WIP Add service accounts and ACIs
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
4
schemas/ldap/aci.ldif
Normal file
4
schemas/ldap/aci.ldif
Normal file
@@ -0,0 +1,4 @@
|
||||
dn: ou=kosmos.org,cn=users,dc=kosmos,dc=org
|
||||
changetype: modify
|
||||
add: aci
|
||||
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || serviceEnabled || displayName || jpegPhoto || nsRole || objectClass") (version 3.0; acl "service-kosmos-read-search"; allow (read,search) userdn="ldap:///uid=service,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
|
||||
4
schemas/ldap/delete-aci.ldif
Normal file
4
schemas/ldap/delete-aci.ldif
Normal file
@@ -0,0 +1,4 @@
|
||||
dn: ou=kosmos.org,cn=users,dc=kosmos,dc=org
|
||||
changetype: modify
|
||||
delete: aci
|
||||
aci: (target="ldap:///cn=*,ou=kosmos.org,cn=users,dc=kosmos,dc=org")(targetattr="cn || sn || uid || mail || userPassword || nsRole || objectClass") (version 3.0; acl "service-kosmos-read-search"; allow (read,search) userdn="ldap:///uid=service,ou=kosmos.org,cn=applications,dc=kosmos,dc=org";)
|
||||
Reference in New Issue
Block a user