Attachment #8521 for bug #43663

(-)conffiles/etc/ldap/slapd.conf.d/10univention-ldap-server_schema (+2 lines)

Lines 40-45	Link Here

	print 'include         /usr/share/univention-ldap/schema/univention-object-metadata.schema'

	print 'include         /usr/share/univention-ldap/schema/univention-object-metadata.schema'

	print 'include         /usr/share/univention-ldap/schema/univention-ldap-extension.schema'

	print 'include         /usr/share/univention-ldap/schema/univention-ldap-extension.schema'

	print 'include         /usr/share/univention-ldap/schema/udm-extension.schema'

	print 'include         /usr/share/univention-ldap/schema/udm-extension.schema'

	print 'include         /usr/share/univention-ldap/schema/univention-listener-extension.schema'

	print 'include         /usr/share/univention-ldap/schema/univention-ucr-extension.schema'

else:

else:

	print 'include         /var/lib/univention-ldap/schema.conf'

	print 'include         /var/lib/univention-ldap/schema.conf'

@!@

@!@

(-)conffiles/etc/ldap/slapd.conf.d/70univention-ldap-server_acl-master-end (+6 lines)

Lines 182-187	Link Here

182

print '   by dn.children="cn=memberserver,cn=computers,%s" write' % (ldap_base)

182

print '   by dn.children="cn=memberserver,cn=computers,%s" write' % (ldap_base)

183

print '   by * none'

183

print '   by * none'

184

185

print 'access to attrs="univentionListenerActive,univentionUCRActive"'

186

print '   by dn.children="cn=dc,cn=computers,%s" %s' % (ldap_base, usr)

187

print '   by dn.children="cn=memberserver,cn=computers,%s" write' % (ldap_base)

188

print '   by * +0 break'

189

print ''

190

185

if configRegistry.is_false('ldap/acl/read/anonymous'):

191

if configRegistry.is_false('ldap/acl/read/anonymous'):

186

	print 'access to dn.subtree="%s" attrs=entry,uid' % (ldap_base,)

192

	print 'access to dn.subtree="%s" attrs=entry,uid' % (ldap_base,)

187

	ldap_acl_read_anonymous_ips = configRegistry.get('ldap/acl/read/ips')

193

	ldap_acl_read_anonymous_ips = configRegistry.get('ldap/acl/read/ips')




# Univention Listener Extension OID: 1.3.6.1.4.1.10176.4210
# <https://hutten.knut.univention.de/mediawiki/index.php/Univention-OIDs>
#objectIdentifier univention 1.3.6.1.4.1.10176
#objectIdentifier univentionListenerExtension univention:4210
objectIdentifier univentionListenerExtension 1.3.6.1.4.1.10176.4210
objectIdentifier univentionListenerExtensionAttributeType univentionListenerExtension:1
objectIdentifier univentionListenerExtensionObjectClass univentionListenerExtension:2

# <http://www.openldap.org/doc/admin24/schema.html>

### Definition for univentionListenerExtension

attributetype ( univentionListenerExtensionAttributeType:11 NAME 'univentionListenerFilename'
	DESC 'Listener filename'
	SINGLE-VALUE
	EQUALITY caseExactMatch
	SUBSTR caseExactSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( univentionListenerExtensionAttributeType:12 NAME 'univentionListenerData'
	DESC 'Listener data'
	SINGLE-VALUE
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )

attributetype ( univentionListenerExtensionAttributeType:13 NAME 'univentionListenerActive'
	DESC 'Flag indicating availability of the Listener module'
	SINGLE-VALUE
	EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )

attributetype ( univentionListenerExtensionAttributeType:14 NAME 'univentionListenerServers'
	DESC 'Servers on which the Listener module ist installed'
	EQUALITY caseExactMatch
	SUBSTR caseExactSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( univentionListenerExtensionObjectClass:1 NAME 'univentionListenerExtension'
	DESC 'UCS Listener extension'
	SUP 'univentionObjectMetadata' STRUCTURAL
	MUST ( cn )
	MAY (	univentionListenerFilename
		$ univentionListenerData
		$ univentionListenerActive
		$ univentionListenerServers
		)
	)





# Univention LDAP Extension OID: 1.3.6.1.4.1.10176.4211
# <https://hutten.knut.univention.de/mediawiki/index.php/Univention-OIDs>
#objectIdentifier univention 1.3.6.1.4.1.10176
#objectIdentifier univentionUCRExtension univention:4211
objectIdentifier univentionUCRExtension 1.3.6.1.4.1.10176.4211
objectIdentifier univentionUCRExtensionAttributeType univentionUCRExtension:1
objectIdentifier univentionUCRExtensionObjectClass univentionUCRExtension:2

# <http://www.openldap.org/doc/admin24/schema.html>

### Definition for univentionUCRExtension

attributetype ( univentionUCRExtensionAttributeType:11 NAME 'univentionUCRFilename'
	DESC 'UCR filename'
	SINGLE-VALUE
	EQUALITY caseExactMatch
	SUBSTR caseExactSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( univentionUCRExtensionAttributeType:12 NAME 'univentionUCRMetaData'
	DESC 'UCR meta data'
	SINGLE-VALUE
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )

attributetype ( univentionUCRExtensionAttributeType:13 NAME 'univentionUCRData'
	DESC 'UCR data (templates, modules and scripts as tar archive)'
	SINGLE-VALUE
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )

attributetype ( univentionUCRExtensionAttributeType:14 NAME 'univentionUCRActive'
	DESC 'Flag indicating availability of the UCR module'
	SINGLE-VALUE
	EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )

attributetype ( univentionUCRExtensionAttributeType:15 NAME 'univentionUCRServers'
	DESC 'Servers on which the UCR module ist installed'
	EQUALITY caseExactMatch
	SUBSTR caseExactSubstringsMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( univentionUCRExtensionObjectClass:1 NAME 'univentionUCRExtension'
	DESC 'UCS UCR extension'
	SUP 'univentionObjectMetadata' STRUCTURAL
	MUST ( cn )
	MAY (	univentionUCRFilename
		$ univentionUCRMetaData
		$ univentionUCRData
		$ univentionUCRActive
		$ univentionUCRServers
		)
	)



Return to bug 43663