mirror of https://github.com/dexidp/dex.git
Nándor István Krácser
6 years ago
committed by
GitHub
18 changed files with 280 additions and 3962 deletions
@ -0,0 +1,76 @@
|
||||
name: CI |
||||
|
||||
on: |
||||
push: |
||||
branches: |
||||
- master |
||||
pull_request: |
||||
|
||||
jobs: |
||||
build: |
||||
name: Build |
||||
runs-on: ubuntu-16.04 |
||||
env: |
||||
GOFLAGS: -mod=readonly |
||||
|
||||
services: |
||||
postgres: |
||||
image: postgres:10.8 |
||||
ports: |
||||
- 5432 |
||||
options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5 |
||||
|
||||
etcd: |
||||
image: gcr.io/etcd-development/etcd:v3.2.9 |
||||
ports: |
||||
- 2379 |
||||
env: |
||||
ETCD_LISTEN_CLIENT_URLS: http://0.0.0.0:2379 |
||||
ETCD_ADVERTISE_CLIENT_URLS: http://0.0.0.0:2379 |
||||
options: --health-cmd "ETCDCTL_API=3 etcdctl --endpoints http://localhost:2379 endpoint health" --health-interval 10s --health-timeout 5s --health-retries 5 |
||||
|
||||
keystone: |
||||
image: openio/openstack-keystone:pike |
||||
ports: |
||||
- 5000 |
||||
- 35357 |
||||
options: --health-cmd "curl --fail http://localhost:5000/v3" --health-interval 10s --health-timeout 5s --health-retries 5 |
||||
|
||||
steps: |
||||
- name: Set up Go |
||||
uses: actions/setup-go@v1 |
||||
with: |
||||
go-version: 1.13 |
||||
|
||||
- name: Checkout code |
||||
uses: actions/checkout@v1 |
||||
|
||||
- name: Setup MySQL database |
||||
run: mysql -u root -proot -e 'CREATE DATABASE dex;' |
||||
|
||||
- name: Run tests |
||||
run: make testall |
||||
env: |
||||
DEX_MYSQL_DATABASE: dex |
||||
DEX_MYSQL_USER: root |
||||
DEX_MYSQL_PASSWORD: root |
||||
DEX_MYSQL_HOST: 127.0.0.1 |
||||
DEX_MYSQL_PORT: 3306 |
||||
DEX_POSTGRES_DATABASE: postgres |
||||
DEX_POSTGRES_USER: postgres |
||||
DEX_POSTGRES_PASSWORD: postgres |
||||
DEX_POSTGRES_HOST: localhost |
||||
DEX_POSTGRES_PORT: ${{ job.services.postgres.ports[5432] }} |
||||
DEX_ETCD_ENDPOINTS: http://localhost:${{ job.services.etcd.ports[2379] }} |
||||
DEX_LDAP_TESTS: 1 |
||||
DEX_KEYSTONE_URL: http://localhost:${{ job.services.keystone.ports[5000] }} |
||||
DEX_KEYSTONE_ADMIN_URL: http://localhost:${{ job.services.keystone.ports[35357] }} |
||||
DEX_KEYSTONE_ADMIN_USER: demo |
||||
DEX_KEYSTONE_ADMIN_PASS: DEMO_PASS |
||||
|
||||
- name: Run Kubernetes tests |
||||
run: ./scripts/test-k8s.sh |
||||
|
||||
# Ensure proto generation doesn't depend on external packages. |
||||
- name: Verify proto |
||||
run: make verify-proto |
||||
@ -0,0 +1,8 @@
|
||||
-----BEGIN DH PARAMETERS----- |
||||
MIIBCAKCAQEAx5y2viJKOAAcDYSj55odZsbA7dkSQ9afEPd9uaCLOvRYKLJY1S1V |
||||
C4m1eVfna8JndSLdsBGDQe4BlBTkEYMYR8CJHtUuBxeAucOH8KlF8rIHXXi71oex |
||||
T7kPtJEDINQKOn06bHqNcn0a7ZMWP8jiQ708OYr5P+1T/N82QTAFpDuqK42ZnBqf |
||||
8qzQkkTN0UCktY2EWnFTbNIXcMKWQnYP8zt/CG3Q31b2bnQt2iLEa/DIF7RLNjfx |
||||
9wPQBBAqgWbLmWfdPpHsAPtQxtItb+GRbPs3aLm06CFKlQuteDoP+suo0EtglHcV |
||||
V9Ynvdz0cdJCJ7EPyET6CtLMzc/Puup/AwIBAg== |
||||
-----END DH PARAMETERS----- |
||||
@ -1,610 +0,0 @@
|
||||
# OpenLDAP Core schema |
||||
# $OpenLDAP$ |
||||
## This work is part of OpenLDAP Software <http://www.openldap.org/>. |
||||
## |
||||
## Copyright 1998-2016 The OpenLDAP Foundation. |
||||
## All rights reserved. |
||||
## |
||||
## Redistribution and use in source and binary forms, with or without |
||||
## modification, are permitted only as authorized by the OpenLDAP |
||||
## Public License. |
||||
## |
||||
## A copy of this license is available in the file LICENSE in the |
||||
## top-level directory of the distribution or, alternatively, at |
||||
## <http://www.OpenLDAP.org/license.html>. |
||||
# |
||||
## Portions Copyright (C) The Internet Society (1997-2006). |
||||
## All Rights Reserved. |
||||
## |
||||
## This document and translations of it may be copied and furnished to |
||||
## others, and derivative works that comment on or otherwise explain it |
||||
## or assist in its implementation may be prepared, copied, published |
||||
## and distributed, in whole or in part, without restriction of any |
||||
## kind, provided that the above copyright notice and this paragraph are |
||||
## included on all such copies and derivative works. However, this |
||||
## document itself may not be modified in any way, such as by removing |
||||
## the copyright notice or references to the Internet Society or other |
||||
## Internet organizations, except as needed for the purpose of |
||||
## developing Internet standards in which case the procedures for |
||||
## copyrights defined in the Internet Standards process must be |
||||
## followed, or as required to translate it into languages other than |
||||
## English. |
||||
## |
||||
## The limited permissions granted above are perpetual and will not be |
||||
## revoked by the Internet Society or its successors or assigns. |
||||
## |
||||
## This document and the information contained herein is provided on an |
||||
## "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING |
||||
## TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING |
||||
## BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION |
||||
## HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF |
||||
## MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. |
||||
|
||||
# |
||||
# |
||||
# Includes LDAPv3 schema items from: |
||||
# RFC 2252/2256 (LDAPv3) |
||||
# |
||||
# Select standard track schema items: |
||||
# RFC 1274 (uid/dc) |
||||
# RFC 2079 (URI) |
||||
# RFC 2247 (dc/dcObject) |
||||
# RFC 2587 (PKI) |
||||
# RFC 2589 (Dynamic Directory Services) |
||||
# RFC 4524 (associatedDomain) |
||||
# |
||||
# Select informational schema items: |
||||
# RFC 2377 (uidObject) |
||||
|
||||
# |
||||
# Standard attribute types from RFC 2256 |
||||
# |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.0 NAME 'objectClass' |
||||
# DESC 'RFC2256: object classes of the entity' |
||||
# EQUALITY objectIdentifierMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 ) |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.1 NAME ( 'aliasedObjectName' 'aliasedEntryName' ) |
||||
# DESC 'RFC2256: name of aliased object' |
||||
# EQUALITY distinguishedNameMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 2.5.4.2 NAME 'knowledgeInformation' |
||||
DESC 'RFC2256: knowledge information' |
||||
EQUALITY caseIgnoreMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} ) |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.3 NAME ( 'cn' 'commonName' ) |
||||
# DESC 'RFC2256: common name(s) for which the entity is known by' |
||||
# SUP name ) |
||||
|
||||
attributetype ( 2.5.4.4 NAME ( 'sn' 'surname' ) |
||||
DESC 'RFC2256: last (family) name(s) for which the entity is known by' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.5 NAME 'serialNumber' |
||||
DESC 'RFC2256: serial number of the entity' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} ) |
||||
|
||||
# RFC 4519 definition ('countryName' in X.500 and RFC2256) |
||||
attributetype ( 2.5.4.6 NAME ( 'c' 'countryName' ) |
||||
DESC 'RFC4519: two-letter ISO-3166 country code' |
||||
SUP name |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.11 |
||||
SINGLE-VALUE ) |
||||
|
||||
#attributetype ( 2.5.4.6 NAME ( 'c' 'countryName' ) |
||||
# DESC 'RFC2256: ISO-3166 country 2-letter code' |
||||
# SUP name SINGLE-VALUE ) |
||||
|
||||
attributetype ( 2.5.4.7 NAME ( 'l' 'localityName' ) |
||||
DESC 'RFC2256: locality which this object resides in' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) |
||||
DESC 'RFC2256: state or province which this object resides in' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.9 NAME ( 'street' 'streetAddress' ) |
||||
DESC 'RFC2256: street address of this object' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) |
||||
|
||||
attributetype ( 2.5.4.10 NAME ( 'o' 'organizationName' ) |
||||
DESC 'RFC2256: organization this object belongs to' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) |
||||
DESC 'RFC2256: organizational unit this object belongs to' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.12 NAME 'title' |
||||
DESC 'RFC2256: title associated with the entity' |
||||
SUP name ) |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.13 NAME 'description' |
||||
# DESC 'RFC2256: descriptive information' |
||||
# EQUALITY caseIgnoreMatch |
||||
# SUBSTR caseIgnoreSubstringsMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} ) |
||||
|
||||
# Deprecated by enhancedSearchGuide |
||||
attributetype ( 2.5.4.14 NAME 'searchGuide' |
||||
DESC 'RFC2256: search guide, deprecated by enhancedSearchGuide' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 ) |
||||
|
||||
attributetype ( 2.5.4.15 NAME 'businessCategory' |
||||
DESC 'RFC2256: business category' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) |
||||
|
||||
attributetype ( 2.5.4.16 NAME 'postalAddress' |
||||
DESC 'RFC2256: postal address' |
||||
EQUALITY caseIgnoreListMatch |
||||
SUBSTR caseIgnoreListSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ) |
||||
|
||||
attributetype ( 2.5.4.17 NAME 'postalCode' |
||||
DESC 'RFC2256: postal code' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} ) |
||||
|
||||
attributetype ( 2.5.4.18 NAME 'postOfficeBox' |
||||
DESC 'RFC2256: Post Office Box' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} ) |
||||
|
||||
attributetype ( 2.5.4.19 NAME 'physicalDeliveryOfficeName' |
||||
DESC 'RFC2256: Physical Delivery Office Name' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) |
||||
|
||||
attributetype ( 2.5.4.20 NAME 'telephoneNumber' |
||||
DESC 'RFC2256: Telephone Number' |
||||
EQUALITY telephoneNumberMatch |
||||
SUBSTR telephoneNumberSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} ) |
||||
|
||||
attributetype ( 2.5.4.21 NAME 'telexNumber' |
||||
DESC 'RFC2256: Telex Number' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 ) |
||||
|
||||
attributetype ( 2.5.4.22 NAME 'teletexTerminalIdentifier' |
||||
DESC 'RFC2256: Teletex Terminal Identifier' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 ) |
||||
|
||||
attributetype ( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) |
||||
DESC 'RFC2256: Facsimile (Fax) Telephone Number' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 ) |
||||
|
||||
attributetype ( 2.5.4.24 NAME 'x121Address' |
||||
DESC 'RFC2256: X.121 Address' |
||||
EQUALITY numericStringMatch |
||||
SUBSTR numericStringSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{15} ) |
||||
|
||||
attributetype ( 2.5.4.25 NAME 'internationaliSDNNumber' |
||||
DESC 'RFC2256: international ISDN number' |
||||
EQUALITY numericStringMatch |
||||
SUBSTR numericStringSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} ) |
||||
|
||||
attributetype ( 2.5.4.26 NAME 'registeredAddress' |
||||
DESC 'RFC2256: registered postal address' |
||||
SUP postalAddress |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ) |
||||
|
||||
attributetype ( 2.5.4.27 NAME 'destinationIndicator' |
||||
DESC 'RFC2256: destination indicator' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} ) |
||||
|
||||
attributetype ( 2.5.4.28 NAME 'preferredDeliveryMethod' |
||||
DESC 'RFC2256: preferred delivery method' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 |
||||
SINGLE-VALUE ) |
||||
|
||||
attributetype ( 2.5.4.29 NAME 'presentationAddress' |
||||
DESC 'RFC2256: presentation address' |
||||
EQUALITY presentationAddressMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.43 |
||||
SINGLE-VALUE ) |
||||
|
||||
attributetype ( 2.5.4.30 NAME 'supportedApplicationContext' |
||||
DESC 'RFC2256: supported application context' |
||||
EQUALITY objectIdentifierMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 ) |
||||
|
||||
attributetype ( 2.5.4.31 NAME 'member' |
||||
DESC 'RFC2256: member of a group' |
||||
SUP distinguishedName ) |
||||
|
||||
attributetype ( 2.5.4.32 NAME 'owner' |
||||
DESC 'RFC2256: owner (of the object)' |
||||
SUP distinguishedName ) |
||||
|
||||
attributetype ( 2.5.4.33 NAME 'roleOccupant' |
||||
DESC 'RFC2256: occupant of role' |
||||
SUP distinguishedName ) |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.34 NAME 'seeAlso' |
||||
# DESC 'RFC2256: DN of related object' |
||||
# SUP distinguishedName ) |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.35 NAME 'userPassword' |
||||
# DESC 'RFC2256/2307: password of user' |
||||
# EQUALITY octetStringMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} ) |
||||
|
||||
# Must be transferred using ;binary |
||||
# with certificateExactMatch rule (per X.509) |
||||
attributetype ( 2.5.4.36 NAME 'userCertificate' |
||||
DESC 'RFC2256: X.509 user certificate, use ;binary' |
||||
EQUALITY certificateExactMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 ) |
||||
|
||||
# Must be transferred using ;binary |
||||
# with certificateExactMatch rule (per X.509) |
||||
attributetype ( 2.5.4.37 NAME 'cACertificate' |
||||
DESC 'RFC2256: X.509 CA certificate, use ;binary' |
||||
EQUALITY certificateExactMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 ) |
||||
|
||||
# Must be transferred using ;binary |
||||
attributetype ( 2.5.4.38 NAME 'authorityRevocationList' |
||||
DESC 'RFC2256: X.509 authority revocation list, use ;binary' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ) |
||||
|
||||
# Must be transferred using ;binary |
||||
attributetype ( 2.5.4.39 NAME 'certificateRevocationList' |
||||
DESC 'RFC2256: X.509 certificate revocation list, use ;binary' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ) |
||||
|
||||
# Must be stored and requested in the binary form |
||||
attributetype ( 2.5.4.40 NAME 'crossCertificatePair' |
||||
DESC 'RFC2256: X.509 cross certificate pair, use ;binary' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.10 ) |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.41 NAME 'name' |
||||
# EQUALITY caseIgnoreMatch |
||||
# SUBSTR caseIgnoreSubstringsMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} ) |
||||
|
||||
attributetype ( 2.5.4.42 NAME ( 'givenName' 'gn' ) |
||||
DESC 'RFC2256: first name(s) for which the entity is known by' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.43 NAME 'initials' |
||||
DESC 'RFC2256: initials of some or all of names, but not the surname(s).' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.44 NAME 'generationQualifier' |
||||
DESC 'RFC2256: name qualifier indicating a generation' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.45 NAME 'x500UniqueIdentifier' |
||||
DESC 'RFC2256: X.500 unique identifier' |
||||
EQUALITY bitStringMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 ) |
||||
|
||||
attributetype ( 2.5.4.46 NAME 'dnQualifier' |
||||
DESC 'RFC2256: DN qualifier' |
||||
EQUALITY caseIgnoreMatch |
||||
ORDERING caseIgnoreOrderingMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 ) |
||||
|
||||
attributetype ( 2.5.4.47 NAME 'enhancedSearchGuide' |
||||
DESC 'RFC2256: enhanced search guide' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 ) |
||||
|
||||
attributetype ( 2.5.4.48 NAME 'protocolInformation' |
||||
DESC 'RFC2256: protocol information' |
||||
EQUALITY protocolInformationMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.42 ) |
||||
|
||||
# system schema |
||||
#attributetype ( 2.5.4.49 NAME 'distinguishedName' |
||||
# EQUALITY distinguishedNameMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 ) |
||||
|
||||
attributetype ( 2.5.4.50 NAME 'uniqueMember' |
||||
DESC 'RFC2256: unique member of a group' |
||||
EQUALITY uniqueMemberMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 ) |
||||
|
||||
attributetype ( 2.5.4.51 NAME 'houseIdentifier' |
||||
DESC 'RFC2256: house identifier' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} ) |
||||
|
||||
# Must be transferred using ;binary |
||||
attributetype ( 2.5.4.52 NAME 'supportedAlgorithms' |
||||
DESC 'RFC2256: supported algorithms' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 ) |
||||
|
||||
# Must be transferred using ;binary |
||||
attributetype ( 2.5.4.53 NAME 'deltaRevocationList' |
||||
DESC 'RFC2256: delta revocation list; use ;binary' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ) |
||||
|
||||
attributetype ( 2.5.4.54 NAME 'dmdName' |
||||
DESC 'RFC2256: name of DMD' |
||||
SUP name ) |
||||
|
||||
attributetype ( 2.5.4.65 NAME 'pseudonym' |
||||
DESC 'X.520(4th): pseudonym for the object' |
||||
SUP name ) |
||||
|
||||
# Standard object classes from RFC2256 |
||||
|
||||
# system schema |
||||
#objectclass ( 2.5.6.0 NAME 'top' |
||||
# DESC 'RFC2256: top of the superclass chain' |
||||
# ABSTRACT |
||||
# MUST objectClass ) |
||||
|
||||
# system schema |
||||
#objectclass ( 2.5.6.1 NAME 'alias' |
||||
# DESC 'RFC2256: an alias' |
||||
# SUP top STRUCTURAL |
||||
# MUST aliasedObjectName ) |
||||
|
||||
objectclass ( 2.5.6.2 NAME 'country' |
||||
DESC 'RFC2256: a country' |
||||
SUP top STRUCTURAL |
||||
MUST c |
||||
MAY ( searchGuide $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.3 NAME 'locality' |
||||
DESC 'RFC2256: a locality' |
||||
SUP top STRUCTURAL |
||||
MAY ( street $ seeAlso $ searchGuide $ st $ l $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.4 NAME 'organization' |
||||
DESC 'RFC2256: an organization' |
||||
SUP top STRUCTURAL |
||||
MUST o |
||||
MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ |
||||
x121Address $ registeredAddress $ destinationIndicator $ |
||||
preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ |
||||
telephoneNumber $ internationaliSDNNumber $ |
||||
facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ |
||||
postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.5 NAME 'organizationalUnit' |
||||
DESC 'RFC2256: an organizational unit' |
||||
SUP top STRUCTURAL |
||||
MUST ou |
||||
MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ |
||||
x121Address $ registeredAddress $ destinationIndicator $ |
||||
preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ |
||||
telephoneNumber $ internationaliSDNNumber $ |
||||
facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ |
||||
postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.6 NAME 'person' |
||||
DESC 'RFC2256: a person' |
||||
SUP top STRUCTURAL |
||||
MUST ( sn $ cn ) |
||||
MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.7 NAME 'organizationalPerson' |
||||
DESC 'RFC2256: an organizational person' |
||||
SUP person STRUCTURAL |
||||
MAY ( title $ x121Address $ registeredAddress $ destinationIndicator $ |
||||
preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ |
||||
telephoneNumber $ internationaliSDNNumber $ |
||||
facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ |
||||
postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l ) ) |
||||
|
||||
objectclass ( 2.5.6.8 NAME 'organizationalRole' |
||||
DESC 'RFC2256: an organizational role' |
||||
SUP top STRUCTURAL |
||||
MUST cn |
||||
MAY ( x121Address $ registeredAddress $ destinationIndicator $ |
||||
preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ |
||||
telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ |
||||
seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ |
||||
postOfficeBox $ postalCode $ postalAddress $ |
||||
physicalDeliveryOfficeName $ ou $ st $ l $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.9 NAME 'groupOfNames' |
||||
DESC 'RFC2256: a group of names (DNs)' |
||||
SUP top STRUCTURAL |
||||
MUST ( member $ cn ) |
||||
MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.10 NAME 'residentialPerson' |
||||
DESC 'RFC2256: an residential person' |
||||
SUP person STRUCTURAL |
||||
MUST l |
||||
MAY ( businessCategory $ x121Address $ registeredAddress $ |
||||
destinationIndicator $ preferredDeliveryMethod $ telexNumber $ |
||||
teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ |
||||
facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ |
||||
postOfficeBox $ postalCode $ postalAddress $ |
||||
physicalDeliveryOfficeName $ st $ l ) ) |
||||
|
||||
objectclass ( 2.5.6.11 NAME 'applicationProcess' |
||||
DESC 'RFC2256: an application process' |
||||
SUP top STRUCTURAL |
||||
MUST cn |
||||
MAY ( seeAlso $ ou $ l $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.12 NAME 'applicationEntity' |
||||
DESC 'RFC2256: an application entity' |
||||
SUP top STRUCTURAL |
||||
MUST ( presentationAddress $ cn ) |
||||
MAY ( supportedApplicationContext $ seeAlso $ ou $ o $ l $ |
||||
description ) ) |
||||
|
||||
objectclass ( 2.5.6.13 NAME 'dSA' |
||||
DESC 'RFC2256: a directory system agent (a server)' |
||||
SUP applicationEntity STRUCTURAL |
||||
MAY knowledgeInformation ) |
||||
|
||||
objectclass ( 2.5.6.14 NAME 'device' |
||||
DESC 'RFC2256: a device' |
||||
SUP top STRUCTURAL |
||||
MUST cn |
||||
MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.15 NAME 'strongAuthenticationUser' |
||||
DESC 'RFC2256: a strong authentication user' |
||||
SUP top AUXILIARY |
||||
MUST userCertificate ) |
||||
|
||||
objectclass ( 2.5.6.16 NAME 'certificationAuthority' |
||||
DESC 'RFC2256: a certificate authority' |
||||
SUP top AUXILIARY |
||||
MUST ( authorityRevocationList $ certificateRevocationList $ |
||||
cACertificate ) MAY crossCertificatePair ) |
||||
|
||||
objectclass ( 2.5.6.17 NAME 'groupOfUniqueNames' |
||||
DESC 'RFC2256: a group of unique names (DN and Unique Identifier)' |
||||
SUP top STRUCTURAL |
||||
MUST ( uniqueMember $ cn ) |
||||
MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) ) |
||||
|
||||
objectclass ( 2.5.6.18 NAME 'userSecurityInformation' |
||||
DESC 'RFC2256: a user security information' |
||||
SUP top AUXILIARY |
||||
MAY ( supportedAlgorithms ) ) |
||||
|
||||
objectclass ( 2.5.6.16.2 NAME 'certificationAuthority-V2' |
||||
SUP certificationAuthority |
||||
AUXILIARY MAY ( deltaRevocationList ) ) |
||||
|
||||
objectclass ( 2.5.6.19 NAME 'cRLDistributionPoint' |
||||
SUP top STRUCTURAL |
||||
MUST ( cn ) |
||||
MAY ( certificateRevocationList $ authorityRevocationList $ |
||||
deltaRevocationList ) ) |
||||
|
||||
objectclass ( 2.5.6.20 NAME 'dmd' |
||||
SUP top STRUCTURAL |
||||
MUST ( dmdName ) |
||||
MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ |
||||
x121Address $ registeredAddress $ destinationIndicator $ |
||||
preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ |
||||
telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ |
||||
street $ postOfficeBox $ postalCode $ postalAddress $ |
||||
physicalDeliveryOfficeName $ st $ l $ description ) ) |
||||
|
||||
# |
||||
# Object Classes from RFC 2587 |
||||
# |
||||
objectclass ( 2.5.6.21 NAME 'pkiUser' |
||||
DESC 'RFC2587: a PKI user' |
||||
SUP top AUXILIARY |
||||
MAY userCertificate ) |
||||
|
||||
objectclass ( 2.5.6.22 NAME 'pkiCA' |
||||
DESC 'RFC2587: PKI certificate authority' |
||||
SUP top AUXILIARY |
||||
MAY ( authorityRevocationList $ certificateRevocationList $ |
||||
cACertificate $ crossCertificatePair ) ) |
||||
|
||||
objectclass ( 2.5.6.23 NAME 'deltaCRL' |
||||
DESC 'RFC2587: PKI user' |
||||
SUP top AUXILIARY |
||||
MAY deltaRevocationList ) |
||||
|
||||
# |
||||
# Standard Track URI label schema from RFC 2079 |
||||
# system schema |
||||
#attributetype ( 1.3.6.1.4.1.250.1.57 NAME 'labeledURI' |
||||
# DESC 'RFC2079: Uniform Resource Identifier with optional label' |
||||
# EQUALITY caseExactMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) |
||||
|
||||
objectclass ( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' |
||||
DESC 'RFC2079: object that contains the URI attribute type' |
||||
SUP top AUXILIARY |
||||
MAY ( labeledURI ) ) |
||||
|
||||
# |
||||
# Derived from RFC 1274, but with new "short names" |
||||
# |
||||
#attributetype ( 0.9.2342.19200300.100.1.1 |
||||
# NAME ( 'uid' 'userid' ) |
||||
# DESC 'RFC1274: user identifier' |
||||
# EQUALITY caseIgnoreMatch |
||||
# SUBSTR caseIgnoreSubstringsMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) |
||||
|
||||
attributetype ( 0.9.2342.19200300.100.1.3 |
||||
NAME ( 'mail' 'rfc822Mailbox' ) |
||||
DESC 'RFC1274: RFC822 Mailbox' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SUBSTR caseIgnoreIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} ) |
||||
|
||||
objectclass ( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject' |
||||
DESC 'RFC1274: simple security object' |
||||
SUP top AUXILIARY |
||||
MUST userPassword ) |
||||
|
||||
# RFC 1274 + RFC 2247 |
||||
attributetype ( 0.9.2342.19200300.100.1.25 |
||||
NAME ( 'dc' 'domainComponent' ) |
||||
DESC 'RFC1274/2247: domain component' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SUBSTR caseIgnoreIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
||||
|
||||
# RFC 2247 |
||||
objectclass ( 1.3.6.1.4.1.1466.344 NAME 'dcObject' |
||||
DESC 'RFC2247: domain component object' |
||||
SUP top AUXILIARY MUST dc ) |
||||
|
||||
# RFC 2377 |
||||
objectclass ( 1.3.6.1.1.3.1 NAME 'uidObject' |
||||
DESC 'RFC2377: uid object' |
||||
SUP top AUXILIARY MUST uid ) |
||||
|
||||
# RFC 4524 |
||||
# The 'associatedDomain' attribute specifies DNS [RFC1034][RFC2181] |
||||
# host names [RFC1123] that are associated with an object. That is, |
||||
# values of this attribute should conform to the following ABNF: |
||||
# |
||||
# domain = root / label *( DOT label ) |
||||
# root = SPACE |
||||
# label = LETDIG [ *61( LETDIG / HYPHEN ) LETDIG ] |
||||
# LETDIG = %x30-39 / %x41-5A / %x61-7A ; "0" - "9" / "A"-"Z" / "a"-"z" |
||||
# SPACE = %x20 ; space (" ") |
||||
# HYPHEN = %x2D ; hyphen ("-") |
||||
# DOT = %x2E ; period (".") |
||||
attributetype ( 0.9.2342.19200300.100.1.37 |
||||
NAME 'associatedDomain' |
||||
DESC 'RFC1274: domain associated with object' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SUBSTR caseIgnoreIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
||||
|
||||
# RFC 2459 -- deprecated in favor of 'mail' (in cosine.schema) |
||||
attributetype ( 1.2.840.113549.1.9.1 |
||||
NAME ( 'email' 'emailAddress' 'pkcs9email' ) |
||||
DESC 'RFC3280: legacy attribute for email addresses in DNs' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SUBSTR caseIgnoreIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ) |
||||
|
||||
File diff suppressed because it is too large
Load Diff
@ -1,155 +0,0 @@
|
||||
# inetorgperson.schema -- InetOrgPerson (RFC2798) |
||||
# $OpenLDAP$ |
||||
## This work is part of OpenLDAP Software <http://www.openldap.org/>. |
||||
## |
||||
## Copyright 1998-2016 The OpenLDAP Foundation. |
||||
## All rights reserved. |
||||
## |
||||
## Redistribution and use in source and binary forms, with or without |
||||
## modification, are permitted only as authorized by the OpenLDAP |
||||
## Public License. |
||||
## |
||||
## A copy of this license is available in the file LICENSE in the |
||||
## top-level directory of the distribution or, alternatively, at |
||||
## <http://www.OpenLDAP.org/license.html>. |
||||
# |
||||
# InetOrgPerson (RFC2798) |
||||
# |
||||
# Depends upon |
||||
# Definition of an X.500 Attribute Type and an Object Class to Hold |
||||
# Uniform Resource Identifiers (URIs) [RFC2079] |
||||
# (core.schema) |
||||
# |
||||
# A Summary of the X.500(96) User Schema for use with LDAPv3 [RFC2256] |
||||
# (core.schema) |
||||
# |
||||
# The COSINE and Internet X.500 Schema [RFC1274] (cosine.schema) |
||||
|
||||
# carLicense |
||||
# This multivalued field is used to record the values of the license or |
||||
# registration plate associated with an individual. |
||||
attributetype ( 2.16.840.1.113730.3.1.1 |
||||
NAME 'carLicense' |
||||
DESC 'RFC2798: vehicle license or registration plate' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) |
||||
|
||||
# departmentNumber |
||||
# Code for department to which a person belongs. This can also be |
||||
# strictly numeric (e.g., 1234) or alphanumeric (e.g., ABC/123). |
||||
attributetype ( 2.16.840.1.113730.3.1.2 |
||||
NAME 'departmentNumber' |
||||
DESC 'RFC2798: identifies a department within an organization' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) |
||||
|
||||
# displayName |
||||
# When displaying an entry, especially within a one-line summary list, it |
||||
# is useful to be able to identify a name to be used. Since other attri- |
||||
# bute types such as 'cn' are multivalued, an additional attribute type is |
||||
# needed. Display name is defined for this purpose. |
||||
attributetype ( 2.16.840.1.113730.3.1.241 |
||||
NAME 'displayName' |
||||
DESC 'RFC2798: preferred name to be used when displaying entries' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 |
||||
SINGLE-VALUE ) |
||||
|
||||
# employeeNumber |
||||
# Numeric or alphanumeric identifier assigned to a person, typically based |
||||
# on order of hire or association with an organization. Single valued. |
||||
attributetype ( 2.16.840.1.113730.3.1.3 |
||||
NAME 'employeeNumber' |
||||
DESC 'RFC2798: numerically identifies an employee within an organization' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 |
||||
SINGLE-VALUE ) |
||||
|
||||
# employeeType |
||||
# Used to identify the employer to employee relationship. Typical values |
||||
# used will be "Contractor", "Employee", "Intern", "Temp", "External", and |
||||
# "Unknown" but any value may be used. |
||||
attributetype ( 2.16.840.1.113730.3.1.4 |
||||
NAME 'employeeType' |
||||
DESC 'RFC2798: type of employment for a person' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) |
||||
|
||||
# jpegPhoto |
||||
# Used to store one or more images of a person using the JPEG File |
||||
# Interchange Format [JFIF]. |
||||
# Note that the jpegPhoto attribute type was defined for use in the |
||||
# Internet X.500 pilots but no referencable definition for it could be |
||||
# located. |
||||
attributetype ( 0.9.2342.19200300.100.1.60 |
||||
NAME 'jpegPhoto' |
||||
DESC 'RFC2798: a JPEG image' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 ) |
||||
|
||||
# preferredLanguage |
||||
# Used to indicate an individual's preferred written or spoken |
||||
# language. This is useful for international correspondence or human- |
||||
# computer interaction. Values for this attribute type MUST conform to |
||||
# the definition of the Accept-Language header field defined in |
||||
# [RFC2068] with one exception: the sequence "Accept-Language" ":" |
||||
# should be omitted. This is a single valued attribute type. |
||||
attributetype ( 2.16.840.1.113730.3.1.39 |
||||
NAME 'preferredLanguage' |
||||
DESC 'RFC2798: preferred written or spoken language for a person' |
||||
EQUALITY caseIgnoreMatch |
||||
SUBSTR caseIgnoreSubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 |
||||
SINGLE-VALUE ) |
||||
|
||||
# userSMIMECertificate |
||||
# A PKCS#7 [RFC2315] SignedData, where the content that is signed is |
||||
# ignored by consumers of userSMIMECertificate values. It is |
||||
# recommended that values have a `contentType' of data with an absent |
||||
# `content' field. Values of this attribute contain a person's entire |
||||
# certificate chain and an smimeCapabilities field [RFC2633] that at a |
||||
# minimum describes their SMIME algorithm capabilities. Values for |
||||
# this attribute are to be stored and requested in binary form, as |
||||
# 'userSMIMECertificate;binary'. If available, this attribute is |
||||
# preferred over the userCertificate attribute for S/MIME applications. |
||||
## OpenLDAP note: ";binary" transfer should NOT be used as syntax is binary |
||||
attributetype ( 2.16.840.1.113730.3.1.40 |
||||
NAME 'userSMIMECertificate' |
||||
DESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 ) |
||||
|
||||
# userPKCS12 |
||||
# PKCS #12 [PKCS12] provides a format for exchange of personal identity |
||||
# information. When such information is stored in a directory service, |
||||
# the userPKCS12 attribute should be used. This attribute is to be stored |
||||
# and requested in binary form, as 'userPKCS12;binary'. The attribute |
||||
# values are PFX PDUs stored as binary data. |
||||
## OpenLDAP note: ";binary" transfer should NOT be used as syntax is binary |
||||
attributetype ( 2.16.840.1.113730.3.1.216 |
||||
NAME 'userPKCS12' |
||||
DESC 'RFC2798: personal identity information, a PKCS #12 PFX' |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 ) |
||||
|
||||
|
||||
# inetOrgPerson |
||||
# The inetOrgPerson represents people who are associated with an |
||||
# organization in some way. It is a structural class and is derived |
||||
# from the organizationalPerson which is defined in X.521 [X521]. |
||||
objectclass ( 2.16.840.1.113730.3.2.2 |
||||
NAME 'inetOrgPerson' |
||||
DESC 'RFC2798: Internet Organizational Person' |
||||
SUP organizationalPerson |
||||
STRUCTURAL |
||||
MAY ( |
||||
audio $ businessCategory $ carLicense $ departmentNumber $ |
||||
displayName $ employeeNumber $ employeeType $ givenName $ |
||||
homePhone $ homePostalAddress $ initials $ jpegPhoto $ |
||||
labeledURI $ mail $ manager $ mobile $ o $ pager $ |
||||
photo $ roomNumber $ secretary $ uid $ userCertificate $ |
||||
x500uniqueIdentifier $ preferredLanguage $ |
||||
userSMIMECertificate $ userPKCS12 ) |
||||
) |
||||
@ -1,75 +0,0 @@
|
||||
# misc.schema -- assorted schema definitions |
||||
# $OpenLDAP$ |
||||
## This work is part of OpenLDAP Software <http://www.openldap.org/>. |
||||
## |
||||
## Copyright 1998-2016 The OpenLDAP Foundation. |
||||
## All rights reserved. |
||||
## |
||||
## Redistribution and use in source and binary forms, with or without |
||||
## modification, are permitted only as authorized by the OpenLDAP |
||||
## Public License. |
||||
## |
||||
## A copy of this license is available in the file LICENSE in the |
||||
## top-level directory of the distribution or, alternatively, at |
||||
## <http://www.OpenLDAP.org/license.html>. |
||||
# |
||||
# Assorted definitions from several sources, including |
||||
# ''works in progress''. Contents of this file are |
||||
# subject to change (including deletion) without notice. |
||||
# |
||||
# Not recommended for production use! |
||||
# Use with extreme caution! |
||||
|
||||
#----------------------------------------------------------- |
||||
# draft-lachman-laser-ldap-mail-routing-02.txt !!!EXPIRED!!! |
||||
# (a work in progress) |
||||
# |
||||
attributetype ( 2.16.840.1.113730.3.1.13 |
||||
NAME 'mailLocalAddress' |
||||
DESC 'RFC822 email address of this recipient' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} ) |
||||
|
||||
attributetype ( 2.16.840.1.113730.3.1.18 |
||||
NAME 'mailHost' |
||||
DESC 'FQDN of the SMTP/MTA of this recipient' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} |
||||
SINGLE-VALUE ) |
||||
|
||||
attributetype ( 2.16.840.1.113730.3.1.47 |
||||
NAME 'mailRoutingAddress' |
||||
DESC 'RFC822 routing address of this recipient' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} |
||||
SINGLE-VALUE ) |
||||
|
||||
# I-D leaves this OID TBD. |
||||
# iPlanet uses 2.16.840.1.113.730.3.2.147 but that is an |
||||
# improperly delegated OID. A typo is likely. |
||||
objectclass ( 2.16.840.1.113730.3.2.147 |
||||
NAME 'inetLocalMailRecipient' |
||||
DESC 'Internet local mail recipient' |
||||
SUP top AUXILIARY |
||||
MAY ( mailLocalAddress $ mailHost $ mailRoutingAddress ) ) |
||||
|
||||
#----------------------------------------------------------- |
||||
# draft-srivastava-ldap-mail-00.txt !!!EXPIRED!!! |
||||
# (a work in progress) |
||||
# |
||||
attributetype ( 1.3.6.1.4.1.42.2.27.2.1.15 |
||||
NAME 'rfc822MailMember' |
||||
DESC 'rfc822 mail address of group member(s)' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
||||
|
||||
#----------------------------------------------------------- |
||||
# !!!no I-D!!! |
||||
# (a work in progress) |
||||
# |
||||
objectclass ( 1.3.6.1.4.1.42.2.27.1.2.5 |
||||
NAME 'nisMailAlias' |
||||
DESC 'NIS mail alias' |
||||
SUP top STRUCTURAL |
||||
MUST cn |
||||
MAY rfc822MailMember ) |
||||
@ -1,237 +0,0 @@
|
||||
# $OpenLDAP$ |
||||
## This work is part of OpenLDAP Software <http://www.openldap.org/>. |
||||
## |
||||
## Copyright 1998-2016 The OpenLDAP Foundation. |
||||
## All rights reserved. |
||||
## |
||||
## Redistribution and use in source and binary forms, with or without |
||||
## modification, are permitted only as authorized by the OpenLDAP |
||||
## Public License. |
||||
## |
||||
## A copy of this license is available in the file LICENSE in the |
||||
## top-level directory of the distribution or, alternatively, at |
||||
## <http://www.OpenLDAP.org/license.html>. |
||||
|
||||
# Definitions from RFC2307 (Experimental) |
||||
# An Approach for Using LDAP as a Network Information Service |
||||
|
||||
# Depends upon core.schema and cosine.schema |
||||
|
||||
# Note: The definitions in RFC2307 are given in syntaxes closely related |
||||
# to those in RFC2252, however, some liberties are taken that are not |
||||
# supported by RFC2252. This file has been written following RFC2252 |
||||
# strictly. |
||||
|
||||
# OID Base is iso(1) org(3) dod(6) internet(1) directory(1) nisSchema(1). |
||||
# i.e. nisSchema in RFC2307 is 1.3.6.1.1.1 |
||||
# |
||||
# Syntaxes are under 1.3.6.1.1.1.0 (two new syntaxes are defined) |
||||
# validaters for these syntaxes are incomplete, they only |
||||
# implement printable string validation (which is good as the |
||||
# common use of these syntaxes violates the specification). |
||||
# Attribute types are under 1.3.6.1.1.1.1 |
||||
# Object classes are under 1.3.6.1.1.1.2 |
||||
|
||||
# Attribute Type Definitions |
||||
|
||||
# builtin |
||||
#attributetype ( 1.3.6.1.1.1.1.0 NAME 'uidNumber' |
||||
# DESC 'An integer uniquely identifying a user in an administrative domain' |
||||
# EQUALITY integerMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
# builtin |
||||
#attributetype ( 1.3.6.1.1.1.1.1 NAME 'gidNumber' |
||||
# DESC 'An integer uniquely identifying a group in an administrative domain' |
||||
# EQUALITY integerMatch |
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos' |
||||
DESC 'The GECOS field; the common name' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SUBSTR caseIgnoreIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' |
||||
DESC 'The absolute path to the home directory' |
||||
EQUALITY caseExactIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell' |
||||
DESC 'The path to the login shell' |
||||
EQUALITY caseExactIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid' |
||||
EQUALITY caseExactIA5Match |
||||
SUBSTR caseExactIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' |
||||
EQUALITY caseExactIA5Match |
||||
SUBSTR caseExactIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' |
||||
DESC 'Netgroup triple' |
||||
SYNTAX 1.3.6.1.1.1.0.0 ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' |
||||
SUP name ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' |
||||
EQUALITY integerMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' |
||||
DESC 'IP address' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' |
||||
DESC 'IP network' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' |
||||
DESC 'IP netmask' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress' |
||||
DESC 'MAC address' |
||||
EQUALITY caseIgnoreIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter' |
||||
DESC 'rpc.bootparamd parameter' |
||||
SYNTAX 1.3.6.1.1.1.0.1 ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile' |
||||
DESC 'Boot image name' |
||||
EQUALITY caseExactIA5Match |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName' |
||||
SUP name ) |
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' |
||||
EQUALITY caseExactIA5Match |
||||
SUBSTR caseExactIA5SubstringsMatch |
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} SINGLE-VALUE ) |
||||
|
||||
# Object Class Definitions |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' |
||||
DESC 'Abstraction of an account with POSIX attributes' |
||||
SUP top AUXILIARY |
||||
MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory ) |
||||
MAY ( userPassword $ loginShell $ gecos $ description ) ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' |
||||
DESC 'Additional attributes for shadow passwords' |
||||
SUP top AUXILIARY |
||||
MUST uid |
||||
MAY ( userPassword $ shadowLastChange $ shadowMin $ |
||||
shadowMax $ shadowWarning $ shadowInactive $ |
||||
shadowExpire $ shadowFlag $ description ) ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' |
||||
DESC 'Abstraction of a group of accounts' |
||||
SUP top STRUCTURAL |
||||
MUST ( cn $ gidNumber ) |
||||
MAY ( userPassword $ memberUid $ description ) ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService' |
||||
DESC 'Abstraction an Internet Protocol service' |
||||
SUP top STRUCTURAL |
||||
MUST ( cn $ ipServicePort $ ipServiceProtocol ) |
||||
MAY ( description ) ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' |
||||
DESC 'Abstraction of an IP protocol' |
||||
SUP top STRUCTURAL |
||||
MUST ( cn $ ipProtocolNumber $ description ) |
||||
MAY description ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' |
||||
DESC 'Abstraction of an ONC/RPC binding' |
||||
SUP top STRUCTURAL |
||||
MUST ( cn $ oncRpcNumber $ description ) |
||||
MAY description ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' |
||||
DESC 'Abstraction of a host, an IP device' |
||||
SUP top AUXILIARY |
||||
MUST ( cn $ ipHostNumber ) |
||||
MAY ( l $ description $ manager ) ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' |
||||
DESC 'Abstraction of an IP network' |
||||
SUP top STRUCTURAL |
||||
MUST ( cn $ ipNetworkNumber ) |
||||
MAY ( ipNetmaskNumber $ l $ description $ manager ) ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' |
||||
DESC 'Abstraction of a netgroup' |
||||
SUP top STRUCTURAL |
||||
MUST cn |
||||
MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.9 NAME 'nisMap' |
||||
DESC 'A generic abstraction of a NIS map' |
||||
SUP top STRUCTURAL |
||||
MUST nisMapName |
||||
MAY description ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.10 NAME 'nisObject' |
||||
DESC 'An entry in a NIS map' |
||||
SUP top STRUCTURAL |
||||
MUST ( cn $ nisMapEntry $ nisMapName ) |
||||
MAY description ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' |
||||
DESC 'A device with a MAC address' |
||||
SUP top AUXILIARY |
||||
MAY macAddress ) |
||||
|
||||
objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' |
||||
DESC 'A device with boot parameters' |
||||
SUP top AUXILIARY |
||||
MAY ( bootFile $ bootParameter ) ) |
||||
@ -1,54 +0,0 @@
|
||||
# $OpenLDAP$ |
||||
## This work is part of OpenLDAP Software <http://www.openldap.org/>. |
||||
## |
||||
## Copyright 1998-2016 The OpenLDAP Foundation. |
||||
## All rights reserved. |
||||
## |
||||
## Redistribution and use in source and binary forms, with or without |
||||
## modification, are permitted only as authorized by the OpenLDAP |
||||
## Public License. |
||||
## |
||||
## A copy of this license is available in the file LICENSE in the |
||||
## top-level directory of the distribution or, alternatively, at |
||||
## <http://www.OpenLDAP.org/license.html>. |
||||
|
||||
# |
||||
# OpenLDAP Project's directory schema items |
||||
# |
||||
# depends upon: |
||||
# core.schema |
||||
# cosine.schema |
||||
# inetorgperson.schema |
||||
# |
||||
# These are provided for informational purposes only. |
||||
|
||||
objectIdentifier OpenLDAProot 1.3.6.1.4.1.4203 |
||||
|
||||
objectIdentifier OpenLDAP OpenLDAProot:1 |
||||
objectIdentifier OpenLDAPattributeType OpenLDAP:3 |
||||
objectIdentifier OpenLDAPobjectClass OpenLDAP:4 |
||||
|
||||
objectClass ( OpenLDAPobjectClass:3 |
||||
NAME 'OpenLDAPorg' |
||||
DESC 'OpenLDAP Organizational Object' |
||||
SUP organization |
||||
MAY ( buildingName $ displayName $ labeledURI ) ) |
||||
|
||||
objectClass ( OpenLDAPobjectClass:4 |
||||
NAME 'OpenLDAPou' |
||||
DESC 'OpenLDAP Organizational Unit Object' |
||||
SUP organizationalUnit |
||||
MAY ( buildingName $ displayName $ labeledURI $ o ) ) |
||||
|
||||
objectClass ( OpenLDAPobjectClass:5 |
||||
NAME 'OpenLDAPperson' |
||||
DESC 'OpenLDAP Person' |
||||
SUP ( pilotPerson $ inetOrgPerson ) |
||||
MUST ( uid $ cn ) |
||||
MAY ( givenName $ labeledURI $ o ) ) |
||||
|
||||
objectClass ( OpenLDAPobjectClass:6 |
||||
NAME 'OpenLDAPdisplayableObject' |
||||
DESC 'OpenLDAP Displayable Object' |
||||
AUXILIARY |
||||
MAY displayName ) |
||||
Loading…
Reference in new issue