Move our sample schema/data into a tests/server, we'll use osixia/openldap for the demo/testing

2023-01-27 15:26:29 +11:00
parent 181a57586c
commit d0242ce3d8
21 changed files with 281 additions and 2092 deletions
--- a/tests/server/openldap/schema/02-security
+++ b/tests/server/openldap/schema/02-security
@@ -0,0 +1,9 @@
+# At the moment we want to override osixia/ldap to enable anonymous reads
+dn: olcDatabase={1}{{ LDAP_BACKEND }},cn=config
+changetype: modify
+delete: olcAccess
+-
+add: olcAccess
+olcAccess: to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage by * break
+olcAccess: to attrs=userPassword,shadowLastChange by self write by dn="cn=admin,{{ LDAP_BASE_DN }}" write by anonymous auth by * none
+olcAccess: to * by self read by dn="cn=admin,{{ LDAP_BASE_DN }}" write by * read