Author: nhosoi
Update of /cvs/dirsec/adminserver/admserv/schema/ldif
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv25618/admserv/schema/ldif
Modified Files:
01nsroot.ldif.tmpl 02globalpreferences.ldif.tmpl
10dsdata.ldif.tmpl 20asdata.ldif.tmpl
Log Message:
Resolves: #244749
Summary: Configure Pass Thru Auth (comment #12, #13)
Description: 1) Adding timestamp for installationTimeStamp.
2) some more ACIs are being added.
Index: 01nsroot.ldif.tmpl
===================================================================
RCS file: /cvs/dirsec/adminserver/admserv/schema/ldif/01nsroot.ldif.tmpl,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -r1.4 -r1.5
--- 01nsroot.ldif.tmpl 21 Jun 2007 22:01:52 -0000 1.4
+++ 01nsroot.ldif.tmpl 22 Jun 2007 22:26:25 -0000 1.5
@@ -84,6 +84,19 @@
objectClass: top
objectClass: organizationalUnit
ou: UserPreferences
+aci: (targetattr = "*")(version 3.0; acl "Allow saving of User
Preferences"; allow (add) userdn = "ldap:///all";)
+
+dn: ou="uid=%as_uid%, ou=Administrators, ou=TopologyManagement,
o=NetscapeRoot",ou=UserPreferences, ou=%domain%, o=NetscapeRoot
+objectClass: top
+objectClass: organizationalUnit
+aci: (targetattr=*)(version 3.0; acl "UserDNControl"; allow (all)
userdnattr="creatorsname";)
+ou: uid=%as_uid%, ou=Administrators, ou=TopologyManagement, o=NetscapeRoot
+
+dn: ou="cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server Group,
cn=%fqdn%, ou=%domain%, o=NetscapeRoot",ou=UserPreferences, ou=%domain%,
o=NetscapeRoot
+objectClass: top
+objectClass: organizationalUnit
+aci: (targetattr=*)(version 3.0; acl "UserDNControl"; allow (all)
userdnattr="creatorsname";)
+ou: cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server Group, cn=%fqdn%,
ou=%domain%, o=netscaperoot
dn: cn=%fqdn%, ou=%domain%, o=NetscapeRoot
objectClass: top
Index: 02globalpreferences.ldif.tmpl
===================================================================
RCS file: /cvs/dirsec/adminserver/admserv/schema/ldif/02globalpreferences.ldif.tmpl,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- 02globalpreferences.ldif.tmpl 21 Jun 2007 22:01:52 -0000 1.3
+++ 02globalpreferences.ldif.tmpl 22 Jun 2007 22:26:25 -0000 1.4
@@ -101,6 +101,7 @@
objectClass: top
objectClass: nsAdminConsoleUser
cn: PublicViews
+aci: (targetattr = "*")(version 3.0; acl "Allow Authenticated Users to
Save Public Views"; allow (all) userdn = "ldap:///all";)
dn: cn=CustomView, ou=%as_baseversion%, ou=Admin, ou=Global Preferences, ou=%domain%,
o=NetscapeRoot
objectClass: top
Index: 10dsdata.ldif.tmpl
===================================================================
RCS file: /cvs/dirsec/adminserver/admserv/schema/ldif/10dsdata.ldif.tmpl,v
retrieving revision 1.5
retrieving revision 1.6
diff -u -r1.5 -r1.6
--- 10dsdata.ldif.tmpl 21 Jun 2007 22:01:52 -0000 1.5
+++ 10dsdata.ldif.tmpl 22 Jun 2007 22:26:25 -0000 1.6
@@ -33,6 +33,7 @@
nsBuildNumber: %ds_buildnum%
nsVendor: %vendor%
nsInstalledLocation: %ds_installedlocation%
+installationTimeStamp: %timestamp%
nsExpirationDate: 0
nsBuildSecurity: domestic
uniqueMember: cn=slapd-%dsid%, cn=%brand% Directory Server, cn=Server Group, cn=%fqdn%,
ou=%domain%, o=NetscapeRoot
@@ -55,11 +56,14 @@
nsSecureServerPort: %ds_secure_port%
serverProductName: Directory Server (%dsid%)
serverVersionNumber: %ds_version%
+installationTimeStamp: %timestamp%
nsSuiteSpotUser: %ds_user%
serverHostName: %fqdn%
cn: slapd-%dsid%
uniqueMember: cn=slapd-%dsid%, cn=%brand% Directory Server, cn=Server Group, cn=%fqdn%,
ou=%domain%, o=NetscapeRoot
uniqueMember: cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server Group,
cn=%fqdn%, ou=%domain%, o=NetscapeRoot
+aci: (targetattr=*)(version 3.0; acl "Enable delegated access"; allow (read,
search, compare) groupdn="ldap:///cn=slapd-%dsid%, cn=%brand% Directory Server,
cn=Server Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
+aci: (targetattr="uniquemember || serverProductName || userpassword ||
description")(targetfilter=(objectclass=netscapeServer))(version 3.0; acl
"Enable access delegation"; allow (write) groupdn="ldap:///cn=slapd-%dsid%,
cn=%brand% Directory Server, cn=Server Group, cn=%fqdn%, ou=%domain%,
o=NetscapeRoot";)
dn: cn=configuration,cn=slapd-%dsid%, cn=%brand% Directory Server, cn=Server Group,
cn=%fqdn%, ou=%domain%, o=NetscapeRoot
objectClass: nsResourceRef
@@ -70,4 +74,16 @@
nsClassname: com.netscape.admin.dirserv.DSAdmin@%ds_console_jar%@cn=admin-serv-%asid%,
cn=%brand% Administration Server, cn=Server Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot
nsJarfilename: @ds_console_jar@
nsDirectoryInfoRef: cn=Server Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot
+aci: (targetattr=*)(version 3.0; acl "Enable Server configuration"; allow (all)
groupdn="ldap:///cn=slapd-%dsid%, cn=%brand% Directory Server, cn=Server Group,
cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
+dn: ou="cn=slapd-%dsid%, cn=%brand% Directory Server, cn=Server Group, cn=%fqdn%,
ou=%domain%, o=NetscapeRoot",ou=UserPreferences, ou=%domain%, o=NetscapeRoot
+objectClass: top
+objectClass: organizationalUnit
+aci: (targetattr=*)(version 3.0; acl "UserDNControl"; allow (all)
userdnattr="creatorsname";)
+ou: cn=slapd-%dsid%, cn=%brand% Directory Server, cn=Server Group, cn=%fqdn%,
ou=%domain%, o=NetscapeRoot
+
+dn: ou="%rootdn%",ou=UserPreferences,
ou=sfbay.redhat.com, o=NetscapeRoot
+objectClass: top
+objectClass: organizationalUnit
+aci: (targetattr=*)(version 3.0; acl "UserDNControl"; allow (all)
userdnattr="creatorsname";)
+ou: %rootdn%
Index: 20asdata.ldif.tmpl
===================================================================
RCS file: /cvs/dirsec/adminserver/admserv/schema/ldif/20asdata.ldif.tmpl,v
retrieving revision 1.3
retrieving revision 1.4
diff -u -r1.3 -r1.4
--- 20asdata.ldif.tmpl 20 Jun 2007 23:50:11 -0000 1.3
+++ 20asdata.ldif.tmpl 22 Jun 2007 22:26:25 -0000 1.4
@@ -28,10 +28,11 @@
nsProductVersion: %as_version%
nsBuildNumber: %as_buildnum%
nsInstalledLocation: %as_installedlocation%
+installationTimeStamp: %timestamp%
nsBuildSecurity: domestic
nsServerMigrationClassname:
com.netscape.management.admserv.AdminServerProduct@%as_console_jar%
uniqueMember: cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server Group,
cn=%fqdn%, ou=%domain%, o=NetscapeRoot
-aci: (targetattr=*)(targetfilter=(nsNickName=*))(version 3.0; acl "Enable delegated
access"; allow (read, search, compare) groupdn="ldap:///cn=%brand% Admin
istration Server, cn=Server Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
+aci: (targetattr=*)(targetfilter=(nsNickName=*))(version 3.0; acl "Enable delegated
access"; allow (read, search, compare) groupdn="ldap:///cn=%brand%
Administration Server, cn=Server Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
dn: cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server Group, cn=%fqdn%,
ou=%domain%, o=NetscapeRoot
objectClass: top
@@ -44,9 +45,10 @@
serverRoot: %as_serverroot%
serverProductName: Administration Server
serverHostName: %fqdn%
+installationTimeStamp: %timestamp%
uniqueMember: cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server Group,
cn=%fqdn%, ou=%domain%, o=NetscapeRoot
aci: (targetattr=*)(version 3.0; acl "Enable delegated access"; allow (read,
search, compare) groupdn="ldap:///cn=admin-serv-%asid%, cn=%brand% Administration
Server, cn=Server Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
-aci: (targetattr="uniquemember || serverProductName || administratorContactInfo ||
userpassword || description")(targetfilter=(objectclass=netscapeServer))(version 3.0;
acl "Enable access delegation"; allow (write)
groupdn="ldap:///cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server
Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
+aci: (targetattr="uniquemember || serverProductName || userpassword ||
description")(targetfilter=(objectclass=netscapeServer))(version 3.0; acl
"Enable access delegation"; allow (write)
groupdn="ldap:///cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server
Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
dn: cn=configuration, cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server
Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot
objectClass: nsConfig
@@ -73,4 +75,3 @@
nsClassname:
com.netscape.management.admserv.AdminServer@%as_console_jar%@cn=admin-serv-%asid%,
cn=%brand% Administration Server, cn=Server Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot
aci: (targetattr=*)(version 3.0; acl "Enable delegated admin to access
configuration"; allow (read, search) groupdn="ldap:///cn=Server Group,
cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
aci: (targetattr=*)(version 3.0; acl "Enable Server configuration"; allow (all)
groupdn="ldap:///cn=admin-serv-%asid%, cn=%brand% Administration Server, cn=Server
Group, cn=%fqdn%, ou=%domain%, o=NetscapeRoot";)
-