From a87c24159db0185bd5a63bbe883c1934825e2afe Mon Sep 17 00:00:00 2001
From: shirenn <shirenn@crans.org>
Date: Sun, 18 Jul 2021 12:18:09 +0200
Subject: [PATCH] Refactoring the olcAccess section of schema.ldif for better
 readability and changing two dc=example,dc=org to dc=example,dc=net.

Signed-off-by: shirenn <shirenn@crans.org>
---
 install_utils/schema.ldiff | 79 ++++++++++++++++++++++----------------
 1 file changed, 46 insertions(+), 33 deletions(-)

diff --git a/install_utils/schema.ldiff b/install_utils/schema.ldiff
index 194f886a..fd20c76e 100644
--- a/install_utils/schema.ldiff
+++ b/install_utils/schema.ldiff
@@ -1063,10 +1063,13 @@ dn: olcDatabase={-1}frontend,cn=config
 objectClass: olcDatabaseConfig
 objectClass: olcFrontendConfig
 olcDatabase: {-1}frontend
-olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=extern
- al,cn=auth manage by * break
-olcAccess: {1}to dn.exact="" by * read
-olcAccess: {2}to dn.base="cn=Subschema" by * read
+olcAccess: {0}to *
+        by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
+        by * break
+olcAccess: {1}to dn.exact=""
+        by * read
+olcAccess: {2}to dn.base="cn=Subschema"
+        by * read
 olcSizeLimit: 5000
 structuralObjectClass: olcDatabaseConfig
 entryUUID: fc8f0016-514b-1034-9c2d-0faf5bc7ead5
@@ -1079,8 +1082,9 @@ modifyTimestamp: 20150225150906Z
 dn: olcDatabase={0}config,cn=config
 objectClass: olcDatabaseConfig
 olcDatabase: {0}config
-olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=extern
- al,cn=auth manage by * break
+olcAccess: {0}to *
+        by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
+        by * break
 olcRootDN: cn=config
 olcRootPW: FILL_IT
 structuralObjectClass: olcDatabaseConfig
@@ -1109,33 +1113,42 @@ objectClass: olcHdbConfig
 olcDatabase: {1}hdb
 olcDbDirectory: /var/lib/ldap
 olcSuffix: dc=example,dc=net
-olcAccess: {0}to attrs=userPassword,sambaNTPassword,mail by self write by an
- onymous auth by dn="cn=admin,dc=example,dc=net" write by group="cn
- =readonly,ou=services,ou=groups,dc=example,dc=net" read by group="
- cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write by * no
- ne
-olcAccess: {1}to attrs=shadowLastChange,gecos,loginShell by self write by an
- onymous auth by dn="cn=admin,dc=example,dc=net" write by group="cn
- =readonly,ou=services,ou=groups,dc=example,dc=net" read by group="
- cn=auth,ou=services,ou=groups,dc=example,dc=net" read by group="cn
- =usermgmt,ou=services,ou=groups,dc=example,dc=net" write by * none
-olcAccess: {2}to dn.base="" by * read
-olcAccess: {3}to dn.sub="ou=groups,dc=example,dc=net" by group="cn=
- auth,ou=services,ou=groups,dc=example,dc=net" read by group="cn=re
- adonly,ou=services,ou=groups,dc=example,dc=net" read
-olcAccess: {4}to dn.base="cn=Utilisateurs,dc=example,dc=net" by * read
-olcAccess: {5}to dn.sub="cn=Utilisateurs,dc=example,dc=net" by grou
- p="cn=auth,ou=services,ou=groups,dc=example,dc=net" read by self r
- ead by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net"
-  read by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=or
- g" write
-olcAccess: {6}to dn.sub="ou=service-users,dc=example,dc=net" by gro
- up="cn=auth,ou=services,ou=groups,dc=example,dc=net" read by group
- ="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
-olcAccess: {7}to dn.base="dc=example,dc=net" by * read
-olcAccess: {8}to * by dn="cn=admin,dc=example,dc=net" write by self
-  read by group="cn=readonly,ou=services,ou=groups,dc=example,dc=or
- g" read
+olcAccess: {0}to attrs=userPassword,sambaNTPassword,mail
+        by self write
+        by anonymous auth
+        by dn="cn=admin,dc=example,dc=net" write
+        by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
+        by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write
+        by * none
+olcAccess: {1}to attrs=shadowLastChange,gecos,loginShell
+        by self write
+        by anonymous auth
+        by dn="cn=admin,dc=example,dc=net" write
+        by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
+        by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
+        by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write
+        by * none
+olcAccess: {2}to dn.base=""
+        by * read
+olcAccess: {3}to dn.sub="ou=groups,dc=example,dc=net"
+        by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
+        by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
+olcAccess: {4}to dn.base="cn=Utilisateurs,dc=example,dc=net"
+        by * read
+olcAccess: {5}to dn.sub="cn=Utilisateurs,dc=example,dc=net"
+        by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
+        by self read
+        by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
+        by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write
+olcAccess: {6}to dn.sub="ou=service-users,dc=example,dc=net"
+        by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
+        by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
+olcAccess: {7}to dn.base="dc=example,dc=net"
+        by * read
+olcAccess: {8}to *
+        by dn="cn=admin,dc=example,dc=net" write
+        by self read
+        by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
 olcLastMod: TRUE
 olcRootDN: cn=admin,dc=example,dc=net
 olcRootPW: FILL_IT