diff --git a/ldap/patchs/slapd.conf.patch b/ldap/patchs/slapd.conf.patch index 7fed174..8b50562 100644 --- a/ldap/patchs/slapd.conf.patch +++ b/ldap/patchs/slapd.conf.patch @@ -1,35 +1,26 @@ ---- distrib/slapd.conf 2017-11-14 15:48:53.000000000 +0100 -+++ modif/slapd.conf 2018-03-26 17:01:41.136558718 +0200 -@@ -23,6 +23,8 @@ +--- distrib/slapd.conf 2019-06-04 11:18:04.000000000 +0200 ++++ modif/slapd.conf 2020-03-24 09:10:44.724586266 +0100 +@@ -23,6 +23,7 @@ %elif %%ldap_schema == 'zephir' include /etc/ldap/schema/openldap.schema %end if +include /etc/ldap/schema/cadoles.schema -+ ## Support du TLS - TLSCertificateFile %%server_cert -@@ -43,6 +45,9 @@ - # Where the dynamically loaded modules are stored - modulepath /usr/lib/ldap - moduleload back_bdb -+# moduleload dynlist -+moduleload memberof -+ + TLSCertificateFile /etc/ldap/ssl/certs/openldap.crt +@@ -46,6 +47,7 @@ %if %%ldap_replication == 'oui' or %%ldap_replication_client == 'oui' moduleload syncprov %end if -@@ -96,6 +101,13 @@ - # Mode 700 recommended. - directory /var/lib/ldap ++moduleload memberof -+#overlay dynlist -+#dynlist-attrset cadolesPerson labeledURI cadolesMemberOf + # Sample security restrictions + # Require integrity protection (prevent hijacking) +@@ -219,3 +221,7 @@ + %if %%ldap_replication_client == 'oui' + include /etc/ldap/replication.conf + %end if + +overlay memberof +memberof-group-oc cadolesGroup +memberof-member-ad cadolesMember -+ - # Indices to maintain - index objectClass eq - index uid,cn,sn eq,subinitial diff --git a/tmpl/cadolesldap.ldif b/tmpl/cadolesldap.ldif index 950b394..62dacb4 100755 --- a/tmpl/cadolesldap.ldif +++ b/tmpl/cadolesldap.ldif @@ -64,10 +64,3 @@ mail: %%system_mail_to siren: %%cadolesldap_niveau01siren userpassword: %%pyeole.ssha.ssha_encode(%%cadolesldap_pwdadmin) niveau01: %%cadolesldap_niveau01name - - - - - - -