diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2009-03-23 15:20:43 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2009-03-25 11:03:07 -0400 |
| commit | c00281a9f9c3f79fb88ff8537d941394fee09ca2 (patch) | |
| tree | 019c8f72200e78b58699afe327f8f212898d659a /install/updates/20-nss_ldap.update | |
| parent | d6814f3aae1e3af371eaf9d10ae37bfee464015a (diff) | |
| download | freeipa-c00281a9f9c3f79fb88ff8537d941394fee09ca2.tar.gz freeipa-c00281a9f9c3f79fb88ff8537d941394fee09ca2.tar.xz freeipa-c00281a9f9c3f79fb88ff8537d941394fee09ca2.zip | |
Name update files so they can be easily sorted.
We want to process some updates in a particular order (schema, structural).
Using an init-inspired ordering mechanism.
Diffstat (limited to 'install/updates/20-nss_ldap.update')
| -rw-r--r-- | install/updates/20-nss_ldap.update | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/install/updates/20-nss_ldap.update b/install/updates/20-nss_ldap.update new file mode 100644 index 000000000..e8c1e00f7 --- /dev/null +++ b/install/updates/20-nss_ldap.update @@ -0,0 +1,33 @@ +# +# Add profile for RFC 4876 agents (Solaris and HP/ux) +# + +# Update the top-level entry +dn: $SUFFIX +add:objectClass: domain +add:objectClass: domainRelatedObject +add:objectClass: nisDomainObject +add:associatedDomain: $DOMAIN +add:nisDomain: $DOMAIN + +# Add a place to store the nss_ldap default profile +dn: ou=profile,$SUFFIX +add: objectClass: top +add: objectClass: organizationalUnit +add: ou: profiles + +# The DUA profile. On Solaris one can run: +# ldap_client init ipa.example.com +dn: cn=default,ou=profile,$SUFFIX +default:ObjectClass: top +default:ObjectClass: DUAConfigProfile +default:defaultServerList: $FQDN +default:defaultSearchBase: $SUFFIX +default:authenticationMethod: none +default:searchTimeLimit: 15 +default:cn: default +default:serviceSearchDescriptor: passwd:cn=users,cn=accounts,$SUFFIX +default:serviceSearchDescriptor: group:cn=groups,cn=compat,$SUFFIX +default:bindTimeLimit: 5 +default:objectClassMap: shadow:shadowAccount=posixAccount +default:followReferrals:TRUE |