LILiK
/
lilik_playbook
5
0
Fork 0
Code Issues 0 Pull Requests 0 Releases 0 Wiki Activity
Playbooks to a new Lilik
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
471 Commits
12 Branches
967 KiB
Tree: c20cd34962
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'c20cd34962'
${ noResults }
lilik_playbook/roles/ldap/files/phamm.ldif

132 lines
8.7 KiB
Raw Normal View History

roles/ldap: super-refactoring and TLS support. - Tasks splitted in subfiles. - Static slapd configuration (slapd.conf) moved *properly* to dynamic conf (slapd.d). - TLS Enabled by default, with certificate acquired using `ca_manager`. - New default tree - New default ACL - Kerberos schema added - {SSHA512} hash properly configured.
5 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
 
  1. dn: cn=phamm,cn=schema,cn=config
  2. objectClass: olcSchemaConfig
  3. cn: phamm
  4. olcAttributeTypes: {0}( 1.3.6.1.4.1.22339.1.1.1 NAME 'postfixTransport' DESC
  5.   'A string directing postfix which transport to use' EQUALITY caseExactIA5M
  6.  atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{20} SINGLE-VALUE )
  7. olcAttributeTypes: {1}( 1.3.6.1.4.1.22339.1.1.2 NAME 'accountActive' DESC 'A
  8.   boolean telling whether an account is active or not' EQUALITY booleanMatch
  9.   SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  10. olcAttributeTypes: {2}( 1.3.6.1.4.1.22339.1.1.3 NAME 'lastChange' DESC 'Time
  11.   in unix time of last change in entry' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  12.   SINGLE-VALUE )
  13. olcAttributeTypes: {3}( 1.3.6.1.4.1.22339.1.1.4 NAME 'vd' DESC 'A virtual do
  14.  main managed by Phamm' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Subs
  15.  tringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
  16. olcAttributeTypes: {4}( 1.3.6.1.4.1.22339.1.1.5 NAME 'mailbox' DESC 'The abs
  17.  olute path to the mailbox for a mail account in a non-default location' EQU
  18.  ALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  19. olcAttributeTypes: {5}( 1.3.6.1.4.1.22339.1.1.6 NAME 'quota' DESC 'A string 
  20.  that represents the quota on a mailbox' EQUALITY caseExactIA5Match SYNTAX 1
  21.  .3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  22. olcAttributeTypes: {6}( 1.3.6.1.4.1.22339.1.1.7 NAME 'clearPassword' DESC 'A
  23.   separate text that stores the mail account password in clear text' EQUALIT
  24.  Y octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )
  25. olcAttributeTypes: {7}( 1.3.6.1.4.1.22339.1.1.8 NAME 'maildrop' DESC 'RFC822
  26.   Mailbox - mail alias' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Subs
  27.  tringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
  28. olcAttributeTypes: {8}( 1.3.6.1.4.1.22339.1.1.9 NAME 'mailsource' DESC 'Mess
  29.  age source' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch
  30.   SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
  31. olcAttributeTypes: {9}( 1.3.6.1.4.1.22339.1.1.10 NAME 'editAliases' DESC 'A 
  32.  boolean telling whether a domain manager can edit Aliases' EQUALITY boolean
  33.  Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  34. olcAttributeTypes: {10}( 1.3.6.1.4.1.22339.1.1.11 NAME 'editAccounts' DESC '
  35.  A boolean telling whether a domain manager can edit Accounts' EQUALITY bool
  36.  eanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  37. olcAttributeTypes: {11}( 1.3.6.1.4.1.22339.1.1.12 NAME 'editAV' DESC 'A bool
  38.  ean telling whether a domain manager can edit Antivirus' EQUALITY booleanMa
  39.  tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  40. olcAttributeTypes: {12}( 1.3.6.1.4.1.22339.1.1.13 NAME 'delete' DESC 'A bool
  41.  ean telling whether this item is marked for deletion' EQUALITY booleanMatch
  42.   SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  43. olcAttributeTypes: {13}( 1.3.6.1.4.1.22339.1.1.14 NAME 'forwardActive' DESC 
  44.  'A boolean telling whether this item is using forward' EQUALITY booleanMatc
  45.  h SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  46. olcAttributeTypes: {14}( 1.3.6.1.4.1.22339.1.1.15 NAME 'maxDomain' DESC 'A s
  47.  tring that represents the max domain for a VirtualAdmin' EQUALITY caseExact
  48.  IA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  49. olcAttributeTypes: {15}( 1.3.6.1.4.1.22339.1.1.16 NAME 'maxMail' DESC 'A str
  50.  ing that represents the max mail for a VirtualAdmin' EQUALITY caseExactIA5M
  51.  atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  52. olcAttributeTypes: {16}( 1.3.6.1.4.1.22339.1.1.17 NAME 'maxAlias' DESC 'A st
  53.  ring that represents the max alias for a VirtualAdmin' EQUALITY caseExactIA
  54.  5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  55. olcAttributeTypes: {17}( 1.3.6.1.4.1.22339.1.1.18 NAME 'maxQuota' DESC 'A st
  56.  ring that represents the max quota for a VirtualAdmin' EQUALITY caseExactIA
  57.  5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  58. olcAttributeTypes: {18}( 1.3.6.1.4.1.22339.1.1.19 NAME 'adminID' DESC 'A str
  59.  ing that represents the dn of admin domain' EQUALITY caseExactIA5Match SYNT
  60.  AX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  61. olcAttributeTypes: {19}( 1.3.6.1.4.1.22339.1.1.20 NAME 'vdHome' DESC 'The ab
  62.  solute path to the virtual domain home' EQUALITY caseExactIA5Match SYNTAX 1
  63.  .3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  64. olcAttributeTypes: {20}( 1.3.6.1.4.1.22339.1.1.21 NAME 'otherTransport' DESC
  65.   'A string directing postfix which transport to use' EQUALITY caseExactIA5M
  66.  atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{20} SINGLE-VALUE )
  67. olcAttributeTypes: {21}( 1.3.6.1.4.1.22339.1.1.22 NAME 'creationDate' DESC '
  68.  Timestamp of creation' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.12
  69.  1.1.27{14} SINGLE-VALUE )
  70. olcAttributeTypes: {22}( 1.3.6.1.4.1.22339.1.1.23 NAME 'otherPath' DESC 'Thi
  71.  s path to help any application' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4
  72.  .1.1466.115.121.1.26 SINGLE-VALUE )
  73. olcAttributeTypes: {23}( 1.3.6.1.4.1.22339.1.1.24 NAME 'createMaildir' DESC 
  74.  'A boolean telling when we must create Maildir for maildrop transport' EQUA
  75.  LITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  76. olcAttributeTypes: {24}( 1.3.6.1.4.1.22339.1.1.25 NAME 'smtpAuth' DESC 'A bo
  77.  olean telling when we could do smtp-auth' EQUALITY booleanMatch SYNTAX 1.3.
  78.  6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  79. olcAttributeTypes: {25}( 1.3.6.1.4.1.22339.1.1.26 NAME 'expireDate' DESC 'Ex
  80.  pire date' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27{14} S
  81.  INGLE-VALUE )
  82. olcAttributeTypes: {26}( 1.3.6.1.4.1.22339.1.1.27 NAME 'mailAutoreply' DESC 
  83.  'RFC822 Mailbox - mail for autoreply' EQUALITY caseIgnoreIA5Match SUBSTR ca
  84.  seIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
  85. olcAttributeTypes: {27}( 1.3.6.1.4.1.22339.1.1.28 NAME 'bypassGreyListing' D
  86.  ESC 'A boolean telling when we could bypass Grey Listing' EQUALITY booleanM
  87.  atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
  88. olcAttributeTypes: {28}( 1.3.6.1.4.1.22339.1.1.29 NAME 'phammGroup' DESC 'De
  89.  fine the phamm Group of the VirtualMailAccount' EQUALITY caseIgnoreMatch SU
  90.  BSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
  91. olcAttributeTypes: {29}( 1.3.6.1.4.1.22339.1.1.30 NAME 'maxSmtpAuth' DESC 'A
  92.   string that represents the max SMTP Auth for a VirtualAdmin' EQUALITY case
  93.  ExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  94. olcAttributeTypes: {30}( 1.3.6.1.4.1.22339.1.1.31 NAME 'maxAntivirus' DESC '
  95.  A string that represents the max Antivirus for a VirtualAdmin' EQUALITY cas
  96.  eExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  97. olcAttributeTypes: {31}( 1.3.6.1.4.1.22339.1.1.32 NAME 'maxAntiSpam' DESC 'A
  98.   string that represents the max AntiSpam for a VirtualAdmin' EQUALITY caseE
  99.  xactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  100. olcAttributeTypes: {32}( 1.3.6.1.4.1.22339.1.1.33 NAME 'maxGreyList' DESC 'A
  101.   string that represents the max AntiGreyList for a VirtualAdmin' EQUALITY c
  102.  aseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
  103. olcObjectClasses: {0}( 1.3.6.1.4.1.22339.1.2.1 NAME 'VirtualMailAccount' DES
  104.  C 'Mail account objects' SUP inetOrgPerson STRUCTURAL MUST ( mail $ vdHome 
  105.  $ mailbox $ accountActive $ lastChange $ delete ) MAY ( quota $ otherTransp
  106.  ort $ editAccounts $ creationDate $ createMaildir $ smtpAuth $ expireDate $
  107.   mailAutoreply $ bypassGreyListing $ phammGroup ) )
  108. olcObjectClasses: {1}( 1.3.6.1.4.1.22339.1.2.2 NAME 'VirtualMailAlias' DESC 
  109.  'Mail aliasing/forwarding entry' SUP inetOrgPerson STRUCTURAL MUST ( mail $
  110.   maildrop $ accountActive $ lastChange ) MAY ( mailsource $ editAccounts $ 
  111.  creationDate $ smtpAuth $ expireDate $ bypassGreyListing ) )
  112. olcObjectClasses: {2}( 1.3.6.1.4.1.22339.1.2.3 NAME 'VirtualDomain' DESC 'Vi
  113.  rtual Domain entry to be used with postfix transport maps' SUP top STRUCTUR
  114.  AL MUST ( vd $ accountActive $ lastChange $ delete ) MAY ( postfixTransport
  115.   $ description $ maxMail $ maxAlias $ maxQuota $ editAV $ adminID $ creatio
  116.  nDate $ bypassGreyListing $ maxSmtpAuth $ maxAntivirus $ maxAntiSpam $ maxG
  117.  reyList ) )
  118. olcObjectClasses: {3}( 1.3.6.1.4.1.22339.1.2.4 NAME 'VirtualForward' DESC 'F
  119.  orward setting for VirtualMailAccount' SUP top AUXILIARY MUST forwardActive
  120.   MAY maildrop )
  121. olcObjectClasses: {4}( 1.3.6.1.4.1.22339.1.2.5 NAME 'VirtualAdmin' DESC 'Vir
  122.  tual Admin entry' SUP inetOrgPerson STRUCTURAL MUST ( mail $ maxDomain $ ac
  123.  countActive $ lastChange ) MAY ( vd $ editAccounts ) )
  124. olcObjectClasses: {5}( 1.3.6.1.4.1.22339.1.2.6 NAME 'VirtualBackupDomain' DE
  125.  SC 'Virtual Backup Domain entry to be used for relay' SUP top STRUCTURAL MU
  126.  ST ( vd $ accountActive $ lastChange $ delete ) MAY description )
  127. olcObjectClasses: {6}( 1.3.6.1.4.1.22339.1.2.7 NAME 'VirtualBackupMail' DESC
  128.   'Virtual Backup Mail entry to be used for relay' SUP top STRUCTURAL MUST (
  129.   mail $ accountActive $ lastChange ) MAY description )
  130. olcObjectClasses: {7}( 1.3.6.1.4.1.22339.1.2.8 NAME 'Yap' DESC 'Yet another 
  131.  path' SUP top AUXILIARY MUST otherPath )
  132.