Customisations to KH

This commit is contained in:
Deon George
2012-01-19 22:40:53 +11:00
parent a8f534b463
commit 181cc4ca20
108 changed files with 3414 additions and 43 deletions

434
doc/exmail.schema Normal file
View File

@@ -0,0 +1,434 @@
#
# Author: Stefan Klatt
# Email: stefan.klatt@cac-netzwerk.de
# Datum: 05.03.2007
# Version: 0.99.4
#
# OID-Prefix: 1.3.6.1.4.1.25926
#
# Attribute: 1.3.6.1.4.1.25926.1.1.1
#
# Objects: 1.3.6.1.4.1.25926.1.1.100
#
# 0.99.04
# 05.03.2007
# - ipprotocolnumber musste in integer umgeaendert werden, da das NIS Schema
# nicht mehr verwendet wird
#
#
# 0.99.05
# 24.04.2011
#
# - Userattribut active hinzugefügt
attributetype ( 1.3.6.1.4.1.25926.1.1.1
name 'EXLocalEmail'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} )
attributetype ( 1.3.6.1.4.1.25926.1.1.2
name 'EXRemoteEmail'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} )
attributetype ( 1.3.6.1.4.1.25926.1.1.3
name 'EXServer'
Sup name )
attributetype ( 1.3.6.1.4.1.25926.1.1.4
name 'EXUser-ID'
Sup name )
attributetype ( 1.3.6.1.4.1.25926.1.1.5
name 'EXPassword'
Sup name )
attributetype ( 1.3.6.1.4.1.25926.1.1.6
name 'EXActive'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.7
name 'EXSSL'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.8
name 'EXEmailonServer'
desc 'Nachrichten auf dem Server lassen'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.9
name 'EXPort'
EQUALITY IntegerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.10
name 'EXTimer'
desc 'Zeit zwischen den Abfragen, Zahl sollte ein Teiler von 60 sein'
EQUALITY IntegerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.11
name 'EXServerTyp'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{10}
)
attributetype ( 1.3.6.1.4.1.25926.1.1.12
name 'EXHTTPS'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.13
name 'EXTLSReq'
desc 'Require TLS'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.14
name 'EXAuthTry'
desc 'Try SMTP Auth'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.15
name 'EXAuthReq'
desc 'Require SMTP Auth'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.16
name 'EXSMTPPOP'
desc 'SMTP after POP'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.17
name 'EXFetch'
desc 'Fetchmail-Account Bezeichnung'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.25926.1.1.18
name 'EXsmtp'
desc 'SMTP-Account Bezeichnung'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.25926.1.1.20
name 'EXwebm'
desc 'WebMail-Account Bezeichnung'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.25926.1.1.21
name 'EXDomainIMAP'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.25926.1.1.22
name 'EXDomainExt'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.25926.1.1.23
name 'EXMaxMsgSize'
desc 'Max Emailsize'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributetype ( 1.3.6.1.4.1.25926.1.1.24
name 'EXMaxMsgTxt'
desc 'Text for max Emailsize'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.25926.1.1.25
name 'EXAlias'
desc 'Alias to change'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} )
attributetype ( 1.3.6.1.4.1.25926.1.1.26
name 'EXRecipient'
desc 'Recipient for Email'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} )
attributetype ( 1.3.6.1.4.1.25926.1.1.27
name 'EXDefaultTimer'
desc 'Default Zeit zwischen den Abfragen, Zahl sollte ein Teiler von 60 sein'
EQUALITY IntegerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.28
name 'EXMailDir'
desc 'Directory for Mails'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} )
attributetype ( 1.3.6.1.4.1.25926.1.1.29
name 'EXFilter1'
desc 'Filter Zeile1'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.30
name 'EXFilter2'
desc 'Filter Zeile2'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.31
name 'EXFilter3'
desc 'Filter Zeile3'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.32
name 'EXFilter4'
desc 'Filter Zeile4'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.33
name 'EXFilter5'
desc 'Filter Zeile5'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.34
name 'EXFilter6'
desc 'Filter Zeile6'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.35
name 'EXIMAPDir'
desc 'Filter Zeile6'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.36
name 'EXCondition'
desc 'Filter Condition'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.37
name 'EXStatus'
desc 'Wurde Filter geändert'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.38
name 'EXHomeDir'
desc 'Imap User Homedirectory'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.39
name 'EXFilterTyp'
desc 'EXFilter Typ - Subject, From, To, FromTo, Subject, Msgbody'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.40
name 'EXUserinfos'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.41
name 'EXFilter'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.42
name 'EXFilterGen'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.43
name 'EXSpam'
desc 'Spam im Spam-Verzeichnis des Users einsortieren'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.44
name 'EXEmailCopy'
desc 'Eine Kopie der gesendeten Email durch den Userfilter schicken um diese im selben Verzeichnis abzulegen'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.45
name 'EXDomain-Infos'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.46
name 'EXSharedFolder'
desc 'Ablage der Emails unter shared '
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.47
name 'EXFilterOut'
desc 'EXFilter direction Out'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.48
name 'EXVacation'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.49
name 'EXVacationSubject'
desc 'Vacation Subject'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1000} )
attributetype ( 1.3.6.1.4.1.25926.1.1.50
name 'EXVacationMsg'
desc 'Vacation Message'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1000} )
attributetype ( 1.3.6.1.4.1.25926.1.1.51
name 'EXFilterIn'
desc 'EXFilter direction In'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.52
name 'EXUserSpamDir'
desc 'Maildir for Spams identify by User '
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1000} )
attributetype ( 1.3.6.1.4.1.25926.1.1.53
name 'EXUserHamDir'
desc 'Maildir for false recognized Spams identify by User '
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1000} )
attributetype ( 1.3.6.1.4.1.25926.1.1.54
name 'EXNotPersonal'
desc 'Test if Email is not from a person'
EQUALITY BooleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)
attributetype ( 1.3.6.1.4.1.25926.1.1.55
name 'EXGlobalPublicDir'
desc 'Imap global public directory'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.56
name 'EXAddr2'
desc 'Filter Email-Adresse'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{100} )
attributetype ( 1.3.6.1.4.1.25926.1.1.57
name 'EXAddr2Direction'
desc 'EXFilter Typ - Subject, From, To, FromTo, Subject, Msgbody'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.58
name 'EXDomainRelay'
desc 'Host - Domain Relays'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{200} )
attributetype ( 1.3.6.1.4.1.25926.1.1.60
name 'EXVacationDays'
desc 'Vacation days'
EQUALITY IntegerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)
objectClass ( 1.3.6.1.4.1.25926.1.1.100
name 'EXSMTP-Account'
STRUCTURAL
must ( EXsmtp $ EXRemoteEmail $ EXServer $ EXUser-ID $
EXPassword $ EXActive
)
may ( EXPort $ EXAuthTry $ EXAuthReq $ EXTLSReq $ EXSMTPPOP $ EXTimer
)
)
objectClass ( 1.3.6.1.4.1.25926.1.1.101
name 'EXFetchmail-Account'
STRUCTURAL
must ( EXFetch $ EXRemoteEmail $ EXServer $ EXServerTyp $
EXUser-ID $ EXPassword $ EXActive $ EXTimer
)
may ( EXSSL $ EXEmailonServer $ EXPort $ EXTLSReq
)
)
objectClass ( 1.3.6.1.4.1.25926.1.1.103
name 'EXWebMail-Account'
STRUCTURAL
must ( EXwebm $ EXRemoteEmail $ EXServer $ EXUser-ID $
EXPassword $ EXServertyp $ EXActive
)
may ( EXEmailonServer $ EXPort $ EXTimer $ EXHTTPS
)
)
objectClass ( 1.3.6.1.4.1.25926.1.1.104
name 'EXDomain-Infos'
STRUCTURAL
must ( EXDomain-Infos $ EXDomainIMAP $ EXDomainExt $ EXGlobalPublicDir $
EXDefaultTimer $ EXMailDir $ EXUserSpamDir $ EXUserHamDir
)
may ( EXMaxMsgSize $ EXMaxMsgTxt $ EXDomainRelay
)
)
objectClass ( 1.3.6.1.4.1.25926.1.1.105
name 'EXAlias'
STRUCTURAL
must ( EXAlias $ EXRecipient
)
)
objectClass ( 1.3.6.1.4.1.25926.1.1.106
name 'EXUserinfos'
STRUCTURAL
must ( EXUserinfos $ EXHomeDir $ EXSpam $ EXEmailCopy $
EXSharedFolder $ EXStatus $
EXVacation $ EXVacationSubject $ EXVacationMsg $ EXVacationDays
)
)
objectClass ( 1.3.6.1.4.1.25926.1.1.107
name 'EXFilterGen'
STRUCTURAL
must ( EXFilterGen $ EXFilter1 $ EXStatus $ EXFilterOut $ EXFilterIn
)
may ( EXFilter2 $ EXFilter3 $ EXFilter4 $ EXFilter5 $ EXFilter6
)
)
objectClass ( 1.3.6.1.4.1.25926.1.1.108
name 'EXFilter'
STRUCTURAL
must ( EXFilter $ EXCondition $ EXIMAPDir $ EXStatus $
EXFilterTyp $ EXFilterOut $ EXFilterIn
)
may ( EXNotPersonal $ EXAddr2 $ EXAddr2Direction
)
)

View File

@@ -27,21 +27,21 @@ objectclass: organizationalUnit
ou: Bad DNs
# Entry 4: c=double plus \2B\2B,ou=Bad DNs,dc=example.com
dn: c=double plus \2B\2B,ou=Bad DNs,dc=example.com
c: double plus ++
objectclass: country
#dn: c=double plus \2B\2B,ou=Bad DNs,dc=example.com
#c: double plus \2B\2B
#objectclass: country
# Entry 5: c=end dollar$,ou=Bad DNs,dc=example.com
dn: c=end dollar$,ou=Bad DNs,dc=example.com
c: end dollar$
objectclass: country
#dn: c=end dollar$,ou=Bad DNs,dc=example.com
#c: end dollar$
#objectclass: country
# Entry 6: sn=sign@at+uid=multi-mixed,ou=Bad DNs,dc=example.com
dn: sn=sign@at+uid=multi-mixed,ou=Bad DNs,dc=example.com
cn: Test
objectclass: inetOrgPerson
sn: sign@at
uid: multi-mixed
#dn: sn=sign@at+uid=multi-mixed,ou=Bad DNs,dc=example.com
#cn: Test
#objectclass: inetOrgPerson
#sn: sign@at
#uid: multi-mixed
# Entry 7: uid=angle\3Cleft,ou=Bad DNs,dc=example.com
dn: uid=angle\3Cleft,ou=Bad DNs,dc=example.com
@@ -86,20 +86,20 @@ sn: Test
uid: colon;semi
# Entry 13: uid=multi+uid=sign@at,ou=Bad DNs,dc=example.com
dn: uid=multi+uid=sign@at,ou=Bad DNs,dc=example.com
cn: Test
objectclass: inetOrgPerson
sn: Test
uid: multi
uid: sign@at
#dn: uid=multi+uid=sign@at,ou=Bad DNs,dc=example.com
#cn: Test
#objectclass: inetOrgPerson
#sn: Test
#uid: multi
#uid: sign@at
# Entry 14: uid=multi+uid=value,ou=Bad DNs,dc=example.com
dn: uid=multi+uid=value,ou=Bad DNs,dc=example.com
cn: Test
objectclass: inetOrgPerson
sn: Test
uid: multi
uid: value
#dn: uid=multi+uid=value,ou=Bad DNs,dc=example.com
#cn: Test
#objectclass: inetOrgPerson
#sn: Test
#uid: multi
#uid: value
# Entry 15: uid=quote\22double,ou=Bad DNs,dc=example.com
dn: uid=quote\22double,ou=Bad DNs,dc=example.com

177
doc/mozillaOrgPerson.schema Normal file
View File

@@ -0,0 +1,177 @@
#
# mozillaOrgPerson schema v. 0.6.3
#
# req. core
# req. cosine
# req. inetorgperson
# attribute defs
attributetype ( 1.3.6.1.4.1.13769.2.1.1
NAME ( 'mozillaNickname' )
SUP name )
attributetype ( 1.3.6.1.4.1.13769.2.1.2
NAME ( 'mozillaUseHtmlMail' )
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.13769.2.1.3
NAME 'mozillaSecondEmail'
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributetype ( 1.3.6.1.4.1.13769.2.1.4
NAME 'mozillaHomeLocalityName'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
attributetype ( 1.3.6.1.4.1.13769.2.1.5
NAME 'mozillaPostalAddress2'
EQUALITY caseIgnoreListMatch
SUBSTR caseIgnoreListSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributetype ( 1.3.6.1.4.1.13769.2.1.6
NAME 'mozillaHomePostalAddress2'
EQUALITY caseIgnoreListMatch
SUBSTR caseIgnoreListSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributetype ( 1.3.6.1.4.1.13769.2.1.7
NAME ( 'mozillaHomeState' ) SUP name )
attributetype ( 1.3.6.1.4.1.13769.2.1.8
NAME 'mozillaHomePostalCode'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} )
attributetype ( 1.3.6.1.4.1.13769.2.1.9
NAME ( 'mozillaHomeCountryName' )
SUP name SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.13769.2.1.10
NAME ( 'mozillaHomeFriendlyCountryName' )
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.13769.2.1.11
NAME ( 'mozillaHomeUrl' )
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributetype ( 1.3.6.1.4.1.13769.2.1.12
NAME ( 'mozillaWorkUrl' )
EQUALITY caseIgnoreIA5Match
SUBSTR caseIgnoreIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
# un-comment for all LDAP server NOT supporting SYNTAX 2.16.840.1.113730.3.7.1
attributetype ( 1.3.6.1.4.1.13769.2.1.13
NAME ( 'nsAIMid' )
DESC 'AOL Instant Messenger (AIM) Identity'
EQUALITY telephoneNumberMatch
SUBSTR telephoneNumberSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributetype ( 1.3.6.1.4.1.13769.2.1.14 NAME ( 'mozillaHomeStreet' )
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
# un-comment for Netscape 6.x and all other LDAP server supporting SYNTAX 2.16.840.1.113730.3.7.1
# attributeTypes ( 2.16.840.1.113730.3.1.2013
# NAME ( 'nsAIMid' )
# DESC 'AOL Instant Messenger (AIM) Identity'
# SYNTAX 2.16.840.1.113730.3.7.1 )
attributetype ( 1.3.6.1.4.1.13769.2.1.96
NAME ( 'mozillaCustom1' )
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.13769.2.1.97
NAME ( 'mozillaCustom2' )
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.13769.2.1.98
NAME ( 'mozillaCustom3' )
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.13769.2.1.99
NAME ( 'mozillaCustom4' )
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
# defined in "A Summary of the X.500(96) User Schema for use with LDAPv3" - RFC 2256
#
# attributetype ( 2.5.4.6 NAME ( 'c' 'countryName' )
# DESC 'RFC2256: ISO-3166 country 2-letter code'
# SUP name SINGLE-VALUE )
# defined in "The COSINE and Internet X.500 Schema" - RFC 1274
#
# attributetype ( 0.9.2342.19200300.100.1.43
# NAME ( 'co' 'friendlyCountryName' )
# DESC 'RFC1274: friendly country name'
# EQUALITY caseIgnoreMatch
# SUBSTR caseIgnoreSubstringsMatch
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
# objectClass defs
objectclass ( 1.3.6.1.4.1.13769.2.2.1
NAME 'mozillaOrgPerson'
SUP top
AUXILIARY
MAY (
sn $
givenName $
cn $
displayName $
mozillaNickname $
title $
telephoneNumber $
facsimileTelephoneNumber $
mobile $
pager $
homePhone $
street $
postalCode $
mozillaPostalAddress2 $
mozillaHomeStreet $
mozillaHomePostalAddress2 $
l $
mozillaHomeLocalityName $
st $
mozillaHomeState $
mozillaHomePostalCode $
c $
mozillaHomeCountryName $
co $
mozillaHomeFriendlyCountryName $
ou $
o $
mail $
mozillaSecondEmail $
mozillaUseHtmlMail $
nsAIMid $
mozillaHomeUrl $
mozillaWorkUrl $
description $
mozillaCustom1 $
mozillaCustom2 $
mozillaCustom3 $
mozillaCustom4 ) )
# not part of the official Mozilla schema but read by Mozilla: 'departmentNumber' and 'postOfficeBox'
#

View File

@@ -1,6 +1,6 @@
include /etc/openldap/schema/uidpool.schema
include /etc/openldap/schema/sudo.schema
include /etc/openldap/schema/autofs.schema
include /etc/openldap/schema/exmail.schema
TLSCACertificateFile /etc/openldap/pla/ca-bundle.crt
TLSCertificateFile /etc/openldap/pla/slapd.crt
@@ -35,7 +35,7 @@ access to *
authz-policy any
database ldbm
database bdb
suffix "dc=example.com"
rootdn "cn=Manager,dc=example.com"
rootpw NotAllowed
@@ -50,7 +50,7 @@ index uidNumber,gidNumber,loginShell eq,pres
index uid,memberUid eq,pres,sub
index nisMapName,nisMapEntry eq,pres,sub
database ldbm
database bdb
suffix "dc=example,dc=com"
rootdn "cn=Manager,dc=example,dc=com"
rootpw NotAllowed
@@ -65,7 +65,7 @@ index uidNumber,gidNumber,loginShell eq,pres
index uid,memberUid eq,pres,sub
index nisMapName,nisMapEntry eq,pres,sub
database ldbm
database bdb
suffix "o=Simpsons"
rootdn "cn=Manager,o=Simpsons"
rootpw NotAllowed

37
doc/sudo.schema Normal file
View File

@@ -0,0 +1,37 @@
attributetype ( 1.3.6.1.4.1.15953.9.1.1
NAME 'sudoUser'
DESC 'User(s) who may run sudo'
EQUALITY caseExactIA5Match
SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.15953.9.1.2
NAME 'sudoHost'
DESC 'Host(s) who may run sudo'
EQUALITY caseExactIA5Match
SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.15953.9.1.3
NAME 'sudoCommand'
DESC 'Command(s) to be executed by sudo'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.15953.9.1.4
NAME 'sudoRunAs'
DESC 'User(s) impersonated by sudo'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.15953.9.1.5
NAME 'sudoOption'
DESC 'Options(s) followed by sudo'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
objectclass ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL
DESC 'Sudoer Entries'
MUST ( cn )
MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $ sudoOption
$description ) )