Is this available as a pre-built package?

-Bruce


On Wed, Apr 28, 2010 at 6:54 AM, Adam Sommer <email address hidden> wrote:

> Adam Sommer has proposed merging
> lp:~asommer/openldap-dit/openldap-dit-split into lp:openldap-dit.
>
> Requested reviews:
>  Andreas Hasenack (ahasenack)
>
>
> My attempt to solve the split-dit-package blueprint:
> https://blueprints.launchpad.net/openldap-dit/+spec/split-dit-package
>
> Created subdirectories in the schemas, acls, databases, contents, modules,
> and overlays directories for the various "services" that can be added to the
> DIT.  Doing this also allows users to easily create a base DIT if that is
> all they desire.
>
> Code is also updated for latest slapd package which makes changes to the
> cn=localroot,cn=config authentication method.
>
> --
>
> https://code.launchpad.net/~asommer/openldap-dit/openldap-dit-split/+merge/24321
> You are subscribed to branch lp:openldap-dit.
>
> === added directory 'acls/base'
> === added file 'acls/base/config-acl.ldif'
> --- acls/base/config-acl.ldif   1970-01-01 00:00:00 +0000
> +++ acls/base/config-acl.ldif   2010-04-28 13:54:17 +0000
> @@ -0,0 +1,6 @@
> +dn: olcDatabase={0}config,cn=config
> +changetype: modify
> +add: olcAccess
> +olcAccess: to *
> +  by group/groupOfMembers/member.exact="cn=LDAP Admins,ou=System
> Groups,@SUFFIX@" manage
> +  by * break
>
> === removed file 'acls/config-acl.ldif'
> --- acls/config-acl.ldif        2009-09-17 13:38:20 +0000
> +++ acls/config-acl.ldif        1970-01-01 00:00:00 +0000
> @@ -1,6 +0,0 @@
> -dn: olcDatabase={0}config,cn=config
> -changetype: modify
> -add: olcAccess
> -olcAccess: to *
> -  by group/groupOfMembers/member.exact="cn=LDAP Admins,ou=System
> Groups,@SUFFIX@" manage
> -  by * break
>
> === removed file 'acls/frontend-acl.ldif'
> --- acls/frontend-acl.ldif      2009-09-14 20:38:42 +0000
> +++ acls/frontend-acl.ldif      1970-01-01 00:00:00 +0000
> @@ -1,7 +0,0 @@
> -# see bug #427842
> -dn: olcDatabase={-1}frontend,cn=config
> -changetype: modify
> -add: olcAccess
> -olcAccess: to dn.base="" by * read
> -olcAccess: to dn.base="cn=subschema" by * read
> -
>
> === added directory 'contents/base'
> === added file 'contents/base/base-dit.ldif'
> --- contents/base/base-dit.ldif 1970-01-01 00:00:00 +0000
> +++ contents/base/base-dit.ldif 2010-04-28 13:54:17 +0000
> @@ -0,0 +1,160 @@
> +# base tree
> +dn: @SUFFIX@
> +dc: @DC@
> +objectClass: domain
> +objectClass: domainRelatedObject
> +associatedDomain: @DOMAIN@
> +
> +dn: ou=People,@SUFFIX@
> +ou: People
> +objectClass: organizationalUnit
> +
> +dn: ou=Group,@SUFFIX@
> +ou: Group
> +objectClass: organizationalUnit
> +description: Container for user accounts
> +
> +dn: ou=System Accounts,@SUFFIX@
> +ou: System Accounts
> +objectClass: organizationalUnit
> +description: Container for System and Services privileged accounts
> +
> +dn: ou=System Groups,@SUFFIX@
> +ou: System Groups
> +objectClass: organizationalUnit
> +description: Container for System and Services privileged groups
> +
> +dn: ou=Hosts,@SUFFIX@
> +ou: Hosts
> +objectClass: organizationalUnit
> +description: Container for Samba machine accounts
> +
> +dn: ou=Idmap,@SUFFIX@
> +ou: Idmap
> +objectClass: organizationalUnit
> +description: Container for Samba Winbind ID mappings
> +
> +dn: ou=Address Book,@SUFFIX@
> +ou: Address Book
> +objectClass: organizationalUnit
> +description: Container for global address book entries
> +
> +dn: ou=Password Policies,@SUFFIX@
> +ou: Password Policies
> +objectClass: organizationalUnit
> +description: Container for OpenLDAP password policies
> +
> +dn: cn=default,ou=Password Policies,@SUFFIX@
> +cn: default
> +objectClass: pwdPolicy
> +objectClass: namedObject
> +pwdAttribute: userPassword
> +pwdCheckQuality: 1
> +
> +# System Accounts
> +dn: uid=Account Admin,ou=System Accounts,@SUFFIX@
> +uid: Account Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer all users, groups, machines and
> general accounts
> +
> +dn: uid=nssldap,ou=System Accounts,@SUFFIX@
> +uid: nssldap
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Unprivileged account which can be used by nss_ldap for when
> anonymous searches are disabled
> +
> +dn: uid=MTA Admin,ou=System Accounts,@SUFFIX@
> +uid: MTA Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer email related attributes
> +
> +dn: uid=Address Book Admin,ou=System Accounts,@SUFFIX@
> +uid: Address Book Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer global Address Book related
> entries and attributes
> +
> +dn: uid=LDAP Admin,ou=System Accounts,@SUFFIX@
> +uid: LDAP Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer all parts of the Directory
> +
> +dn: uid=LDAP Replicator,ou=System Accounts,@SUFFIX@
> +uid: LDAP Replicator
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used by consumer servers for replication
> +
> +dn: uid=LDAP Monitor,ou=System Accounts,@SUFFIX@
> +uid: LDAP Monitor
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to read cn=monitor entries
> +
> +dn: uid=Idmap Admin,ou=System Accounts,@SUFFIX@
> +uid: Idmap Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer Samba Winbind ID mapping related
> entries and attributes
> +
> +# Groups associated with system accounts
> +dn: cn=LDAP Admins,ou=System Groups,@SUFFIX@
> +cn: LDAP Admins
> +objectClass: groupOfMembers
> +description: Members can administer all parts of the Directory
> +owner: uid=LDAP Admin,ou=System Accounts,@SUFFIX@
> +member: uid=LDAP Admin,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=Account Admins,ou=System Groups,@SUFFIX@
> +cn: Account Admins
> +objectClass: groupOfMembers
> +description: Members can administer all user, group and machine accounts
> +owner: uid=Account Admin,ou=System Accounts,@SUFFIX@
> +member: uid=Account Admin,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=Address Book Admins,ou=System Groups,@SUFFIX@
> +cn: Address Book Admins
> +objectClass: groupOfMembers
> +description: Members can administer ou=Address Book entries and attributes
> +owner: uid=Address Book Admin,ou=System Accounts,@SUFFIX@
> +member: uid=Address Book Admin,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=LDAP Replicators,ou=System Groups,@SUFFIX@
> +cn: LDAP Replicators
> +objectClass: groupOfMembers
> +description: Members can be used for syncrepl replication
> +owner: uid=LDAP Replicator,ou=System Accounts,@SUFFIX@
> +member: uid=LDAP Replicator,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=MTA Admins,ou=System Groups,@SUFFIX@
> +cn: MTA Admins
> +objectClass: groupOfMembers
> +description: Members can administer email related attributes
> +owner: uid=MTA Admin,ou=System Accounts,@SUFFIX@
> +member: uid=MTA Admin,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=LDAP Monitors,ou=System Groups,@SUFFIX@
> +cn: LDAP Monitors
> +objectClass: groupOfMembers
> +description: Members can read the cn=monitor backend
> +owner: uid=LDAP Monitor,ou=System Accounts,@SUFFIX@
> +member: uid=LDAP Monitor,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=Idmap Admins,ou=System Groups,@SUFFIX@
> +cn: Idmap Admins
> +objectClass: groupOfMembers
> +description: Members can administer ou=Idmap entries and attributes
> +owner: uid=Idmap Admin,ou=System Accounts,@SUFFIX@
> +member: uid=Idmap Admin,ou=System Accounts,@SUFFIX@
> +
>
> === added directory 'contents/dhcp'
> === added file 'contents/dhcp/dhcp-dit.ldif'
> --- contents/dhcp/dhcp-dit.ldif 1970-01-01 00:00:00 +0000
> +++ contents/dhcp/dhcp-dit.ldif 2010-04-28 13:54:17 +0000
> @@ -0,0 +1,33 @@
> +dn: ou=dhcp,@SUFFIX@
> +ou: dhcp
> +objectClass: organizationalUnit
> +description: Container for DHCP related entries
> +
> +dn: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> +uid: DHCP Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer DHCP related entries and
> attributes
> +
> +dn: uid=DHCP Reader,ou=System Accounts,@SUFFIX@
> +uid: DHCP Reader
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to read entries and attributes under ou=dhcp
> +
> +dn: cn=DHCP Admins,ou=System Groups,@SUFFIX@
> +cn: DHCP Admins
> +objectClass: groupOfMembers
> +description: Members can administer ou=DHCP entries and attributes
> +owner: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> +member: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=DHCP Readers,ou=System Groups,@SUFFIX@
> +cn: DHCP Readers
> +objectClass: groupOfMembers
> +description: Members can read entries and attributes under ou=dhcp
> +owner: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> +member: uid=DHCP Reader,ou=System Accounts,@SUFFIX@
> +
>
> === added file 'contents/dhcp/dns-dit.ldif'
> --- contents/dhcp/dns-dit.ldif  1970-01-01 00:00:00 +0000
> +++ contents/dhcp/dns-dit.ldif  2010-04-28 13:54:17 +0000
> @@ -0,0 +1,33 @@
> +dn: ou=dns,@SUFFIX@
> +ou: dns
> +objectClass: organizationalUnit
> +description: Container for DNS related entries
> +
> +dn: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> +uid: DNS Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer DNS related entries and attributes
> +
> +dn: uid=DNS Reader,ou=System Accounts,@SUFFIX@
> +uid: DNS Reader
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to read entries and attributes under ou=dns
> +
> +dn: cn=DNS Admins,ou=System Groups,@SUFFIX@
> +cn: DNS Admins
> +objectClass: groupOfMembers
> +description: Members can administer ou=DNS entries and attributes
> +owner: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> +member: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> +
> +dn: cn=DNS Readers,ou=System Groups,@SUFFIX@
> +cn: DNS Readers
> +objectClass: groupOfMembers
> +description: Members can read entries and attributes under ou=dns
> +owner: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> +member: uid=DNS Reader,ou=System Accounts,@SUFFIX@
> +
>
> === removed file 'contents/dit.ldif'
> --- contents/dit.ldif   2009-10-06 18:58:32 +0000
> +++ contents/dit.ldif   1970-01-01 00:00:00 +0000
> @@ -1,270 +0,0 @@
> -# base tree
> -dn: @SUFFIX@
> -dc: @DC@
> -objectClass: domain
> -objectClass: domainRelatedObject
> -associatedDomain: @DOMAIN@
> -
> -dn: ou=People,@SUFFIX@
> -ou: People
> -objectClass: organizationalUnit
> -
> -dn: ou=Group,@SUFFIX@
> -ou: Group
> -objectClass: organizationalUnit
> -description: Container for user accounts
> -
> -dn: ou=System Accounts,@SUFFIX@
> -ou: System Accounts
> -objectClass: organizationalUnit
> -description: Container for System and Services privileged accounts
> -
> -dn: ou=System Groups,@SUFFIX@
> -ou: System Groups
> -objectClass: organizationalUnit
> -description: Container for System and Services privileged groups
> -
> -dn: ou=Hosts,@SUFFIX@
> -ou: Hosts
> -objectClass: organizationalUnit
> -description: Container for Samba machine accounts
> -
> -dn: ou=Idmap,@SUFFIX@
> -ou: Idmap
> -objectClass: organizationalUnit
> -description: Container for Samba Winbind ID mappings
> -
> -dn: ou=Address Book,@SUFFIX@
> -ou: Address Book
> -objectClass: organizationalUnit
> -description: Container for global address book entries
> -
> -dn: ou=sudoers,@SUFFIX@
> -ou: sudoers
> -objectClass: organizationalUnit
> -description: Container for sudo related entries
> -
> -dn: cn=defaults,ou=sudoers,@SUFFIX@
> -cn: defaults
> -objectClass: sudoRole
> -sudoOption: authenticate
> -description: Default options for sudo roles
> -
> -dn: ou=dhcp,@SUFFIX@
> -ou: dhcp
> -objectClass: organizationalUnit
> -description: Container for DHCP related entries
> -
> -dn: ou=dns,@SUFFIX@
> -ou: dns
> -objectClass: organizationalUnit
> -description: Container for DNS related entries
> -
> -dn: ou=Kerberos Realms,@SUFFIX@
> -ou: Kerberos Realms
> -objectClass: organizationalUnit
> -description: Container for Kerberos Realms
> -
> -dn: ou=Password Policies,@SUFFIX@
> -ou: Password Policies
> -objectClass: organizationalUnit
> -description: Container for OpenLDAP password policies
> -
> -dn: cn=default,ou=Password Policies,@SUFFIX@
> -cn: default
> -objectClass: pwdPolicy
> -objectClass: namedObject
> -pwdAttribute: userPassword
> -pwdCheckQuality: 1
> -
> -# System Accounts
> -dn: uid=Account Admin,ou=System Accounts,@SUFFIX@
> -uid: Account Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer all users, groups, machines and
> general accounts
> -
> -dn: uid=nssldap,ou=System Accounts,@SUFFIX@
> -uid: nssldap
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Unprivileged account which can be used by nss_ldap for when
> anonymous searches are disabled
> -
> -dn: uid=MTA Admin,ou=System Accounts,@SUFFIX@
> -uid: MTA Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer email related attributes
> -
> -dn: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> -uid: DHCP Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer DHCP related entries and
> attributes
> -
> -dn: uid=DHCP Reader,ou=System Accounts,@SUFFIX@
> -uid: DHCP Reader
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to read entries and attributes under ou=dhcp
> -
> -dn: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> -uid: DNS Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer DNS related entries and attributes
> -
> -dn: uid=DNS Reader,ou=System Accounts,@SUFFIX@
> -uid: DNS Reader
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to read entries and attributes under ou=dns
> -
> -dn: uid=Sudo Admin,ou=System Accounts,@SUFFIX@
> -uid: Sudo Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer Sudo related entries and
> attributes
> -
> -dn: uid=Address Book Admin,ou=System Accounts,@SUFFIX@
> -uid: Address Book Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer global Address Book related
> entries and attributes
> -
> -dn: uid=LDAP Admin,ou=System Accounts,@SUFFIX@
> -uid: LDAP Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer all parts of the Directory
> -
> -dn: uid=LDAP Replicator,ou=System Accounts,@SUFFIX@
> -uid: LDAP Replicator
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used by consumer servers for replication
> -
> -dn: uid=LDAP Monitor,ou=System Accounts,@SUFFIX@
> -uid: LDAP Monitor
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to read cn=monitor entries
> -
> -dn: uid=Idmap Admin,ou=System Accounts,@SUFFIX@
> -uid: Idmap Admin
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used to administer Samba Winbind ID mapping related
> entries and attributes
> -
> -dn: uid=kdc-service,ou=System Accounts,@SUFFIX@
> -uid: kdc-service
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used for the Kerberos KDC
> -
> -dn: uid=kadmin-service,ou=System Accounts,@SUFFIX@
> -uid: kadmin-service
> -objectClass: account
> -objectClass: simpleSecurityObject
> -userPassword: {CRYPT}x
> -description: Account used for the Kerberos Admin server
> -
> -# Groups associated with system accounts
> -dn: cn=LDAP Admins,ou=System Groups,@SUFFIX@
> -cn: LDAP Admins
> -objectClass: groupOfMembers
> -description: Members can administer all parts of the Directory
> -owner: uid=LDAP Admin,ou=System Accounts,@SUFFIX@
> -member: uid=LDAP Admin,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=Account Admins,ou=System Groups,@SUFFIX@
> -cn: Account Admins
> -objectClass: groupOfMembers
> -description: Members can administer all user, group and machine accounts
> -owner: uid=Account Admin,ou=System Accounts,@SUFFIX@
> -member: uid=Account Admin,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=Sudo Admins,ou=System Groups,@SUFFIX@
> -cn: Sudo Admins
> -objectClass: groupOfMembers
> -description: Members can administer ou=sudoers entries and attributes
> -owner: uid=Sudo Admin,ou=System Accounts,@SUFFIX@
> -member: uid=Sudo Admin,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=DNS Admins,ou=System Groups,@SUFFIX@
> -cn: DNS Admins
> -objectClass: groupOfMembers
> -description: Members can administer ou=DNS entries and attributes
> -owner: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> -member: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=DNS Readers,ou=System Groups,@SUFFIX@
> -cn: DNS Readers
> -objectClass: groupOfMembers
> -description: Members can read entries and attributes under ou=dns
> -owner: uid=DNS Admin,ou=System Accounts,@SUFFIX@
> -member: uid=DNS Reader,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=DHCP Admins,ou=System Groups,@SUFFIX@
> -cn: DHCP Admins
> -objectClass: groupOfMembers
> -description: Members can administer ou=DHCP entries and attributes
> -owner: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> -member: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=DHCP Readers,ou=System Groups,@SUFFIX@
> -cn: DHCP Readers
> -objectClass: groupOfMembers
> -description: Members can read entries and attributes under ou=dhcp
> -owner: uid=DHCP Admin,ou=System Accounts,@SUFFIX@
> -member: uid=DHCP Reader,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=Address Book Admins,ou=System Groups,@SUFFIX@
> -cn: Address Book Admins
> -objectClass: groupOfMembers
> -description: Members can administer ou=Address Book entries and attributes
> -owner: uid=Address Book Admin,ou=System Accounts,@SUFFIX@
> -member: uid=Address Book Admin,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=LDAP Replicators,ou=System Groups,@SUFFIX@
> -cn: LDAP Replicators
> -objectClass: groupOfMembers
> -description: Members can be used for syncrepl replication
> -owner: uid=LDAP Replicator,ou=System Accounts,@SUFFIX@
> -member: uid=LDAP Replicator,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=MTA Admins,ou=System Groups,@SUFFIX@
> -cn: MTA Admins
> -objectClass: groupOfMembers
> -description: Members can administer email related attributes
> -owner: uid=MTA Admin,ou=System Accounts,@SUFFIX@
> -member: uid=MTA Admin,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=LDAP Monitors,ou=System Groups,@SUFFIX@
> -cn: LDAP Monitors
> -objectClass: groupOfMembers
> -description: Members can read the cn=monitor backend
> -owner: uid=LDAP Monitor,ou=System Accounts,@SUFFIX@
> -member: uid=LDAP Monitor,ou=System Accounts,@SUFFIX@
> -
> -dn: cn=Idmap Admins,ou=System Groups,@SUFFIX@
> -cn: Idmap Admins
> -objectClass: groupOfMembers
> -description: Members can administer ou=Idmap entries and attributes
> -owner: uid=Idmap Admin,ou=System Accounts,@SUFFIX@
> -member: uid=Idmap Admin,ou=System Accounts,@SUFFIX@
> -
>
> === added directory 'contents/mit-kerberos'
> === added file 'contents/mit-kerberos/mit-kerberos-dit.ldif'
> --- contents/mit-kerberos/mit-kerberos-dit.ldif 1970-01-01 00:00:00 +0000
> +++ contents/mit-kerberos/mit-kerberos-dit.ldif 2010-04-28 13:54:17 +0000
> @@ -0,0 +1,19 @@
> +dn: ou=Kerberos Realms,@SUFFIX@
> +ou: Kerberos Realms
> +objectClass: organizationalUnit
> +description: Container for Kerberos Realms
> +
> +dn: uid=kdc-service,ou=System Accounts,@SUFFIX@
> +uid: kdc-service
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used for the Kerberos KDC
> +
> +dn: uid=kadmin-service,ou=System Accounts,@SUFFIX@
> +uid: kadmin-service
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used for the Kerberos Admin server
> +
>
> === added directory 'contents/sudo'
> === added file 'contents/sudo/sudo-dit.ldif'
> --- contents/sudo/sudo-dit.ldif 1970-01-01 00:00:00 +0000
> +++ contents/sudo/sudo-dit.ldif 2010-04-28 13:54:17 +0000
> @@ -0,0 +1,24 @@
> +dn: ou=sudoers,@SUFFIX@
> +ou: sudoers
> +objectClass: organizationalUnit
> +description: Container for sudo related entries
> +
> +dn: cn=defaults,ou=sudoers,@SUFFIX@
> +cn: defaults
> +objectClass: sudoRole
> +sudoOption: authenticate
> +description: Default options for sudo roles
> +
> +dn: uid=Sudo Admin,ou=System Accounts,@SUFFIX@
> +uid: Sudo Admin
> +objectClass: account
> +objectClass: simpleSecurityObject
> +userPassword: {CRYPT}x
> +description: Account used to administer Sudo related entries and
> attributes
> +
> +dn: cn=Sudo Admins,ou=System Groups,@SUFFIX@
> +cn: Sudo Admins
> +objectClass: groupOfMembers
> +description: Members can administer ou=sudoers entries and attributes
> +owner: uid=Sudo Admin,ou=System Accounts,@SUFFIX@
> +member: uid=Sudo Admin,ou=System Accounts,@SUFFIX@
>
> === removed file 'databases/add-hdb.ldif'
> --- databases/add-hdb.ldif      2009-10-06 23:18:47 +0000
> +++ databases/add-hdb.ldif      1970-01-01 00:00:00 +0000
> @@ -1,152 +0,0 @@
> -dn: olcDatabase=hdb,cn=config
> -olcDatabase: hdb
> -objectClass: olcDatabaseConfig
> -objectClass: olcHdbConfig
> -olcSuffix: @SUFFIX@
> -olcDbDirectory: /var/lib/ldap
> -olcDbCacheSize: 1000
> -olcDbCheckpoint: 1024 10
> -olcDbConfig: set_cachesize 0 10485760 0
> -olcDbConfig: set_lg_bsize 2097152
> -olcDbConfig: set_flags DB_LOG_AUTOREMOVE
> -olcDbIDLcacheSize: 3000
> -olcRootDN: cn=localroot,cn=config
> -olcDbIndex: objectClass eq
> -olcDbIndex: entryUUID eq
> -olcDbIndex: entryCSN eq
> -olcDbIndex: cn eq,subinitial
> -olcDbIndex: uid eq,subinitial
> -olcDbIndex: uidNumber eq
> -olcDbIndex: gidNumber eq
> -olcDbIndex: sn eq,subinitial
> -olcDbIndex: member eq
> -olcDbIndex: memberUid eq
> -olcDbIndex: mail eq,subinitial
> -olcDbIndex: givenName eq,subinitial
> -olcDbIndex: sambaDomainName eq
> -olcDbIndex: sambaSID eq,sub
> -olcDbIndex: displayName eq
> -olcDbIndex: sambaGroupType eq
> -olcDbIndex: krbPrincipalName eq
> -olcDbIndex: krbPwdPolicyReference eq
> -olcDbIndex: sambaSIDList eq
> -olcDbIndex: uniqueMember pres,eq
> -olcDbIndex: zoneName eq
> -olcDbIndex: dhcpClassData eq
> -olcDbIndex: relativeDomainName eq
> -olcDbIndex: dhcpHWAddress eq
> -olcDbIndex: sudoUser eq,sub
> -olcAccess: {0}to dn.subtree="@SUFFIX@"
> -  by group/groupOfMembers/member.exact="cn=ldap admins,ou=system
> groups,@SUFFIX@" manage
> -  by group/groupOfMembers/member.exact="cn=ldap replicators,ou=system
> groups,@SUFFIX@" read
> -  by * break
> -olcAccess: {1}to dn.subtree="ou=people,@SUFFIX@"
> -  attrs=shadowLastChange
> -  by self write
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {2}to dn.subtree="ou=people,@SUFFIX@"
> -  attrs=userPassword
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by self write
> -  by anonymous auth
> -  by * none
> -olcAccess: {3}to dn.subtree="@SUFFIX@"
> -  attrs=userPassword
> -  by self write
> -  by anonymous auth
> -  by * none
> -olcAccess: {4}to dn.subtree="@SUFFIX@"
> -  attrs=krbPrincipalKey
> -  by self write
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by dn.exact="uid=kdc-service,ou=System Accounts,@SUFFIX@" read
> -  by dn.exact="uid=kadmin-service,ou=System Accounts,@SUFFIX@" write
> -  by anonymous auth
> -  by * none
> -olcAccess: {5}to dn.subtree="ou=password policies,@SUFFIX@"
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {6}to dn.subtree="@SUFFIX@"
> -  attrs=sambaLMPassword,sambaNTPassword
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by anonymous auth
> -  by self write
> -  by * none
> -olcAccess: {7}to dn.subtree="@SUFFIX@"
> -  attrs=sambaPasswordHistory,pwdHistory
> -  by self read
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by * none
> -olcAccess: {8}to dn.subtree="@SUFFIX@"
> -  attrs=pwdReset
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {9}to dn.regex="^cn=[^,]+,ou=(System Groups|Group),@SUFFIX@$"
> -  attrs=member
> -  by dnattr=owner write
> -  by * break
> -olcAccess: {10}to dn.subtree="ou=people,@SUFFIX@"
> -
>  attrs=carLicense,homePhone,homePostalAddress,mobile,pager,telephoneNumber
> -  by self write
> -  by * break
> -olcAccess: {11}to dn.regex="^([^,]+,)?ou=(People|Group|Hosts),@SUFFIX@$"
> -  attrs=children,entry
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by * break
> -olcAccess: {12}to dn.regex="^[^,]+,ou=(People|Hosts|Group),@SUFFIX@$"
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by * break
> -olcAccess: {13}to dn.regex="^(sambaDomainName=[^,]+,)?@SUFFIX@$"
> -  attrs=children,entry,@sambaDomain,@sambaUnixIdPool
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {14}to dn.regex="^(sambaSID=[^,]+,)?ou=Idmap,@SUFFIX@$"
> -  attrs=children,entry,@sambaIdmapEntry
> -  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> -  by group/groupOfMembers/member.exact="cn=idmap admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {15}to dn.regex="^(.*,)?ou=Address Book,@SUFFIX@"
> -  attrs=children,entry,@inetOrgPerson
> -  by group/groupOfMembers/member.exact="cn=address book admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {16}to dn.subtree="ou=dhcp,@SUFFIX@"
> -
>  attrs=children,entry,@dhcpService,@dhcpServer,@dhcpSharedNetwork,@dhcpSubnet,@dhcpPool,
> -
> @dhcpGroup,@dhcpHost,@dhcpClass,@dhcpSubClass,@dhcpOptions,@dhcpLeases,@dhcpLog
> -  by group/groupOfMembers/member.exact="cn=dhcp admins,ou=system
> groups,@SUFFIX@" write
> -  by group/groupOfMembers/member.exact="cn=dhcp readers,ou=system
> groups,@SUFFIX@" read
> -  by * read
> -olcAccess: {17}to dn.regex="^([^,]+,)?ou=sudoers,@SUFFIX@$"
> -  attrs=children,entry,@sudoRole
> -  by group/groupOfMembers/member.exact="cn=sudo admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {18}to dn.base="ou=dns,@SUFFIX@"
> -  attrs=entry,@extensibleObject
> -  by group/groupOfMembers/member.exact="cn=dns admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {19}to dn.subtree="ou=dns,@SUFFIX@"
> -  attrs=children,entry,@dNSZone
> -  by group/groupOfMembers/member.exact="cn=dns admins,ou=system
> groups,@SUFFIX@" write
> -  by group/groupOfMembers/member.exact="cn=dns readers,ou=system
> groups,@SUFFIX@" read
> -  by * none
> -olcAccess: {20}to dn.subtree="ou=Kerberos Realms,@SUFFIX@"
> -  by dn.exact="uid=kdc-service,ou=System Accounts,@SUFFIX@" read
> -  by dn.exact="uid=kadmin-service,ou=System Accounts,@SUFFIX@" write
> -  by * none
> -olcAccess: {21}to dn.one="ou=people,@SUFFIX@"
> -  attrs=@inetLocalMailRecipient,mail
> -  by group/groupOfMembers/member.exact="cn=mta admins,ou=system
> groups,@SUFFIX@" write
> -  by * read
> -olcAccess: {22}to dn.subtree="@SUFFIX@"
> -  by * read
> -olcAddContentAcl: TRUE
> -olcLastMod: TRUE
> -olcLimits: {0}group/groupOfMembers/member="cn=ldap replicators,ou=system
> groups,@SUFFIX@"
> -  size=unlimited
> -  time=unlimited
> -olcLimits: {1}group/groupOfMembers/member="cn=ldap admins,ou=system
> groups,@SUFFIX@"
> -  size=unlimited
> -  time=unlimited
> -olcLimits: {2}group/groupOfMembers/member="cn=account admins,ou=system
> groups,@SUFFIX@"
> -  size=unlimited
> -  time=unlimited
>
> === removed file 'databases/add-monitor.ldif'
> --- databases/add-monitor.ldif  2009-09-17 14:09:01 +0000
> +++ databases/add-monitor.ldif  1970-01-01 00:00:00 +0000
> @@ -1,10 +0,0 @@
> -dn: olcDatabase=monitor,cn=config
> -objectClass: olcMonitorConfig
> -objectClass: olcDatabaseConfig
> -objectClass: olcConfig
> -olcDatabase: monitor
> -olcRootDN: cn=localroot,cn=config
> -olcAccess: {0}to dn.subtree=""
> -  by group/groupOfMembers/member.exact="cn=LDAP Admins,ou=System
> Groups,@SUFFIX@" read
> -  by group/groupOfMembers/member.exact="cn=LDAP Monitors,ou=System
> Groups,@SUFFIX@" read
> -  by * none
>
> === added directory 'databases/base'
> === added file 'databases/base/add-base.ldif'
> --- databases/base/add-base.ldif        1970-01-01 00:00:00 +0000
> +++ databases/base/add-base.ldif        2010-04-28 13:54:17 +0000
> @@ -0,0 +1,90 @@
> +dn: olcDatabase=hdb,cn=config
> +olcDatabase: hdb
> +objectClass: olcDatabaseConfig
> +objectClass: olcHdbConfig
> +olcSuffix: @SUFFIX@
> +olcDbDirectory: /var/lib/ldap
> +olcDbCacheSize: 1000
> +olcDbCheckpoint: 1024 10
> +olcDbConfig: set_cachesize 0 10485760 0
> +olcDbConfig: set_lg_bsize 2097152
> +olcDbConfig: set_flags DB_LOG_AUTOREMOVE
> +olcDbIDLcacheSize: 3000
> +olcRootDN: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
> +olcDbIndex: objectClass eq
> +olcDbIndex: entryUUID eq
> +olcDbIndex: entryCSN eq
> +olcDbIndex: cn eq,subinitial
> +olcDbIndex: uid eq,subinitial
> +olcDbIndex: uidNumber eq
> +olcDbIndex: gidNumber eq
> +olcDbIndex: sn eq,subinitial
> +olcDbIndex: member eq
> +olcDbIndex: memberUid eq
> +olcDbIndex: mail eq,subinitial
> +olcDbIndex: givenName eq,subinitial
> +olcDbIndex: displayName eq
> +olcDbIndex: uniqueMember pres,eq
> +olcAccess: {0}to dn.subtree="@SUFFIX@"
> +  by group/groupOfMembers/member.exact="cn=ldap admins,ou=system
> groups,@SUFFIX@" manage
> +  by group/groupOfMembers/member.exact="cn=ldap replicators,ou=system
> groups,@SUFFIX@" read
> +  by * break
> +olcAccess: {1}to dn.subtree="ou=people,@SUFFIX@"
> +  attrs=shadowLastChange
> +  by self write
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +olcAccess: {2}to dn.subtree="ou=people,@SUFFIX@"
> +  attrs=userPassword
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by self write
> +  by anonymous auth
> +  by * none
> +olcAccess: {3}to dn.subtree="@SUFFIX@"
> +  attrs=userPassword
> +  by self write
> +  by anonymous auth
> +  by * none
> +olcAccess: {4}to dn.subtree="ou=password policies,@SUFFIX@"
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +olcAccess: {7}to dn.subtree="@SUFFIX@"
> +  attrs=pwdReset
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +olcAccess: {8}to dn.regex="^cn=[^,]+,ou=(System Groups|Group),@SUFFIX@$"
> +  attrs=member
> +  by dnattr=owner write
> +  by * break
> +olcAccess: {9}to dn.subtree="ou=people,@SUFFIX@"
> +
>  attrs=carLicense,homePhone,homePostalAddress,mobile,pager,telephoneNumber
> +  by self write
> +  by * break
> +olcAccess: {10}to dn.regex="^([^,]+,)?ou=(People|Group|Hosts),@SUFFIX@$"
> +  attrs=children,entry
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by * break
> +olcAccess: {11}to dn.regex="^[^,]+,ou=(People|Hosts|Group),@SUFFIX@$"
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by * break
> +olcAccess: {12}to dn.regex="^(.*,)?ou=Address Book,@SUFFIX@"
> +  attrs=children,entry,@inetOrgPerson
> +  by group/groupOfMembers/member.exact="cn=address book admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +olcAccess: {13}to dn.one="ou=people,@SUFFIX@"
> +  attrs=@inetLocalMailRecipient,mail
> +  by group/groupOfMembers/member.exact="cn=mta admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +olcAccess: {14}to dn.subtree="@SUFFIX@"
> +  by * read
> +olcAddContentAcl: TRUE
> +olcLastMod: TRUE
> +olcLimits: {0}group/groupOfMembers/member="cn=ldap replicators,ou=system
> groups,@SUFFIX@"
> +  size=unlimited
> +  time=unlimited
> +olcLimits: {1}group/groupOfMembers/member="cn=ldap admins,ou=system
> groups,@SUFFIX@"
> +  size=unlimited
> +  time=unlimited
> +olcLimits: {2}group/groupOfMembers/member="cn=account admins,ou=system
> groups,@SUFFIX@"
> +  size=unlimited
> +  time=unlimited
>
> === added file 'databases/base/add-monitor.ldif'
> --- databases/base/add-monitor.ldif     1970-01-01 00:00:00 +0000
> +++ databases/base/add-monitor.ldif     2010-04-28 13:54:17 +0000
> @@ -0,0 +1,10 @@
> +dn: olcDatabase=monitor,cn=config
> +objectClass: olcMonitorConfig
> +objectClass: olcDatabaseConfig
> +objectClass: olcConfig
> +olcDatabase: monitor
> +olcRootDN: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
> +olcAccess: {0}to dn.subtree=""
> +  by group/groupOfMembers/member.exact="cn=LDAP Admins,ou=System
> Groups,@SUFFIX@" read
> +  by group/groupOfMembers/member.exact="cn=LDAP Monitors,ou=System
> Groups,@SUFFIX@" read
> +  by * none
>
> === added directory 'databases/dhcp'
> === added file 'databases/dhcp/add-dhcp.ldif'
> --- databases/dhcp/add-dhcp.ldif        1970-01-01 00:00:00 +0000
> +++ databases/dhcp/add-dhcp.ldif        2010-04-28 13:54:17 +0000
> @@ -0,0 +1,21 @@
> +dn: olcDatabase={1}hdb,cn=config
> +changetype: modify
> +add: olcDbIndex
> +olcDbIndex: dhcpClassData eq
> +-
> +add: olcDbIndex
> +olcDbIndex: dhcpHWAddress eq
> +-
> +delete: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="ou=dhcp,@SUFFIX@"
> +
>  attrs=children,entry,@dhcpService,@dhcpServer,@dhcpSharedNetwork,@dhcpSubnet,@dhcpPool,
> +
> @dhcpGroup,@dhcpHost,@dhcpClass,@dhcpSubClass,@dhcpOptions,@dhcpLeases,@dhcpLog
> +  by group/groupOfMembers/member.exact="cn=dhcp admins,ou=system
> groups,@SUFFIX@" write
> +  by group/groupOfMembers/member.exact="cn=dhcp readers,ou=system
> groups,@SUFFIX@" read
> +  by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
>
> === added directory 'databases/dns'
> === added file 'databases/dns/add-dns.ldif'
> --- databases/dns/add-dns.ldif  1970-01-01 00:00:00 +0000
> +++ databases/dns/add-dns.ldif  2010-04-28 13:54:17 +0000
> @@ -0,0 +1,26 @@
> +dn: olcDatabase={1}hdb,cn=config
> +changetype: modify
> +add: olcDbIndex
> +olcDbIndex: zoneName eq
> +-
> +add: olcDbIndex
> +olcDbIndex: relativeDomainName eq
> +-
> +delete: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.base="ou=dns,@SUFFIX@"
> +  attrs=entry,@extensibleObject
> +  by group/groupOfMembers/member.exact="cn=dns admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="ou=dns,@SUFFIX@"
> +  attrs=children,entry,@dNSZone
> +  by group/groupOfMembers/member.exact="cn=dns admins,ou=system
> groups,@SUFFIX@" write
> +  by group/groupOfMembers/member.exact="cn=dns readers,ou=system
> groups,@SUFFIX@" read
> +  by * none
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
>
> === added directory 'databases/mit-kerberos'
> === added file 'databases/mit-kerberos/add-mit-kerberos.ldif'
> --- databases/mit-kerberos/add-mit-kerberos.ldif        1970-01-01 00:00:00
> +0000
> +++ databases/mit-kerberos/add-mit-kerberos.ldif        2010-04-28 13:54:17
> +0000
> @@ -0,0 +1,29 @@
> +dn: olcDatabase={1}hdb,cn=config
> +changetype: modify
> +add: olcDbIndex
> +olcDbIndex: krbPrincipalName eq
> +-
> +add: olcDbIndex
> +olcDbIndex: krbPwdPolicyReference eq
> +-
> +delete: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="@SUFFIX@"
> +  attrs=krbPrincipalKey
> +  by self write
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by dn.exact="uid=kdc-service,ou=System Accounts,@SUFFIX@" read
> +  by dn.exact="uid=kadmin-service,ou=System Accounts,@SUFFIX@" write
> +  by anonymous auth
> +  by * none
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="ou=Kerberos Realms,@SUFFIX@"
> +  by dn.exact="uid=kdc-service,ou=System Accounts,@SUFFIX@" read
> +  by dn.exact="uid=kadmin-service,ou=System Accounts,@SUFFIX@" write
> +  by * none
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
>
> === added directory 'databases/samba'
> === added file 'databases/samba/add-samba.ldif'
> --- databases/samba/add-samba.ldif      1970-01-01 00:00:00 +0000
> +++ databases/samba/add-samba.ldif      2010-04-28 13:54:17 +0000
> @@ -0,0 +1,47 @@
> +dn: olcDatabase={1}hdb,cn=config
> +changetype: modify
> +add: olcDbIndex
> +olcDbIndex: sambaDomainName eq
> +-
> +add: olcDbIndex
> +olcDbIndex: sambaSID eq,sub
> +-
> +add: olcDbIndex
> +olcDbIndex: sambaGroupType eq
> +-
> +add: olcDbIndex
> +olcDbIndex: sambaSIDList eq
> +-
> +delete: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="@SUFFIX@"
> +  attrs=sambaLMPassword,sambaNTPassword
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by anonymous auth
> +  by self write
> +  by * none
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="@SUFFIX@"
> +  attrs=sambaPasswordHistory,pwdHistory
> +  by self read
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by * none
> +-
> +add: olcAccess
> +olcAccess: to dn.regex="^(sambaDomainName=[^,]+,)?@SUFFIX@$"
> +  attrs=children,entry,@sambaDomain,@sambaUnixIdPool
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.regex="^(sambaSID=[^,]+,)?ou=Idmap,@SUFFIX@$"
> +  attrs=children,entry,@sambaIdmapEntry
> +  by group/groupOfMembers/member.exact="cn=account admins,ou=system
> groups,@SUFFIX@" write
> +  by group/groupOfMembers/member.exact="cn=idmap admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
>
> === added directory 'databases/sudo'
> === added file 'databases/sudo/add-sudo.ldif'
> --- databases/sudo/add-sudo.ldif        1970-01-01 00:00:00 +0000
> +++ databases/sudo/add-sudo.ldif        2010-04-28 13:54:17 +0000
> @@ -0,0 +1,16 @@
> +dn: olcDatabase={1}hdb,cn=config
> +changetype: modify
> +add: olcDbIndex
> +olcDbIndex: sudoUser eq,sub
> +-
> +delete: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.regex="^([^,]+,)?ou=sudoers,@SUFFIX@$"
> +  attrs=children,entry,@sudoRole
> +  by group/groupOfMembers/member.exact="cn=sudo admins,ou=system
> groups,@SUFFIX@" write
> +  by * read
> +-
> +add: olcAccess
> +olcAccess: to dn.subtree="dc=fishles,dc=org" by * read
>
> === modified file 'debian/changelog'
> --- debian/changelog    2008-06-04 20:17:58 +0000
> +++ debian/changelog    2010-04-28 13:54:17 +0000
> @@ -1,3 +1,12 @@
> +openldap-dit (0.19-2) unstable; urgency=low
> +
> +  * Adjusted README paths in debian/docs.
> +  * Created empty doc/README.kde
> +  * Changed "install-ubuntu" command in debian/rules to "install"
> +    which allows package to build.
> +
> + -- Adam Sommer <email address hidden>  Mon, 26 Apr 2010 15:35:42 -0400
> +
>  openldap-dit (0.19-1) unstable; urgency=low
>
>   * Initial release
>
> === modified file 'debian/docs'
> --- debian/docs 2008-06-04 20:17:58 +0000
> +++ debian/docs 2010-04-28 13:54:17 +0000
> @@ -1,10 +1,10 @@
> -README
> -README.dhcp
> -README.dns
> -README.heimdal
> -README.kde
> -README.samba
> -README.sudo
> +doc/README
> +doc/README.dhcp
> +doc/README.dns
> +doc/README.heimdal
> +doc/README.kde
> +doc/README.samba
> +doc/README.sudo
>  TODO
>  COPYRIGHT
>  LICENSE
>
> === removed file 'debian/files'
> --- debian/files        2008-06-04 20:30:39 +0000
> +++ debian/files        1970-01-01 00:00:00 +0000
> @@ -1,1 +0,0 @@
> -openldap-dit_0.19-1_all.deb net extra
>
> === modified file 'debian/rules'
> --- debian/rules        2008-06-04 20:49:11 +0000
> +++ debian/rules        2010-04-28 13:54:17 +0000
> @@ -44,7 +44,7 @@
>        dh_installdirs
>
>        # Add here commands to install the package into debian/openldap-dit.
> -       $(MAKE) DESTDIR=$(CURDIR)/debian/openldap-dit install-ubuntu
> +       $(MAKE) DESTDIR=$(CURDIR)/debian/openldap-dit install
>
>
>  # Build architecture-independent files here.
>
> === added file 'doc/README.kde'
> === removed file 'modules/add-modules.ldif'
> --- modules/add-modules.ldif    2009-09-11 14:28:41 +0000
> +++ modules/add-modules.ldif    1970-01-01 00:00:00 +0000
> @@ -1,10 +0,0 @@
> -dn: cn=module,cn=config
> -cn: module
> -objectClass: olcModuleList
> -olcModuleLoad: back_hdb.la
> -olcModuleLoad: back_bdb.la
> -olcModuleLoad: ppolicy.la
> -olcModuleLoad: unique.la
> -olcModuleLoad: back_monitor.la
> -olcModuleLoad: refint.la
> -olcModuleLoad: syncprov.la
>
> === added directory 'modules/base'
> === added file 'modules/base/add-modules.ldif'
> --- modules/base/add-modules.ldif       1970-01-01 00:00:00 +0000
> +++ modules/base/add-modules.ldif       2010-04-28 13:54:17 +0000
> @@ -0,0 +1,10 @@
> +dn: cn=module,cn=config
> +cn: module
> +objectClass: olcModuleList
> +olcModuleLoad: back_hdb.la
> +olcModuleLoad: back_bdb.la
> +olcModuleLoad: ppolicy.la
> +olcModuleLoad: unique.la
> +olcModuleLoad: back_monitor.la
> +olcModuleLoad: refint.la
> +olcModuleLoad: syncprov.la
>
> === modified file 'openldap-dit-setup.sh'
> --- openldap-dit-setup.sh       2009-12-02 20:23:12 +0000
> +++ openldap-dit-setup.sh       2010-04-28 13:54:17 +0000
> @@ -9,6 +9,7 @@
>  LDAPADD="ldapadd -H ldapi:/// -Y EXTERNAL -Q"
>  LDAPMODIFY="ldapmodify -H ldapi:/// -Y EXTERNAL -Q"
>  LDAPPASSWD="ldappasswd -H ldapi:/// -Y EXTERNAL -Q"
> +LDAPSEARCH="ldapsearch -H ldapi:/// -Y EXTERNAL -Q -LLL"
>
>  function distro_guess()
>  {
> @@ -41,6 +42,7 @@
>         SERVICE="/etc/init.d/slapd"
>     fi
>     export root="/usr/share/slapd/openldap-dit"
> +    #export root="."
>     export databases_dir="$root/databases"
>     export schemas_dir="$root/schemas"
>     export acls_dir="$root/acls"
> @@ -60,15 +62,16 @@
>
>  function usage() {
>        echo "Usage:"
> -       echo "$0 [-h | --help] [-v] [-d <dnsdomain>] [-p <password>] [-y]"
> +       echo "$0 [-h | --help] [-v] [-d <dnsdomain>] [-p <password>] [-s
> <service>] [-y]"
>        echo
>        echo "-h | --help    : shows this help"
>        echo "-v             : verbose mode"
>        echo "-d <dnsdomain> : use <dnsdomain> for dns domain"
>        echo "-p <password>  : use <password> for LDAP Admin password"
> +       echo "-s <service>   : use <service> for new attributes to add"
>        echo
>        echo "-y             : assume default answer in all prompts "
> -       echo "                 except the password one"
> +       echo "                 except the password one and service one"
>  }
>
>  function echo_v() {
> @@ -107,7 +110,7 @@
>     # XXX - too specific for ubuntu's ldap deployment...
>     # a better test would be slapacl, but I couldn't get it
>     # to work
> -    if [ "$out" = "dn:cn=localroot,cn=config" ]; then
> +    if [ "$out" =
> "dn:gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" ]; then
>         return 0
>     else
>         return 1
> @@ -207,33 +210,99 @@
>     return 0
>  }
>
> +# $1: service name used to determine if it is a known service.
> +# $2: directory suffix
> +# $3: domain used to determine suffix.
> +function check_service() {
> +    base_dit=$($LDAPSEARCH -b $2 associatedDomain=$3 dn 2>&1)
> +    if [ "$1" != "base" -a "$base_dit" != "dn: $mysuffix" ]; then
> +        echo "No Base DIT, please execute: sudo $0 -s base"
> +        exit 1
> +    fi
> +
> +    case "$1" in
> +        base)
> +            sub="base"
> +        ;;
> +        autofs)
> +            sub="autofs"
> +        ;;
> +        dhcp)
> +            sub="dhcp"
> +        ;;
> +        dns)
> +            sub="dns"
> +        ;;
> +        mit-kerberos)
> +            sub="mit-kerberos"
> +        ;;
> +        samba)
> +            sub="samba"
> +        ;;
> +        sudo)
> +            sub="sudo"
> +        ;;
> +        *)
> +            echo "$myservice is not known to this tool... you may have to
> add the options manually."
> +            echo "Known services are:"
> +            for i in $(ls $root/schemas/); do printf "\t$i\n"; done;
> +            return 1
> +        ;;
> +    esac
> +}
> +
>  function add_modules() {
> -    add_ldif "modules" "$modules_dir"
> +    if [ -d "$modules_dir/$sub" ]; then
> +        add_ldif "modules" "$modules_dir/$sub"
> +    else
> +        echo "No additional modules needed for $sub"
> +    fi
>     return 0
>  }
>
> +# $1: sub directory containing schema LDIF files.
>  function add_schemas() {
> -    add_ldif "schemas" "$schemas_dir"
> +    if [ -d "$schemas_dir/$sub" ]; then
> +        add_ldif "schemas" "$schemas_dir/$sub"
> +    else
> +        echo "No additional Schemas needed for $sub"
> +    fi
>     return 0
>  }
>
>  function add_db () {
> -    add_ldif "database" "$databases_dir" "s/@SUFFIX@/$mysuffix/g"
> +    if [ -d "$databases_dir/$sub" ]; then
> +        add_ldif "database" "$databases_dir/$sub" "s/@SUFFIX@
> /$mysuffix/g"
> +    else
> +        echo "No additional Databases needed for $sub"
> +    fi
>     return 0
>  }
>
>  function modify_acls() {
> -    modify_ldif "ACLs" "$acls_dir" "s/@SUFFIX@/$mysuffix/g"
> +    if [ -d "$acls_dir/$sub" ]; then
> +        modify_ldif "ACLs" "$acls_dir/$sub" "s/@SUFFIX@/$mysuffix/g"
> +    else
> +        echo "No additional ACLs needed for $sub"
> +    fi
>     return 0
>  }
>
>  function add_overlays() {
> -    add_ldif "overlays" "$overlays_dir" "s/@SUFFIX@/$mysuffix/g"
> +    if [ -d "$overlays_dir/$sub" ]; then
> +        add_ldif "overlays" "$overlays_dir/$sub" "s/@SUFFIX@/$mysuffix/g"
> +    else
> +        echo "No additional Overlays needed for $sub"
> +    fi
>     return 0
>  }
>
>  function populate_db() {
> -    add_ldif "populated database" "$contents_dir" "s/@SUFFIX@
> /$mysuffix/g;s/@DC@/${mydomain%%.[a-zA-Z0-9]*}/g;s/@DOMAIN@/${mydomain}/g"
> +    if [ -d "$contents_dir/$sub" ]; then
> +        add_ldif "populated database" "$contents_dir/$sub" "s/@SUFFIX@
> /$mysuffix/g;s/@DC@/${mydomain%%.[a-zA-Z0-9]*}/g;s/@DOMAIN@/${mydomain}/g"
> +    else
> +        echo "No additional Populated Databases needed for $sub"
> +    fi
>     return 0
>  }
>
> @@ -284,6 +353,15 @@
>                mypass="$1"
>                shift
>                ;;
> +               -s)
> +               shift
> +               if [ -n "$1" -a "${1##-}" != "${1}" -o -z "${1}" ]; then
> +                       echo "Error, -s requires an argument"
> +                       exit 1
> +               fi
> +               myservice="$1"
> +               shift
> +               ;;
>                -y)
>                noprompt=1
>                shift
> @@ -319,30 +397,38 @@
>  fi
>  mysuffix=`calc_suffix $mydomain`
>
> -if [ -z "$mypass" ]; then
> -    get_admin_password
> +echo "Testing for valid service"
> +check_service $myservice $mysuffix $mydomain
> +check_result $?
> +
> +if [ "$base_dit" == "dn: $mysuffix" ]; then
> +    echo "Base DIT previously created."
>  else
> +    if [ -z "$mypass" ]; then
> +        get_admin_password
> +    else
>        pass="$mypass"
> -fi
> +    fi
>
> -# confirmation
> -echo
> -echo
> -echo "Summary"
> -echo "======="
> -echo
> -echo "Domain:        $mydomain"
> -echo "LDAP suffix:   $mysuffix"
> -echo "Administrator: uid=LDAP Admin,ou=System Accounts,$mysuffix"
> -echo
> -if [ -z "$noprompt" ]; then
> -       echo "Confirm? (Y/n)"
> -       read val
> -       if [ "$val" = "n" -o "$val" = "N" ]; then
> -               echo
> -               echo "Cancelled."
> -               exit 1
> -       fi
> +    # confirmation
> +    echo
> +    echo
> +    echo "Summary"
> +    echo "======="
> +    echo
> +    echo "Domain:        $mydomain"
> +    echo "LDAP suffix:   $mysuffix"
> +    echo "Administrator: uid=LDAP Admin,ou=System Accounts,$mysuffix"
> +    echo
> +    if [ -z "$noprompt" ]; then
> +        echo "Confirm? (Y/n)"
> +        read val
> +        if [ "$val" = "n" -o "$val" = "N" ]; then
> +            echo
> +            echo "Cancelled."
> +            exit 1
> +        fi
> +    fi
>  fi
>
>  # steps:
> @@ -358,7 +444,7 @@
>  add_modules
>  check_result $?
>
> -add_schemas
> +add_schemas
>  check_result $?
>
>  add_db
> @@ -373,8 +459,10 @@
>  populate_db
>  check_result $?
>
> -set_admin_password
> -check_result $?
> +if [ "$base_dit" != "dn: $mysuffix" ]; then
> +    set_admin_password
> +    check_result $?
> +fi
>
>  echo
>  echo "Finished, doing one last restart..."
>
> === removed file 'overlays/1_add-ppolicy-overlay.ldif'
> --- overlays/1_add-ppolicy-overlay.ldif 2009-12-02 19:40:56 +0000
> +++ overlays/1_add-ppolicy-overlay.ldif 1970-01-01 00:00:00 +0000
> @@ -1,6 +0,0 @@
> -dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config
> -objectClass: olcOverlayConfig
> -objectClass: olcPPolicyConfig
> -olcOverlay: ppolicy
> -olcPPolicyDefault: cn=default,ou=password policies,@SUFFIX@
> -
>
> === removed file 'overlays/2_add-unique-overlay.ldif'
> --- overlays/2_add-unique-overlay.ldif  2009-12-02 19:40:56 +0000
> +++ overlays/2_add-unique-overlay.ldif  1970-01-01 00:00:00 +0000
> @@ -1,11 +0,0 @@
> -dn: olcOverlay=unique,olcDatabase={1}hdb,cn=config
> -objectClass: olcUniqueConfig
> -objectClass: olcOverlayConfig
> -objectClass: olcConfig
> -objectClass: top
> -olcOverlay: unique
> -olcUniqueURI: ldap:///ou=People,@SUFFIX@?uidNumber
> - ?one?(objectClass=posixAccount)
> -olcUniqueURI: ldap:///ou=Group,@SUFFIX@?gidNumber?one?(objectClass=po
> - sixGroup)
> -
>
> === removed file 'overlays/3_add-syncprov-overlay.ldif'
> --- overlays/3_add-syncprov-overlay.ldif        2009-12-02 19:40:56 +0000
> +++ overlays/3_add-syncprov-overlay.ldif        1970-01-01 00:00:00 +0000
> @@ -1,9 +0,0 @@
> -dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config
> -objectClass: olcSyncProvConfig
> -objectClass: olcOverlayConfig
> -objectClass: olcConfig
> -objectClass: top
> -olcOverlay: syncprov
> -olcSpCheckpoint: 100 10
> -olcSpSessionlog: 100
> -
>
> === removed file 'overlays/4_add-refint-overlay.ldif'
> --- overlays/4_add-refint-overlay.ldif  2009-12-02 19:40:56 +0000
> +++ overlays/4_add-refint-overlay.ldif  1970-01-01 00:00:00 +0000
> @@ -1,10 +0,0 @@
> -dn: olcOverlay=refint,olcDatabase={1}hdb,cn=config
> -olcOverlay: refint
> -objectClass: olcConfig
> -objectClass: olcOverlayConfig
> -objectClass: olcRefintConfig
> -olcRefintAttribute: member
> -olcRefintAttribute: krbObjectReferences
> -olcRefintAttribute: krbPwdPolicyReference
> -olcRefintNothing: cn=localroot,cn=config
> -
>
> === added directory 'overlays/base'
> === added file 'overlays/base/1_add-ppolicy-overlay.ldif'
> --- overlays/base/1_add-ppolicy-overlay.ldif    1970-01-01 00:00:00 +0000
> +++ overlays/base/1_add-ppolicy-overlay.ldif    2010-04-28 13:54:17 +0000
> @@ -0,0 +1,6 @@
> +dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config
> +objectClass: olcOverlayConfig
> +objectClass: olcPPolicyConfig
> +olcOverlay: ppolicy
> +olcPPolicyDefault: cn=default,ou=password policies,@SUFFIX@
> +
>
> === added file 'overlays/base/2_add-unique-overlay.ldif'
> --- overlays/base/2_add-unique-overlay.ldif     1970-01-01 00:00:00 +0000
> +++ overlays/base/2_add-unique-overlay.ldif     2010-04-28 13:54:17 +0000
> @@ -0,0 +1,11 @@
> +dn: olcOverlay=unique,olcDatabase={1}hdb,cn=config
> +objectClass: olcUniqueConfig
> +objectClass: olcOverlayConfig
> +objectClass: olcConfig
> +objectClass: top
> +olcOverlay: unique
> +olcUniqueURI: ldap:///ou=People,@SUFFIX@?uidNumber
> + ?one?(objectClass=posixAccount)
> +olcUniqueURI: ldap:///ou=Group,@SUFFIX@?gidNumber?one?(objectClass=po
> + sixGroup)
> +
>
> === added file 'overlays/base/3_add-syncprov-overlay.ldif'
> --- overlays/base/3_add-syncprov-overlay.ldif   1970-01-01 00:00:00 +0000
> +++ overlays/base/3_add-syncprov-overlay.ldif   2010-04-28 13:54:17 +0000
> @@ -0,0 +1,9 @@
> +dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config
> +objectClass: olcSyncProvConfig
> +objectClass: olcOverlayConfig
> +objectClass: olcConfig
> +objectClass: top
> +olcOverlay: syncprov
> +olcSpCheckpoint: 100 10
> +olcSpSessionlog: 100
> +
>
> === added file 'overlays/base/4_add-refint-overlay.ldif'
> --- overlays/base/4_add-refint-overlay.ldif     1970-01-01 00:00:00 +0000
> +++ overlays/base/4_add-refint-overlay.ldif     2010-04-28 13:54:17 +0000
> @@ -0,0 +1,8 @@
> +dn: olcOverlay=refint,olcDatabase={1}hdb,cn=config
> +olcOverlay: refint
> +objectClass: olcConfig
> +objectClass: olcOverlayConfig
> +objectClass: olcRefintConfig
> +olcRefintAttribute: member
> +olcRefintNothing: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
> +
>
> === added directory 'overlays/mit-kerberos'
> === added file 'overlays/mit-kerberos/1_mit-refint-overlay.ldif'
> --- overlays/mit-kerberos/1_mit-refint-overlay.ldif     1970-01-01 00:00:00
> +0000
> +++ overlays/mit-kerberos/1_mit-refint-overlay.ldif     2010-04-28 13:54:17
> +0000
> @@ -0,0 +1,7 @@
> +dn: olcOverlay={3}refint,olcDatabase={1}hdb,cn=config
> +changetype: modify
> +add: olcRefintAttribute
> +olcRefintAttribute: krbObjectReferences
> +-
> +add: olcRefintAttribute
> +olcRefintAttribute: krbPwdPolicyReference
>
> === added directory 'schemas/autofs'
> === removed file 'schemas/autofs.ldif'
> --- schemas/autofs.ldif 2009-09-11 14:25:59 +0000
> +++ schemas/autofs.ldif 1970-01-01 00:00:00 +0000
> @@ -1,11 +0,0 @@
> -dn: cn=autofs,cn=schema,cn=config
> -objectClass: olcSchemaConfig
> -cn: autofs
> -olcAttributeTypes: {0}( 1.3.6.1.1.1.1.25 NAME 'automountInformation' DESC
> 'Inf
> - ormation used by the autofs automounter' EQUALITY caseExactIA5Match
> SYNTAX 1.
> - 3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
> -olcObjectClasses: {0}( 1.3.6.1.1.1.1.13 NAME 'automount' DESC 'An entry in
> an
> - automounter map' SUP top STRUCTURAL MUST ( cn $ automountInformation )
> MAY de
> - scription )
> -olcObjectClasses: {1}( 1.3.6.1.4.1.2312.4.2.2 NAME 'automountMap' DESC 'An
> gro
> - up of related automount objects' SUP top STRUCTURAL MUST ou )
>
> === added file 'schemas/autofs/autofs.ldif'
> --- schemas/autofs/autofs.ldif  1970-01-01 00:00:00 +0000
> +++ schemas/autofs/autofs.ldif  2010-04-28 13:54:17 +0000
> @@ -0,0 +1,11 @@
> +dn: cn=autofs,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: autofs
> +olcAttributeTypes: {0}( 1.3.6.1.1.1.1.25 NAME 'automountInformation' DESC
> 'Inf
> + ormation used by the autofs automounter' EQUALITY caseExactIA5Match
> SYNTAX 1.
> + 3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
> +olcObjectClasses: {0}( 1.3.6.1.1.1.1.13 NAME 'automount' DESC 'An entry in
> an
> + automounter map' SUP top STRUCTURAL MUST ( cn $ automountInformation )
> MAY de
> + scription )
> +olcObjectClasses: {1}( 1.3.6.1.4.1.2312.4.2.2 NAME 'automountMap' DESC 'An
> gro
> + up of related automount objects' SUP top STRUCTURAL MUST ou )
>
> === added directory 'schemas/base'
> === added file 'schemas/base/cosine.ldif'
> --- schemas/base/cosine.ldif    1970-01-01 00:00:00 +0000
> +++ schemas/base/cosine.ldif    2010-04-28 13:54:17 +0000
> @@ -0,0 +1,200 @@
> +# RFC1274: Cosine and Internet X.500 schema
> +# $OpenLDAP: pkg/ldap/servers/slapd/schema/cosine.ldif,v 1.1.2.4
> 2009/01/22 00:01:14 kurt Exp $
> +## This work is part of OpenLDAP Software <http://www.openldap.org/>.
> +##
> +## Copyright 1998-2009 The OpenLDAP Foundation.
> +## All rights reserved.
> +##
> +## Redistribution and use in source and binary forms, with or without
> +## modification, are permitted only as authorized by the OpenLDAP
> +## Public License.
> +##
> +## A copy of this license is available in the file LICENSE in the
> +## top-level directory of the distribution or, alternatively, at
> +## <http://www.OpenLDAP.org/license.html>.
> +#
> +# RFC1274: Cosine and Internet X.500 schema
> +#
> +# This file contains LDAPv3 schema derived from X.500 COSINE "pilot"
> +# schema.  As this schema was defined for X.500(89), some
> +# oddities were introduced in the mapping to LDAPv3.  The
> +# mappings were based upon: draft-ietf-asid-ldapv3-attributes-03.txt
> +# (a work in progress)
> +#
> +# Note: It seems that the pilot schema evolved beyond what was
> +# described in RFC1274.  However, this document attempts to describes
> +# RFC1274 as published.
> +#
> +# Depends on core.ldif
> +#
> +# This file was automatically generated from cosine.schema; see that
> +# file for complete background.
> +#
> +dn: cn=cosine,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: cosine
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress'
> + EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.
> + 1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274:
> g
> + eneral information' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMatch
> +  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.5 NAME ( 'drink'
> 'favouriteDri
> + nk' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR
> caseIgno
> + reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC
> 'RFC1
> + 274: room number' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMatch S
> + YNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274:
> + photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC
> 'RFC12
> + 74: category of user' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMat
> + ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274:
> h
> + ost computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
> SYNTA
> + X 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC
> 'RFC127
> + 4: DN of manager' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.1466.115
> + .121.1.12 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier'
> D
> + ESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch
> SUBSTR
> + caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC
> '
> + RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstri
> + ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DES
> + C 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSu
> + bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC
> +  'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch
> SYNTAX 1
> + .3.6.1.4.1.1466.115.121.1.12 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DE
> + SC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch
> SUBSTR c
> + aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone' 'homeTe
> + lephoneNumber' ) DESC 'RFC1274: home telephone number' EQUALITY
> telephoneNumb
> + erMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121
> + .1.50 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC
> + 1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.146
> + 6.115.121.1.12 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX
> +  1.3.6.1.4.1.1466.115.121.1.39 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY ca
> + seIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY c
> + aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY c
> + aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY c
> + aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY
> + caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALIT
> + Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC
> +  'RFC1274: DN of entry associated with domain' EQUALITY
> distinguishedNameMatc
> + h SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress' D
> + ESC 'RFC1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR
> caseIg
> + noreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.40 NAME 'personalTitle' DESC
> + 'RFC1274: personal title' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstring
> + sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.41 NAME ( 'mobile' 'mobileTel
> + ephoneNumber' ) DESC 'RFC1274: mobile telephone number' EQUALITY
> telephoneNum
> + berMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.12
> + 1.1.50 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.42 NAME ( 'pager' 'pagerTelep
> + honeNumber' ) DESC 'RFC1274: pager telephone number' EQUALITY
> telephoneNumber
> + Match SUBSTR telephoneNumberSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1
> + .50 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.43 NAME ( 'co' 'friendlyCount
> + ryName' ) DESC 'RFC1274: friendly country name' EQUALITY caseIgnoreMatch
> SUBS
> + TR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier' DE
> + SC 'RFC1274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX
> 1.3.6.1.4.1.14
> + 66.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.45 NAME 'organizationalStatus
> + ' DESC 'RFC1274: organizational status' EQUALITY caseIgnoreMatch SUBSTR
> caseI
> + gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox' DESC '
> + RFC1274: Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR
> caseIgnoreIA5Subst
> + ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.47 NAME 'mailPreferenceOption
> + ' DESC 'RFC1274: mail preference option' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.27
> +  )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.48 NAME 'buildingName' DESC '
> + RFC1274: name of building' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstrin
> + gsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality' DESC 'RF
> + C1274: DSA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19 SINGLE-VALUE )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality'
> + DESC 'RFC1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13
> SIN
> + GLE-VALUE )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.51 NAME 'subtreeMinimumQualit
> + y' DESC 'RFC1274: Subtree Mininum Quality' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> + 13 SINGLE-VALUE )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.52 NAME 'subtreeMaximumQualit
> + y' DESC 'RFC1274: Subtree Maximun Quality' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> + 13 SINGLE-VALUE )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.53 NAME 'personalSignature' D
> + ESC 'RFC1274: Personal Signature (G3 fax)' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> + 23 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect' DESC 'R
> + FC1274: DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.1466
> + .115.121.1.12 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.55 NAME 'audio' DESC 'RFC1274
> + : audio (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher' D
> + ESC 'RFC1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgno
> + reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.4 NAME ( 'pilotPerson'
> 'newPilo
> + tPerson' ) SUP person STRUCTURAL MAY ( userid $ textEncodedORAddress $
> rfc822
> + Mailbox $ favouriteDrink $ roomNumber $ userClass $ homeTelephoneNumber $
> hom
> + ePostalAddress $ secretary $ personalTitle $ preferredDeliveryMethod $
> busine
> + ssCategory $ janetMailbox $ otherMailbox $ mobileTelephoneNumber $
> pagerTelep
> + honeNumber $ organizationalStatus $ mailPreferenceOption $
> personalSignature
> + ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top
> STRUCT
> + URAL MUST userid MAY ( description $ seeAlso $ localityName $
> organizationNam
> + e $ organizationalUnitName $ host ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top
> STRUC
> + TURAL MUST documentIdentifier MAY ( commonName $ description $ seeAlso $
> loca
> + lityName $ organizationName $ organizationalUnitName $ documentTitle $
> docume
> + ntVersion $ documentAuthor $ documentLocation $ documentPublisher ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top
> STRUCTURA
> + L MUST commonName MAY ( roomNumber $ description $ seeAlso $
> telephoneNumber
> + ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP
> top
> +  STRUCTURAL MUST commonName MAY ( description $ seeAlso $ telephonenumber
> $ l
> + ocalityName $ organizationName $ organizationalUnitName ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top
> STRUCT
> + URAL MUST domainComponent MAY ( associatedName $ organizationName $
> descripti
> + on $ businessCategory $ seeAlso $ searchGuide $ userPassword $
> localityName $
> +  stateOrProvinceName $ streetAddress $ physicalDeliveryOfficeName $
> postalAdd
> + ress $ postalCode $ postOfficeBox $ streetAddress $
> facsimileTelephoneNumber
> + $ internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $
> tel
> + exNumber $ preferredDeliveryMethod $ destinationIndicator $
> registeredAddress
> +  $ x121Address ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP
> d
> + omain STRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $
> telepho
> + neNumber $ physicalDeliveryOfficeName $ postalAddress $ postalCode $
> postOffi
> + ceBox $ streetAddress $ facsimileTelephoneNumber $
> internationalISDNNumber $
> + telephoneNumber $ teletexTerminalIdentifier $ telexNumber $
> preferredDelivery
> + Method $ destinationIndicator $ registeredAddress $ x121Address ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP domain
> + STRUCTURAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $
> CNAME
> + Record ) )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject'
> D
> + ESC 'RFC1274: an object related to an domain' SUP top AUXILIARY MUST
> associat
> + edDomain )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP
> c
> + ountry STRUCTURAL MUST friendlyCountryName )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SU
> + P ( organization $ organizationalUnit ) STRUCTURAL MAY buildingName )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa STR
> + UCTURAL MAY dSAQuality )
> +olcObjectClasses: ( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData'
> + SUP top AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $
> subtreeMaximu
> + mQuality ) )
>
> === added file 'schemas/base/dyngroup.ldif'
> --- schemas/base/dyngroup.ldif  1970-01-01 00:00:00 +0000
> +++ schemas/base/dyngroup.ldif  2010-04-28 13:54:17 +0000
> @@ -0,0 +1,24 @@
> +dn: cn=dyngroup,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: dyngroup
> +olcObjectIdentifier: {0}NetscapeRoot 2.16.840.1.113730
> +olcObjectIdentifier: {1}NetscapeLDAP NetscapeRoot:3
> +olcObjectIdentifier: {2}NetscapeLDAPattributeType NetscapeLDAP:1
> +olcObjectIdentifier: {3}NetscapeLDAPobjectClass NetscapeLDAP:2
> +olcObjectIdentifier: {4}OpenLDAPExp11 1.3.6.1.4.1.4203.666.11
> +olcObjectIdentifier: {5}DynGroupBase OpenLDAPExp11:8
> +olcObjectIdentifier: {6}DynGroupAttr DynGroupBase:1
> +olcObjectIdentifier: {7}DynGroupOC DynGroupBase:2
> +olcAttributeTypes: {0}( NetscapeLDAPattributeType:198 NAME 'memberURL'
> DESC 'I
> + dentifies an URL associated with each member of a group. Any type of
> labeled
> + URL can be used.' SUP labeledURI )
> +olcAttributeTypes: {1}( DynGroupAttr:1 NAME 'dgIdentity' DESC 'Identity to
> use
> +  when processing the memberURL' SUP distinguishedName SINGLE-VALUE )
> +olcAttributeTypes: {2}( DynGroupAttr:2 NAME 'dgAuthz' DESC 'Optional
> authoriza
> + tion rules that determine who is allowed to assume the dgIdentity'
> EQUALITY a
> + uthzMatch SYNTAX 1.3.6.1.4.1.4203.666.2.7 X-ORDERED 'VALUES' )
> +olcObjectClasses: {0}( NetscapeLDAPobjectClass:33 NAME 'groupOfURLs' SUP
> top S
> + TRUCTURAL MUST cn MAY ( memberURL $ businessCategory $ description $ o $
> ou $
> +  owner $ seeAlso ) )
> +olcObjectClasses: {1}( DynGroupOC:1 NAME 'dgIdentityAux' SUP top AUXILIARY
> MAY
> +  ( dgIdentity $ dgAuthz ) )
>
> === added file 'schemas/base/inetorgperson.ldif'
> --- schemas/base/inetorgperson.ldif     1970-01-01 00:00:00 +0000
> +++ schemas/base/inetorgperson.ldif     2010-04-28 13:54:17 +0000
> @@ -0,0 +1,69 @@
> +# InetOrgPerson (RFC2798)
> +# $OpenLDAP: pkg/ldap/servers/slapd/schema/inetorgperson.ldif,v 1.1.2.4
> 2009/01/22 00:01:14 kurt Exp $
> +## This work is part of OpenLDAP Software <http://www.openldap.org/>.
> +##
> +## Copyright 1998-2009 The OpenLDAP Foundation.
> +## All rights reserved.
> +##
> +## Redistribution and use in source and binary forms, with or without
> +## modification, are permitted only as authorized by the OpenLDAP
> +## Public License.
> +##
> +## A copy of this license is available in the file LICENSE in the
> +## top-level directory of the distribution or, alternatively, at
> +## <http://www.OpenLDAP.org/license.html>.
> +#
> +# InetOrgPerson (RFC2798)
> +#
> +# Depends upon
> +#   Definition of an X.500 Attribute Type and an Object Class to Hold
> +#   Uniform Resource Identifiers (URIs) [RFC2079]
> +#      (core.ldif)
> +#
> +#   A Summary of the X.500(96) User Schema for use with LDAPv3 [RFC2256]
> +#      (core.ldif)
> +#
> +#   The COSINE and Internet X.500 Schema [RFC1274] (cosine.ldif)
> +#
> +# This file was automatically generated from inetorgperson.schema; see
> +# that file for complete references.
> +#
> +dn: cn=inetorgperson,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: inetorgperson
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC
> 'RFC279
> + 8: vehicle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR
> cas
> + eIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber' DESC
> '
> + RFC2798: identifies a department within an organization' EQUALITY
> caseIgnoreM
> + atch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.15 )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC
> 'RFC
> + 2798: preferred name to be used when displaying entries' EQUALITY
> caseIgnoreM
> + atch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.15 SI
> + NGLE-VALUE )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC
> 'RF
> + C2798: numerically identifies an employee within an organization'
> EQUALITY ca
> + seIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.12
> + 1.1.15 SINGLE-VALUE )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC
> 'RFC2
> + 798: type of employment for a person' EQUALITY caseIgnoreMatch SUBSTR
> caseIgn
> + oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> +olcAttributeTypes: ( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC
> 'RFC2
> + 798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage'
> DESC
> +  'RFC2798: preferred written or spoken language for a person' EQUALITY
> caseIg
> + noreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> + 15 SINGLE-VALUE )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate'
> D
> + ESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX
> 1.3.6.1.4.1.14
> + 66.115.121.1.5 )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC
> 'RFC2
> + 798: personal identity information, a PKCS #12 PFX' SYNTAX
> 1.3.6.1.4.1.1466.1
> + 15.121.1.5 )
> +olcObjectClasses: ( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC
> 'RFC2
> + 798: Internet Organizational Person' SUP organizationalPerson STRUCTURAL
> MAY
> + ( audio $ businessCategory $ carLicense $ departmentNumber $ displayName
> $ em
> + ployeeNumber $ employeeType $ givenName $ homePhone $ homePostalAddress $
> ini
> + tials $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $
> photo
> + $ roomNumber $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $
> pre
> + ferredLanguage $ userSMIMECertificate $ userPKCS12 ) )
>
> === added file 'schemas/base/misc.ldif'
> --- schemas/base/misc.ldif      1970-01-01 00:00:00 +0000
> +++ schemas/base/misc.ldif      2010-04-28 13:54:17 +0000
> @@ -0,0 +1,25 @@
> +# misc.ldif
> +#
> +# This is the ldif version of misc.schema to be used with cn=config.
> +# The nss overlay requires rfc822MailMember which is defined here.
> +#
> +dn: cn=misc,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: misc
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.13 NAME 'mailLocalAddress' DESC
> + 'RFC822 email address of this recipient' EQUALITY caseIgnoreIA5Match
> SYNTAX 1
> + .3.6.1.4.1.1466.115.121.1.26{256} )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.18 NAME 'mailHost' DESC 'FQDN
> of
> +  the SMTP/MTA of this recipient' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4
> + .1.1466.115.121.1.26{256} SINGLE-VALUE )
> +olcAttributeTypes: ( 2.16.840.1.113730.3.1.47 NAME 'mailRoutingAddress'
> DES
> + C 'RFC822 routing address of this recipient' EQUALITY caseIgnoreIA5Match
> SYNT
> + AX 1.3.6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.4.1.42.2.27.2.1.15 NAME 'rfc822MailMember'
> DES
> + C 'rfc822 mail address of group member(s)' EQUALITY caseIgnoreIA5Match
> SYNTAX
> +  1.3.6.1.4.1.1466.115.121.1.26 )
> +olcObjectClasses: ( 2.16.840.1.113730.3.2.147 NAME
> 'inetLocalMailRecipient'
> +  DESC 'Internet local mail recipient' SUP top AUXILIARY MAY (
> mailLocalAddres
> + s $ mailHost $ mailRoutingAddress ) )
> +olcObjectClasses: ( 1.3.6.1.4.1.42.2.27.1.2.5 NAME 'nisMailAlias' DESC
> 'NIS
> +  mail alias' SUP top STRUCTURAL MUST cn MAY rfc822MailMember )
>
> === added file 'schemas/base/namedObject.ldif'
> --- schemas/base/namedObject.ldif       1970-01-01 00:00:00 +0000
> +++ schemas/base/namedObject.ldif       2010-04-28 13:54:17 +0000
> @@ -0,0 +1,5 @@
> +dn: cn=namedObject,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: namedObject
> +olcObjectClasses: {0}( 1.3.6.1.4.1.5322.13.1.1 NAME 'namedObject' SUP top
> STRU
> + CTURAL MAY cn )
>
> === added file 'schemas/base/ppolicy.ldif'
> --- schemas/base/ppolicy.ldif   1970-01-01 00:00:00 +0000
> +++ schemas/base/ppolicy.ldif   2010-04-28 13:54:17 +0000
> @@ -0,0 +1,44 @@
> +dn: cn=ppolicy,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: ppolicy
> +olcAttributeTypes: {0}( 1.3.6.1.4.1.42.2.27.8.1.1 NAME 'pwdAttribute'
> EQUALITY
> +  objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 )
> +olcAttributeTypes: {1}( 1.3.6.1.4.1.42.2.27.8.1.2 NAME 'pwdMinAge'
> EQUALITY in
> + tegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {2}( 1.3.6.1.4.1.42.2.27.8.1.3 NAME 'pwdMaxAge'
> EQUALITY in
> + tegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {3}( 1.3.6.1.4.1.42.2.27.8.1.4 NAME 'pwdInHistory'
> EQUALITY
> +  integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {4}( 1.3.6.1.4.1.42.2.27.8.1.5 NAME 'pwdCheckQuality'
> EQUAL
> + ITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {5}( 1.3.6.1.4.1.42.2.27.8.1.6 NAME 'pwdMinLength'
> EQUALITY
> +  integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {6}( 1.3.6.1.4.1.42.2.27.8.1.7 NAME 'pwdExpireWarning'
> EQUA
> + LITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {7}( 1.3.6.1.4.1.42.2.27.8.1.8 NAME
> 'pwdGraceAuthNLimit' EQ
> + UALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {8}( 1.3.6.1.4.1.42.2.27.8.1.9 NAME 'pwdLockout'
> EQUALITY b
> + ooleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
> +olcAttributeTypes: {9}( 1.3.6.1.4.1.42.2.27.8.1.10 NAME
> 'pwdLockoutDuration' E
> + QUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {10}( 1.3.6.1.4.1.42.2.27.8.1.11 NAME 'pwdMaxFailure'
> EQUAL
> + ITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: {11}( 1.3.6.1.4.1.42.2.27.8.1.12 NAME
> 'pwdFailureCountInter
> + val' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
> SINGLE-VALUE
> + )
> +olcAttributeTypes: {12}( 1.3.6.1.4.1.42.2.27.8.1.13 NAME 'pwdMustChange'
> EQUAL
> + ITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
> +olcAttributeTypes: {13}( 1.3.6.1.4.1.42.2.27.8.1.14 NAME
> 'pwdAllowUserChange'
> + EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
> +olcAttributeTypes: {14}( 1.3.6.1.4.1.42.2.27.8.1.15 NAME 'pwdSafeModify'
> EQUAL
> + ITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
> +olcAttributeTypes: {15}( 1.3.6.1.4.1.4754.1.99.1 NAME 'pwdCheckModule'
> DESC 'L
> + oadable module that instantiates "check_password() function' EQUALITY
> caseExa
> + ctIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
> +olcObjectClasses: {0}( 1.3.6.1.4.1.4754.2.99.1 NAME 'pwdPolicyChecker' SUP
> top
> +  AUXILIARY MAY pwdCheckModule )
> +olcObjectClasses: {1}( 1.3.6.1.4.1.42.2.27.8.2.1 NAME 'pwdPolicy' SUP top
> AUXI
> + LIARY MUST pwdAttribute MAY ( pwdMinAge $ pwdMaxAge $ pwdInHistory $
> pwdCheck
> + Quality $ pwdMinLength $ pwdExpireWarning $ pwdGraceAuthNLimit $
> pwdLockout $
> +  pwdLockoutDuration $ pwdMaxFailure $ pwdFailureCountInterval $
> pwdMustChange
> +  $ pwdAllowUserChange $ pwdSafeModify ) )
>
> === added file 'schemas/base/rfc2307bis.ldif'
> --- schemas/base/rfc2307bis.ldif        1970-01-01 00:00:00 +0000
> +++ schemas/base/rfc2307bis.ldif        2010-04-28 13:54:17 +0000
> @@ -0,0 +1,128 @@
> +# NIS (RFC2307)
> +# $OpenLDAP: pkg/ldap/servers/slapd/schema/nis.ldif,v 1.1.2.4 2009/01/22
> 00:01:14 kurt Exp $
> +## This work is part of OpenLDAP Software <http://www.openldap.org/>.
> +##
> +## Copyright 1998-2009 The OpenLDAP Foundation.
> +## All rights reserved.
> +##
> +## Redistribution and use in source and binary forms, with or without
> +## modification, are permitted only as authorized by the OpenLDAP
> +## Public License.
> +##
> +## A copy of this license is available in the file LICENSE in the
> +## top-level directory of the distribution or, alternatively, at
> +## <http://www.OpenLDAP.org/license.html>.
> +#
> +# Definitions from RFC2307 (Experimental)
> +#  An Approach for Using LDAP as a Network Information Service
> +#
> +# Depends upon core.ldif and cosine.ldif
> +#
> +# This file was automatically generated from nis.schema; see that file
> +# for complete references.
> +#
> +#
> +# adapted from
> http://tools.ietf.org/draft/draft-howard-rfc2307bis/draft-howard-rfc2307bis-02.txt
> +# some changes are not here. For example, the ordering rules for uidNumber
> and the like
> +
> +dn: cn=rfc2307bis,cn=schema,cn=config
> +objectClass: olcSchemaConfig
> +cn: rfc2307bis
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field;
> th
> + e common name' EQUALITY caseIgnoreIA5Match SUBSTR
> caseIgnoreIA5SubstringsMatc
> + h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The
> absolut
> + e path to the home directory' EQUALITY caseExactIA5Match SYNTAX
> 1.3.6.1.4.1.1
> + 466.115.121.1.26 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to
> th
> + e login shell' EQUALITY caseExactIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.2
> + 6 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY
> integ
> + erMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY
> integerMatch
> +  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY
> integerMatch
> +  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY
> integerM
> + atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY
> integer
> + Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY
> integerM
> + atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY
> integerMat
> + ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY caseExactI
> + A5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> + 26 )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY ca
> + seExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.11
> + 5.121.1.26 )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgr
> + oup triple' SYNTAX 1.3.6.1.1.1.0.0 )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY intege
> + rMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP name )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY int
> + egerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY integer
> + Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP address
> + ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP netw
> + ork' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.26{128} SI
> + NGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP netm
> + ask' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.26{128} SI
> + NGLE-VALUE )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address'
> +  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC 'rpc.bootp
> + aramd parameter' SYNTAX 1.3.6.1.1.1.0.1 )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image nam
> + e' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name )
> +olcAttributeTypes: ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY caseExac
> + tIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.
> + 1.26{1024} SINGLE-VALUE )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC 'Abstraction
> o
> + f an account with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $
> uidNu
> + mber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $
> gecos $
> + description ) )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC 'Additional
> a
> + ttributes for shadow passwords' SUP top AUXILIARY MUST uid MAY (
> userPassword
> +  $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $
> shadowInactive
> + $ shadowExpire $ shadowFlag $ description ) )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' SUP top AUXILIARY
> DESC
> + 'Abstraction of a group of accounts' MUST ( cn $ gidNumber ) MAY (
> + userPassword $ memberUid $ description ) )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.3 NAME 'ipService' DESC 'Abstraction an
> I
> + nternet Protocol service' SUP top STRUCTURAL MUST ( cn $ ipServicePort $
> ipSe
> + rviceProtocol ) MAY description )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' DESC 'Abstraction of
> + an IP protocol' SUP top STRUCTURAL MUST ( cn $ ipProtocolNumber $
> description
> +  ) MAY description )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' DESC 'Abstraction of an
> O
> + NC/RPC binding' SUP top STRUCTURAL MUST ( cn $ oncRpcNumber $ description
> ) M
> + AY description )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.6 NAME 'ipHost' DESC 'Abstraction of a
> ho
> + st, an IP device' SUP top AUXILIARY MUST ( cn $ ipHostNumber ) MAY ( l $
> desc
> + ription $ manager ) )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' DESC 'Abstraction of
> a
> + n IP network' SUP top STRUCTURAL MUST ( cn $ ipNetworkNumber ) MAY (
> ipNetmas
> + kNumber $ l $ description $ manager ) )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' DESC 'Abstraction
> of
> +  a netgroup' SUP top STRUCTURAL MUST cn MAY ( nisNetgroupTriple $
> memberNisNe
> + tgroup $ description ) )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.9 NAME 'nisMap' DESC 'A generic
> abstracti
> + on of a NIS map' SUP top STRUCTURAL MUST nisMapName MAY description )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.10 NAME 'nisObject' DESC 'An entry in a
> + NIS map' SUP top STRUCTURAL MUST ( cn $ nisMapEntry $ nisMapName ) MAY
> descri
> + ption )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' DESC 'A device w
> + ith a MAC address' SUP top AUXILIARY MAY macAddress )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' DESC 'A device
> + with boot parameters' SUP top AUXILIARY MAY ( bootFile $ bootParameter )
> )
> +olcObjectClasses: ( 1.3.6.1.1.1.2.18 NAME 'groupOfMembers' DESC 'A group
> + with members (DNs)' SUP top STRUCTURAL MUST cn MAY ( businessCategory $
> + seeAlso $ owner $ ou $ o $ description $ member ) )
> +
>
> === removed file 'schemas/cosine.ldif'
> --- schemas/cosine.ldif 2009-09-11 14:25:59 +0000
> +++ schemas/cosine.ldif 1970-01-01 00:00:00 +0000
> @@ -1,200 +0,0 @@
> -# RFC1274: Cosine and Internet X.500 schema
> -# $OpenLDAP: pkg/ldap/servers/slapd/schema/cosine.ldif,v 1.1.2.4
> 2009/01/22 00:01:14 kurt Exp $
> -## This work is part of OpenLDAP Software <http://www.openldap.org/>.
> -##
> -## Copyright 1998-2009 The OpenLDAP Foundation.
> -## All rights reserved.
> -##
> -## Redistribution and use in source and binary forms, with or without
> -## modification, are permitted only as authorized by the OpenLDAP
> -## Public License.
> -##
> -## A copy of this license is available in the file LICENSE in the
> -## top-level directory of the distribution or, alternatively, at
> -## <http://www.OpenLDAP.org/license.html>.
> -#
> -# RFC1274: Cosine and Internet X.500 schema
> -#
> -# This file contains LDAPv3 schema derived from X.500 COSINE "pilot"
> -# schema.  As this schema was defined for X.500(89), some
> -# oddities were introduced in the mapping to LDAPv3.  The
> -# mappings were based upon: draft-ietf-asid-ldapv3-attributes-03.txt
> -# (a work in progress)
> -#
> -# Note: It seems that the pilot schema evolved beyond what was
> -# described in RFC1274.  However, this document attempts to describes
> -# RFC1274 as published.
> -#
> -# Depends on core.ldif
> -#
> -# This file was automatically generated from cosine.schema; see that
> -# file for complete background.
> -#
> -dn: cn=cosine,cn=schema,cn=config
> -objectClass: olcSchemaConfig
> -cn: cosine
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress'
> - EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
> 1.3.6.1.4.1.
> - 1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274:
> g
> - eneral information' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMatch
> -  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.5 NAME ( 'drink'
> 'favouriteDri
> - nk' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR
> caseIgno
> - reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC
> 'RFC1
> - 274: room number' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMatch S
> - YNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274:
> - photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC
> 'RFC12
> - 74: category of user' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstringsMat
> - ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274:
> h
> - ost computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
> SYNTA
> - X 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC
> 'RFC127
> - 4: DN of manager' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.1466.115
> - .121.1.12 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier'
> D
> - ESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch
> SUBSTR
> - caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC
> '
> - RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstri
> - ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DES
> - C 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSu
> - bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC
> -  'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch
> SYNTAX 1
> - .3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DE
> - SC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch
> SUBSTR c
> - aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone' 'homeTe
> - lephoneNumber' ) DESC 'RFC1274: home telephone number' EQUALITY
> telephoneNumb
> - erMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121
> - .1.50 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC
> - 1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.146
> - 6.115.121.1.12 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX
> -  1.3.6.1.4.1.1466.115.121.1.39 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY ca
> - seIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY c
> - aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY c
> - aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY c
> - aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY
> - caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALIT
> - Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC
> -  'RFC1274: DN of entry associated with domain' EQUALITY
> distinguishedNameMatc
> - h SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress' D
> - ESC 'RFC1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR
> caseIg
> - noreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.40 NAME 'personalTitle' DESC
> - 'RFC1274: personal title' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstring
> - sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.41 NAME ( 'mobile' 'mobileTel
> - ephoneNumber' ) DESC 'RFC1274: mobile telephone number' EQUALITY
> telephoneNum
> - berMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.12
> - 1.1.50 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.42 NAME ( 'pager' 'pagerTelep
> - honeNumber' ) DESC 'RFC1274: pager telephone number' EQUALITY
> telephoneNumber
> - Match SUBSTR telephoneNumberSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1
> - .50 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.43 NAME ( 'co' 'friendlyCount
> - ryName' ) DESC 'RFC1274: friendly country name' EQUALITY caseIgnoreMatch
> SUBS
> - TR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier' DE
> - SC 'RFC1274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX
> 1.3.6.1.4.1.14
> - 66.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.45 NAME 'organizationalStatus
> - ' DESC 'RFC1274: organizational status' EQUALITY caseIgnoreMatch SUBSTR
> caseI
> - gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox' DESC '
> - RFC1274: Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR
> caseIgnoreIA5Subst
> - ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.47 NAME 'mailPreferenceOption
> - ' DESC 'RFC1274: mail preference option' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.27
> -  )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.48 NAME 'buildingName' DESC '
> - RFC1274: name of building' EQUALITY caseIgnoreMatch SUBSTR
> caseIgnoreSubstrin
> - gsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality' DESC 'RF
> - C1274: DSA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19 SINGLE-VALUE )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality'
> - DESC 'RFC1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13
> SIN
> - GLE-VALUE )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.51 NAME 'subtreeMinimumQualit
> - y' DESC 'RFC1274: Subtree Mininum Quality' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> - 13 SINGLE-VALUE )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.52 NAME 'subtreeMaximumQualit
> - y' DESC 'RFC1274: Subtree Maximun Quality' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> - 13 SINGLE-VALUE )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.53 NAME 'personalSignature' D
> - ESC 'RFC1274: Personal Signature (G3 fax)' SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.
> - 23 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect' DESC 'R
> - FC1274: DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX
> 1.3.6.1.4.1.1466
> - .115.121.1.12 )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.55 NAME 'audio' DESC 'RFC1274
> - : audio (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} )
> -olcAttributeTypes: ( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher' D
> - ESC 'RFC1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR
> caseIgno
> - reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.4 NAME ( 'pilotPerson'
> 'newPilo
> - tPerson' ) SUP person STRUCTURAL MAY ( userid $ textEncodedORAddress $
> rfc822
> - Mailbox $ favouriteDrink $ roomNumber $ userClass $ homeTelephoneNumber $
> hom
> - ePostalAddress $ secretary $ personalTitle $ preferredDeliveryMethod $
> busine
> - ssCategory $ janetMailbox $ otherMailbox $ mobileTelephoneNumber $
> pagerTelep
> - honeNumber $ organizationalStatus $ mailPreferenceOption $
> personalSignature
> - ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top
> STRUCT
> - URAL MUST userid MAY ( description $ seeAlso $ localityName $
> organizationNam
> - e $ organizationalUnitName $ host ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top
> STRUC
> - TURAL MUST documentIdentifier MAY ( commonName $ description $ seeAlso $
> loca
> - lityName $ organizationName $ organizationalUnitName $ documentTitle $
> docume
> - ntVersion $ documentAuthor $ documentLocation $ documentPublisher ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top
> STRUCTURA
> - L MUST commonName MAY ( roomNumber $ description $ seeAlso $
> telephoneNumber
> - ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP
> top
> -  STRUCTURAL MUST commonName MAY ( description $ seeAlso $ telephonenumber
> $ l
> - ocalityName $ organizationName $ organizationalUnitName ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top
> STRUCT
> - URAL MUST domainComponent MAY ( associatedName $ organizationName $
> descripti
> - on $ businessCategory $ seeAlso $ searchGuide $ userPassword $
> localityName $
> -  stateOrProvinceName $ streetAddress $ physicalDeliveryOfficeName $
> postalAdd
> - ress $ postalCode $ postOfficeBox $ streetAddress $
> facsimileTelephoneNumber
> - $ internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $
> tel
> - exNumber $ preferredDeliveryMethod $ destinationIndicator $
> registeredAddress
> -  $ x121Address ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP
> d
> - omain STRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $
> telepho
> - neNumber $ physicalDeliveryOfficeName $ postalAddress $ postalCode $
> postOffi
> - ceBox $ streetAddress $ facsimileTelephoneNumber $
> internationalISDNNumber $
> - telephoneNumber $ teletexTerminalIdentifier $ telexNumber $
> preferredDelivery
> - Method $ destinationIndicator $ registeredAddress $ x121Address ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP domain
> - STRUCTURAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $
> CNAME
> - Record ) )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject'
> D
> - ESC 'RFC1274: an object related to an domain' SUP top AUXILIARY MUST
> associat
> - edDomain )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP
> c
> - ountry STRUCTURAL MUST friendlyCountryName )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SU
> - P ( organization $ organizationalUnit ) STRUCTURAL MAY buildingName )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa STR
> - UCTURAL MAY dSAQuality )
> -olcObjectClasses: ( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData'
> - SUP top AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $
> subtreeMaximu
> - mQuality ) )
>
> === added directory 'schemas/dhcp'
> === removed file 'schemas/dhcp.ldif'
> --- schemas/dhcp.ldif   2009-09-11 14:25:59 +0000
> +++ schemas/dhcp.ldif   1970-01-01 00:00:00 +0000
> @@ -1,224 +0,0 @@
> -dn: cn=dhcp,cn=schema,cn=config
> -objectClass: olcSchemaConfig
> -cn: dhcp
> -olcAttributeTypes: {0}( 2.16.840.1.113719.1.203.4.1 NAME 'dhcpPrimaryDN'
> DESC
> - 'The DN of the dhcpServer which is the primary server for the
> configuration.'
> -  EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
> SINGLE-
> - VALUE )
> -olcAttributeTypes: {1}( 2.16.840.1.113719.1.203.4.2 NAME 'dhcpSecondaryDN'
> DES
> - C 'The DN of dhcpServer(s) which provide backup service for the
> configuration
> - .' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {2}( 2.16.840.1.113719.1.203.4.3 NAME 'dhcpStatements'
> DESC
> -  'Flexible storage for specific data depending on what object this exists
> in.
> -  Like conditional statements, server parameters, etc. This allows the
> standar
> - d to evolve without needing to adjust the schema.' EQUALITY
> caseIgnoreIA5Matc
> - h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: {3}( 2.16.840.1.113719.1.203.4.4 NAME 'dhcpRange' DESC
> 'The
> -  starting & ending IP Addresses in the range (inclusive), separated by a
> hyph
> - en; if the range only contains one address, then just the address can be
> spec
> - ified with no hyphen.  Each range is defined as a separate value.'
> EQUALITY c
> - aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: {4}( 2.16.840.1.113719.1.203.4.5 NAME 'dhcpPermitList'
> DESC
> -  'This attribute contains the permit lists associated with a pool. Each
> permi
> - t list is defined as a separate value.' EQUALITY caseIgnoreIA5Match
> SYNTAX 1.
> - 3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: {5}( 2.16.840.1.113719.1.203.4.6 NAME 'dhcpNetMask'
> DESC 'T
> - he subnet mask length for the subnet.  The mask can be easily computed
> from t
> - his length.' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
> SINGL
> - E-VALUE )
> -olcAttributeTypes: {6}( 2.16.840.1.113719.1.203.4.7 NAME 'dhcpOption' DESC
> 'En
> - coded option values to be sent to clients.  Each value represents a
> single op
> - tion and contains (OptionTag, Length, OptionValue) encoded in the format
> used
> -  by DHCP.' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.26 )
> -olcAttributeTypes: {7}( 2.16.840.1.113719.1.203.4.8 NAME 'dhcpClassData'
> DESC
> - 'Encoded text string or list of bytes expressed in hexadecimal, separated
> by
> - colons.  Clients match subclasses based on matching the class data with
> the r
> - esults of match or spawn with statements in the class name declarations.'
> EQU
> - ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
> SINGLE-VALUE )
> -olcAttributeTypes: {8}( 2.16.840.1.113719.1.203.4.9 NAME 'dhcpOptionsDN'
> DESC
> - 'The distinguished name(s) of the dhcpOption objects containing the
> configura
> - tion options provided by the server.' EQUALITY distinguishedNameMatch
> SYNTAX
> - 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {9}( 2.16.840.1.113719.1.203.4.10 NAME 'dhcpHostDN'
> DESC 't
> - he distinguished name(s) of the dhcpHost objects.' EQUALITY
> distinguishedName
> - Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {10}( 2.16.840.1.113719.1.203.4.11 NAME 'dhcpPoolDN'
> DESC '
> - The distinguished name(s) of pools.' EQUALITY distinguishedNameMatch
> SYNTAX 1
> - .3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {11}( 2.16.840.1.113719.1.203.4.12 NAME 'dhcpGroupDN'
> DESC
> - 'The distinguished name(s)   of the groups.' EQUALITY
> distinguishedNameMatch
> - SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {12}( 2.16.840.1.113719.1.203.4.13 NAME 'dhcpSubnetDN'
> DESC
> -  'The distinguished name(s) of the subnets.' EQUALITY
> distinguishedNameMatch
> - SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {13}( 2.16.840.1.113719.1.203.4.14 NAME 'dhcpLeaseDN'
> DESC
> - 'The distinguished name of a client address.' EQUALITY
> distinguishedNameMatch
> -  SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
> -olcAttributeTypes: {14}( 2.16.840.1.113719.1.203.4.15 NAME 'dhcpLeasesDN'
> DESC
> -  'The distinguished name(s) client addresses.' EQUALITY
> distinguishedNameMatc
> - h SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {15}( 2.16.840.1.113719.1.203.4.16 NAME 'dhcpClassesDN'
> DES
> - C 'The distinguished name(s) of a class(es) in a subclass.' EQUALITY
> distingu
> - ishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {16}( 2.16.840.1.113719.1.203.4.17 NAME
> 'dhcpSubclassesDN'
> - DESC 'The distinguished name(s) of subclass(es).' EQUALITY
> distinguishedNameM
> - atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {17}( 2.16.840.1.113719.1.203.4.18 NAME
> 'dhcpSharedNetworkD
> - N' DESC 'The distinguished name(s) of sharedNetworks.' EQUALITY
> distinguished
> - NameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {18}( 2.16.840.1.113719.1.203.4.19 NAME 'dhcpServiceDN'
> DES
> - C 'The DN of dhcpService object(s)which contain the configuration
> information
> - . Each dhcpServer object has this attribute identifying the DHCP
> configuratio
> - n(s) that the server is associated with.' EQUALITY distinguishedNameMatch
> SYN
> - TAX 1.3.6.1.4.1.1466.115.121.1.12 )
> -olcAttributeTypes: {19}( 2.16.840.1.113719.1.203.4.20 NAME 'dhcpVersion'
> DESC
> - 'The version attribute of this object.' EQUALITY caseIgnoreIA5Match
> SYNTAX 1.
> - 3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
> -olcAttributeTypes: {20}( 2.16.840.1.113719.1.203.4.21 NAME
> 'dhcpImplementation
> - ' DESC 'Description of the DHCP Server implementation e.g. DHCP Servers
> vendo
> - r.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
> SINGLE-V
> - ALUE )
> -olcAttributeTypes: {21}( 2.16.840.1.113719.1.203.4.22 NAME
> 'dhcpAddressState'
> - DESC 'This stores information about the current binding-status of an
> address.
> -   For dynamic addresses managed by DHCP, the values should be restricted
> to t
> - he following: "FREE", "ACTIVE", "EXPIRED", "RELEASED", "RESET",
> "ABANDONED",
> - "BACKUP".  For other addresses, it SHOULD be one of the following:
> "UNKNOWN",
> -  "RESERVED" (an address that is managed by DHCP that is reserved for a
> specif
> - ic client), "RESERVED-ACTIVE" (same as reserved, but address is currently
> in
> - use), "ASSIGNED" (assigned manually or by some other mechanism),
> "UNASSIGNED"
> - , "NOTASSIGNABLE".' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.1
> - 21.1.26 SINGLE-VALUE )
> -olcAttributeTypes: {22}( 2.16.840.1.113719.1.203.4.23 NAME
> 'dhcpExpirationTime
> - ' DESC 'This is the time the current lease for an address expires.'
> EQUALITY
> - generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
> -olcAttributeTypes: {23}( 2.16.840.1.113719.1.203.4.24 NAME
> 'dhcpStartTimeOfSta
> - te' DESC 'This is the time of the last state change for a leased
> address.' EQ
> - UALITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
> SINGLE-VALUE
> -  )
> -olcAttributeTypes: {24}( 2.16.840.1.113719.1.203.4.25 NAME
> 'dhcpLastTransactio
> - nTime' DESC 'This is the last time a valid DHCP packet was received from
> the
> - client.' EQUALITY generalizedTimeMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.24 S
> - INGLE-VALUE )
> -olcAttributeTypes: {25}( 2.16.840.1.113719.1.203.4.26 NAME 'dhcpBootpFlag'
> DES
> - C 'This indicates whether the address was assigned via BOOTP.' EQUALITY
> boole
> - anMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
> -olcAttributeTypes: {26}( 2.16.840.1.113719.1.203.4.27 NAME
> 'dhcpDomainName' DE
> - SC 'This is the name of the domain sent to the client by the server.  It
> is e
> - ssentially the same as the value for DHCP option 15 sent to the client,
> and r
> - epresents only the domain - not the full FQDN.  To obtain the full FQDN
> assig
> - ned to the client you must prepend the "dhcpAssignedHostName" to this
> value w
> - ith a ".".' EQUALITY caseIgnoreIA5Match SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.26
> - SINGLE-VALUE )
> -olcAttributeTypes: {27}( 2.16.840.1.113719.1.203.4.28 NAME 'dhcpDnsStatus'
> DES
> - C 'This indicates the status of updating DNS resource records on behalf
> of th
> - e client by the DHCP server for this address.  The value is a 16-bit
> bitmask.
> - ' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.11
>