If we use accountstatus in debianGroup we need to re-order stuff

[mirror/userdir-ldap.git] / userdir-ldap.schema

diff --git a/userdir-ldap.schema b/userdir-ldap.schema
index 5d3d233..37dc7c5 100644 (file)
--- a/userdir-ldap.schema
+++ b/userdir-ldap.schema
@@ -104,6 +104,8 @@
 #   .36 - sudoPassword
 #   .37 - subGroup
 #   .38 - mailContentInspectionAction
+#   .39 - allowedGroups
+#   .40 - exportOptions
 #
 # .3 - experimental LDAP objectClasses
 #   .1 - debianDeveloper
@@ -378,22 +380,20 @@ attributetype ( 1.3.6.1.4.1.9586.100.4.2.37
        SUBSTR caseIgnoreIA5SubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
 
+# more attributes below
+attributetype ( 1.3.6.1.4.1.9586.100.4.2.39
+       NAME 'allowedGroups'
+       DESC 'Groups that have access to a host'
+       EQUALITY caseExactIA5Match
+       SUBSTR caseExactIA5SubstringsMatch
+       SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
 
-# Public object classes
-
-objectclass ( 1.3.6.1.4.1.9586.100.4.1.1
-       NAME 'debianAccount'
-       DESC 'Abstraction of an account with POSIX attributes and UTF8 support'
-       SUP top AUXILIARY
-       MUST ( cn $ uid $ uidNumber $ gidNumber )
-       MAY ( userPassword $ loginShell $ gecos $ homeDirectory $ description $ mailDisableMessage $ sudoPassword ) )
-
-objectclass ( 1.3.6.1.4.1.9586.100.4.1.2
-       NAME 'debianGroup'
-       SUP top STRUCTURAL
-       DESC 'attributes used for Debian groups'
-       MUST ( gid $ gidNumber )
-       MAY ( description $ subGroup ) )
+attributetype ( 1.3.6.1.4.1.9586.100.4.2.40
+       NAME 'exportOptions'
+       DESC 'export options for servers'
+       EQUALITY caseIgnoreIA5Match
+       SUBSTR caseIgnoreIA5SubstringsMatch
+       SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
 
 # Experimental attribute types
 
@@ -489,6 +489,22 @@ attributetype ( 1.3.6.1.4.1.9586.100.4.2.38
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE )
 
 
+# Public object classes
+
+objectclass ( 1.3.6.1.4.1.9586.100.4.1.1
+       NAME 'debianAccount'
+       DESC 'Abstraction of an account with POSIX attributes and UTF8 support'
+       SUP top AUXILIARY
+       MUST ( cn $ uid $ uidNumber $ gidNumber )
+       MAY ( userPassword $ loginShell $ gecos $ homeDirectory $ description $ mailDisableMessage $ sudoPassword ) )
+
+objectclass ( 1.3.6.1.4.1.9586.100.4.1.2
+       NAME 'debianGroup'
+       SUP top STRUCTURAL
+       DESC 'attributes used for Debian groups'
+       MUST ( gid $ gidNumber )
+       MAY ( description $ subGroup $ accountStatus ) )
+
 # Experimental objectclasses:
 
 objectclass ( 1.3.6.1.4.1.9586.100.4.3.1
@@ -512,7 +528,8 @@ objectclass ( 1.3.6.1.4.1.9586.100.4.3.2
        MUST ( host $ hostname )
        MAY ( c $ access $ admin $ architecture $ bandwidth $ description $ disk $
              distribution $ l $ machine $ memory $ sponsor $
-             sponsor-admin $ sshRSAHostKey $ status $ purpose $ physicalHost
+             sponsor-admin $ status $ physicalHost $ ipHostNumber $
+             sshRSAHostKey $ purpose $ allowedGroups $ exportOptions $ MXRecord
        ) )
 
 objectclass ( 1.3.6.1.4.1.9586.100.4.3.3