| commit | author | age | ||
| 90d4d7 | 1 | version: 1 |
| PH | 2 | |
| 2c168b | 3 | dn: dc=domain,dc=example,dc=com |
| 90d4d7 | 4 | objectclass: top |
| PH | 5 | objectclass: domain |
| 6 | administrativeRole: accessControlSpecificArea | |
| 2c168b | 7 | dc: domain |
| 90d4d7 | 8 | |
| 2c168b | 9 | dn: cn=domainAuthenticationRequirementsACISubentry,dc=domain,dc=example,dc=com |
| 90d4d7 | 10 | objectClass: accessControlSubentry |
| PH | 11 | objectClass: subentry |
| 12 | objectClass: top | |
| 13 | subtreeSpecification: { } | |
| 2c168b | 14 | prescriptiveACI: { identificationTag "subtreeFullAccessACI", precedence 11, authenticationLevel simple, itemOrUserFirst userFirst: { userClasses { name { "uid=application,ou=bind,dc=domain,dc=example,dc=com" } }, userPermissions { { protectedItems { entry, allUserAttributeTypesAndValues }, grantsAndDenials { grantCompare, grantBrowse, grantRename, grantRemove, grantAdd, grantRead, grantFilterMatch, grantReturnDN, grantModify } } } } } |
| 90d4d7 | 15 | prescriptiveACI: { identificationTag "allUsersACI", precedence 9, authenticationLevel none, itemOrUserFirst userFirst: { userClasses { allUsers }, userPermissions { { protectedItems { attributeType { userPassword } }, grantsAndDenials { denyRead, denyFilterMatch, denyCompare } }, { protectedItems { entry, allUserAttributeTypesAndValues }, grantsAndDenials { grantCompare, grantBrowse,grantDiscloseOnError, grantRead, grantFilterMatch, grantReturnDN } } } } } |
| 2c168b | 16 | cn: domainAuthenticationRequirementsACISubentry |
| 90d4d7 | 17 | |
| 2c168b | 18 | dn: ou=groups,dc=domain,dc=example,dc=com |
| 90d4d7 | 19 | objectClass: top |
| PH | 20 | objectClass: organizationalUnit |
| 21 | ou: groups | |
| 22 | ||
| 2c168b | 23 | dn: ou=users,dc=domain,dc=example,dc=com |
| 90d4d7 | 24 | objectClass: top |
| PH | 25 | objectClass: organizationalUnit |
| 26 | ou: users | |
| 27 | ||
| 2c168b | 28 | dn: ou=bind,dc=domain,dc=example,dc=com |
| 90d4d7 | 29 | objectClass: top |
| PH | 30 | objectClass: organizationalUnit |
| 31 | ou: bind | |
| 32 | ||
| 2c168b | 33 | dn: uid=admin,ou=users,dc=domain,dc=example,dc=com |
| 90d4d7 | 34 | objectClass: top |
| PH | 35 | objectClass: inetOrgPerson |
| 36 | objectClass: person | |
| 37 | objectClass: organizationalPerson | |
| 38 | cn: system administrator | |
| 39 | sn: administrator | |
| 40 | displayName: Directory Superuser | |
| 41 | uid: admin | |
| 42 | userPassword: admin-secret | |
| 43 | ||
| 2e5e7d | 44 | dn: cn=login,ou=groups,dc=domain,dc=example,dc=com |
| PH | 45 | objectClass: top |
| 46 | objectClass: groupOfUniqueNames | |
| 47 | cn: login | |
| 48 | uniqueMember: uid=admin,ou=users,dc=domain,dc=example,dc=com | |
| 49 | ||
| 50 | dn: cn=admins,ou=groups,dc=domain,dc=example,dc=com | |
| 51 | objectClass: top | |
| 52 | objectClass: groupOfUniqueNames | |
| 53 | cn: admins | |
| 54 | uniqueMember: uid=admin,ou=users,dc=domain,dc=example,dc=com | |
| 55 | ||
| 2c168b | 56 | dn: uid=application,ou=bind,dc=domain,dc=example,dc=com |
| 90d4d7 | 57 | objectClass: top |
| PH | 58 | objectClass: inetOrgPerson |
| 59 | objectClass: person | |
| 60 | objectClass: organizationalPerson | |
| 61 | cn: application bind user | |
| 62 | sn: administrator | |
| 63 | displayName: Application User | |
| 64 | uid: application | |
| 65 | userPassword: app-secret | |
