mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
- pull in updated schema which adds the krbCanonicalName attribute
This commit is contained in:
committed by
Rob Crittenden
parent
00b2f240f7
commit
a2891afb5d
@@ -21,12 +21,26 @@ dn: cn=schema
|
|||||||
# specific syntax definitions
|
# specific syntax definitions
|
||||||
# Kerberos Object Class(6) class# version#
|
# Kerberos Object Class(6) class# version#
|
||||||
# specific class definitions
|
# specific class definitions
|
||||||
|
#
|
||||||
|
# iso(1)
|
||||||
|
# member-body(2)
|
||||||
|
# United States(840)
|
||||||
|
# mit (113554)
|
||||||
|
# infosys(1)
|
||||||
|
# ldap(4)
|
||||||
|
# attributeTypes(1)
|
||||||
|
# Kerberos(6)
|
||||||
########################################################################
|
########################################################################
|
||||||
########################################################################
|
########################################################################
|
||||||
# Attribute Type Definitions #
|
# Attribute Type Definitions #
|
||||||
########################################################################
|
########################################################################
|
||||||
##### This is the principal name in the RFC 1964 specified format
|
##### This is the principal name in the RFC 1964 specified format
|
||||||
attributetypes: ( 2.16.840.1.113719.1.301.4.1.1 NAME 'krbPrincipalName' EQUALITY caseExactIA5Match SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)
|
attributetypes: ( 2.16.840.1.113719.1.301.4.1.1 NAME 'krbPrincipalName' EQUALITY caseExactIA5Match SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)
|
||||||
|
##### If there are multiple krbPrincipalName values for an entry, this
|
||||||
|
##### is the canonical principal name in the RFC 1964 specified
|
||||||
|
##### format. (If this attribute does not exist, then all
|
||||||
|
##### krbPrincipalName values are treated as canonical.)
|
||||||
|
attributetypes: ( 1.2.840.113554.1.4.1.6.1 NAME 'krbCanonicalName' EQUALITY caseExactIA5Match SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)
|
||||||
##### This specifies the type of the principal, the types could be any of
|
##### This specifies the type of the principal, the types could be any of
|
||||||
##### the types mentioned in section 6.2 of RFC 4120
|
##### the types mentioned in section 6.2 of RFC 4120
|
||||||
attributetypes: ( 2.16.840.1.113719.1.301.4.3.1 NAME 'krbPrincipalType' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)
|
attributetypes: ( 2.16.840.1.113719.1.301.4.3.1 NAME 'krbPrincipalType' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)
|
||||||
@@ -262,7 +276,7 @@ objectClasses: ( 2.16.840.1.113719.1.301.6.4.1 NAME 'krbKdcService' SUP ( krbSer
|
|||||||
objectClasses: ( 2.16.840.1.113719.1.301.6.5.1 NAME 'krbPwdService' SUP ( krbService ) )
|
objectClasses: ( 2.16.840.1.113719.1.301.6.5.1 NAME 'krbPwdService' SUP ( krbService ) )
|
||||||
###### The principal data auxiliary class. Holds principal information
|
###### The principal data auxiliary class. Holds principal information
|
||||||
###### and is used to store principal information for Person, Service objects.
|
###### and is used to store principal information for Person, Service objects.
|
||||||
objectClasses: ( 2.16.840.1.113719.1.301.6.8.1 NAME 'krbPrincipalAux' AUXILIARY MAY ( krbPrincipalName $ krbUPEnabled $ krbPrincipalKey $ krbTicketPolicyReference $ krbPrincipalExpiration $ krbPasswordExpiration $ krbPwdPolicyReference $ krbPrincipalType $ krbPwdHistory $ krbLastPwdChange $ krbPrincipalAliases $ krbLastSuccessfulAuth $ krbLastFailedAuth $ krbLoginFailedCount $ krbExtraData ) )
|
objectClasses: ( 2.16.840.1.113719.1.301.6.8.1 NAME 'krbPrincipalAux' AUXILIARY MAY ( krbPrincipalName $ krbCanonicalName $ krbUPEnabled $ krbPrincipalKey $ krbTicketPolicyReference $ krbPrincipalExpiration $ krbPasswordExpiration $ krbPwdPolicyReference $ krbPrincipalType $ krbPwdHistory $ krbLastPwdChange $ krbPrincipalAliases $ krbLastSuccessfulAuth $ krbLastFailedAuth $ krbLoginFailedCount $ krbExtraData ) )
|
||||||
###### This class is used to create additional principals and stand alone principals.
|
###### This class is used to create additional principals and stand alone principals.
|
||||||
objectClasses: ( 2.16.840.1.113719.1.301.6.9.1 NAME 'krbPrincipal' SUP ( top ) MUST ( krbPrincipalName ) MAY ( krbObjectReferences ) )
|
objectClasses: ( 2.16.840.1.113719.1.301.6.9.1 NAME 'krbPrincipal' SUP ( top ) MUST ( krbPrincipalName ) MAY ( krbObjectReferences ) )
|
||||||
###### The principal references auxiliary class. Holds all principals referred
|
###### The principal references auxiliary class. Holds all principals referred
|
||||||
|
|||||||
Reference in New Issue
Block a user