Mise à jour quinquennale du schema LDAP crans
This commit is contained in:
Pierre-Elliott Bécue
parent
cf4ac5041f
commit
bdc2ac56b7
1 changed files with 196 additions and 29 deletions
|
|
@ -13,6 +13,7 @@
|
|||
attributetype ( 1.3.6.1.4.1.25368.2.1 NAME 'aid'
|
||||
DESC 'Adhérent Identifier'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.2 NAME 'nom'
|
||||
|
|
@ -37,9 +38,9 @@ attributetype ( 1.3.6.1.4.1.25368.2.5 NAME 'paiement'
|
|||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.6 NAME 'carteEtudiant'
|
||||
DESC 'Année de carte étudiant fournie'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.7 NAME 'mailAlias'
|
||||
DESC 'Alias mail'
|
||||
|
|
@ -90,6 +91,7 @@ attributetype ( 1.3.6.1.4.1.25368.2.14 NAME 'blacklist'
|
|||
attributetype ( 1.3.6.1.4.1.25368.2.15 NAME 'mid'
|
||||
DESC 'Machine Identifier'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.16 NAME 'hostAlias'
|
||||
|
|
@ -101,6 +103,7 @@ attributetype ( 1.3.6.1.4.1.25368.2.16 NAME 'hostAlias'
|
|||
attributetype ( 1.3.6.1.4.1.25368.2.17 NAME 'cid'
|
||||
DESC 'Club Identifier'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.18 NAME 'responsable'
|
||||
|
|
@ -189,7 +192,7 @@ attributetype ( 1.3.6.1.4.1.25368.2.32 NAME 'contourneGreylist'
|
|||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{16} SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.33 NAME 'rewriteMailHeaders'
|
||||
DESC 'Réécriture de l\27adresse mail avec l\27alias canonique (TRUE/absent)'
|
||||
DESC 'Reecriture du mail avec alias canonique (TRUE/absent)'
|
||||
EQUALITY booleanMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
|
||||
|
||||
|
|
@ -199,13 +202,13 @@ attributetype ( 1.3.6.1.4.1.25368.2.34 NAME 'hotspot'
|
|||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.35 NAME 'positionBorne'
|
||||
DESC 'Coordonnées d\27une borne wifi'
|
||||
DESC 'Coordonnees borne wifi'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{32} SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.37 NAME 'nvram'
|
||||
DESC 'Configuration spéciale d\27une borne'
|
||||
DESC 'Configuration spéciale borne'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
|
||||
|
|
@ -219,6 +222,7 @@ attributetype ( 1.3.6.1.4.1.25368.2.38 NAME 'derniereConnexion'
|
|||
attributetype ( 1.3.6.1.4.1.25368.2.39 NAME 'fid'
|
||||
DESC 'Facture Identifier'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.40 NAME 'modePaiement'
|
||||
|
|
@ -229,10 +233,11 @@ attributetype ( 1.3.6.1.4.1.25368.2.40 NAME 'modePaiement'
|
|||
attributetype ( 1.3.6.1.4.1.25368.2.41 NAME 'article'
|
||||
DESC 'Article'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{312} )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.42 NAME 'recuPaiement'
|
||||
DESC 'Definit si la facture a été payée (valeur absente = facture non payée)'
|
||||
DESC 'Definit si la facture a ete payee (valeur absente = facture non payee)'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{64} SINGLE-VALUE )
|
||||
|
||||
|
|
@ -273,14 +278,8 @@ attributetype ( 1.3.6.1.4.1.25368.2.49 NAME 'midType'
|
|||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.50 NAME 'typeAdhesion'
|
||||
DESC 'Type adhesion'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.51 NAME 'compteWiki'
|
||||
DESC 'Compte Wiki de l\27adhérent'
|
||||
DESC 'Identifiant wiki adherent'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE )
|
||||
|
|
@ -291,7 +290,7 @@ attributetype ( 1.3.6.1.4.1.25368.2.52 NAME 'dnsIpv6'
|
|||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.53 NAME 'machineAlias'
|
||||
DESC 'Cette machine est un alias d\27une autre machine (2ème IP)'
|
||||
DESC 'Cette machine est un alias pour une autre machine (2eme IP)'
|
||||
EQUALITY booleanMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
|
||||
|
||||
|
|
@ -307,23 +306,165 @@ attributetype ( 1.3.6.1.4.1.25368.2.55 NAME 'accesRFID'
|
|||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.56 NAME 'mailExt'
|
||||
DESC 'Adresse e-mail extérieure'
|
||||
DESC 'Adresse e-mail exterieure'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.57 NAME 'gpgFingerprint'
|
||||
DESC 'Fingerprint GPG pour adherent avec compte crans'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.58 NAME 'sshFingerprint'
|
||||
DESC 'Fingerprint SSH pour une machine'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.59 NAME 'ip6HostNumber'
|
||||
DESC 'IPv6 address'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.61 NAME 'lockv'
|
||||
DESC 'Lock version'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.62 NAME 'gpgMail'
|
||||
DESC 'Mail allant de paire avec la clef GPG'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SUBSTR caseIgnoreIA5SubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.63 NAME 'certificat'
|
||||
DESC 'Certificat x509 au format DER'
|
||||
EQUALITY certificateExactMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.65 NAME 'end'
|
||||
DESC 'Une date de fin en seconde depuis epoch'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.66 NAME 'revocked'
|
||||
DESC 'Donne si un objet est revoque'
|
||||
EQUALITY booleanMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.67 NAME 'certificatUsage'
|
||||
DESC 'Specifies the provided association that will be used to match the certificate presented in the TLS handshake'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.68 NAME 'selector' DESC 'specifies which part of the TLS certificate presented by the server will be matched against the association data'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.69 NAME 'matchingType'
|
||||
DESC 'specifies how the certificate association is presented'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.70 NAME 'issuerCN'
|
||||
DESC 'Common Name du CA ayant signe le certificat'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.72 NAME 'crlUrl'
|
||||
DESC 'Url vers la liste de revocation pour le certificat'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.73 NAME 'xid'
|
||||
DESC 'un identifiant pour les certificats'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.74 NAME 'hostCert'
|
||||
DESC 'nom de domaine pour lequel un certificat est utilise'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
|
||||
|
||||
attributetype ( 1.3.6.1.4.1.25368.2.60 NAME 'rid'
|
||||
DESC 'Id reseau pour plages d ip'
|
||||
EQUALITY integerMatch
|
||||
ORDERING integerOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.75 NAME 'privatekey'
|
||||
DESC 'Clef privee au format PEM'
|
||||
EQUALITY octetStringMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE)
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.76 NAME 'encrypted'
|
||||
DESC 'Determine si privatekey est chiffree'
|
||||
EQUALITY booleanMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.77 NAME 'csr'
|
||||
DESC 'Certificate signing request in PEM format'
|
||||
EQUALITY octetStringMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE)
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.78 NAME 'finAdhesion'
|
||||
DESC 'Date de fin adhesion'
|
||||
EQUALITY generalizedTimeMatch
|
||||
ORDERING generalizedTimeOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24)
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.79 NAME 'finConnexion'
|
||||
DESC 'Date de fin connexion'
|
||||
EQUALITY generalizedTimeMatch
|
||||
ORDERING generalizedTimeOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24)
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.80 NAME 'debutAdhesion'
|
||||
DESC 'Date de debut adhesion'
|
||||
EQUALITY generalizedTimeMatch
|
||||
ORDERING generalizedTimeOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24)
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.81 NAME 'debutConnexion'
|
||||
DESC 'Date de debut connexion'
|
||||
EQUALITY generalizedTimeMatch
|
||||
ORDERING generalizedTimeOrderingMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24)
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.82 NAME 'preferedLanguage'
|
||||
DESC 'Prefered user language'
|
||||
EQUALITY caseIgnoreMatch
|
||||
SUBSTR caseIgnoreSubstringsMatch
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)
|
||||
|
||||
attributetype ( 1.3.6.1.1.1.1.83 NAME 'dn'
|
||||
DESC 'attribut de lock des dn'
|
||||
EQUALITY caseIgnoreIA5Match
|
||||
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
|
||||
|
||||
# Les classes
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.1 NAME 'proprio' SUP top ABSTRACT
|
||||
DESC 'Propriétaire (classe abstraite)'
|
||||
MUST ( nom $ chbre $ historique )
|
||||
MAY ( paiement $ info $ blacklist $ controle ) )
|
||||
MUST ( nom $ chbre )
|
||||
MAY ( paiement $ info $ blacklist $ controle $ historique $ preferedLanguage $
|
||||
debutAdhesion $ finAdhesion $ debutConnexion $ finConnexion ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.2 NAME 'adherent' SUP proprio
|
||||
DESC 'Adhérent'
|
||||
MUST ( aid $ prenom $ tel $ mail )
|
||||
MAY ( carteEtudiant $ etudes $ postalAddress $ mailInvalide $ charteMA $
|
||||
adherentPayant $ typeAdhesion $ carteRFID ) )
|
||||
adherentPayant $ carteRFID ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.3 NAME 'club' SUP proprio
|
||||
DESC 'Club'
|
||||
|
|
@ -332,10 +473,10 @@ objectclass ( 1.3.6.1.4.1.25368.3.3 NAME 'club' SUP proprio
|
|||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.10 NAME 'machine' SUP top ABSTRACT
|
||||
DESC 'Machine (classe abstraite)'
|
||||
MUST ( mid $ macAddress $ host $ ipHostNumber $ historique )
|
||||
MAY ( info $ blacklist $ hostAlias $ exempt $
|
||||
portTCPin $ portTCPout $ portUDPin $ portUDPout $ dnsIpv6 $
|
||||
machineAlias ) )
|
||||
MUST ( mid $ macAddress $ host )
|
||||
MAY ( ipHostNumber $ ip6HostNumber $ rid $ info $ blacklist $ hostAlias $ exempt $
|
||||
portTCPin $ portTCPout $ portUDPin $ portUDPout $ dnsIpv6 $ machineAlias $
|
||||
sshFingerprint $ historique ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.11 NAME 'machineCrans' SUP machine
|
||||
DESC 'Machine appartenant au Crans'
|
||||
|
|
@ -357,14 +498,15 @@ objectclass ( 1.3.6.1.4.1.25368.3.20 NAME 'cransAccount' SUP top AUXILIARY
|
|||
DESC 'Compte Crans'
|
||||
MAY ( mailAlias $ canonicalAlias $ droits $ solde $
|
||||
contourneGreylist $ rewriteMailHeaders $ derniereConnexion $
|
||||
homepageAlias $ compteWiki $ mailExt ) )
|
||||
homepageAlias $ compteWiki $ mailExt $ gpgFingerprint $ gpgMail ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.21 NAME 'lock'
|
||||
DESC 'Système de lock pour édition'
|
||||
MUST ( lockid )
|
||||
MAY ( aid $ chbre $ mail $ mailAlias $ canonicalAlias $ uidNumber $
|
||||
mid $ macAddress $ host $ hostAlias $ ipHostNumber $
|
||||
cid $ fid ) )
|
||||
MAY ( lockv $ aid $ chbre $ mail $ mailAlias $ canonicalAlias $ uidNumber $
|
||||
mid $ macAddress $ host $ hostAlias $ ipHostNumber $ cid $ fid $
|
||||
gpgFingerprint $ sshFingerprint $ rid $ ip6HostNumber $ mailExt $
|
||||
gpgMail $ xid $ uid $ homeDirectory$ dn ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.22 NAME 'service'
|
||||
DESC 'Service à redémarrer'
|
||||
|
|
@ -374,7 +516,8 @@ objectclass ( 1.3.6.1.4.1.25368.3.22 NAME 'service'
|
|||
objectclass ( 1.3.6.1.4.1.25368.3.23 NAME 'facture'
|
||||
DESC 'Facture'
|
||||
MUST ( fid $ modePaiement )
|
||||
MAY ( article $ recuPaiement $ historique ) )
|
||||
MAY ( article $ recuPaiement $ historique $ controle $ finAdhesion $
|
||||
finConnexion $ debutAdhesion $ debutConnexion $ info ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.24 NAME 'freeMid'
|
||||
DESC 'mid libre'
|
||||
|
|
@ -384,3 +527,27 @@ objectclass ( 1.3.6.1.4.1.25368.3.25 NAME 'groupeCrans'
|
|||
SUP top AUXILIARY
|
||||
DESC 'Pour pouvoir générer dynamiquement les groupes posix'
|
||||
MAY ( memberURL ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.26 NAME 'switchCrans' SUP machine
|
||||
DESC 'Switch Crans'
|
||||
MAY ( prise $ nombrePrises ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.28 NAME 'TLSACert' SUP top AUXILIARY
|
||||
DESC 'Un certificat pour faire un enregistrement TLSA dans le dns'
|
||||
MUST ( xid $ certificat $ certificatUsage $ selector $ matchingType )
|
||||
MAY ( portTCPin $ portUDPin $ hostCert $ historique ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.27 NAME 'x509Cert' SUP top AUXILIARY
|
||||
DESC 'Un certificat x509 pour un serveur'
|
||||
MUST ( xid $ certificat $ issuerCN $ serialNumber $ start $ end )
|
||||
MAY ( crlUrl $ revocked $ hostCert $ historique ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.30 NAME 'privateKey' SUP top AUXILIARY
|
||||
DESC 'Une clef privee'
|
||||
MUST (xid $ privatekey $ encrypted)
|
||||
MAY ( historique ) )
|
||||
|
||||
objectclass ( 1.3.6.1.4.1.25368.3.29 NAME 'baseCert' SUP top
|
||||
DESC 'Une base pour les objets certificat'
|
||||
MUST ( xid )
|
||||
MAY ( certificat $ hostCert $ historique $ csr $ info ) )
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue