X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=userdir-ldap.schema;h=ca2dc83d27b40de5b48a9cd93f5ed4e995b5b504;hb=079b4a121083316102c0098a914d8c2d8c0aa5f2;hp=33a6922f72c46a67322e71e7e27ee8fac0e20450;hpb=443e8855704a416fc920a4e3bf0c515cbc4be11c;p=mirror%2Fuserdir-ldap.git

diff --git a/userdir-ldap.schema b/userdir-ldap.schema
index 33a6922..ca2dc83 100644
--- a/userdir-ldap.schema
+++ b/userdir-ldap.schema
@@ -1,9 +1,12 @@
 # Revision history:
 #
-# XXX
+#   - [PP] Now version controlled in db.d.o git repository, also see debian/changelog - 2009
 #   - [PP] Now version controlled in db.d.o bzr repository - 2007-12-25
+#
+# long time ago:
 #   - [HE] Add 'purpose', 'physicalHost' to debianServer - 2007-12-25
 #   - [zobel] Add 'VoIP' - 2008-05-10
+#   - [luk] Add 'subGroup' to group - 2008-11-22
 #
 # 0.7 [RM]
 #   - Add 'gender' and 'birthDate' to debianDeveloper
@@ -99,6 +102,10 @@
 #   .34 - physicalHost
 #   .35 - VoIP
 #   .36 - sudoPassword
+#   .37 - subGroup
+#   .38 - mailContentInspectionAction
+#   .39 - allowedGroups
+#   .40 - exportOptions
 #
 # .3 - experimental LDAP objectClasses
 #   .1 - debianDeveloper
@@ -366,6 +373,27 @@ attributetype ( 1.3.6.1.4.1.9586.100.4.2.36
 	EQUALITY octetStringMatch
 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
 
+attributetype ( 1.3.6.1.4.1.9586.100.4.2.37
+	NAME 'subGroup'
+	DESC 'name of other group for which membership implied by memberschip to this group'
+	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+# more attributes below
+attributetype ( 1.3.6.1.4.1.9586.100.4.2.39
+	NAME 'allowedGroups'
+	DESC 'Groups that have access to a host'
+	EQUALITY caseExactIA5Match
+	SUBSTR caseExactIA5SubstringsMatch
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+attributetype ( 1.3.6.1.4.1.9586.100.4.2.40
+	NAME 'exportOptions'
+	DESC 'export options for servers'
+	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
 
 # Public object classes
 
@@ -381,7 +409,7 @@ objectclass ( 1.3.6.1.4.1.9586.100.4.1.2
 	SUP top STRUCTURAL
 	DESC 'attributes used for Debian groups'
 	MUST ( gid $ gidNumber )
-	MAY ( description ) )
+	MAY ( description $ subGroup $ accountStatus ) )
 
 # Experimental attribute types
 
@@ -469,6 +497,14 @@ attributetype ( 1.3.6.1.4.1.9586.100.4.4.13
 	SUBSTR caseIgnoreIA5SubstringsMatch
 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
 
+attributetype ( 1.3.6.1.4.1.9586.100.4.2.38
+	NAME 'mailContentInspectionAction'
+	DESC 'what to do on content inspection hits'
+	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE )
+
+
 # Experimental objectclasses:
 
 objectclass ( 1.3.6.1.4.1.9586.100.4.3.1
@@ -482,7 +518,7 @@ objectclass ( 1.3.6.1.4.1.9586.100.4.3.1
 	      jabberJID $ keyFingerPrint $ latitude $ longitude $ mn $
 	      onVacation $ privateSub $ sshRSAAuthKey $ supplementaryGid $
 	      access $ gender $ birthDate $ mailCallout $ mailGreylisting $
-              mailRBL $ mailRHSBL $ mailWhitelist $ VoIP
+              mailRBL $ mailRHSBL $ mailWhitelist $ VoIP $ mailContentInspectionAction
 	) )
 
 objectclass ( 1.3.6.1.4.1.9586.100.4.3.2
@@ -492,7 +528,8 @@ objectclass ( 1.3.6.1.4.1.9586.100.4.3.2
 	MUST ( host $ hostname )
 	MAY ( c $ access $ admin $ architecture $ bandwidth $ description $ disk $
 	      distribution $ l $ machine $ memory $ sponsor $
-	      sponsor-admin $ sshRSAHostKey $ status $ purpose $ physicalHost
+	      sponsor-admin $ status $ physicalHost $ ipHostNumber $
+	      sshRSAHostKey $ purpose $ allowedGroups $ exportOptions $ MXRecord
 	) )
 
 objectclass ( 1.3.6.1.4.1.9586.100.4.3.3
@@ -501,5 +538,5 @@ objectclass ( 1.3.6.1.4.1.9586.100.4.3.3
 	SUP account STRUCTURAL
 	MAY ( emailForward $ supplementaryGid $ allowedHost $ labeledURI $
 	      mailCallout $ mailGreylisting $ mailRBL $ mailRHSBL $
-	      mailWhitelist
+	      mailWhitelist $ dnsZoneEntry $ mailContentInspectionAction
 	) )