Add sudoers.schema to the openldap-server package. Signed-off-by: W. Michael Petullo <[email protected]>
Index: libs/openldap/patches/030-sudoers-schema.patch =================================================================== --- libs/openldap/patches/030-sudoers-schema.patch (revision 0) +++ libs/openldap/patches/030-sudoers-schema.patch (working copy) @@ -0,0 +1,75 @@ +--- /dev/null ++++ b/servers/slapd/schema/sudoers.schema +@@ -0,0 +1,72 @@ ++attributetype ( 1.3.6.1.4.1.15953.9.1.1 ++ NAME 'sudoUser' ++ DESC 'User(s) who may run sudo' ++ EQUALITY caseExactIA5Match ++ SUBSTR caseExactIA5SubstringsMatch ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.2 ++ NAME 'sudoHost' ++ DESC 'Host(s) who may run sudo' ++ EQUALITY caseExactIA5Match ++ SUBSTR caseExactIA5SubstringsMatch ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.3 ++ NAME 'sudoCommand' ++ DESC 'Command(s) to be executed by sudo' ++ EQUALITY caseExactIA5Match ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.4 ++ NAME 'sudoRunAs' ++ DESC 'User(s) impersonated by sudo' ++ EQUALITY caseExactIA5Match ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.5 ++ NAME 'sudoOption' ++ DESC 'Options(s) followed by sudo' ++ EQUALITY caseExactIA5Match ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.6 ++ NAME 'sudoRunAsUser' ++ DESC 'User(s) impersonated by sudo' ++ EQUALITY caseExactIA5Match ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.7 ++ NAME 'sudoRunAsGroup' ++ DESC 'Group(s) impersonated by sudo' ++ EQUALITY caseExactIA5Match ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.8 ++ NAME 'sudoNotBefore' ++ DESC 'Start of time interval for which the entry is valid' ++ EQUALITY generalizedTimeMatch ++ ORDERING generalizedTimeOrderingMatch ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) ++ ++attributetype ( 1.3.6.1.4.1.15953.9.1.9 ++ NAME 'sudoNotAfter' ++ DESC 'End of time interval for which the entry is valid' ++ EQUALITY generalizedTimeMatch ++ ORDERING generalizedTimeOrderingMatch ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) ++ ++attributeTypes ( 1.3.6.1.4.1.15953.9.1.10 ++ NAME 'sudoOrder' ++ DESC 'an integer to order the sudoRole entries' ++ EQUALITY integerMatch ++ ORDERING integerOrderingMatch ++ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) ++ ++objectclass ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL ++ DESC 'Sudoer Entries' ++ MUST ( cn ) ++ MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $ sudoRunAsUser $ ++ sudoRunAsGroup $ sudoOption $ sudoNotBefore $ sudoNotAfter $ ++ sudoOrder $ description ) ++ ) _______________________________________________ openwrt-devel mailing list [email protected] https://lists.openwrt.org/mailman/listinfo/openwrt-devel
