mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-27 09:21:59 -06:00
147 lines
5.3 KiB
Plaintext
147 lines
5.3 KiB
Plaintext
#
|
|
# Schema more or less verbatim from RFC 4876:
|
|
# "A Configuration Profile Schema for Lightweight Directory Access
|
|
# Protocol (LDAP)-Based Agents"
|
|
#
|
|
dn: cn=schema
|
|
add:attributeTypes:
|
|
( 1.3.6.1.4.1.11.1.3.1.1.0 NAME 'defaultServerList'
|
|
DESC 'List of default servers'
|
|
EQUALITY caseIgnoreMatch
|
|
SUBSTR caseIgnoreSubstringsMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )
|
|
add:attributeTypes:
|
|
( 1.3.6.1.4.1.11.1.3.1.1.1 NAME 'defaultSearchBase'
|
|
DESC 'Default base for searches'
|
|
EQUALITY distinguishedNameMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )
|
|
add:attributeTypes:
|
|
( 1.3.6.1.4.1.11.1.3.1.1.2 NAME 'preferredServerList'
|
|
DESC 'List of preferred servers'
|
|
EQUALITY caseIgnoreMatch
|
|
SUBSTR caseIgnoreSubstringsMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )
|
|
add:attributeTypes:
|
|
( 1.3.6.1.4.1.11.1.3.1.1.3 NAME 'searchTimeLimit'
|
|
DESC 'Maximum time an agent or service allows for a
|
|
search to complete'
|
|
EQUALITY integerMatch
|
|
ORDERING integerOrderingMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )
|
|
add:attributeTypes:
|
|
( 1.3.6.1.4.1.11.1.3.1.1.4 NAME 'bindTimeLimit'
|
|
DESC 'Maximum time an agent or service allows for a
|
|
bind operation to complete'
|
|
EQUALITY integerMatch
|
|
ORDERING integerOrderingMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )
|
|
add:attributeTypes:
|
|
( 1.3.6.1.4.1.11.1.3.1.1.5 NAME 'followReferrals'
|
|
DESC 'An agent or service does or should follow referrals'
|
|
EQUALITY booleanMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.6 NAME 'authenticationMethod'
|
|
DESC 'Identifies the types of authentication methods either
|
|
used, required, or provided by a service or peer'
|
|
EQUALITY caseIgnoreMatch
|
|
SUBSTR caseIgnoreSubstringsMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.7 NAME 'profileTTL'
|
|
DESC 'Time to live, in seconds, before a profile is
|
|
considered stale'
|
|
EQUALITY integerMatch
|
|
ORDERING integerOrderingMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.9 NAME 'attributeMap'
|
|
DESC 'Attribute mappings used, required, or supported by an
|
|
agent or service'
|
|
EQUALITY caseIgnoreIA5Match
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.10 NAME 'credentialLevel'
|
|
DESC 'Identifies type of credentials either used, required,
|
|
or supported by an agent or service'
|
|
EQUALITY caseIgnoreIA5Match
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.11 NAME 'objectclassMap'
|
|
DESC 'Object class mappings used, required, or supported by
|
|
an agent or service'
|
|
EQUALITY caseIgnoreIA5Match
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:
|
|
( 1.3.6.1.4.1.11.1.3.1.1.12 NAME 'defaultSearchScope'
|
|
DESC 'Default scope used when performing a search'
|
|
EQUALITY caseIgnoreIA5Match
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.13 NAME 'serviceCredentialLevel'
|
|
DESC 'Specifies the type of credentials either used, required,
|
|
or supported by a specific service'
|
|
EQUALITY caseIgnoreIA5Match
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.14 NAME 'serviceSearchDescriptor'
|
|
DESC 'Specifies search descriptors required, used, or
|
|
supported by a particular service or agent'
|
|
EQUALITY caseExactMatch
|
|
SUBSTR caseExactSubstringsMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod'
|
|
DESC 'Specifies types authentication methods either
|
|
used, required, or supported by a particular service'
|
|
EQUALITY caseIgnoreMatch
|
|
SUBSTR caseIgnoreSubstringsMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:attributeTypes:"
|
|
( 1.3.6.1.4.1.11.1.3.1.1.16 NAME 'dereferenceAliases'
|
|
DESC 'Specifies if a service or agent either requires,
|
|
supports, or uses dereferencing of aliases.'
|
|
EQUALITY booleanMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
|
|
SINGLE-VALUE
|
|
X-ORIGIN 'RFC4876' )"
|
|
add:objectClasses:
|
|
( 1.3.6.1.4.1.11.1.3.1.2.5 NAME 'DUAConfigProfile'
|
|
SUP top STRUCTURAL
|
|
DESC 'Abstraction of a base configuration for a DUA'
|
|
MUST ( cn )
|
|
MAY ( defaultServerList $$ preferredServerList $$
|
|
defaultSearchBase $$ defaultSearchScope $$
|
|
searchTimeLimit $$ bindTimeLimit $$
|
|
credentialLevel $$ authenticationMethod $$
|
|
followReferrals $$ dereferenceAliases $$
|
|
serviceSearchDescriptor $$ serviceCredentialLevel $$
|
|
serviceAuthenticationMethod $$ objectclassMap $$
|
|
attributeMap $$ profileTTL )
|
|
X-ORIGIN 'RFC4876' )
|