Move our sample schema/data into a tests/server, we'll use osixia/openldap for the demo/testing

2023-01-27 15:26:29 +11:00
parent 181a57586c
commit d0242ce3d8
21 changed files with 281 additions and 2092 deletions
--- a/tests/server/openldap/schema/02-security
+++ b/tests/server/openldap/schema/02-security
@@ -0,0 +1,9 @@
+# At the moment we want to override osixia/ldap to enable anonymous reads
+dn: olcDatabase={1}{{ LDAP_BACKEND }},cn=config
+changetype: modify
+delete: olcAccess
+-
+add: olcAccess
+olcAccess: to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage by * break
+olcAccess: to attrs=userPassword,shadowLastChange by self write by dn="cn=admin,{{ LDAP_BASE_DN }}" write by anonymous auth by * none
+olcAccess: to * by self read by dn="cn=admin,{{ LDAP_BASE_DN }}" write by * read
--- a/tests/server/openldap/schema/10-example.com.ldif
+++ b/tests/server/openldap/schema/10-example.com.ldif
@@ -0,0 +1,11 @@
+dn: olcDatabase=mdb,cn=config
+changetype: add
+objectClass: olcDatabaseConfig
+olcDatabase: mdb
+olcLastMod: TRUE
+olcMonitoring: TRUE
+olcSuffix: dc=example,dc=com
+olcAccess: to dn.base="" by dn="cn=admin,dc=Test" write by * read
+olcAccess: to * by dn="cn=admin,dc=example,dc=com" write by dn="cn=admin,dc=Test" write by * read
+olcRootDN: cn=admin,dc=example,dc=com
+olcRootPW: {SSHA}e8xGdXmL+mSD3u/389YHeM+dpqFCUSyq
--- a/tests/server/openldap/schema/11-example_com.ldif
+++ b/tests/server/openldap/schema/11-example_com.ldif
@@ -0,0 +1,11 @@
+dn: olcDatabase=mdb,cn=config
+changetype: add
+objectClass: olcDatabaseConfig
+olcDatabase: mdb
+olcLastMod: TRUE
+olcMonitoring: TRUE
+olcSuffix: dc=example.com
+olcAccess: to dn.base="" by dn="cn=admin,dc=Test" write by * read
+olcAccess: to * by dn="cn=admin,dc=example.com" write by dn="cn=admin,dc=Test" write by * read
+olcRootDN: cn=admin,dc=example.com
+olcRootPW: {SSHA}e8xGdXmL+mSD3u/389YHeM+dpqFCUSyq
--- a/tests/server/openldap/schema/20-flintstones.ldif
+++ b/tests/server/openldap/schema/20-flintstones.ldif
@@ -0,0 +1,11 @@
+dn: olcDatabase=mdb,cn=config
+changetype: add
+objectClass: olcDatabaseConfig
+olcDatabase: mdb
+olcLastMod: TRUE
+olcMonitoring: TRUE
+olcSuffix: o=Flintstones
+olcAccess: to dn.base="" by dn="cn=admin,dc=Test" write by * read
+olcAccess: to * by dn="cn=admin,o=Flintstones" write by dn="cn=admin,dc=Test" write by * read
+olcRootDN: cn=admin,o=Flintstones
+olcRootPW: {SSHA}e8xGdXmL+mSD3u/389YHeM+dpqFCUSyq
--- a/tests/server/openldap/schema/21-simpsons.ldif
+++ b/tests/server/openldap/schema/21-simpsons.ldif
@@ -0,0 +1,11 @@
+dn: olcDatabase=mdb,cn=config
+changetype: add
+objectClass: olcDatabaseConfig
+olcDatabase: mdb
+olcLastMod: TRUE
+olcMonitoring: TRUE
+olcSuffix: o=Simpsons
+olcAccess: to dn.base="" by dn="cn=admin,dc=Test" write by * read
+olcAccess: to * by dn="cn=admin,o=Simpsons" write by dn="cn=admin,dc=Test" write by * read
+olcRootDN: cn=admin,o=Simpsons
+olcRootPW: {SSHA}e8xGdXmL+mSD3u/389YHeM+dpqFCUSyq
--- a/tests/server/openldap/schema/30-test.ldif
+++ b/tests/server/openldap/schema/30-test.ldif
@@ -0,0 +1,11 @@
+dn: olcDatabase=mdb,cn=config
+changetype: add
+objectClass: olcDatabaseConfig
+olcDatabase: mdb
+olcLastMod: TRUE
+olcMonitoring: TRUE
+olcSuffix: o=Test
+olcAccess: to dn.base="" by dn="cn=admin,dc=Test" write by * read
+olcAccess: to * by dn="cn=admin,o=Test" write by dn="cn=admin,dc=Test" write by * read
+olcRootDN: cn=admin,o=Test
+olcRootPW: {SSHA}e8xGdXmL+mSD3u/389YHeM+dpqFCUSyq