={0}core,cn=schema,cn=config
|
||||
objectClass: olcSchemaConfig
|
||||
cn: {0}core
|
||||
olcAttributeTypes: {0}( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: knowledge information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} )
|
||||
olcAttributeTypes: {1}( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (family) name(s) for which the entity is known by' SUP name )
|
||||
olcAttributeTypes: {2}( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial number of the entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} )
|
||||
olcAttributeTypes: {3}( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256: ISO-3166 country 2-letter code' SUP name SINGLE-VALUE )
|
||||
olcAttributeTypes: {4}( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: locality which this object resides in' SUP name )
|
||||
olcAttributeTypes: {5}( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2256: state or province which this object resides in' SUP name )
|
||||
olcAttributeTypes: {6}( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC2256: street address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
|
||||
olcAttributeTypes: {7}( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC2256: organization this object belongs to' SUP name )
|
||||
olcAttributeTypes: {8}( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC 'RFC2256: organizational unit this object belongs to' SUP name )
|
||||
olcAttributeTypes: {9}( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated with the entity' SUP name )
|
||||
olcAttributeTypes: {10}( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search guide, deprecated by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 )
|
||||
olcAttributeTypes: {11}( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: business category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
|
||||
olcAttributeTypes: {12}( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
|
||||
olcAttributeTypes: {13}( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal code' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} )
|
||||
olcAttributeTypes: {14}( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post Office Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} )
|
||||
olcAttributeTypes: {15}( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RFC2256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
|
||||
olcAttributeTypes: {16}( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Telephone Number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} )
|
||||
olcAttributeTypes: {17}( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 )
|
||||
olcAttributeTypes: {18}( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC2256: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )
|
||||
olcAttributeTypes: {19}( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DESC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 )
|
||||
olcAttributeTypes: {20}( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Address' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{15} )
|
||||
olcAttributeTypes: {21}( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC2256: international ISDN number' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} )
|
||||
olcAttributeTypes: {22}( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: registered postal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
|
||||
olcAttributeTypes: {23}( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: destination indicator' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} )
|
||||
olcAttributeTypes: {24}( 2.5.4.28 NAME 'preferredDeliveryMethod' DESC 'RFC2256: preferred delivery method' SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE )
|
||||
olcAttributeTypes: {25}( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256: presentation address' EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.43 SINGLE-VALUE )
|
||||
olcAttributeTypes: {26}( 2.5.4.30 NAME 'supportedApplicationContext' DESC 'RFC2256: supported application context' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 )
|
||||
olcAttributeTypes: {27}( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a group' SUP distinguishedName )
|
||||
olcAttributeTypes: {28}( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the object)' SUP distinguishedName )
|
||||
olcAttributeTypes: {29}( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupant of role' SUP distinguishedName )
|
||||
olcAttributeTypes: {30}( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.509 user certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 )
|
||||
olcAttributeTypes: {31}( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 )
|
||||
olcAttributeTypes: {32}( 2.5.4.38 NAME 'authorityRevocationList' DESC 'RFC2256: X.509 authority revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )
|
||||
olcAttributeTypes: {33}( 2.5.4.39 NAME 'certificateRevocationList' DESC 'RFC2256: X.509 certificate revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )
|
||||
olcAttributeTypes: {34}( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256: X.509 cross certificate pair, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.10 )
|
||||
olcAttributeTypes: {35}( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256: first name(s) for which the entity is known by' SUP name )
|
||||
olcAttributeTypes: {36}( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of some or all of names, but not the surname(s).' SUP name )
|
||||
olcAttributeTypes: {37}( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256: name qualifier indicating a generation' SUP name )
|
||||
olcAttributeTypes: {38}( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256: X.500 unique identifier' EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 )
|
||||
olcAttributeTypes: {39}( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN qualifier' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 )
|
||||
olcAttributeTypes: {40}( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256: enhanced search guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 )
|
||||
olcAttributeTypes: {41}( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256: protocol information' EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.42 )
|
||||
olcAttributeTypes: {42}( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique member of a group' EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 )
|
||||
olcAttributeTypes: {43}( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC2256: house identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} )
|
||||
olcAttributeTypes: {44}( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256: supported algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 )
|
||||
olcAttributeTypes: {45}( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256: delta revocation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )
|
||||
olcAttributeTypes: {46}( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD' SUP name )
|
||||
olcAttributeTypes: {47}( 2.5.4.65 NAME 'pseudonym' DESC 'X.520(4th): pseudonym for the object' SUP name )
|
||||
olcAttributeTypes: {48}( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mailbox' ) DESC 'RFC1274: RFC822 Mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
|
||||
olcAttributeTypes: {49}( 0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domainComponent' ) DESC 'RFC1274/2247: domain component' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
|
||||
olcAttributeTypes: {50}( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain' DESC 'RFC1274: domain associated with object' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
|
||||
olcAttributeTypes: {51}( 1.2.840.113549.1.9.1 NAME ( 'email' 'emailAddress' 'pkcs9email' ) DESC 'RFC3280: legacy attribute for email addresses in DNs' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
|
||||
olcObjectClasses: {0}( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP top STRUCTURAL MUST c MAY ( searchGuide $ description ) )
|
||||
olcObjectClasses: {1}( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SUP top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ description ) )
|
||||
olcObjectClasses: {2}( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an organization' SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) )
|
||||
olcObjectClasses: {3}( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an organizational unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) )
|
||||
olcObjectClasses: {4}( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) )
|
||||
olcObjectClasses: {5}( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an organizational person' SUP person STRUCTURAL MAY ( title $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l ) )
|
||||
olcObjectClasses: {6}( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an organizational role' SUP top STRUCTURAL MUST cn MAY ( x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l $ description ) )
|
||||
olcObjectClasses: {7}( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of names (DNs)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )
|
||||
olcObjectClasses: {8}( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an residential person' SUP person STRUCTURAL MUST l MAY ( businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l ) )
|
||||
olcObjectClasses: {9}( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an application process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ description ) )
|
||||
olcObjectClasses: {10}( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an application entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY ( supportedApplicationContext $ seeAlso $ ou $ o $ l $ description ) )
|
||||
olcObjectClasses: {11}( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory system agent (a server)' SUP applicationEntity STRUCTURAL MAY knowledgeInformation )
|
||||
olcObjectClasses: {12}( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP top STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description ) )
|
||||
olcObjectClasses: {13}( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC2256: a strong authentication user' SUP top AUXILIARY MUST userCertificate )
|
||||
olcObjectClasses: {14}( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256: a certificate authority' SUP top AUXILIARY MUST ( authorityRevocationList $ certificateRevocationList $ cACertificate ) MAY crossCertificatePair )
|
||||
olcObjectClasses: {15}( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a group of unique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST ( uniqueMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )
|
||||
olcObjectClasses: {16}( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC2256: a user security information' SUP top AUXILIARY MAY ( supportedAlgorithms ) )
|
||||
olcObjectClasses: {17}( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP certificationAuthority AUXILIARY MAY ( deltaRevocationList ) )
|
||||
olcObjectClasses: {18}( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTURAL MUST ( cn ) MAY ( certificateRevocationList $ authorityRevocationList $ deltaRevocationList ) )
|
||||
olcObjectClasses: {19}( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST ( dmdName ) MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) )
|
||||
olcObjectClasses: {20}( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' SUP top AUXILIARY MAY userCertificate )
|
||||
olcObjectClasses: {21}( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate authority' SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRevocationList $ cACertificate $ crossCertificatePair ) )
|
||||
olcObjectClasses: {22}( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SUP top AUXILIARY MAY deltaRevocationList )
|
||||
olcObjectClasses: {23}( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' DESC 'RFC2079: object that contains the URI attribute type' MAY ( labeledURI ) SUP top AUXILIARY )
|
||||
olcObjectClasses: {24}( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject' DESC 'RFC1274: simple security object' SUP top AUXILIARY MUST userPassword )
|
||||
olcObjectClasses: {25}( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247: domain component object' SUP top AUXILIARY MUST dc )
|
||||
olcObjectClasses: {26}( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid object' SUP top AUXILIARY MUST uid )
|
||||
structuralObjectClass: olcSchemaConfig
|
||||
entryUUID: 442798d2-eca9-1033-8f51-c5b1bfaf8a78
|
||||
creatorsName: cn=admin,cn=config
|
||||
createTimestamp: 20141020133222Z
|
||||
entryCSN: 20141020133222.431729Z#000000#000#000000
|
||||
modifiersName: cn=admin,cn=config
|
||||
modifyTimestamp: 20141020133222Z
|
||||
entryDN: cn={0}core,cn=schema,cn=config
|
||||
subschemaSubentry: cn=Subschema
|
||||
|
|
@ -0,0 +1,157 @@
|
|||
#!/bin/sh
|
||||
|
||||
echo Give suffix
|
||||
read SUFFIX
|
||||
|
||||
if ldapsearch -H ldapi:// -Y EXTERNAL -b cn=config olcSuffix=$SUFFIX 2>/dev/null | grep -q '^result: 0'; then
|
||||
echo ERROR: $SUFFIX already exists >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo Give password
|
||||
read PASSWORD
|
||||
|
||||
echo Give organization
|
||||
read ORGANIZATION
|
||||
|
||||
DC=`echo $SUFFIX | sed 's/dc=\([^,]*\).*/\1/'`
|
||||
DBDIR=/var/lib/ldap/$SUFFIX
|
||||
DBACCESSLOGDIR=/var/lib/ldap/$SUFFIX/accesslog/
|
||||
|
||||
mkdir -p "$DBDIR" "$DBACCESSLOGDIR"
|
||||
chown openldap.openldap "$DBDIR" "$DBACCESSLOGDIR"
|
||||
|
||||
cat <<EOF >/tmp/newdb
|
||||
# LDAPVI syntax
|
||||
add olcDatabase={1}mdb,cn=config
|
||||
objectClass: olcDatabaseConfig
|
||||
objectClass: olcMdbConfig
|
||||
olcDatabase: {1}mdb
|
||||
olcSuffix: $SUFFIX
|
||||
olcDbDirectory: /var/lib/ldap/$SUFFIX/
|
||||
olcRootDN: uid=admin,ou=people,$SUFFIX
|
||||
olcRootPW: $PASSWORD
|
||||
olcLastMod: TRUE
|
||||
olcAddContentACL: FALSE
|
||||
olcMonitoring: TRUE
|
||||
olcSyncUseSubentry: FALSE
|
||||
olcMaxDerefDepth: 0
|
||||
olcLimits: {0}dn.exact="uid=admin,ou=people,$SUFFIX" size.soft=unlimited size.hard=unlimited time.soft=unlimited time.hard=unlimited
|
||||
olcLimits: {1}dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" size.soft=unlimited size.hard=unlimited time.soft=unlimited time.hard=unlimited
|
||||
olcReadOnly: FALSE
|
||||
olcAccess: {0}to *
|
||||
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
|
||||
by group=cn=admin,ou=groupes,$SUFFIX manage
|
||||
by * break
|
||||
# *FIXME apply more thinking to ACLs*
|
||||
|
||||
# Create accesslog DIT
|
||||
add olcDatabase={1}mdb,cn=config
|
||||
objectClass: olcDatabaseConfig
|
||||
objectClass: olcMdbConfig
|
||||
olcSuffix: cn=accesslog,$SUFFIX
|
||||
olcDbDirectory: /var/lib/ldap/$SUFFIX/accesslog/
|
||||
olcAccess: {0}to *
|
||||
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
|
||||
by group=cn=admin,ou=groupes,$SUFFIX manage
|
||||
by * break
|
||||
|
||||
add olcOverlay={0}syncprov,olcDatabase={1}mdb,cn=config
|
||||
objectClass: olcOverlayConfig
|
||||
objectClass: olcSyncProvConfig
|
||||
olcOverlay: {0}syncprov
|
||||
olcSpCheckpoint: 100 10
|
||||
olcSpSessionlog: 100
|
||||
|
||||
# Log all writes to the db
|
||||
add olcOverlay={1}accesslog,olcDatabase={2}mdb,cn=config
|
||||
objectClass: olcAccesslogConfig
|
||||
objectClass: olcOverlayConfig
|
||||
objectClass: olcConfig
|
||||
objectClass: top
|
||||
olcOverlay: {1}accesslog
|
||||
olcAccessLogDB: cn=accesslog,$SUFFIX
|
||||
olcAccessLogOps: writes
|
||||
# log are conserved one year and purged every day
|
||||
olcAccessLogPurge: 365+00:00 1+00:00
|
||||
# Keep a copy of everything
|
||||
olcAccessLogOld: objectClass=*
|
||||
|
||||
add olcOverlay={2}refint,olcDatabase={2}mdb,cn=config
|
||||
objectClass: olcOverlayConfig
|
||||
objectClass: olcRefintConfig
|
||||
olcOverlay: {2}refint
|
||||
olcRefintAttribute: member
|
||||
eduPersonOrgDN
|
||||
eduPersonOrgUnitDN
|
||||
owner
|
||||
eduPersonPrimaryOrgUnitDN
|
||||
supannGroupeAdminDN
|
||||
supannGroupeLecteurDN
|
||||
supannParrainDN
|
||||
olcRefintNothing: $SUFFIX
|
||||
|
||||
add olcOverlay={3}constraint,olcDatabase={2}mdb,cn=config
|
||||
objectClass: olcOverlayConfig
|
||||
objectClass: olcConstraintConfig
|
||||
olcOverlay: {3}constraint
|
||||
# un seul cn pour les utilisateurs
|
||||
olcConstraintAttribute: cn count 1 restrict="ldap:///ou=people,$SUFFIX??sub?(objectClass=*)"
|
||||
#olcConstraintAttribute: cn regex "^[-A-Z' ]*$" restrict="ldap:///ou=people,$SUFFIX??sub?(objectClass=*)"
|
||||
olcConstraintAttribute: cn regex "^[-A-Za-z0-9 ]*$" restrict="ldap:///ou=groups,$SUFFIX??sub?(objectClass=*)"
|
||||
olcConstraintAttribute: cn regex "^[-A-Za-z0-9 ]*$" restrict="ldap:///$SUFFIX??base?(objectClass=*)"
|
||||
olcConstraintAttribute: dc regex "^[a-z0-9-]*$"
|
||||
olcConstraintAttribute: displayName,sn,givenName set "(this/givenName + [ ] + this/sn) & this/displayName" restrict="ldap:///ou=people,$SUFFIX??sub?(objectClass=*)"
|
||||
olcConstraintAttribute: eduOrgHomePageURI,eduOrgSuperiorURI,eduOrgWhitePagesURI regex "^https?://.*$"
|
||||
olcConstraintAttribute: eduPersonAffiliation regex "^(student|faculty|staff|employee|member|affiliate|alum|library-walk-in|researcher|retired|emeritus|teacher|registered-reader)$"
|
||||
olcConstraintAttribute: eduPersonPrincipalName regex "^.*@.*$"
|
||||
olcConstraintAttribute: mail count 1
|
||||
olcConstraintAttribute: mail,supannMailPerso,supannAutreMail
|
||||
regex "^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,4}$"
|
||||
# olcConstraintAttribute: mailForwardingAddress
|
||||
regex "^([A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,4}|[a-z0-9]+)$" # mail ou uid
|
||||
olcConstraintAttribute: supannAliasLogin regex "^[[:alnum:]]+$"
|
||||
olcConstraintAttribute: supannCodeEntiteParent,supannEntiteAffectation uri ldap:///ou=structures,$SUFFIX?supannCodeEntite?sub?(objectClass=supannEntite)
|
||||
olcConstraintAttribute: supannCivilite regex "^(M.|Mme|Mlle)$"
|
||||
olcConstraintAttribute: supannCodeINE count 1
|
||||
olcConstraintAttribute: supannEmpId count 1
|
||||
olcConstraintAttribute: supannListeRouge regex "^(VRAI|FAUX)$"
|
||||
olcConstraintAttribute: supannTypeEntite,supannEtuCursusAnnee regex "^\{SUPANN\}[A-Z][0-9]+$"
|
||||
# attribut issu d'une nomenclature
|
||||
olcConstraintAttribute: supannEtablissement,
|
||||
supannEtuDiplome,
|
||||
supannEtuElementPedagogique,
|
||||
supannEtuEtape,
|
||||
supannEtuRegimeInscription,
|
||||
supannEtuSecteurDisciplinaire,
|
||||
supannEtuTypeDiplome,
|
||||
regex "^\{[^}]+\}.*$"
|
||||
olcConstraintAttribute: supannEtuAnneeInscription regex "^[0-9][0-9][0-9][0-9]$"
|
||||
|
||||
add olcOverlay={4}unique,olcDatabase={2}mdb,cn=config
|
||||
objectClass: olcOverlayConfig
|
||||
objectClass: olcUniqueConfig
|
||||
olcOverlay: {4}unique
|
||||
olcUniqueURI: ldap://?supannAutreMail?sub
|
||||
|
||||
add $SUFFIX
|
||||
objectClass: organization
|
||||
objectClass: dcObject
|
||||
objectClass: eduOrg
|
||||
objectClass: supannOrg
|
||||
dc: $DC
|
||||
o: $ORGANIZATION
|
||||
|
||||
add ou=people,$SUFFIX
|
||||
objectClass: organizationalUnit
|
||||
ou: people
|
||||
|
||||
add ou=groups,$SUFFIX
|
||||
objectClass: organizationalUnit
|
||||
ou: groups
|
||||
|
||||
add ou=structures,$SUFFIX
|
||||
objectClass: organizationalUnit
|
||||
ou: structures
|
||||
EOF
|
||||
ldapvi --profile config --ldapmodify --ldapvi --add /tmp/newdb
|
||||
|
|
@ -0,0 +1,21 @@
|
|||
add cn=eduorg-200210,cn=schema,cn=config
|
||||
objectClass: olcSchemaConfig
|
||||
cn: eduorg-200210
|
||||
olcAttributeTypes: {0}( 1.3.6.1.4.1.5923.1.2.1.2 NAME 'eduOrgHomePageURI' DESC
|
||||
'eduOrg per Internet2 and EDUCAUSE' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4
|
||||
.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {1}( 1.3.6.1.4.1.5923.1.2.1.3 NAME 'eduOrgIdentityAuthNPoli
|
||||
cyURI' DESC 'eduOrg per Internet2 and EDUCAUSE' EQUALITY caseExactMatch SYNTA
|
||||
X 1.3.6.1.4.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {2}( 1.3.6.1.4.1.5923.1.2.1.4 NAME 'eduOrgLegalName' DESC '
|
||||
eduOrg per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.
|
||||
1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {3}( 1.3.6.1.4.1.5923.1.2.1.5 NAME 'eduOrgSuperiorURI' DESC
|
||||
'eduOrg per Internet2 and EDUCAUSE' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4
|
||||
.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {4}( 1.3.6.1.4.1.5923.1.2.1.6 NAME 'eduOrgWhitePagesURI' DE
|
||||
SC 'eduOrg per Internet2 and EDUCAUSE' EQUALITY caseExactMatch SYNTAX 1.3.6.1
|
||||
.4.1.1466.115.121.1.15 )
|
||||
olcObjectClasses: {0}( 1.3.6.1.4.1.5923.1.2.2 NAME 'eduOrg' AUXILIARY MAY ( cn
|
||||
$ eduOrgHomePageURI $ eduOrgIdentityAuthNPolicyURI $ eduOrgLegalName $ eduOr
|
||||
gSuperiorURI $ eduOrgWhitePagesURI ) )
|
||||
|
|
@ -0,0 +1,47 @@
|
|||
# This LDIF file can be used to add to add the eduPerson schema to
|
||||
# an OpenLDAP server > 2.4 that uses the new configuration format.
|
||||
# Put this file to /etc/ldap/schema/ and then execute the following
|
||||
# comand to add this schema:
|
||||
# ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/eduperson.ldif
|
||||
add: cn=eduperson,cn=schema,cn=config
|
||||
objectClass: olcSchemaConfig
|
||||
cn: eduperson
|
||||
olcAttributeTypes: {0}( 1.3.6.1.4.1.5923.1.1.1.1 NAME 'eduPersonAffiliation' D
|
||||
ESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SUBSTR ca
|
||||
seIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {1}( 1.3.6.1.4.1.5923.1.1.1.2 NAME 'eduPersonNickname' DESC
|
||||
'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SUBSTR caseI
|
||||
gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {2}( 1.3.6.1.4.1.5923.1.1.1.3 NAME 'eduPersonOrgDN' DESC 'e
|
||||
duPerson per Internet2 and EDUCAUSE' EQUALITY distinguishedNameMatch SYNTAX 1
|
||||
.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
|
||||
olcAttributeTypes: {3}( 1.3.6.1.4.1.5923.1.1.1.4 NAME 'eduPersonOrgUnitDN' DES
|
||||
C 'eduPerson per Internet2 and EDUCAUSE' EQUALITY distinguishedNameMatch SYNT
|
||||
AX 1.3.6.1.4.1.1466.115.121.1.12 )
|
||||
olcAttributeTypes: {4}( 1.3.6.1.4.1.5923.1.1.1.5 NAME 'eduPersonPrimaryAffilia
|
||||
tion' DESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SU
|
||||
BSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VA
|
||||
LUE )
|
||||
olcAttributeTypes: {5}( 1.3.6.1.4.1.5923.1.1.1.6 NAME 'eduPersonPrincipalName'
|
||||
DESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SUBSTR
|
||||
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
|
||||
olcAttributeTypes: {6}( 1.3.6.1.4.1.5923.1.1.1.7 NAME 'eduPersonEntitlement' D
|
||||
ESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseExactMatch SYNTAX 1.3
|
||||
.6.1.4.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {7}( 1.3.6.1.4.1.5923.1.1.1.8 NAME 'eduPersonPrimaryOrgUnit
|
||||
DN' DESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY distinguishedNameMat
|
||||
ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
|
||||
olcAttributeTypes: {8}( 1.3.6.1.4.1.5923.1.1.1.9 NAME 'eduPersonScopedAffiliat
|
||||
ion' DESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SYN
|
||||
TAX 1.3.6.1.4.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {9}( 1.3.6.1.4.1.5923.1.1.1.10 NAME 'eduPersonTargetedID' D
|
||||
ESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SYNTAX 1.
|
||||
3.6.1.4.1.1466.115.121.1.15 )
|
||||
olcAttributeTypes: {10}( 1.3.6.1.4.1.5923.1.1.1.11 NAME 'eduPersonAssurance' D
|
||||
ESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SYNTAX 1.
|
||||
3.6.1.4.1.1466.115.121.1.15 )
|
||||
olcObjectClasses: {0}( 1.3.6.1.4.1.5923.1.1.2 NAME 'eduPerson' DESC 'eduPerson
|
||||
per Internet2 and EDUCAUSE' AUXILIARY MAY ( eduPersonAffiliation $ eduPerson
|
||||
Nickname $ eduPersonOrgDN $ eduPersonOrgUnitDN $ eduPersonPrimaryAffiliation
|
||||
$ eduPersonPrincipalName $ eduPersonEntitlement $ eduPersonPrimaryOrgUnitDN $
|
||||
eduPersonScopedAffiliation $ eduPersonTargetedID $ eduPersonAssurance ) )
|
||||
|
|
@ -0,0 +1,4 @@
|
|||
profile config
|
||||
host: ldapi://
|
||||
sasl-mech: EXTERNAL
|
||||
base: cn=config
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
#!/bin/sh
|
||||
# Restore all ldap database from $1
|
||||
# Prerequisite: all ldap database are in /var/lib/ldap
|
||||
|
||||
set -e
|
||||
|
||||
BACKUPDIR=$1
|
||||
shift
|
||||
echo "Beware all current data will be erased, are you sure ? (type yes)"
|
||||
read ok
|
||||
|
||||
if [ "x$ok" != "xyes" ]; then
|
||||
exit 0
|
||||
fi
|
||||
|
||||
if [ ! -d "$BACKUPDIR" -o ! -f "$BACKUPDIR/config.ldif" ]; then
|
||||
echo First argument must be a directory containing at least a config.ldif file
|
||||
exit 1
|
||||
fi
|
||||
|
||||
service slapd stop
|
||||
|
||||
echo Erasing current datas...
|
||||
rm -rf /etc/ldap/slapd.d/*
|
||||
find /var/lib/ldap -type f -delete
|
||||
|
||||
echo Loading config backups...
|
||||
slapadd -n0 -F/etc/ldap/slapd.d/ -l"$BACKUPDIR/config.ldif"
|
||||
|
||||
echo Loading data backups...
|
||||
for i in `seq 1 30`; do
|
||||
if [ -f "$BACKUPDIR/db-$i.ldif" ]; then
|
||||
slapadd -n$i -F/etc/ldap/slapd.d/ -l"$BACKUPDIR/db-$i.ldif"
|
||||
fi
|
||||
done
|
||||
|
||||
chown -R openldap.openldap /etc/ldap/slapd.d/ /var/lib/ldap/
|
||||
|
||||
service slapd start
|
||||
|
|
@ -0,0 +1,6 @@
|
|||
#!/bin/sh
|
||||
|
||||
BASEDIR=`dirname $0`
|
||||
|
||||
cp "$BASEDIR/ldapvirc" $HOME/.ldapvirc
|
||||
apt-get install slapd ldap-utils ldapvi vim make
|
||||
|
|
@ -0,0 +1,486 @@
|
|||
#
|
||||
# 60supann.ldif - version 389 Directory Server du schéma SupAnn version 2009.6
|
||||
#
|
||||
# (cf original à http://www.cru.fr/_media/documentation/supann/supann_2009.schema.txt)
|
||||
#
|
||||
# Modifications :
|
||||
# 21 mai 10 (JML): supannRefId : suppression du SINGLE-VALUE mis par erreur
|
||||
# 23 fevr. 10 (JML): import du fichier OpenLDAP supann_2009.schema.txt pour 389 Directory Server
|
||||
# 03 nov. 14 (BDA): ajout mailForwardingAddress
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
add cn=supann,cn=schema,cn=config
|
||||
objectClass: olcSchemaConfig
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.1
|
||||
NAME 'supannListeRouge'
|
||||
DESC 'indique que l entree correspondante n est pas publique'
|
||||
EQUALITY booleanMatch
|
||||
SINGLE-VALUE
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.2
|
||||
NAME 'supannActivite'
|
||||
DESC 'activite ou metier de la personne'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.3
|
||||
NAME 'supannOrganisme'
|
||||
DESC 'code organisme d appartenance'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SINGLE-VALUE
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.4
|
||||
NAME 'supannCivilite'
|
||||
DESC 'civilite : M., Mme, Mlle'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SINGLE-VALUE
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{32}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.5
|
||||
NAME 'supannAffectation'
|
||||
DESC 'affectation'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.6
|
||||
NAME 'supannCodeEntite'
|
||||
DESC 'identifiant d entite'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SINGLE-VALUE
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.7
|
||||
NAME 'supannCodeEntiteParent'
|
||||
DESC 'identifiant d entite parente'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.8
|
||||
NAME 'supannEntiteAffectation'
|
||||
DESC 'identifiant d entite d affectation'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.9
|
||||
NAME 'supannCodeINE'
|
||||
DESC 'code INE'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.10
|
||||
NAME 'supannEtuId'
|
||||
DESC 'identifiant scolarite'
|
||||
EQUALITY caseExactMatch
|
||||
SUBSTR caseExactSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.11
|
||||
NAME 'supannEmpId'
|
||||
DESC 'identifiant personnel'
|
||||
EQUALITY caseExactMatch
|
||||
SUBSTR caseExactSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.12
|
||||
NAME 'supannAutreTelephone'
|
||||
SUP telephoneNumber
|
||||
DESC 'numeros de telephone secondaires'
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.50
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.13
|
||||
NAME 'supannEntiteAffectationPrincipale'
|
||||
DESC 'identifiant d entite principale d affectation'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SINGLE-VALUE
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.14
|
||||
NAME 'supannEtablissement'
|
||||
DESC 'code d etablissement'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.15
|
||||
NAME 'supannMailPerso'
|
||||
DESC 'Mailbox RFC822 privee'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.16
|
||||
NAME 'supannTypeEntite'
|
||||
DESC 'type de structure ou entite'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.17
|
||||
NAME 'supannParrainDN'
|
||||
SUP distinguishedName
|
||||
DESC 'dn du responsable de cette entree'
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.18
|
||||
NAME 'supannGroupeDateFin'
|
||||
DESC 'indique la date de fin de validite de l entree correspondante'
|
||||
EQUALITY generalizedTimeMatch
|
||||
ORDERING generalizedTimeOrderingMatch
|
||||
SINGLE-VALUE
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.19
|
||||
NAME 'supannGroupeAdminDN'
|
||||
SUP distinguishedName
|
||||
DESC 'dn des administrateurs du groupe concerne'
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.20
|
||||
NAME 'supannAliasLogin'
|
||||
DESC 'login personalise'
|
||||
EQUALITY caseExactMatch
|
||||
SUBSTR caseExactSubstringsMatch
|
||||
SINGLE-VALUE
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.21
|
||||
NAME 'supannRole'
|
||||
DESC 'role'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.22
|
||||
NAME 'supannGroupeLecteurDN'
|
||||
SUP distinguishedName
|
||||
DESC 'dn des entites habilite a lire le contenu d un groupe'
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.23
|
||||
NAME 'supannRoleGenerique'
|
||||
DESC 'role generique d une personne'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.24
|
||||
NAME 'supannRoleEntite'
|
||||
DESC 'role contextuel'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{512}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.25
|
||||
NAME 'supannEtuAnneeInscription'
|
||||
DESC 'annee inscription'
|
||||
EQUALITY numericStringMatch
|
||||
ORDERING numericStringOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{4}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.26
|
||||
NAME 'supannEtuCursusAnnee'
|
||||
DESC 'cursus et annee dans le diplome'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.27
|
||||
NAME 'supannEtuDiplome'
|
||||
DESC 'diplome'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.28
|
||||
NAME 'supannEtuElementPedagogique'
|
||||
DESC 'element pedagogique'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.29
|
||||
NAME 'supannEtuEtape'
|
||||
DESC 'etape'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: ( 1.3.6.1.4.1.7135.1.2.1.30
|
||||
NAME 'supannEtuInscription'
|
||||
DESC 'description d inscriptions'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{4096}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.31
|
||||
NAME 'supannEtuRegimeInscription'
|
||||
DESC 'regime d inscription'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.32
|
||||
NAME 'supannEtuSecteurDisciplinaire'
|
||||
DESC 'secteur disciplinaire'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.33
|
||||
NAME 'supannEtuTypeDiplome'
|
||||
DESC 'type de diplome'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.34
|
||||
NAME 'supannAutreMail'
|
||||
SUP mail
|
||||
DESC 'adresses mail non institutionnelles'
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.35
|
||||
NAME 'supannEmpCorps'
|
||||
DESC 'corps d appartenance d un agent'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.36
|
||||
NAME 'supannTypeEntiteAffectation'
|
||||
DESC 'type de structure ou entite d affectation'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcAttributeTypes: (
|
||||
1.3.6.1.4.1.7135.1.2.1.37
|
||||
NAME 'supannRefId'
|
||||
DESC 'identifiant partage avec autre brique du SI'
|
||||
EQUALITY caseExactMatch
|
||||
SUBSTR caseExactSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
|
||||
)
|
||||
# repris du schema Netscape (enlever si conflit) :
|
||||
olcAttributeTypes: ( 2.16.840.1.113730.3.1.17
|
||||
NAME 'mailForwardingAddress'
|
||||
DESC 'coin'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcObjectClasses: (
|
||||
1.3.6.1.4.1.7135.1.2.2.1
|
||||
NAME 'supannPerson'
|
||||
SUP top AUXILIARY
|
||||
DESC 'classe d infos complementaires sur personnes supann'
|
||||
MAY ( supannOrganisme $ supannCivilite $ supannAutreTelephone $ supannAffectation $ supannEmpId $ supannCodeINE $ supannEtuId $ supannAliasLogin $ supannParrainDN $ supannActivite $ supannEntiteAffectation $ supannEntiteAffectationPrincipale $ supannMailPerso $ supannRole $ supannRoleEntite $ supannRoleGenerique $ supannEtuAnneeInscription $ supannEtuCursusAnnee $ supannEtuDiplome $ supannEtuElementPedagogique $ supannEtuEtape $ supannEtuInscription $ supannEtuRegimeInscription $ supannEtuSecteurDisciplinaire $ supannEtuTypeDiplome $ supannEtablissement $ supannListeRouge $ supannAutreMail $ mailForwardingAddress $ supannEmpCorps $ supannTypeEntiteAffectation $ supannRefId )
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcObjectClasses: (
|
||||
1.3.6.1.4.1.7135.1.2.2.2
|
||||
NAME 'supannOrg'
|
||||
SUP top AUXILIARY
|
||||
DESC 'classe d infos complementaires pour etablissement'
|
||||
MAY ( supannEtablissement )
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcObjectClasses: (
|
||||
1.3.6.1.4.1.7135.1.2.2.3
|
||||
NAME 'supannEntite'
|
||||
SUP top AUXILIARY
|
||||
DESC 'classe d infos complementaires pour entite'
|
||||
MUST ( supannCodeEntite )
|
||||
MAY ( supannTypeEntite $ supannCodeEntiteParent $ supannRefId )
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
#objectClasses: (
|
||||
# 1.3.6.1.4.1.7135.1.2.2.4
|
||||
# NAME 'entree disponible'
|
||||
# )
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
#objectClasses: (
|
||||
# 1.3.6.1.4.1.7135.1.2.2.5
|
||||
# NAME 'entree disponible'
|
||||
# )
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
olcObjectClasses: (
|
||||
1.3.6.1.4.1.7135.1.2.2.6
|
||||
NAME 'supannGroupe'
|
||||
SUP top AUXILIARY
|
||||
DESC 'attributs specifiques des groupes'
|
||||
MAY ( supannGroupeDateFin $ supannGroupeAdminDN $ supannGroupeLecteurDN $ supannRefId )
|
||||
)
|
||||
#
|
||||
################################################################################
|
||||
#
|
||||
Reference in New Issue