mirror of
https://gitlab2.federez.net/re2o/re2o
synced 2024-11-22 03:13:12 +00:00
Refactoring the olcAccess section of schema.ldif for better readability and
changing two dc=example,dc=org to dc=example,dc=net. Signed-off-by: shirenn <shirenn@crans.org>
This commit is contained in:
parent
2efe778ed8
commit
a87c24159d
1 changed files with 46 additions and 33 deletions
|
@ -1063,10 +1063,13 @@ dn: olcDatabase={-1}frontend,cn=config
|
||||||
objectClass: olcDatabaseConfig
|
objectClass: olcDatabaseConfig
|
||||||
objectClass: olcFrontendConfig
|
objectClass: olcFrontendConfig
|
||||||
olcDatabase: {-1}frontend
|
olcDatabase: {-1}frontend
|
||||||
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=extern
|
olcAccess: {0}to *
|
||||||
al,cn=auth manage by * break
|
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
|
||||||
olcAccess: {1}to dn.exact="" by * read
|
by * break
|
||||||
olcAccess: {2}to dn.base="cn=Subschema" by * read
|
olcAccess: {1}to dn.exact=""
|
||||||
|
by * read
|
||||||
|
olcAccess: {2}to dn.base="cn=Subschema"
|
||||||
|
by * read
|
||||||
olcSizeLimit: 5000
|
olcSizeLimit: 5000
|
||||||
structuralObjectClass: olcDatabaseConfig
|
structuralObjectClass: olcDatabaseConfig
|
||||||
entryUUID: fc8f0016-514b-1034-9c2d-0faf5bc7ead5
|
entryUUID: fc8f0016-514b-1034-9c2d-0faf5bc7ead5
|
||||||
|
@ -1079,8 +1082,9 @@ modifyTimestamp: 20150225150906Z
|
||||||
dn: olcDatabase={0}config,cn=config
|
dn: olcDatabase={0}config,cn=config
|
||||||
objectClass: olcDatabaseConfig
|
objectClass: olcDatabaseConfig
|
||||||
olcDatabase: {0}config
|
olcDatabase: {0}config
|
||||||
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=extern
|
olcAccess: {0}to *
|
||||||
al,cn=auth manage by * break
|
by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage
|
||||||
|
by * break
|
||||||
olcRootDN: cn=config
|
olcRootDN: cn=config
|
||||||
olcRootPW: FILL_IT
|
olcRootPW: FILL_IT
|
||||||
structuralObjectClass: olcDatabaseConfig
|
structuralObjectClass: olcDatabaseConfig
|
||||||
|
@ -1109,33 +1113,42 @@ objectClass: olcHdbConfig
|
||||||
olcDatabase: {1}hdb
|
olcDatabase: {1}hdb
|
||||||
olcDbDirectory: /var/lib/ldap
|
olcDbDirectory: /var/lib/ldap
|
||||||
olcSuffix: dc=example,dc=net
|
olcSuffix: dc=example,dc=net
|
||||||
olcAccess: {0}to attrs=userPassword,sambaNTPassword,mail by self write by an
|
olcAccess: {0}to attrs=userPassword,sambaNTPassword,mail
|
||||||
onymous auth by dn="cn=admin,dc=example,dc=net" write by group="cn
|
by self write
|
||||||
=readonly,ou=services,ou=groups,dc=example,dc=net" read by group="
|
by anonymous auth
|
||||||
cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write by * no
|
by dn="cn=admin,dc=example,dc=net" write
|
||||||
ne
|
by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
olcAccess: {1}to attrs=shadowLastChange,gecos,loginShell by self write by an
|
by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write
|
||||||
onymous auth by dn="cn=admin,dc=example,dc=net" write by group="cn
|
by * none
|
||||||
=readonly,ou=services,ou=groups,dc=example,dc=net" read by group="
|
olcAccess: {1}to attrs=shadowLastChange,gecos,loginShell
|
||||||
cn=auth,ou=services,ou=groups,dc=example,dc=net" read by group="cn
|
by self write
|
||||||
=usermgmt,ou=services,ou=groups,dc=example,dc=net" write by * none
|
by anonymous auth
|
||||||
olcAccess: {2}to dn.base="" by * read
|
by dn="cn=admin,dc=example,dc=net" write
|
||||||
olcAccess: {3}to dn.sub="ou=groups,dc=example,dc=net" by group="cn=
|
by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
auth,ou=services,ou=groups,dc=example,dc=net" read by group="cn=re
|
by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
adonly,ou=services,ou=groups,dc=example,dc=net" read
|
by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write
|
||||||
olcAccess: {4}to dn.base="cn=Utilisateurs,dc=example,dc=net" by * read
|
by * none
|
||||||
olcAccess: {5}to dn.sub="cn=Utilisateurs,dc=example,dc=net" by grou
|
olcAccess: {2}to dn.base=""
|
||||||
p="cn=auth,ou=services,ou=groups,dc=example,dc=net" read by self r
|
by * read
|
||||||
ead by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net"
|
olcAccess: {3}to dn.sub="ou=groups,dc=example,dc=net"
|
||||||
read by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=or
|
by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
g" write
|
by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
olcAccess: {6}to dn.sub="ou=service-users,dc=example,dc=net" by gro
|
olcAccess: {4}to dn.base="cn=Utilisateurs,dc=example,dc=net"
|
||||||
up="cn=auth,ou=services,ou=groups,dc=example,dc=net" read by group
|
by * read
|
||||||
="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
|
olcAccess: {5}to dn.sub="cn=Utilisateurs,dc=example,dc=net"
|
||||||
olcAccess: {7}to dn.base="dc=example,dc=net" by * read
|
by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
olcAccess: {8}to * by dn="cn=admin,dc=example,dc=net" write by self
|
by self read
|
||||||
read by group="cn=readonly,ou=services,ou=groups,dc=example,dc=or
|
by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
g" read
|
by group="cn=usermgmt,ou=services,ou=groups,dc=example,dc=net" write
|
||||||
|
olcAccess: {6}to dn.sub="ou=service-users,dc=example,dc=net"
|
||||||
|
by group="cn=auth,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
|
by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
|
olcAccess: {7}to dn.base="dc=example,dc=net"
|
||||||
|
by * read
|
||||||
|
olcAccess: {8}to *
|
||||||
|
by dn="cn=admin,dc=example,dc=net" write
|
||||||
|
by self read
|
||||||
|
by group="cn=readonly,ou=services,ou=groups,dc=example,dc=net" read
|
||||||
olcLastMod: TRUE
|
olcLastMod: TRUE
|
||||||
olcRootDN: cn=admin,dc=example,dc=net
|
olcRootDN: cn=admin,dc=example,dc=net
|
||||||
olcRootPW: FILL_IT
|
olcRootPW: FILL_IT
|
||||||
|
|
Loading…
Reference in a new issue