Changeset 3351 for pykota/trunk/initscripts
- Timestamp:
- 03/07/08 23:34:37 (17 years ago)
- Location:
- pykota/trunk/initscripts/ldap
- Files:
-
- 3 modified
-
pykota-schema-sunds.ldif (modified) (1 diff)
-
pykota-sunds-indexes.ldif (modified) (1 diff)
-
README.sunds (modified) (4 diffs)
Legend:
- Unmodified
- Added
- Removed
-
pykota/trunk/initscripts/ldap/pykota-schema-sunds.ldif
r3342 r3351 9 9 # Modified by Jerome Alet 2003-06-01 10 10 # 11 # Adapted for Sun Directory Server by Darin Perusich 11 # Adapted for Sun Directory Server by Darin Perusich <darin _AT_ darins _DOT_ net> 12 12 # 13 13 # Implementaion Details: -
pykota/trunk/initscripts/ldap/pykota-sunds-indexes.ldif
r3342 r3351 1 #===================================================== 2 # 3 # (c) 2008 Darin Perusich <darin _AT_ darins _DOT_ net> 4 # 5 # This program is free software: you can redistribute it and/or modify 6 # it under the terms of the GNU General Public License as published by 7 # the Free Software Foundation, either version 3 of the License, or 8 # (at your option) any later version. 9 # 10 # This program is distributed in the hope that it will be useful, 11 # but WITHOUT ANY WARRANTY; without even the implied warranty of 12 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 # GNU General Public License for more details. 14 # 15 # You should have received a copy of the GNU General Public License 16 # along with this program. If not, see <http://www.gnu.org/licenses/>. 17 # 18 #===================================================== 19 1 20 dn: cn=pykotaUserName, cn=index, cn=userRoot,cn=ldbm database,cn=plugins,cn=config 2 21 objectClass: nsIndex -
pykota/trunk/initscripts/ldap/README.sunds
r3342 r3351 1 #===================================================== 2 # 3 # (c) 2008 Darin Perusich <darin _AT_ darins _DOT_ net> 4 # 5 # This program is free software: you can redistribute it and/or modify 6 # it under the terms of the GNU General Public License as published by 7 # the Free Software Foundation, either version 3 of the License, or 8 # (at your option) any later version. 9 # 10 # This program is distributed in the hope that it will be useful, 11 # but WITHOUT ANY WARRANTY; without even the implied warranty of 12 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 # GNU General Public License for more details. 14 # 15 # You should have received a copy of the GNU General Public License 16 # along with this program. If not, see <http://www.gnu.org/licenses/>. 17 # 18 #===================================================== 19 1 20 Documentation : 2 21 --------------- … … 7 26 pykota-schema-sunds.ldif : 8 27 9 10 11 28 This file can be used to extend the schema for 29 Sun Directory Server to add the necessary object classes 30 and attribute type for use with PyKota. 12 31 13 32 To extend the schema: 14 33 15 34 % ldapmodify -h ldap.domain.com -D "cn=Directory Manager" -f pykota-schema-sunds.ldif 16 35 17 18 36 Sun Directory Server will replicate schema changes in a 37 multi-master replication environment. 19 38 20 39 Database Indexes : … … 23 42 pykota-sunds-indexes.ldif : 24 43 25 26 44 Creating indexes while not mandatory will speed up queries 45 to the PyKota objects. This will setup the following indexes: 27 46 28 pykotaUserName:presence, equality, substring29 pykotaGroupName:presence, equality, substring30 pykotaPrinterName:presence, equality, substring31 pykotaBillingCode:presence, equality, substring32 pykotaLastJobIdent:equality47 pykotaUserName: presence, equality, substring 48 pykotaGroupName: presence, equality, substring 49 pykotaPrinterName: presence, equality, substring 50 pykotaBillingCode: presence, equality, substring 51 pykotaLastJobIdent: equality 33 52 34 53 To define the indexes: 35 54 36 37 38 39 40 55 % ldapmodify -a -h ldap.domain.com -D "cn=Directory Manager" -f pykota-sunds-indexes.ldif 56 57 By default configuration settings are NOT replicated in a 58 replication environment so the following indexes must be 59 defined on all hosts. 41 60 42 61 To initialize the indexes: 43 62 44 45 46 63 % ServerRoot/slapd-serverID/db2index.pl \ 64 -D "cn=Directory Manager" -w password -n userRoot \ 65 -t pykotaUserName 47 66 48 49 50 67 % ServerRoot/slapd-serverID/db2index.pl \ 68 -D "cn=Directory Manager" -w password -n userRoot \ 69 -t pykotaGroupName 51 70 52 53 54 71 % ServerRoot/slapd-serverID/db2index.pl \ 72 -D "cn=Directory Manager" -w password -n userRoot \ 73 -t pykotaPrinterName 55 74 56 57 58 75 % ServerRoot/slapd-serverID/db2index.pl \ 76 -D "cn=Directory Manager" -w password -n userRoot \ 77 -t pykotaBillingCode 59 78 60 61 62 79 % ServerRoot/slapd-serverID/db2index.pl \ 80 -D "cn=Directory Manager" -w password -n userRoot \ 81 -t pykotaLastJobIdent 63 82 64 83 This must be preformed on all hosts within a replication environment. 65 84 66 67 85 Managing Indexes References : 86 http://docs.sun.com/source/816-6698-10/indexing.html 68 87 69 88 Directory Information Tree (DIT) : … … 72 91 pykota-sample.ldif : 73 92 74 75 76 77 78 79 80 81 82 93 This is provided with PyKota though it will need to be modified 94 in order to be incorporated into your environment. Sun Directory Server 95 will encrypt the userPassword entry so you may wish to leave it as 96 plain text when creating the pykotaadmin and pykotauser entries. 97 98 If a Password Policy is being enforced it would be advisable exclude 99 both the pykotauser and pykotaadmin from that policy. This is especially 100 true if passwordMustChange is set to 'On' since they will fail to authenticate 101 until the password is changed. 83 102 84 85 103 Sun Directory Server will replicate DIT changes in a 104 multi-master replication environment. 86 105 87 106 Access Control Instructions (ACI) : 88 107 ----------------------------------- 89 108 90 91 92 93 94 95 109 The provided ACI's must not be blindly added using ldapmodify or 110 ldapadd, if you do so you will clobber any existing ACI's for a 111 given object! You must first query the server for any existing 112 ACI's and capture them to a file, append the PyKota ACI's to said 113 file and then modify the object. This is especially pertinent in 114 regards to ou=People which has 5 default ACI's associated with it. 96 115 97 98 116 It is stongly recommended to use the Directory Server Console to 117 add the ACI's. You have been warned, there is no warrenty, good luck. 99 118 100 101 119 Managing Access Control: 120 http://docs.sun.com/source/816-6698-10/aci.html 102 121 103 122 pykota-admin-aci : 104 123 105 106 124 dn: ou=pykota,dc=example,dc=com 125 aci: (targetattr="*") (version 3.0; acl "PyKota Pykota ACI"; allow(all) userdn="ldap:///cn=pykotaadmin,ou=PyKota,dc=example,dc=com";) 107 126 108 109 aci: (targetattr="*") (version 3.0; acl "PyKota People ACI"; allow(write) userdn="ldap:///cn=pykotaadmin,ou=PyKota,dc=example,dc=com";)127 dn: ou=People,dc=example,dc=com 128 aci: (targetattr="*") (version 3.0; acl "PyKota People ACI"; allow(add, write) userdn="ldap:///cn=pykotaadmin,ou=PyKota,dc=example,dc=com";) 110 129 111 112 aci: (targetattr="*") (version 3.0; acl "PyKota Groups ACI"; allow(write) userdn="ldap:///cn=pykotaadmin,ou=PyKota,dc=example,dc=com";)130 dn: ou=groups,dc=example,dc=com 131 aci: (targetattr="*") (version 3.0; acl "PyKota Groups ACI"; allow(add, write) userdn="ldap:///cn=pykotaadmin,ou=PyKota,dc=example,dc=com";) 113 132 114 115 133 Sun Directory Server will replicate ACI changes in a 134 multi-master replication environment. 116 135
