mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-30 10:47:08 -06:00
36 lines
913 B
Plaintext
36 lines
913 B
Plaintext
#kerberos user
|
|
dn: uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX
|
|
changetype: add
|
|
objectclass: account
|
|
objectclass: simplesecurityobject
|
|
uid: kdc
|
|
userPassword: $PASSWORD
|
|
|
|
#kerberos base object
|
|
dn: cn=kerberos,$SUFFIX
|
|
changetype: add
|
|
objectClass: krbContainer
|
|
objectClass: top
|
|
cn: kerberos
|
|
aci: (targetattr="*")(version 3.0; acl "KDC System Account"; allow (all) userdn= "ldap:///uid=kdc,cn=sysaccounts,cn=etc,$SUFFIX";)
|
|
|
|
#sasl mapping
|
|
dn: cn=Full Principal,cn=mapping,cn=sasl,cn=config
|
|
changetype: add
|
|
objectclass: top
|
|
objectclass: nsSaslMapping
|
|
cn: Full Principal
|
|
nsSaslMapRegexString: \(.*\)@\(.*\)
|
|
nsSaslMapBaseDNTemplate: $SUFFIX
|
|
nsSaslMapFilterTemplate: (krbPrincipalName=\1@\2)
|
|
|
|
dn: cn=Name Only,cn=mapping,cn=sasl,cn=config
|
|
changetype: add
|
|
objectclass: top
|
|
objectclass: nsSaslMapping
|
|
cn: Name Only
|
|
nsSaslMapRegexString: \(.*\)
|
|
nsSaslMapBaseDNTemplate: $SUFFIX
|
|
nsSaslMapFilterTemplate: (krbPrincipalName=\1@$REALM)
|
|
|