podman commit

2026-09-12 15:55:31 +02:00
commit fe36c1a45e
23 changed files with 1521 additions and 0 deletions
@@ -0,0 +1,55 @@
+##
+## Schema for account management extra attributes in LDAP
+## by Wproject 2022
+## OIDs are owned by Cogent Innovators, LLC
+##
+## 1.3.6.1.4.1.19937.1.1.x - attributetypes
+## 1.3.6.1.4.1.19937.1.2.x - objectclasses
+##
+
+attributetype ( 1.3.6.1.4.1.19937.1.1.0 NAME 'active'
+    DESC 'True if account is active'
+    EQUALITY booleanMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.19937.1.1.1 NAME 'fakeCn'
+    DESC 'True if the CN or fullname was created randomly and is still fictitious'
+    EQUALITY booleanMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.19937.1.1.2 NAME 'devices'
+    DESC 'Trusted devices info from user-agent'
+    EQUALITY caseIgnoreMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
+
+attributetype ( 1.3.6.1.4.1.19937.1.1.3 NAME 'lastLogin'
+    DESC 'Last login timestamp'
+    EQUALITY generalizedTimeMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.19937.1.1.4 NAME 'ip'
+    DESC 'ip address'
+    EQUALITY caseIgnoreIA5Match
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.19937.1.1.5 NAME 'secureAuth'
+    DESC 'True if 2FA active'
+    EQUALITY booleanMatch
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
+    SINGLE-VALUE )
+
+attributetype ( 1.3.6.1.4.1.19937.1.1.6 NAME 'authCode'
+    DESC 'Two factor authentication code'
+    EQUALITY caseIgnoreIA5Match
+    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
+    SINGLE-VALUE )
+
+objectclass ( 1.3.6.1.4.1.19937.1.2.0 NAME 'accountsManagement'
+    SUP top AUXILIARY
+    DESC 'Accounts management'
+    MUST ( cn $ uid $ active $ fakeCn )
+    MAY ( userPassword $ description $ lastLogin $ ip $ devices $ secureAuth $ authCode ) )