nixos/applications/ldap/skMemberOf.ldif
Brendan Golden 309a880f13
Some checks failed
Build_Deploy / linter (push) Successful in 16s
Build_Deploy / build (push) Successful in 51s
Build_Deploy / deploy_dns (push) Successful in 1m36s
Build_Deploy / deploy_active (active-core) (push) Failing after 2m21s
Build_Deploy / deploy_active (active) (push) Successful in 2m28s
Build_Deploy / deploy_active (active-ext) (push) Successful in 54s
feat: going to store wolves ID in the ldap.
This will allow better linking with teh wolves account in teh future, users will only have to match once.
The users personal email will still be stored, mostly as a form of redundancy.
2025-03-10 22:41:57 +00:00

58 lines
1.8 KiB
Text

# LDAP SSH Public Key schema
# Source: https://blog.oddbit.com/post/2013-07-22-generating-a-membero/
# Notes will need to get our own number https://www.iana.org/assignments/enterprise-numbers/assignment/apply/
# it needs a space at teh end of it, dont remove
dn: cn=skynet-person,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: skynet-person
olcAttributeTypes: ( 1.3.6.1.4.1.24441.1.2.1
NAME 'skMemberOf'
DESC 'Groups this user is a member of'
EQUALITY distinguishedNameMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
)
olcAttributeTypes: ( 1.3.6.1.4.1.24441.1.3.1
NAME 'skMail'
DESC 'username@skynet.ie'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
olcAttributeTypes: ( 1.3.6.1.4.1.24441.1.4.1
NAME 'skID'
DESC 'Student ID'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
olcAttributeTypes: ( 1.3.6.1.4.1.24441.1.4.1
NAME 'skIDWolves'
DESC 'Wolves ID'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
olcAttributeTypes: ( 1.3.6.1.4.1.24441.1.6.1
NAME 'skCreated'
DESC 'When the account was created'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
)
# https://github.com/variablenix/ldap-mail-schema/blob/master/quota.schema
olcAttributeTypes: ( 1.3.6.1.4.1.24441.1.8.1
NAME 'quotaEmail'
DESC 'Quotas for Email'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255}
)
olcAttributeTypes: ( 1.3.6.1.4.1.24441.1.9.1
NAME 'quotaDisk'
DESC 'Quotas for Home dir'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255}
)
olcObjectClasses: ( 1.3.6.1.4.1.24441.1.1.1
NAME 'skPerson'
DESC 'skynet person'
SUP top AUXILIARY
MUST ( skMail $ skCreated )
MAY ( skMemberOf $ skID $ quotaEmail $ quotaDisk $ skIDWolves )
)