mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-09-03 20:52:56 -05:00
Rob Crittenden
0d12b0344f
This was originally configured to pull from the compat area but Nalin thinks that is a bad idea (and it stopped working anyway). This configures the netgroup map to create the triples on its own. Ticket #87
100 lines
4.6 KiB
Plaintext
100 lines
4.6 KiB
Plaintext
dn: cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: nsSlapdPlugin
|
|
default:objectclass: extensibleObject
|
|
default:cn: NIS Server
|
|
default:nsslapd-pluginpath: /usr/lib$LIBARCH/dirsrv/plugins/nisserver-plugin.so
|
|
default:nsslapd-plugininitfunc: nis_plugin_init
|
|
default:nsslapd-plugintype: object
|
|
default:nsslapd-pluginenabled: on
|
|
default:nsslapd-pluginid: nis-server
|
|
default:nsslapd-pluginversion: 0.10
|
|
default:nsslapd-pluginvendor: redhat.com
|
|
default:nsslapd-plugindescription: NIS Server Plugin
|
|
default:nis-tcp-wrappers-name: nis-server
|
|
|
|
dn: nis-domain=$DOMAIN+nis-map=passwd.byname, cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: extensibleObject
|
|
default:nis-domain: $DOMAIN
|
|
default:nis-map: passwd.byname
|
|
default:nis-base: cn=users, cn=accounts, $SUFFIX
|
|
default:nis-secure: no
|
|
|
|
dn: nis-domain=$DOMAIN+nis-map=passwd.byuid, cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: extensibleObject
|
|
default:nis-domain: $DOMAIN
|
|
default:nis-map: passwd.byuid
|
|
default:nis-base: cn=users, cn=accounts, $SUFFIX
|
|
default:nis-secure: no
|
|
|
|
dn: nis-domain=$DOMAIN+nis-map=group.byname, cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: extensibleObject
|
|
default:nis-domain: $DOMAIN
|
|
default:nis-map: group.byname
|
|
default:nis-base: cn=groups, cn=accounts, $SUFFIX
|
|
default:nis-secure: no
|
|
|
|
dn: nis-domain=$DOMAIN+nis-map=group.bygid, cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: extensibleObject
|
|
default:nis-domain: $DOMAIN
|
|
default:nis-map: group.bygid
|
|
default:nis-base: cn=groups, cn=accounts, $SUFFIX
|
|
default:nis-secure: no
|
|
|
|
dn: nis-domain=$DOMAIN+nis-map=group.upg, cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: extensibleObject
|
|
default:nis-domain: $DOMAIN
|
|
default:nis-map: group.upg
|
|
default:nis-base: cn=users, cn=accounts, $SUFFIX
|
|
default:nis-filter: (objectclass=posixAccount)
|
|
default:nis-key-format: %{uid}
|
|
default:nis-value-format: %{uid}:*:%{gidNumber}:%{uid}
|
|
default:nis-secure: no
|
|
default:nis-disallowed-chars: :,
|
|
|
|
dn: nis-domain=$DOMAIN+nis-map=netid.byname, cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: extensibleObject
|
|
default:nis-domain: $DOMAIN
|
|
default:nis-map: netid.byname
|
|
default:nis-base: cn=users, cn=accounts, $SUFFIX
|
|
default:nis-secure: no
|
|
|
|
# Note that the escapes in this entry can be quite confusing. The trick
|
|
# is that each level of nesting requires (2^n) - 1 escapes. So the
|
|
# first level is \", the second is \\\", the third is \\\\\\\", etc.
|
|
# (1, 3, 7, 15, more than that and you'll go insane)
|
|
|
|
# Note that this configuration mirrors the Schema Compat configuration for
|
|
# triples.
|
|
dn: nis-domain=$DOMAIN+nis-map=netgroup, cn=NIS Server, cn=plugins, cn=config
|
|
default:objectclass: top
|
|
default:objectclass: extensibleObject
|
|
default:nis-domain: $DOMAIN
|
|
default:nis-map: netgroup
|
|
default:nis-base: cn=ng, cn=alt, $SUFFIX
|
|
default:nis-filter: (objectClass=ipanisNetgroup)
|
|
default:nis-key-format: %{cn}
|
|
default:nis-value-format: %merge(" ","%{memberNisNetgroup}","(%link(\"%collect(\\\"%{externalHost}\\\",\\\"%deref(\\\\\\\"memberHost\\\\\\\",\\\\\\\"fqdn\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"member\\\\\\\",\\\\\\\"fqdn\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"memberHost\\\\\\\",\\\\\\\"member\\\\\\\",\\\\\\\"fqdn\\\\\\\")\\\")\",\"-\",\",\",\"%collect(\\\"%deref(\\\\\\\"memberUser\\\\\\\",\\\\\\\"uid\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"member\\\\\\\",\\\\\\\"uid\\\\\\\")\\\",\\\"%deref_r(\\\\\\\"memberUser\\\\\\\",\\\\\\\"member\\\\\\\",\\\\\\\"uid\\\\\\\")\\\")\",\"-\"),%{nisDomainName:-})")
|
|
default:nis-secure: no
|
|
|
|
dn: cn=ng,cn=Schema Compatibility,cn=plugins,cn=config
|
|
add:objectClass: top
|
|
add:objectClass: extensibleObject
|
|
add:cn: ng
|
|
add:schema-compat-container-group: 'cn=compat, $SUFFIX'
|
|
add:schema-compat-container-rdn: cn=ng
|
|
add:schema-compat-check-access: yes
|
|
add:schema-compat-search-base: 'cn=ng,cn=alt,$SUFFIX'
|
|
add:schema-compat-search-filter: !(cn=ng)
|
|
add:schema-compat-entry-rdn: cn=%{cn}
|
|
add:schema-compat-entry-attribute: objectclass=nisNetgroup
|
|
add:schema-compat-entry-attribute: 'memberNisNetgroup=%deref_r("member","cn")'
|
|
add:schema-compat-entry-attribute: 'memberNisNetgroup=%referred_r("cn=ng","memberOf","cn")'
|
|
add:schema-compat-entry-attribute: 'nisNetgroupTriple=(%link("%collect(\"%{externalHost}\",\"%deref(\\\"memberHost\\\",\\\"fqdn\\\")\",\"%deref_r(\\\"member\\\",\\\"fqdn\\\")\",\"%deref_r(\\\"memberHost\\\",\\\"member\\\",\\\"fqdn\\\")\")","-",",","%collect(\"%deref(\\\"memberUser\\\",\\\"uid\\\")\",\"%deref_r(\\\"member\\\",\\\"uid\\\")\",\"%deref_r(\\\"memberUser\\\",\\\"member\\\",\\\"uid\\\")\")","-"),%{nisDomainName:-})'
|