crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[SASL] Prise en compte de shadowExpire + [LDAP] Idem niveau ACL

Browse source
This commit is contained in:
Pierre-Elliott Bécue 2013-10-21 21:07:27 +02:00
parent 6b938d1182
commit 3662973985
2 changed files with 7 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Cfg/etc/saslauthd.conf/saslauthd.conf
View file

@ -1,5 +1,5 @@
ldap_servers: ldap://ldap.adm.crans.org ldap_servers: ldap://ldap.adm.crans.org
ldap_bind_dn: cn=postfix,dc=crans,dc=org ldap_bind_dn: cn=postfix,dc=crans,dc=org
ldap_password: f34842fd04aa7f58bc45bb ldap_password: f34842fd04aa7f58bc45bb
ldap_filter: (&(objectClass=posixAccount)(uid=%u)) ldap_filter: (&(objectClass=posixAccount)(uid=%u)(!(shadowExpire=0)))
ldap_search_base: ou=data,dc=crans,dc=org ldap_search_base: ou=data,dc=crans,dc=org

11
Python/etc/ldap/templatedir/cn=config/olcDatabase={1}bdb.ldif
View file

@ -18,13 +18,14 @@ rid = str(int(rid[rid.rfind(".")+1:])+255)
@olcAccess: {1}to dn.base="" by * read @olcAccess: {1}to dn.base="" by * read
@olcAccess: {2}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=m @olcAccess: {2}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=m
@ ailAlias,canonicalAlias,uid,mail,entry,objectClass,contourneGreylist,rewriteM @ ailAlias,canonicalAlias,uid,mail,entry,objectClass,contourneGreylist,rewriteM
@ ailHeaders by dn.regex="cn=postfix,dc=crans,dc=org" read by * +0 break @ ailHeaders,shadowExpire by dn.regex="cn=postfix,dc=crans,dc=org" read by *
@ +0 break
@olcAccess: {3}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u @olcAccess: {3}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u
@ id,entry,objectClass by dn.regex="cn=intranet,dc=crans,dc=org" read by * +0 @ id,entry,objectClass,shadowExpire by dn.regex="cn=intranet,dc=crans,dc=org"
@ break @ read by * +0 break
@olcAccess: {4}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u @olcAccess: {4}to dn.regex="^(a|c)id=[0-9]+,ou=data,dc=crans,dc=org$$" attrs=u
@ id,homeDirectory,uidNumber,gidNumber,userPassword,objectClass,entry by dn.re @ id,homeDirectory,uidNumber,gidNumber,userPassword,objectClass,entry,shadowExp
@ gex="cn=dovecot,dc=crans,dc=org" read by * +0 break @ ire by dn.regex="cn=dovecot,dc=crans,dc=org" read by * +0 break
@olcAccess: {5}to * by group/labeledURIObject/labeledURI.exact="cn=adm,ou=grou @olcAccess: {5}to * by group/labeledURIObject/labeledURI.exact="cn=adm,ou=grou
@ p,dc=crans,dc=org" write by group/labeledURIObject/labeledURI.exact="cn=resp @ p,dc=crans,dc=org" write by group/labeledURIObject/labeledURI.exact="cn=resp
@ bats,ou=group,dc=crans,dc=org" read by * +0 break @ bats,ou=group,dc=crans,dc=org" read by * +0 break