From d6f833f6eb431798a04d4c091d352d3852cc1c28 Mon Sep 17 00:00:00 2001
From: Deon George <deon@dege.au>
Date: Sun, 2 Apr 2023 11:50:40 +1000
Subject: [PATCH] Add sudorole schema

---
 .../server/openldap/bootstrap/sudorole.schema | 69 +++++++++++++++++++
 1 file changed, 69 insertions(+)
 create mode 100644 tests/server/openldap/bootstrap/sudorole.schema

diff --git a/tests/server/openldap/bootstrap/sudorole.schema b/tests/server/openldap/bootstrap/sudorole.schema
new file mode 100644
index 0000000..6ec6ad0
--- /dev/null
+++ b/tests/server/openldap/bootstrap/sudorole.schema
@@ -0,0 +1,69 @@
+attributetype ( 1.3.6.1.4.1.15953.9.1.1
+  NAME 'sudoUser'
+  DESC 'User(s) who may  run sudo'
+  EQUALITY caseExactIA5Match
+  SUBSTR caseExactIA5SubstringsMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.2
+  NAME 'sudoHost'
+  DESC 'Host(s) who may run sudo'
+  EQUALITY caseExactIA5Match
+  SUBSTR caseExactIA5SubstringsMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.3
+  NAME 'sudoCommand'
+  DESC 'Command(s) to be executed by sudo'
+  EQUALITY caseExactIA5Match
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.4
+  NAME 'sudoRunAs'
+  DESC 'User(s) impersonated by sudo'
+  EQUALITY caseExactIA5Match
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.5
+  NAME 'sudoOption'
+  DESC 'Options(s) followed by sudo'
+  EQUALITY caseExactIA5Match
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.6
+  NAME 'sudoRunAsUser'
+  DESC 'User(s) impersonated by sudo'
+  EQUALITY caseExactIA5Match
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.7
+  NAME 'sudoRunAsGroup'
+  DESC 'Group(s) impersonated by sudo'
+  EQUALITY caseExactIA5Match
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.8
+  NAME 'sudoNotBefore'
+  DESC 'Start of time interval for which the entry is valid'
+  EQUALITY generalizedTimeMatch
+  ORDERING generalizedTimeOrderingMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
+
+attributetype ( 1.3.6.1.4.1.15953.9.1.9
+  NAME 'sudoNotAfter'
+  DESC 'End of time interval for which the entry is valid'
+  EQUALITY generalizedTimeMatch
+  ORDERING generalizedTimeOrderingMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
+
+attributeTypes ( 1.3.6.1.4.1.15953.9.1.10
+  NAME 'sudoOrder'
+  DESC 'an integer to order the sudoRole entries'
+  EQUALITY integerMatch
+  ORDERING integerOrderingMatch
+  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
+
+objectclass ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL
+  DESC 'Sudoer Entries'
+  MUST ( cn )
+  MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $ sudoRunAsUser $ sudoRunAsGroup $ sudoOption $ sudoNotBefore $ sudoNotAfter $ sudoOrder $ description ) )