X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=userdir-ldap.conf;h=64423d8981f8990e01cec903b986c2bc2dc6d745;hb=57fc92ff4c4cb910338dc3806edb4c80252ac3fb;hp=975f34155bb6157b3e633170d94cd56dae728906;hpb=9800f02fe77bb5025d71cc7c9fe29b425e681f28;p=mirror%2Fuserdir-ldap.git diff --git a/userdir-ldap.conf b/userdir-ldap.conf index 975f341..64423d8 100644 --- a/userdir-ldap.conf +++ b/userdir-ldap.conf @@ -4,7 +4,7 @@ # host from which to rsync the information (the one running ud-generate) synchost = "db"; # hosts on which to use a local path to get the data (used as a shell glob later) -localsyncon = "*samosa*"; +localsyncon = "*draghi*"; # Basic LDAP configuration ldaphost = "db.debian.org"; @@ -16,6 +16,9 @@ adminuser = "admin"; # Printable email addresses are shown as: 'cn mn sn ' emailappend = "debian.org"; +# Domain for hosts, defaults to emailappend if not present +#hostdomain = "debian.org" + # For the mail interface maildomain = "db.debian.org"; replyto = "admin@" + maildomain; @@ -27,6 +30,9 @@ replaycachefile = "/var/cache/userdir-ldap/mail/replay"; #replaycachefile = "/tmp/replay"; fingerprintfile = "/etc/userdir-ldap/badfingerprints" +# do we have a debian-private like list that we should ask about in ud-useradd +haveprivatelist = True; + # Echelon ech_errorlog = "/org/db.debian.org/mail/Log/ech-errors.log" ech_mainlog = "/org/db.debian.org/mail/Log/ech.log" @@ -35,18 +41,19 @@ ech_mainlog = "/org/db.debian.org/mail/Log/ech.log" defaultgid = 800; # For the output generator -generateconf = "/etc/userdir-ldap/generate.conf" generatedir = "/var/cache/userdir-ldap/hosts/"; passdir = "/etc/userdir-ldap/"; +allowedgroupspreload = "adm"; +homeprefix = "/home/"; # GPG Things gpg = "/usr/bin/gpg"; # The whole set of all keyrings -keyrings = "/org/keyring.debian.org/keyrings/debian-keyring.gpg:/org/keyring.debian.org/keyrings/debian-keyring.pgp:/org/keyring.debian.org/keyrings/removed-keys.gpg:/org/keyring.debian.org/keyrings/removed-keys.pgp:/home/jgg/keys/extrakeys.gpg:/home/jgg/keys/guest-keys.gpg"; +keyrings = "/org/keyring.debian.org/keyrings/debian-keyring.gpg:/org/keyring.debian.org/keyrings/debian-keyring.pgp:/org/keyring.debian.org/keyrings/removed-keys.gpg:/org/keyring.debian.org/keyrings/removed-keys.pgp:/srv/db.debian.org/keyring-guest/guest-keyring/debian-guest.gpg:/org/keyring.debian.org/keyrings/debian-maintainers.gpg" # Keyrings synced to other machines, if they need them -sync_keyrings = "/org/keyring.debian.org/keyrings/debian-keyring.gpg:/org/keyring.debian.org/keyrings/debian-keyring.pgp"; +sync_keyrings = "/org/keyring.debian.org/keyrings/debian-keyring.gpg:/org/keyring.debian.org/keyrings/debian-keyring.pgp:/org/keyring.debian.org/keyrings/debian-maintainers.gpg" # Keyrings used to search in when new developers get added -add_keyrings = "/org/keyring.debian.org/keyrings/debian-keyring.gpg"; +add_keyrings = "/org/keyring.debian.org/keyrings/debian-keyring.gpg:/org/keyring.debian.org/keyrings/debian-keyring.pgp:/srv/db.debian.org/keyring-guest/guest-keyring/debian-guest.gpg" # For the WEB interface webloginhtml = "login.html"; @@ -73,3 +80,6 @@ countrylist = "/var/www/userdir-ldap/domains.tab"; # Finger daemon settings # use_inetd = 1; + +# only create sshfp and A records for hostnames matching this: +dns_hostmatch = "[a-zA-Z0-9\.]+\.debian\.org$"