mirror of https://gitlab.federez.net/re2o/re2o
Browse Source
feat: 🎨 Dev docker file in repository (Close #322) See merge request re2o/re2o!607fix_mandate_history
klafyvel
5 years ago
20 changed files with 237 additions and 1673 deletions
@ -0,0 +1,12 @@ |
|||||
|
FROM python:3 |
||||
|
ENV PYTHONUNBUFFERED=1 |
||||
|
RUN apt-get update && apt-get install -y --no-install-recommends gettext-base libpq-dev |
||||
|
WORKDIR /code |
||||
|
COPY requirements.txt /code/ |
||||
|
COPY postgresql-requirements.txt /code/ |
||||
|
COPY dev-requirements.txt /code/ |
||||
|
RUN pip install -r requirements.txt |
||||
|
RUN pip install -r postgresql-requirements.txt |
||||
|
RUN pip install -r dev-requirements.txt |
||||
|
COPY . /code/ |
||||
|
CMD ./docker/docker-entrypoint.sh |
||||
@ -0,0 +1,31 @@ |
|||||
|
version: "3" |
||||
|
|
||||
|
volumes: |
||||
|
database_data: |
||||
|
driver: local |
||||
|
|
||||
|
services: |
||||
|
db: |
||||
|
image: postgres:latest |
||||
|
volumes: |
||||
|
- database_data:/var/lib/postgresql/data |
||||
|
environment: |
||||
|
- POSTGRES_DB=postgres |
||||
|
- POSTGRES_USER=postgres |
||||
|
- POSTGRES_PASSWORD=postgres |
||||
|
|
||||
|
re2o: |
||||
|
build: . |
||||
|
volumes: |
||||
|
- .:/code |
||||
|
ports: |
||||
|
- "8000:8000" |
||||
|
depends_on: |
||||
|
- db |
||||
|
environment: |
||||
|
- POSTGRES_DB=postgres |
||||
|
- POSTGRES_USER=postgres |
||||
|
- POSTGRES_PASSWORD=postgres |
||||
|
- SUPERUSER_LOGIN=admin |
||||
|
- SUPERUSER_PASS=admin |
||||
|
- SUPERUSER_EMAIL=admin@example.net |
||||
@ -0,0 +1,20 @@ |
|||||
|
#!/usr/bin/env bash |
||||
|
set -euo pipefail |
||||
|
|
||||
|
cat docker/settings_local.template.py | envsubst > re2o/settings_local.py |
||||
|
|
||||
|
AUTOMIGRATE=${AUTOMIGRATE:-yes} |
||||
|
|
||||
|
if [ "$AUTOMIGRATE" != "skip" ]; then |
||||
|
python3 manage.py migrate --noinput |
||||
|
fi |
||||
|
|
||||
|
cat <<EOF | python manage.py shell |
||||
|
from django.contrib.auth import get_user_model |
||||
|
|
||||
|
User = get_user_model() |
||||
|
|
||||
|
User.objects.filter(pseudo='$SUPERUSER_LOGIN').exists() or \ |
||||
|
User.objects.create_superuser(pseudo='$SUPERUSER_LOGIN', email='$SUPERUSER_EMAIL', password='$SUPERUSER_PASS', surname='$SUPERUSER_LOGIN') |
||||
|
EOF |
||||
|
python manage.py runserver 0.0.0.0:8000 |
||||
@ -0,0 +1,101 @@ |
|||||
|
# coding: utf-8 |
||||
|
# Re2o est un logiciel d'administration développé initiallement au rezometz. Il |
||||
|
# se veut agnostique au réseau considéré, de manière à être installable en |
||||
|
# quelques clics. |
||||
|
# |
||||
|
# Copyright © 2017 Gabriel Détraz |
||||
|
# Copyright © 2017 Lara Kermarec |
||||
|
# Copyright © 2017 Augustin Lemesle |
||||
|
# |
||||
|
# This program is free software; you can redistribute it and/or modify |
||||
|
# it under the terms of the GNU General Public License as published by |
||||
|
# the Free Software Foundation; either version 2 of the License, or |
||||
|
# (at your option) any later version. |
||||
|
# |
||||
|
# This program is distributed in the hope that it will be useful, |
||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
||||
|
# GNU General Public License for more details. |
||||
|
# |
||||
|
# You should have received a copy of the GNU General Public License along |
||||
|
# with this program; if not, write to the Free Software Foundation, Inc., |
||||
|
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. |
||||
|
"""re2o.settings_local |
||||
|
The file with all the available options for a locale configuration of re2o |
||||
|
""" |
||||
|
|
||||
|
from __future__ import unicode_literals |
||||
|
|
||||
|
# A secret key used by the server. |
||||
|
SECRET_KEY = "=0u1d+gi6r06+r4gmrtdg6dhsi0mc7v39a37di4m5cfqt2aro2" |
||||
|
|
||||
|
# AES key for secret key encryption. |
||||
|
# The length must be a multiple of 16 |
||||
|
AES_KEY = "gnbe3elnujzlspzkavgdmqho16zizvek" |
||||
|
|
||||
|
# Should the server run in debug mode ? |
||||
|
# SECURITY WARNING: don't run with debug turned on in production! |
||||
|
DEBUG = True |
||||
|
|
||||
|
# A list of admins of the services. Receive mails when an error occurs |
||||
|
ADMINS = [("Example", "admin@example.net")] |
||||
|
|
||||
|
# The list of hostname the server will respond to. |
||||
|
ALLOWED_HOSTS = ["*"] |
||||
|
|
||||
|
# The time zone the server is runned in |
||||
|
TIME_ZONE = "Europe/Paris" |
||||
|
|
||||
|
# The storage systems parameters to use |
||||
|
DATABASES = { |
||||
|
'default': { |
||||
|
'ENGINE': 'django.db.backends.postgresql', |
||||
|
'NAME': '${POSTGRES_DB}', |
||||
|
'USER': '${POSTGRES_USER}', |
||||
|
'PASSWORD': '${POSTGRES_PASSWORD}', |
||||
|
'HOST': 'db', |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
# Security settings for secure https |
||||
|
# Activate once https is correctly configured |
||||
|
SECURE_CONTENT_TYPE_NOSNIFF = False |
||||
|
SECURE_BROWSER_XSS_FILTER = False |
||||
|
SESSION_COOKIE_SECURE = False |
||||
|
CSRF_COOKIE_SECURE = False |
||||
|
CSRF_COOKIE_HTTPONLY = False |
||||
|
X_FRAME_OPTIONS = "DENY" |
||||
|
SESSION_COOKIE_AGE = 60 * 60 * 3 |
||||
|
|
||||
|
# The path where your organization logo is stored |
||||
|
LOGO_PATH = "static_files/logo.png" |
||||
|
|
||||
|
# The mail configuration for Re2o to send mails |
||||
|
SERVER_EMAIL = "no-reply@example.net" # The mail address to use |
||||
|
EMAIL_HOST = "example.net" # The host to use |
||||
|
# EMAIL_PORT = MY_EMAIL_PORT # The port to use |
||||
|
EMAIL_BACKEND = 'django.core.mail.backends.console.EmailBackend' |
||||
|
|
||||
|
# Add statiffiles dir that were installed using system packaging |
||||
|
# Example to reproduce re2o2.9 behavior |
||||
|
# SYSTEM_STATICFILES_DIRS = ("/usr/share/fonts-font-awesome/", "/usr/share/javascript/") |
||||
|
SYSTEM_STATICFILES_DIRS = () |
||||
|
|
||||
|
# Wether to use CDN to retrieve bootstrap, font-aweseome and jquery files |
||||
|
# Default to False |
||||
|
USE_CDN = True |
||||
|
|
||||
|
# A range of UID to use. Used in linux environement |
||||
|
UID_RANGES = {"users": [21001, 30000], "service-users": [20000, 21000]} |
||||
|
|
||||
|
# A range of GID to use. Used in linux environement |
||||
|
GID_RANGES = {"posix": [501, 600]} |
||||
|
|
||||
|
# Default gid |
||||
|
DEFAULT_GID = 500 |
||||
|
|
||||
|
# Some optionnal Re2o Apps |
||||
|
OPTIONNAL_APPS_RE2O = () |
||||
|
|
||||
|
# Some Django apps you want to add in you local project |
||||
|
OPTIONNAL_APPS = OPTIONNAL_APPS_RE2O + () |
||||
@ -0,0 +1,20 @@ |
|||||
|
""" |
||||
|
Templatetags for fontawesome |
||||
|
""" |
||||
|
from django import template |
||||
|
from django.conf import settings |
||||
|
from django.templatetags.static import static |
||||
|
|
||||
|
register = template.Library() |
||||
|
|
||||
|
@register.simple_tag |
||||
|
def font_awesome_url(): |
||||
|
"""Return the font awesome url depending on the use of a CDN. |
||||
|
|
||||
|
Returns: |
||||
|
string: url of the font-awesome css file |
||||
|
""" |
||||
|
if settings.USE_CDN: |
||||
|
return "https://pro.fontawesome.com/releases/v5.10.0/css/all.css" |
||||
|
else: |
||||
|
return static("css/font-awesome.min.css") |
||||
@ -1,564 +0,0 @@ |
|||||
# This is a LDAPv3 schema for RADIUS attributes. |
|
||||
# Tested on OpenLDAP 2.0.7 |
|
||||
# Posted by Javier Fernandez-Sanguino Pena <jfernandez@sgi.es> |
|
||||
# LDAP v3 version by Jochen Friedrich <jochen@scram.de> |
|
||||
# Updates by Adrian Pavlykevych <pam@polynet.lviv.ua> |
|
||||
############## |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.1 |
|
||||
NAME 'radiusArapFeatures' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.2 |
|
||||
NAME 'radiusArapSecurity' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.3 |
|
||||
NAME 'radiusArapZoneAccess' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.44 |
|
||||
NAME 'radiusAuthType' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.4 |
|
||||
NAME 'radiusCallbackId' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.5 |
|
||||
NAME 'radiusCallbackNumber' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.6 |
|
||||
NAME 'radiusCalledStationId' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.7 |
|
||||
NAME 'radiusCallingStationId' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.8 |
|
||||
NAME 'radiusClass' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.45 |
|
||||
NAME 'radiusClientIPAddress' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.9 |
|
||||
NAME 'radiusFilterId' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.10 |
|
||||
NAME 'radiusFramedAppleTalkLink' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.11 |
|
||||
NAME 'radiusFramedAppleTalkNetwork' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.12 |
|
||||
NAME 'radiusFramedAppleTalkZone' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.13 |
|
||||
NAME 'radiusFramedCompression' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.14 |
|
||||
NAME 'radiusFramedIPAddress' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.15 |
|
||||
NAME 'radiusFramedIPNetmask' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.16 |
|
||||
NAME 'radiusFramedIPXNetwork' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.17 |
|
||||
NAME 'radiusFramedMTU' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.18 |
|
||||
NAME 'radiusFramedProtocol' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.19 |
|
||||
NAME 'radiusFramedRoute' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.20 |
|
||||
NAME 'radiusFramedRouting' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.46 |
|
||||
NAME 'radiusGroupName' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.47 |
|
||||
NAME 'radiusHint' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.48 |
|
||||
NAME 'radiusHuntgroupName' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.21 |
|
||||
NAME 'radiusIdleTimeout' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.22 |
|
||||
NAME 'radiusLoginIPHost' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.23 |
|
||||
NAME 'radiusLoginLATGroup' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.24 |
|
||||
NAME 'radiusLoginLATNode' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.25 |
|
||||
NAME 'radiusLoginLATPort' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.26 |
|
||||
NAME 'radiusLoginLATService' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.27 |
|
||||
NAME 'radiusLoginService' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.28 |
|
||||
NAME 'radiusLoginTCPPort' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.29 |
|
||||
NAME 'radiusPasswordRetry' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.30 |
|
||||
NAME 'radiusPortLimit' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.49 |
|
||||
NAME 'radiusProfileDn' |
|
||||
DESC '' |
|
||||
EQUALITY distinguishedNameMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.31 |
|
||||
NAME 'radiusPrompt' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.50 |
|
||||
NAME 'radiusProxyToRealm' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.51 |
|
||||
NAME 'radiusReplicateToRealm' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.52 |
|
||||
NAME 'radiusRealm' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.32 |
|
||||
NAME 'radiusServiceType' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.33 |
|
||||
NAME 'radiusSessionTimeout' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.34 |
|
||||
NAME 'radiusTerminationAction' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.35 |
|
||||
NAME 'radiusTunnelAssignmentId' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.36 |
|
||||
NAME 'radiusTunnelMediumType' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.37 |
|
||||
NAME 'radiusTunnelPassword' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.38 |
|
||||
NAME 'radiusTunnelPreference' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.39 |
|
||||
NAME 'radiusTunnelPrivateGroupId' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.40 |
|
||||
NAME 'radiusTunnelServerEndpoint' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.41 |
|
||||
NAME 'radiusTunnelType' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.42 |
|
||||
NAME 'radiusVSA' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.43 |
|
||||
NAME 'radiusTunnelClientEndpoint' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
|
|
||||
#need to change asn1.id |
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.53 |
|
||||
NAME 'radiusSimultaneousUse' |
|
||||
DESC '' |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.54 |
|
||||
NAME 'radiusLoginTime' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.55 |
|
||||
NAME 'radiusUserCategory' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.56 |
|
||||
NAME 'radiusStripUserName' |
|
||||
DESC '' |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.57 |
|
||||
NAME 'dialupAccess' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.58 |
|
||||
NAME 'radiusExpiration' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
SINGLE-VALUE |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.59 |
|
||||
NAME 'radiusCheckItem' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
attributetype |
|
||||
( 1.3.6.1.4.1.3317.4.3.1.60 |
|
||||
NAME 'radiusReplyItem' |
|
||||
DESC '' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|
||||
) |
|
||||
|
|
||||
|
|
||||
objectclass |
|
||||
( 1.3.6.1.4.1.3317.4.3.2.1 |
|
||||
NAME 'radiusprofile' |
|
||||
SUP top AUXILIARY |
|
||||
DESC '' |
|
||||
MUST cn |
|
||||
MAY ( radiusArapFeatures $ radiusArapSecurity $ radiusArapZoneAccess $ |
|
||||
radiusAuthType $ radiusCallbackId $ radiusCallbackNumber $ |
|
||||
radiusCalledStationId $ radiusCallingStationId $ radiusClass $ |
|
||||
radiusClientIPAddress $ radiusFilterId $ radiusFramedAppleTalkLink $ |
|
||||
radiusFramedAppleTalkNetwork $ radiusFramedAppleTalkZone $ |
|
||||
radiusFramedCompression $ radiusFramedIPAddress $ |
|
||||
radiusFramedIPNetmask $ radiusFramedIPXNetwork $ |
|
||||
radiusFramedMTU $ radiusFramedProtocol $ |
|
||||
radiusCheckItem $ radiusReplyItem $ |
|
||||
radiusFramedRoute $ radiusFramedRouting $ radiusIdleTimeout $ |
|
||||
radiusGroupName $ radiusHint $ radiusHuntgroupName $ |
|
||||
radiusLoginIPHost $ radiusLoginLATGroup $ radiusLoginLATNode $ |
|
||||
radiusLoginLATPort $ radiusLoginLATService $ radiusLoginService $ |
|
||||
radiusLoginTCPPort $ radiusLoginTime $ radiusPasswordRetry $ |
|
||||
radiusPortLimit $ radiusPrompt $ radiusProxyToRealm $ |
|
||||
radiusRealm $ radiusReplicateToRealm $ radiusServiceType $ |
|
||||
radiusSessionTimeout $ radiusStripUserName $ |
|
||||
radiusTerminationAction $ radiusTunnelClientEndpoint $ radiusProfileDn $ |
|
||||
radiusSimultaneousUse $ radiusTunnelAssignmentId $ |
|
||||
radiusTunnelMediumType $ radiusTunnelPassword $ radiusTunnelPreference $ |
|
||||
radiusTunnelPrivateGroupId $ radiusTunnelServerEndpoint $ |
|
||||
radiusTunnelType $ radiusUserCategory $ radiusVSA $ |
|
||||
radiusExpiration $ dialupAccess ) |
|
||||
) |
|
||||
@ -1,644 +0,0 @@ |
|||||
## |
|
||||
## schema file for OpenLDAP 2.x |
|
||||
## Schema for storing Samba user accounts and group maps in LDAP |
|
||||
## OIDs are owned by the Samba Team |
|
||||
## |
|
||||
## Prerequisite schemas - uid (cosine.schema) |
|
||||
## - displayName (inetorgperson.schema) |
|
||||
## - gidNumber (nis.schema) |
|
||||
## |
|
||||
## 1.3.6.1.4.1.7165.2.1.x - attributetypes |
|
||||
## 1.3.6.1.4.1.7165.2.2.x - objectclasses |
|
||||
## |
|
||||
## Printer support |
|
||||
## 1.3.6.1.4.1.7165.2.3.1.x - attributetypes |
|
||||
## 1.3.6.1.4.1.7165.2.3.2.x - objectclasses |
|
||||
## |
|
||||
## Samba4 |
|
||||
## 1.3.6.1.4.1.7165.4.1.x - attributetypes |
|
||||
## 1.3.6.1.4.1.7165.4.2.x - objectclasses |
|
||||
## 1.3.6.1.4.1.7165.4.3.x - LDB/LDAP Controls |
|
||||
## 1.3.6.1.4.1.7165.4.4.x - LDB/LDAP Extended Operations |
|
||||
## 1.3.6.1.4.1.7165.4.255.x - mapped OIDs due to conflicts between AD and standards-track |
|
||||
## |
|
||||
## External projects |
|
||||
## 1.3.6.1.4.1.7165.655.x |
|
||||
## 1.3.6.1.4.1.7165.655.1.x - GSS-NTLMSSP |
|
||||
## |
|
||||
## ----- READ THIS WHEN ADDING A NEW ATTRIBUTE OR OBJECT CLASS ------ |
|
||||
## |
|
||||
## Run the 'get_next_oid' bash script in this directory to find the |
|
||||
## next available OID for attribute type and object classes. |
|
||||
## |
|
||||
## $ ./get_next_oid |
|
||||
## attributetype ( 1.3.6.1.4.1.7165.2.1.XX NAME .... |
|
||||
## objectclass ( 1.3.6.1.4.1.7165.2.2.XX NAME .... |
|
||||
## |
|
||||
## Also ensure that new entries adhere to the declaration style |
|
||||
## used throughout this file |
|
||||
## |
|
||||
## <attributetype|objectclass> ( 1.3.6.1.4.1.7165.2.XX.XX NAME .... |
|
||||
## ^ ^ ^ |
|
||||
## |
|
||||
## The spaces are required for the get_next_oid script (and for |
|
||||
## readability). |
|
||||
## |
|
||||
## ------------------------------------------------------------------ |
|
||||
|
|
||||
# objectIdentifier SambaRoot 1.3.6.1.4.1.7165 |
|
||||
# objectIdentifier Samba3 SambaRoot:2 |
|
||||
# objectIdentifier Samba3Attrib Samba3:1 |
|
||||
# objectIdentifier Samba3ObjectClass Samba3:2 |
|
||||
# objectIdentifier Samba4 SambaRoot:4 |
|
||||
|
|
||||
######################################################################## |
|
||||
## HISTORICAL ## |
|
||||
######################################################################## |
|
||||
|
|
||||
## |
|
||||
## Password hashes |
|
||||
## |
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.1 NAME 'lmPassword' |
|
||||
# DESC 'LanManager Passwd' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.2 NAME 'ntPassword' |
|
||||
# DESC 'NT Passwd' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## Account flags in string format ([UWDX ]) |
|
||||
## |
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.4 NAME 'acctFlags' |
|
||||
# DESC 'Account Flags' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16} SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## Password timestamps & policies |
|
||||
## |
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.3 NAME 'pwdLastSet' |
|
||||
# DESC 'NT pwdLastSet' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.5 NAME 'logonTime' |
|
||||
# DESC 'NT logonTime' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.6 NAME 'logoffTime' |
|
||||
# DESC 'NT logoffTime' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.7 NAME 'kickoffTime' |
|
||||
# DESC 'NT kickoffTime' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.8 NAME 'pwdCanChange' |
|
||||
# DESC 'NT pwdCanChange' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.9 NAME 'pwdMustChange' |
|
||||
# DESC 'NT pwdMustChange' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## string settings |
|
||||
## |
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.10 NAME 'homeDrive' |
|
||||
# DESC 'NT homeDrive' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.11 NAME 'scriptPath' |
|
||||
# DESC 'NT scriptPath' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.12 NAME 'profilePath' |
|
||||
# DESC 'NT profilePath' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.13 NAME 'userWorkstations' |
|
||||
# DESC 'userWorkstations' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.17 NAME 'smbHome' |
|
||||
# DESC 'smbHome' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.18 NAME 'domain' |
|
||||
# DESC 'Windows NT domain to which the user belongs' |
|
||||
# EQUALITY caseIgnoreIA5Match |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} ) |
|
||||
|
|
||||
## |
|
||||
## user and group RID |
|
||||
## |
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.14 NAME 'rid' |
|
||||
# DESC 'NT rid' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
#attributetype ( 1.3.6.1.4.1.7165.2.1.15 NAME 'primaryGroupID' |
|
||||
# DESC 'NT Group RID' |
|
||||
# EQUALITY integerMatch |
|
||||
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## The smbPasswordEntry objectclass has been depreciated in favor of the |
|
||||
## sambaAccount objectclass |
|
||||
## |
|
||||
#objectclass ( 1.3.6.1.4.1.7165.2.2.1 NAME 'smbPasswordEntry' SUP top AUXILIARY |
|
||||
# DESC 'Samba smbpasswd entry' |
|
||||
# MUST ( uid $ uidNumber ) |
|
||||
# MAY ( lmPassword $ ntPassword $ pwdLastSet $ acctFlags )) |
|
||||
|
|
||||
#objectclass ( 1.3.6.1.4.1.7165.2.2.2 NAME 'sambaAccount' SUP top STRUCTURAL |
|
||||
# DESC 'Samba Account' |
|
||||
# MUST ( uid $ rid ) |
|
||||
# MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $ |
|
||||
# logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $ |
|
||||
# displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $ |
|
||||
# description $ userWorkstations $ primaryGroupID $ domain )) |
|
||||
|
|
||||
#objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaAccount' SUP top AUXILIARY |
|
||||
# DESC 'Samba Auxiliary Account' |
|
||||
# MUST ( uid $ rid ) |
|
||||
# MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $ |
|
||||
# logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $ |
|
||||
# displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $ |
|
||||
# description $ userWorkstations $ primaryGroupID $ domain )) |
|
||||
|
|
||||
######################################################################## |
|
||||
## END OF HISTORICAL ## |
|
||||
######################################################################## |
|
||||
|
|
||||
####################################################################### |
|
||||
## Attributes used by Samba 3.0 schema ## |
|
||||
####################################################################### |
|
||||
|
|
||||
## |
|
||||
## Password hashes |
|
||||
## |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.24 NAME 'sambaLMPassword' |
|
||||
DESC 'LanManager Password' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.25 NAME 'sambaNTPassword' |
|
||||
DESC 'MD4 hash of the unicode password' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## Account flags in string format ([UWDX ]) |
|
||||
## |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.26 NAME 'sambaAcctFlags' |
|
||||
DESC 'Account Flags' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16} SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## Password timestamps & policies |
|
||||
## |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.27 NAME 'sambaPwdLastSet' |
|
||||
DESC 'Timestamp of the last password update' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.28 NAME 'sambaPwdCanChange' |
|
||||
DESC 'Timestamp of when the user is allowed to update the password' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.29 NAME 'sambaPwdMustChange' |
|
||||
DESC 'Timestamp of when the password will expire' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.30 NAME 'sambaLogonTime' |
|
||||
DESC 'Timestamp of last logon' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.31 NAME 'sambaLogoffTime' |
|
||||
DESC 'Timestamp of last logoff' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.32 NAME 'sambaKickoffTime' |
|
||||
DESC 'Timestamp of when the user will be logged off automatically' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.48 NAME 'sambaBadPasswordCount' |
|
||||
DESC 'Bad password attempt count' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.49 NAME 'sambaBadPasswordTime' |
|
||||
DESC 'Time of the last bad password attempt' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.55 NAME 'sambaLogonHours' |
|
||||
DESC 'Logon Hours' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{42} SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## string settings |
|
||||
## |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.33 NAME 'sambaHomeDrive' |
|
||||
DESC 'Driver letter of home directory mapping' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.34 NAME 'sambaLogonScript' |
|
||||
DESC 'Logon script path' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.35 NAME 'sambaProfilePath' |
|
||||
DESC 'Roaming profile path' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.36 NAME 'sambaUserWorkstations' |
|
||||
DESC 'List of user workstations the user is allowed to logon to' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.37 NAME 'sambaHomePath' |
|
||||
DESC 'Home directory UNC path' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.38 NAME 'sambaDomainName' |
|
||||
DESC 'Windows NT domain to which the user belongs' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.47 NAME 'sambaMungedDial' |
|
||||
DESC 'Base64 encoded user parameter string' |
|
||||
EQUALITY caseExactMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.54 NAME 'sambaPasswordHistory' |
|
||||
DESC 'Concatenated MD5 hashes of the salted NT passwords used on this account' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} ) |
|
||||
|
|
||||
## |
|
||||
## SID, of any type |
|
||||
## |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID' |
|
||||
DESC 'Security ID' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SUBSTR caseExactIA5SubstringsMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## Primary group SID, compatible with ntSid |
|
||||
## |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.23 NAME 'sambaPrimaryGroupSID' |
|
||||
DESC 'Primary Group Security ID' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.51 NAME 'sambaSIDList' |
|
||||
DESC 'Security ID List' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} ) |
|
||||
|
|
||||
## |
|
||||
## group mapping attributes |
|
||||
## |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.19 NAME 'sambaGroupType' |
|
||||
DESC 'NT Group Type' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
## |
|
||||
## Store info on the domain |
|
||||
## |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.21 NAME 'sambaNextUserRid' |
|
||||
DESC 'Next NT rid to give our for users' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.22 NAME 'sambaNextGroupRid' |
|
||||
DESC 'Next NT rid to give out for groups' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.39 NAME 'sambaNextRid' |
|
||||
DESC 'Next NT rid to give out for anything' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.40 NAME 'sambaAlgorithmicRidBase' |
|
||||
DESC 'Base at which the samba RID generation algorithm should operate' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.41 NAME 'sambaShareName' |
|
||||
DESC 'Share Name' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.42 NAME 'sambaOptionName' |
|
||||
DESC 'Option Name' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SUBSTR caseIgnoreSubstringsMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.43 NAME 'sambaBoolOption' |
|
||||
DESC 'A boolean option' |
|
||||
EQUALITY booleanMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.44 NAME 'sambaIntegerOption' |
|
||||
DESC 'An integer option' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.45 NAME 'sambaStringOption' |
|
||||
DESC 'A string option' |
|
||||
EQUALITY caseExactIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.46 NAME 'sambaStringListOption' |
|
||||
DESC 'A string list option' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) |
|
||||
|
|
||||
|
|
||||
##attributetype ( 1.3.6.1.4.1.7165.2.1.50 NAME 'sambaPrivName' |
|
||||
## SUP name ) |
|
||||
|
|
||||
##attributetype ( 1.3.6.1.4.1.7165.2.1.52 NAME 'sambaPrivilegeList' |
|
||||
## DESC 'Privileges List' |
|
||||
## EQUALITY caseIgnoreIA5Match |
|
||||
## SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.53 NAME 'sambaTrustFlags' |
|
||||
DESC 'Trust Password Flags' |
|
||||
EQUALITY caseIgnoreIA5Match |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
|
||||
|
|
||||
# "min password length" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.58 NAME 'sambaMinPwdLength' |
|
||||
DESC 'Minimal password length (default: 5)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "password history" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.59 NAME 'sambaPwdHistoryLength' |
|
||||
DESC 'Length of Password History Entries (default: 0 => off)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "user must logon to change password" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.60 NAME 'sambaLogonToChgPwd' |
|
||||
DESC 'Force Users to logon for password change (default: 0 => off, 2 => on)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "maximum password age" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.61 NAME 'sambaMaxPwdAge' |
|
||||
DESC 'Maximum password age, in seconds (default: -1 => never expire passwords)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "minimum password age" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.62 NAME 'sambaMinPwdAge' |
|
||||
DESC 'Minimum password age, in seconds (default: 0 => allow immediate password change)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "lockout duration" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.63 NAME 'sambaLockoutDuration' |
|
||||
DESC 'Lockout duration in minutes (default: 30, -1 => forever)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "reset count minutes" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.64 NAME 'sambaLockoutObservationWindow' |
|
||||
DESC 'Reset time after lockout in minutes (default: 30)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "bad lockout attempt" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.65 NAME 'sambaLockoutThreshold' |
|
||||
DESC 'Lockout users after bad logon attempts (default: 0 => off)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "disconnect time" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.66 NAME 'sambaForceLogoff' |
|
||||
DESC 'Disconnect Users outside logon hours (default: -1 => off, 0 => on)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# "refuse machine password change" |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.67 NAME 'sambaRefuseMachinePwdChange' |
|
||||
DESC 'Allow Machine Password changes (default: 0 => off)' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
# |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.68 NAME 'sambaClearTextPassword' |
|
||||
DESC 'Clear text password (used for trusted domain passwords)' |
|
||||
EQUALITY octetStringMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 ) |
|
||||
|
|
||||
# |
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.69 NAME 'sambaPreviousClearTextPassword' |
|
||||
DESC 'Previous clear text password (used for trusted domain passwords)' |
|
||||
EQUALITY octetStringMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.70 NAME 'sambaTrustType' |
|
||||
DESC 'Type of trust' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.71 NAME 'sambaTrustAttributes' |
|
||||
DESC 'Trust attributes for a trusted domain' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.72 NAME 'sambaTrustDirection' |
|
||||
DESC 'Direction of a trust' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.73 NAME 'sambaTrustPartner' |
|
||||
DESC 'Fully qualified name of the domain with which a trust exists' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.74 NAME 'sambaFlatName' |
|
||||
DESC 'NetBIOS name of a domain' |
|
||||
EQUALITY caseIgnoreMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.75 NAME 'sambaTrustAuthOutgoing' |
|
||||
DESC 'Authentication information for the outgoing portion of a trust' |
|
||||
EQUALITY caseExactMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.76 NAME 'sambaTrustAuthIncoming' |
|
||||
DESC 'Authentication information for the incoming portion of a trust' |
|
||||
EQUALITY caseExactMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.77 NAME 'sambaSecurityIdentifier' |
|
||||
DESC 'SID of a trusted domain' |
|
||||
EQUALITY caseIgnoreIA5Match SUBSTR caseExactIA5SubstringsMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.78 NAME 'sambaTrustForestTrustInfo' |
|
||||
DESC 'Forest trust information for a trusted domain object' |
|
||||
EQUALITY caseExactMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.79 NAME 'sambaTrustPosixOffset' |
|
||||
DESC 'POSIX offset of a trust' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
attributetype ( 1.3.6.1.4.1.7165.2.1.80 NAME 'sambaSupportedEncryptionTypes' |
|
||||
DESC 'Supported encryption types of a trust' |
|
||||
EQUALITY integerMatch |
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) |
|
||||
|
|
||||
####################################################################### |
|
||||
## objectClasses used by Samba 3.0 schema ## |
|
||||
####################################################################### |
|
||||
|
|
||||
## The X.500 data model (and therefore LDAPv3) says that each entry can |
|
||||
## only have one structural objectclass. OpenLDAP 2.0 does not enforce |
|
||||
## this currently but will in v2.1 |
|
||||
|
|
||||
## |
|
||||
## added new objectclass (and OID) for 3.0 to help us deal with backwards |
|
||||
## compatibility with 2.2 installations (e.g. ldapsam_compat) --jerry |
|
||||
## |
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.6 NAME 'sambaSamAccount' SUP top AUXILIARY |
|
||||
DESC 'Samba 3.0 Auxilary SAM Account' |
|
||||
MUST ( uid $ sambaSID ) |
|
||||
MAY ( cn $ sambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $ |
|
||||
sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $ |
|
||||
sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $ |
|
||||
displayName $ sambaHomePath $ sambaHomeDrive $ sambaLogonScript $ |
|
||||
sambaProfilePath $ description $ sambaUserWorkstations $ |
|
||||
sambaPrimaryGroupSID $ sambaDomainName $ sambaMungedDial $ |
|
||||
sambaBadPasswordCount $ sambaBadPasswordTime $ |
|
||||
sambaPasswordHistory $ sambaLogonHours)) |
|
||||
|
|
||||
## |
|
||||
## Group mapping info |
|
||||
## |
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.4 NAME 'sambaGroupMapping' SUP top AUXILIARY |
|
||||
DESC 'Samba Group Mapping' |
|
||||
MUST ( gidNumber $ sambaSID $ sambaGroupType ) |
|
||||
MAY ( displayName $ description $ sambaSIDList )) |
|
||||
|
|
||||
## |
|
||||
## Trust password for trust relationships (any kind) |
|
||||
## |
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.14 NAME 'sambaTrustPassword' SUP top STRUCTURAL |
|
||||
DESC 'Samba Trust Password' |
|
||||
MUST ( sambaDomainName $ sambaNTPassword $ sambaTrustFlags ) |
|
||||
MAY ( sambaSID $ sambaPwdLastSet )) |
|
||||
|
|
||||
## |
|
||||
## Trust password for trusted domains |
|
||||
## (to be stored beneath the trusting sambaDomain object in the DIT) |
|
||||
## |
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.15 NAME 'sambaTrustedDomainPassword' SUP top STRUCTURAL |
|
||||
DESC 'Samba Trusted Domain Password' |
|
||||
MUST ( sambaDomainName $ sambaSID $ |
|
||||
sambaClearTextPassword $ sambaPwdLastSet ) |
|
||||
MAY ( sambaPreviousClearTextPassword )) |
|
||||
|
|
||||
## |
|
||||
## Whole-of-domain info |
|
||||
## |
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.5 NAME 'sambaDomain' SUP top STRUCTURAL |
|
||||
DESC 'Samba Domain Information' |
|
||||
MUST ( sambaDomainName $ |
|
||||
sambaSID ) |
|
||||
MAY ( sambaNextRid $ sambaNextGroupRid $ sambaNextUserRid $ |
|
||||
sambaAlgorithmicRidBase $ |
|
||||
sambaMinPwdLength $ sambaPwdHistoryLength $ sambaLogonToChgPwd $ |
|
||||
sambaMaxPwdAge $ sambaMinPwdAge $ |
|
||||
sambaLockoutDuration $ sambaLockoutObservationWindow $ sambaLockoutThreshold $ |
|
||||
sambaForceLogoff $ sambaRefuseMachinePwdChange )) |
|
||||
|
|
||||
## |
|
||||
## used for idmap_ldap module |
|
||||
## |
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.7 NAME 'sambaUnixIdPool' SUP top AUXILIARY |
|
||||
DESC 'Pool for allocating UNIX uids/gids' |
|
||||
MUST ( uidNumber $ gidNumber ) ) |
|
||||
|
|
||||
|
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.8 NAME 'sambaIdmapEntry' SUP top AUXILIARY |
|
||||
DESC 'Mapping from a SID to an ID' |
|
||||
MUST ( sambaSID ) |
|
||||
MAY ( uidNumber $ gidNumber ) ) |
|
||||
|
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.9 NAME 'sambaSidEntry' SUP top STRUCTURAL |
|
||||
DESC 'Structural Class for a SID' |
|
||||
MUST ( sambaSID ) ) |
|
||||
|
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.10 NAME 'sambaConfig' SUP top AUXILIARY |
|
||||
DESC 'Samba Configuration Section' |
|
||||
MAY ( description ) ) |
|
||||
|
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.11 NAME 'sambaShare' SUP top STRUCTURAL |
|
||||
DESC 'Samba Share Section' |
|
||||
MUST ( sambaShareName ) |
|
||||
MAY ( description ) ) |
|
||||
|
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.12 NAME 'sambaConfigOption' SUP top STRUCTURAL |
|
||||
DESC 'Samba Configuration Option' |
|
||||
MUST ( sambaOptionName ) |
|
||||
MAY ( sambaBoolOption $ sambaIntegerOption $ sambaStringOption $ |
|
||||
sambaStringListoption $ description ) ) |
|
||||
|
|
||||
|
|
||||
## retired during privilege rewrite |
|
||||
##objectclass ( 1.3.6.1.4.1.7165.2.2.13 NAME 'sambaPrivilege' SUP top AUXILIARY |
|
||||
## DESC 'Samba Privilege' |
|
||||
## MUST ( sambaSID ) |
|
||||
## MAY ( sambaPrivilegeList ) ) |
|
||||
|
|
||||
## |
|
||||
## used for IPA_ldapsam |
|
||||
## |
|
||||
objectclass ( 1.3.6.1.4.1.7165.2.2.16 NAME 'sambaTrustedDomain' SUP top STRUCTURAL |
|
||||
DESC 'Samba Trusted Domain Object' |
|
||||
MUST ( cn ) |
|
||||
MAY ( sambaTrustType $ sambaTrustAttributes $ sambaTrustDirection $ |
|
||||
sambaTrustPartner $ sambaFlatName $ sambaTrustAuthOutgoing $ |
|
||||
sambaTrustAuthIncoming $ sambaSecurityIdentifier $ |
|
||||
sambaTrustForestTrustInfo $ sambaTrustPosixOffset $ |
|
||||
sambaSupportedEncryptionTypes) ) |
|
||||
@ -1,223 +0,0 @@ |
|||||
# Re2o est un logiciel d'administration développé initiallement au Rézo Metz. Il |
|
||||
# se veut agnostique au réseau considéré, de manière à être installable en |
|
||||
# quelques clics. |
|
||||
# |
|
||||
# Copyright © 2017 Gabriel Détraz |
|
||||
# Copyright © 2017 Lara Kermarec |
|
||||
# Copyright © 2017 Augustin Lemesle |
|
||||
# |
|
||||
# This program is free software; you can redistribute it and/or modify |
|
||||
# it under the terms of the GNU General Public License as published by |
|
||||
# the Free Software Foundation; either version 2 of the License, or |
|
||||
# (at your option) any later version. |
|
||||
# |
|
||||
# This program is distributed in the hope that it will be useful, |
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
||||
# GNU General Public License for more details. |
|
||||
# |
|
||||
# You should have received a copy of the GNU General Public License along |
|
||||
# with this program; if not, write to the Free Software Foundation, Inc., |
|
||||
# 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. |
|
||||
|
|
||||
"""Defines the custom runners for Re2o. |
|
||||
""" |
|
||||
|
|
||||
import os.path |
|
||||
|
|
||||
import volatildap |
|
||||
from django.conf import settings |
|
||||
from django.test.runner import DiscoverRunner |
|
||||
|
|
||||
from users.models import (LdapServiceUser, LdapServiceUserGroup, LdapUser, |
|
||||
LdapUserGroup) |
|
||||
|
|
||||
# The path of this file |
|
||||
__here = os.path.dirname(os.path.realpath(__file__)) |
|
||||
# The absolute path where to find the schemas for the LDAP |
|
||||
schema_path = os.path.abspath(os.path.join(__here, "ldap", "schema")) |
|
||||
# The absolute path of the "radius.schema" file |
|
||||
radius_schema_path = os.path.join(schema_path, "radius.schema") |
|
||||
# The absolute path of the "samba.schema" file |
|
||||
samba_schema_path = os.path.join(schema_path, "samba.schema") |
|
||||
|
|
||||
# The suffix for the LDAP |
|
||||
suffix = "dc=example,dc=net" |
|
||||
# The admin CN of the LDAP |
|
||||
rootdn = "cn=admin," + suffix |
|
||||
|
|
||||
# Defines all ldap_entry mandatory for Re2o under a key-value list format |
|
||||
# that can be used directly by volatildap. For more on how to generate this |
|
||||
# data, see https://gitlab.federez.net/re2o/scripts/blob/master/print_ldap_entries.py |
|
||||
ldapentry_Utilisateurs = ( |
|
||||
"cn=Utilisateurs," + suffix, |
|
||||
{ |
|
||||
"cn": ["Utilisateurs"], |
|
||||
"sambaSID": ["500"], |
|
||||
"uid": ["Users"], |
|
||||
"objectClass": ["posixGroup", "top", "sambaSamAccount", "radiusprofile"], |
|
||||
"gidNumber": ["500"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_groups = ( |
|
||||
"ou=groups," + suffix, |
|
||||
{ |
|
||||
"ou": ["groups"], |
|
||||
"objectClass": ["organizationalUnit"], |
|
||||
"description": ["Groupes d'utilisateurs"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_services = ( |
|
||||
"ou=services,ou=groups," + suffix, |
|
||||
{ |
|
||||
"ou": ["services"], |
|
||||
"objectClass": ["organizationalUnit"], |
|
||||
"description": ["Groupes de comptes techniques"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_service_users = ( |
|
||||
"ou=service-users," + suffix, |
|
||||
{ |
|
||||
"ou": ["service-users"], |
|
||||
"objectClass": ["organizationalUnit"], |
|
||||
"description": ["Utilisateurs techniques de l'annuaire"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_freeradius = ( |
|
||||
"cn=freeradius,ou=service-users," + suffix, |
|
||||
{ |
|
||||
"cn": ["freeradius"], |
|
||||
"objectClass": ["applicationProcess", "simpleSecurityObject"], |
|
||||
"userPassword": ["FILL_IT"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_nssauth = ( |
|
||||
"cn=nssauth,ou=service-users," + suffix, |
|
||||
{ |
|
||||
"cn": ["nssauth"], |
|
||||
"objectClass": ["applicationProcess", "simpleSecurityObject"], |
|
||||
"userPassword": ["FILL_IT"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_auth = ( |
|
||||
"cn=auth,ou=services,ou=groups," + suffix, |
|
||||
{ |
|
||||
"cn": ["auth"], |
|
||||
"objectClass": ["groupOfNames"], |
|
||||
"member": ["cn=nssauth,ou=service-users," + suffix], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_posix = ( |
|
||||
"ou=posix,ou=groups," + suffix, |
|
||||
{ |
|
||||
"ou": ["posix"], |
|
||||
"objectClass": ["organizationalUnit"], |
|
||||
"description": ["Groupes de comptes POSIX"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_wifi = ( |
|
||||
"cn=wifi,ou=service-users," + suffix, |
|
||||
{ |
|
||||
"cn": ["wifi"], |
|
||||
"objectClass": ["applicationProcess", "simpleSecurityObject"], |
|
||||
"userPassword": ["FILL_IT"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_usermgmt = ( |
|
||||
"cn=usermgmt,ou=services,ou=groups," + suffix, |
|
||||
{ |
|
||||
"cn": ["usermgmt"], |
|
||||
"objectClass": ["groupOfNames"], |
|
||||
"member": ["cn=wifi,ou=service-users," + suffix], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_replica = ( |
|
||||
"cn=replica,ou=service-users," + suffix, |
|
||||
{ |
|
||||
"cn": ["replica"], |
|
||||
"objectClass": ["applicationProcess", "simpleSecurityObject"], |
|
||||
"userPassword": ["FILL_IT"], |
|
||||
}, |
|
||||
) |
|
||||
ldapentry_readonly = ( |
|
||||
"cn=readonly,ou=services,ou=groups," + suffix, |
|
||||
{ |
|
||||
"cn": ["readonly"], |
|
||||
"objectClass": ["groupOfNames"], |
|
||||
"member": [ |
|
||||
"cn=replica,ou=service-users," + suffix, |
|
||||
"cn=freeradius,ou=service-users," + suffix, |
|
||||
], |
|
||||
}, |
|
||||
) |
|
||||
ldapbasic = dict( |
|
||||
[ |
|
||||
ldapentry_Utilisateurs, |
|
||||
ldapentry_groups, |
|
||||
ldapentry_services, |
|
||||
ldapentry_service_users, |
|
||||
ldapentry_freeradius, |
|
||||
ldapentry_nssauth, |
|
||||
ldapentry_auth, |
|
||||
ldapentry_posix, |
|
||||
ldapentry_wifi, |
|
||||
ldapentry_usermgmt, |
|
||||
ldapentry_replica, |
|
||||
ldapentry_readonly, |
|
||||
] |
|
||||
) |
|
||||
|
|
||||
|
|
||||
class DiscoverLdapRunner(DiscoverRunner): |
|
||||
"""Discovers all the tests in the project |
|
||||
|
|
||||
This is a simple subclass of the default test runner |
|
||||
`django.test.runner.DiscoverRunner` that creates a test LDAP |
|
||||
right after the test databases are setup and destroys it right |
|
||||
before the test databases are setup. |
|
||||
It also ensure re2o's settings are using this new LDAP. |
|
||||
""" |
|
||||
|
|
||||
# The `volatildap.LdapServer` instance initiated with the minimal |
|
||||
# structure required by Re2o |
|
||||
ldap_server = volatildap.LdapServer( |
|
||||
suffix=suffix, |
|
||||
rootdn=rootdn, |
|
||||
initial_data=ldapbasic, |
|
||||
schemas=[ |
|
||||
"core.schema", |
|
||||
"cosine.schema", |
|
||||
"inetorgperson.schema", |
|
||||
"nis.schema", |
|
||||
radius_schema_path, |
|
||||
samba_schema_path, |
|
||||
], |
|
||||
) |
|
||||
|
|
||||
def __init__(self, *args, **kwargs): |
|
||||
settings.DATABASES["ldap"]["USER"] = self.ldap_server.rootdn |
|
||||
settings.DATABASES["ldap"]["PASSWORD"] = self.ldap_server.rootpw |
|
||||
settings.DATABASES["ldap"]["NAME"] = self.ldap_server.uri |
|
||||
settings.LDAP["base_user_dn"] = ldapentry_Utilisateurs[0] |
|
||||
settings.LDAP["base_userservice_dn"] = ldapentry_service_users[0] |
|
||||
settings.LDAP["base_usergroup_dn"] = ldapentry_posix[0] |
|
||||
settings.LDAP["base_userservicegroup_dn"] = ldapentry_services[0] |
|
||||
settings.LDAP["user_gid"] = ldapentry_Utilisateurs[1].get("gidNumber", ["500"])[ |
|
||||
0 |
|
||||
] |
|
||||
LdapUser.base_dn = settings.LDAP["base_user_dn"] |
|
||||
LdapUserGroup.base_dn = settings.LDAP["base_usergroup_dn"] |
|
||||
LdapServiceUser.base_dn = settings.LDAP["base_userservice_dn"] |
|
||||
LdapServiceUserGroup.base_dn = settings.LDAP["base_userservicegroup_dn"] |
|
||||
super(DiscoverLdapRunner, self).__init__(*args, **kwargs) |
|
||||
|
|
||||
def setup_databases(self, *args, **kwargs): |
|
||||
ret = super(DiscoverLdapRunner, self).setup_databases(*args, **kwargs) |
|
||||
print("Creating test LDAP with volatildap...") |
|
||||
self.ldap_server.start() |
|
||||
return ret |
|
||||
|
|
||||
def teardown_databases(self, *args, **kwargs): |
|
||||
self.ldap_server.stop() |
|
||||
print("Destroying test LDAP...") |
|
||||
super(DiscoverLdapRunner, self).teardown_databases(*args, **kwargs) |
|
||||
Loading…
Reference in new issue