podman commit

2026-09-12 15:55:31 +02:00
commit fe36c1a45e
23 changed files with 1521 additions and 0 deletions
@@ -0,0 +1,6 @@
+dn: ${LDAP_SUFFIX}
+objectClass: top
+objectClass: dcObject
+objectClass: organization
+dc: ${LDAP_DOMAIN}
+o: ${LDAP_ORGANISATION}
@@ -0,0 +1,17 @@
+dn: ou=groups,${LDAP_SUFFIX}
+objectclass: organizationalUnit
+objectclass: top
+ou: groups
+
+dn: cn=admins,ou=groups,${LDAP_SUFFIX}
+cn: admins
+gidnumber: 500
+objectclass: posixGroup
+objectclass: top
+memberUid: admin
+
+dn: cn=users,ou=groups,${LDAP_SUFFIX}
+cn: users
+gidnumber: 501
+objectclass: posixGroup
+objectclass: top
@@ -0,0 +1,10 @@
+dn: uid=admin,cn=admins,ou=groups,${LDAP_SUFFIX}
+gidNumber: 500
+memberUid: admin
+mail: admin@${LDAP_EMAIL_DOMAIN}
+objectClass: account
+objectClass: simpleSecurityObject
+objectClass: top
+objectClass: extensibleObject
+uid: admin
+userpassword: ${LDAP_ROOTPW}
@@ -0,0 +1,6 @@
+dn: olcOverlay=auditlog,olcDatabase={1}mdb,cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcAuditLogConfig
+olcOverlay: auditlog
+olcAuditlogFile: /var/log/slapd-audit.log
@@ -0,0 +1,27 @@
+dn: cn=module,cn=config
+changetype: add
+objectClass: olcModuleList
+cn: module
+olcModuleLoad: memberof.so
+olcModuleLoad: refint.so
+
+dn: olcOverlay={0}memberof,olcDatabase={1}mdb,cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcMemberOf
+olcOverlay: memberof
+olcMemberOfDangling: ignore
+olcMemberOfRefInt: TRUE
+olcMemberOfGroupOC: groupOfNames
+olcMemberOfMemberAD: member
+olcMemberOfMemberOfAD: memberOf
+
+dn: olcOverlay={1}refint,olcDatabase={1}mdb,cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcRefintConfig
+olcOverlay: {1}refint
+olcRefintAttribute: memberof
+olcRefintAttribute: member
+olcRefintAttribute: manager
+olcRefintAttribute: owner
@@ -0,0 +1,15 @@
+dn: cn=module,cn=config
+changetype: add
+objectClass: olcModuleList
+cn: module
+olcModuleLoad: ppolicy.so
+
+dn: olcOverlay=ppolicy,olcDatabase={1}mdb,cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcPPolicyConfig
+olcOverlay: ppolicy
+olcPPolicyDefault: ${PPOLICY_DN}
+olcPPolicyHashCleartext: FALSE
+olcPPolicyForwardUpdates: FALSE
+olcPPolicyUseLockout: FALSE
@@ -0,0 +1,28 @@
+dn: ou=Policies,${LDAP_SUFFIX}
+changetype: add
+ou: Policies
+objectClass: top
+objectClass: organizationalUnit
+
+dn: cn=passwordDefault,ou=Policies,${LDAP_SUFFIX}
+changetype: add
+objectClass: pwdPolicy
+objectClass: person
+objectClass: top
+cn: passwordDefault
+sn: passwordDefault
+pwdAttribute: ${LDAP_PWD_ATTRIBUTE}
+pwdCheckQuality: ${LDAP_PWD_CHECK_QUALITY}
+pwdMinAge: 0
+pwdMaxAge: 0
+pwdMinLength: ${LDAP_PWD_MIN_LENGTH}
+pwdInHistory: 5
+pwdMaxFailure: ${LDAP_PWD_MAX_FAILURE}
+pwdFailureCountInterval: ${LDAP_PWD_FAILURE_COUNT_INTERVAL}
+pwdLockout: TRUE
+pwdLockoutDuration: ${LDAP_PWD_LOCKOUT_DURATION}
+pwdAllowUserChange: TRUE
+pwdExpireWarning: 0
+pwdGraceAuthNLimit: 0
+pwdMustChange: FALSE
+pwdSafeModify: TRUE
@@ -0,0 +1,6 @@
+dn: cn=${LDAP_READONLY_USER_USERNAME},${LDAP_SUFFIX}
+cn: ${LDAP_READONLY_USER_USERNAME}
+objectClass: simpleSecurityObject
+objectClass: organizationalRole
+userPassword: ${LDAP_READONLY_USER_PASSWORD_ENCRYPTED}
+description: LDAP read only user