Quellcode durchsuchen

added comments, changed the TLS_CACERT

Tomi Cvetic vor 5 Jahren
Ursprung
Commit
547a3fe559
8 geänderte Dateien mit 9 neuen und 371 gelöschten Zeilen
  1. 3 7
      Dockerfile
  2. 0 317
      dhcp.ldif
  3. 6 0
      entrypoint.sh
  4. 0 6
      ldifs/indices.ldif
  5. 0 9
      ldifs/initial_data.ldif
  6. 0 9
      ldifs/krb_indices.ldif
  7. 0 13
      ldifs/krb_structure.ldif
  8. 0 10
      ldifs/tls.ldif

+ 3 - 7
Dockerfile

@@ -13,9 +13,8 @@ ENV GROUP         ldap
 
 # Install OpenLDAP with MDB backend
 # openldap-clients is not really required, can be removed after evaluation.
-RUN apk add --update --no-cache \ 
+RUN apk add --no-cache \ 
   gettext \
-  pwgen \
   openldap \
   openldap-clients \
   openldap-back-mdb
@@ -23,12 +22,9 @@ RUN apk add --update --no-cache \
 RUN mkdir /run/openldap && \
   chown ${USER}:${GROUP} /run/openldap
 
-RUN echo "TLS_CACERT /etc/ssl/certs/ca_server.pem" >> /etc/openldap/ldap.conf
+# Tell the ldap client about the self-signed TLS CA certificate
+RUN echo "TLS_CACERT /etc/ssl/certs/CAself-cert.pem" >> /etc/openldap/ldap.conf
 
 COPY ./entrypoint.sh /entrypoint.sh
 
 CMD /entrypoint.sh
-
-EXPOSE 389
-
-VOLUME /etc/openldap/slapd.d /var/lib/openldap /var/backups /var/restore /var/ldifs /scripts 

+ 0 - 317
dhcp.ldif

@@ -1,317 +0,0 @@
-dn: cn=dhcp,cn=schema,cn=config
-objectClass: olcSchemaConfig
-cn: dhcp
-olcAttributeTypes: {0}( 2.16.840.1.113719.1.203.4.1 NAME 'dhcpPrimaryDN' DESC 
- 'The DN of the dhcpServer which is the primary server for the configuration.'
-  EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-
- VALUE )
-olcAttributeTypes: {1}( 2.16.840.1.113719.1.203.4.2 NAME 'dhcpSecondaryDN' DES
- C 'The DN of dhcpServer(s) which provide backup service for the configuration
- .' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {2}( 2.16.840.1.113719.1.203.4.3 NAME 'dhcpStatements' DESC
-  'Flexible storage for specific data depending on what object this exists in.
-  Like conditional statements, server parameters, etc. This allows the standar
- d to evolve without needing to adjust the schema.' EQUALITY caseIgnoreIA5Matc
- h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: {3}( 2.16.840.1.113719.1.203.4.4 NAME 'dhcpRange' DESC 'The
-  starting & ending IP Addresses in the range (inclusive), separated by a hyph
- en; if the range only contains one address, then just the address can be spec
- ified with no hyphen.  Each range is defined as a separate value.' EQUALITY c
- aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: {4}( 2.16.840.1.113719.1.203.4.5 NAME 'dhcpPermitList' DESC
-  'This attribute contains the permit lists associated with a pool. Each permi
- t list is defined as a separate value.' EQUALITY caseIgnoreIA5Match SYNTAX 1.
- 3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: {5}( 2.16.840.1.113719.1.203.4.6 NAME 'dhcpNetMask' DESC 'T
- he subnet mask length for the subnet.  The mask can be easily computed from t
- his length.' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGL
- E-VALUE )
-olcAttributeTypes: {6}( 2.16.840.1.113719.1.203.4.7 NAME 'dhcpOption' DESC 'En
- coded option values to be sent to clients.  Each value represents a single op
- tion and contains (OptionTag, Length, OptionValue) encoded in the format used
-  by DHCP.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: {7}( 2.16.840.1.113719.1.203.4.8 NAME 'dhcpClassData' DESC 
- 'Encoded text string or list of bytes expressed in hexadecimal, separated by 
- colons.  Clients match subclasses based on matching the class data with the r
- esults of match or spawn with statements in the class name declarations.' EQU
- ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {8}( 2.16.840.1.113719.1.203.4.9 NAME 'dhcpOptionsDN' DESC 
- 'The distinguished name(s) of the dhcpOption objects containing the configura
- tion options provided by the server.' EQUALITY distinguishedNameMatch SYNTAX 
- 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {9}( 2.16.840.1.113719.1.203.4.10 NAME 'dhcpHostDN' DESC 't
- he distinguished name(s) of the dhcpHost objects.' EQUALITY distinguishedName
- Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {10}( 2.16.840.1.113719.1.203.4.11 NAME 'dhcpPoolDN' DESC '
- The distinguished name(s) of pools.' EQUALITY distinguishedNameMatch SYNTAX 1
- .3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {11}( 2.16.840.1.113719.1.203.4.12 NAME 'dhcpGroupDN' DESC 
- 'The distinguished name(s)   of the groups.' EQUALITY distinguishedNameMatch 
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {12}( 2.16.840.1.113719.1.203.4.13 NAME 'dhcpSubnetDN' DESC
-  'The distinguished name(s) of the subnets.' EQUALITY distinguishedNameMatch 
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {13}( 2.16.840.1.113719.1.203.4.14 NAME 'dhcpLeaseDN' DESC 
- 'The distinguished name of a client address.' EQUALITY distinguishedNameMatch
-  SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
-olcAttributeTypes: {14}( 2.16.840.1.113719.1.203.4.15 NAME 'dhcpLeasesDN' DESC
-  'The distinguished name(s) client addresses.' EQUALITY distinguishedNameMatc
- h SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {15}( 2.16.840.1.113719.1.203.4.16 NAME 'dhcpClassesDN' DES
- C 'The distinguished name(s) of a class(es) in a subclass.' EQUALITY distingu
- ishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {16}( 2.16.840.1.113719.1.203.4.17 NAME 'dhcpSubclassesDN' 
- DESC 'The distinguished name(s) of subclass(es).' EQUALITY distinguishedNameM
- atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {17}( 2.16.840.1.113719.1.203.4.18 NAME 'dhcpSharedNetworkD
- N' DESC 'The distinguished name(s) of sharedNetworks.' EQUALITY distinguished
- NameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {18}( 2.16.840.1.113719.1.203.4.19 NAME 'dhcpServiceDN' DES
- C 'The DN of dhcpService object(s)which contain the configuration information
- . Each dhcpServer object has this attribute identifying the DHCP configuratio
- n(s) that the server is associated with.' EQUALITY distinguishedNameMatch SYN
- TAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {19}( 2.16.840.1.113719.1.203.4.20 NAME 'dhcpVersion' DESC 
- 'The version attribute of this object.' EQUALITY caseIgnoreIA5Match SYNTAX 1.
- 3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {20}( 2.16.840.1.113719.1.203.4.21 NAME 'dhcpImplementation
- ' DESC 'Description of the DHCP Server implementation e.g. DHCP Servers vendo
- r.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-V
- ALUE )
-olcAttributeTypes: {21}( 2.16.840.1.113719.1.203.4.22 NAME 'dhcpAddressState' 
- DESC 'This stores information about the current binding-status of an address.
-   For dynamic addresses managed by DHCP, the values should be restricted to t
- he following: "FREE", "ACTIVE", "EXPIRED", "RELEASED", "RESET", "ABANDONED", 
- "BACKUP".  For other addresses, it SHOULD be one of the following: "UNKNOWN",
-  "RESERVED" (an address that is managed by DHCP that is reserved for a specif
- ic client), "RESERVED-ACTIVE" (same as reserved, but address is currently in 
- use), "ASSIGNED" (assigned manually or by some other mechanism), "UNASSIGNED"
- , "NOTASSIGNABLE".' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.1
- 21.1.26 SINGLE-VALUE )
-olcAttributeTypes: {22}( 2.16.840.1.113719.1.203.4.23 NAME 'dhcpExpirationTime
- ' DESC 'This is the time the current lease for an address expires.' EQUALITY 
- generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
-olcAttributeTypes: {23}( 2.16.840.1.113719.1.203.4.24 NAME 'dhcpStartTimeOfSta
- te' DESC 'This is the time of the last state change for a leased address.' EQ
- UALITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE
-  )
-olcAttributeTypes: {24}( 2.16.840.1.113719.1.203.4.25 NAME 'dhcpLastTransactio
- nTime' DESC 'This is the last time a valid DHCP packet was received from the 
- client.' EQUALITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 S
- INGLE-VALUE )
-olcAttributeTypes: {25}( 2.16.840.1.113719.1.203.4.26 NAME 'dhcpBootpFlag' DES
- C 'This indicates whether the address was assigned via BOOTP.' EQUALITY boole
- anMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
-olcAttributeTypes: {26}( 2.16.840.1.113719.1.203.4.27 NAME 'dhcpDomainName' DE
- SC 'This is the name of the domain sent to the client by the server.  It is e
- ssentially the same as the value for DHCP option 15 sent to the client, and r
- epresents only the domain - not the full FQDN.  To obtain the full FQDN assig
- ned to the client you must prepend the "dhcpAssignedHostName" to this value w
- ith a ".".' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 
- SINGLE-VALUE )
-olcAttributeTypes: {27}( 2.16.840.1.113719.1.203.4.28 NAME 'dhcpDnsStatus' DES
- C 'This indicates the status of updating DNS resource records on behalf of th
- e client by the DHCP server for this address.  The value is a 16-bit bitmask.
- ' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-olcAttributeTypes: {28}( 2.16.840.1.113719.1.203.4.29 NAME 'dhcpRequestedHostN
- ame' DESC 'This is the hostname that was requested by the client.' EQUALITY c
- aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {29}( 2.16.840.1.113719.1.203.4.30 NAME 'dhcpAssignedHostNa
- me' DESC 'This is the actual hostname that was assigned to a client. It may n
- ot be the name that was requested by the client.  The fully qualified domain 
- name can be determined by appending the value of "dhcpDomainName" (with a dot
-  separator) to this name.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.146
- 6.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {30}( 2.16.840.1.113719.1.203.4.31 NAME 'dhcpReservedForCli
- ent' DESC 'The distinguished name of a "dhcpClient" that an address is reserv
- ed for.  This may not be the same as the "dhcpAssignedToClient" attribute if 
- the address is being reassigned but the current lease has not yet expired.' E
- QUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VA
- LUE )
-olcAttributeTypes: {31}( 2.16.840.1.113719.1.203.4.32 NAME 'dhcpAssignedToClie
- nt' DESC 'This is the distinguished name of a "dhcpClient" that an address is
-  currently assigned to.  This attribute is only present in the class when the
-  address is leased.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.
- 115.121.1.12 SINGLE-VALUE )
-olcAttributeTypes: {32}( 2.16.840.1.113719.1.203.4.33 NAME 'dhcpRelayAgentInfo
- ' DESC 'If the client request was received via a relay agent, this contains i
- nformation about the relay agent that was available from the DHCP request.  T
- his is a hex-encoded option value.' EQUALITY octetStringMatch SYNTAX 1.3.6.1.
- 4.1.1466.115.121.1.40 SINGLE-VALUE )
-olcAttributeTypes: {33}( 2.16.840.1.113719.1.203.4.34 NAME 'dhcpHWAddress' DES
- C 'The clients hardware address that requested this IP address.' EQUALITY cas
- eIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {34}( 2.16.840.1.113719.1.203.4.35 NAME 'dhcpHashBucketAssi
- gnment' DESC 'HashBucketAssignment bit map for the DHCP Server, as defined in
-  DHC Load Balancing Algorithm [RFC 3074].' EQUALITY octetStringMatch SYNTAX 1
- .3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
-olcAttributeTypes: {35}( 2.16.840.1.113719.1.203.4.36 NAME 'dhcpDelayedService
- Parameter' DESC 'Delay in seconds corresponding to Delayed Service Parameter 
- configuration, as defined in  DHC Load Balancing Algorithm [RFC 3074]. ' EQUA
- LITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
-olcAttributeTypes: {36}( 2.16.840.1.113719.1.203.4.37 NAME 'dhcpMaxClientLeadT
- ime' DESC 'Maximum Client Lead Time configuration in seconds, as defined in D
- HCP Failover Protocol [FAILOVR]' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.146
- 6.115.121.1.27 SINGLE-VALUE )
-olcAttributeTypes: {37}( 2.16.840.1.113719.1.203.4.38 NAME 'dhcpFailOverEndpoi
- ntState' DESC 'Server (Failover Endpoint) state, as defined in DHCP Failover 
- Protocol [FAILOVR]' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.1
- 21.1.26 SINGLE-VALUE )
-olcAttributeTypes: {38}( 2.16.840.1.113719.1.203.4.39 NAME 'dhcpErrorLog' DESC
-  'Generic error log attribute that allows logging error conditions within a d
- hcpService or a dhcpSubnet, like no IP addresses available for lease.' EQUALI
- TY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {39}( 2.16.840.1.113719.1.203.4.40 NAME 'dhcpLocatorDN' DES
- C 'The DN of dhcpLocator object which contain the DNs of all DHCP configurati
- on objects. There will be a single dhcpLocator object in the tree with links 
- to all the DHCP objects in the tree' EQUALITY distinguishedNameMatch SYNTAX 1
- .3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {40}( 2.16.840.1.113719.1.203.4.41 NAME 'dhcpKeyAlgorithm' 
- DESC 'Algorithm to generate TSIG Key' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.
- 6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {41}( 2.16.840.1.113719.1.203.4.42 NAME 'dhcpKeySecret' DES
- C 'Secret to generate TSIG Key' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.
- 1466.115.121.1.40 SINGLE-VALUE )
-olcAttributeTypes: {42}( 2.16.840.1.113719.1.203.4.43 NAME 'dhcpDnsZoneServer'
-  DESC 'Master server of the DNS Zone' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.
- 6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcAttributeTypes: {43}( 2.16.840.1.113719.1.203.4.44 NAME 'dhcpKeyDN' DESC 'T
- he DNs of TSIG Key to use in secure dynamic updates. In case of locator objec
- t, this will be list of TSIG keys.  In case of DHCP Service, Shared Network, 
- Subnet and DNS Zone, it will be a single key.' EQUALITY distinguishedNameMatc
- h SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {44}( 2.16.840.1.113719.1.203.4.45 NAME 'dhcpZoneDN' DESC '
- The DNs of DNS Zone. In case of locator object, this will be list of DNS Zone
- s in the tree. In case of DHCP Service, Shared Network and Subnet, it will be
-  a single DNS Zone.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.
- 115.121.1.12 )
-olcAttributeTypes: {45}( 2.16.840.1.113719.1.203.4.46 NAME 'dhcpFailOverPrimar
- yServer' DESC 'IP address or DNS name of the server playing primary role in D
- HC Load Balancing and Fail over.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.
- 4.1.1466.115.121.1.26 )
-olcAttributeTypes: {46}( 2.16.840.1.113719.1.203.4.47 NAME 'dhcpFailOverSecond
- aryServer' DESC 'IP address or DNS name of the server playing secondary role 
- in DHC Load Balancing and Fail over.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.
- 6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: {47}( 2.16.840.1.113719.1.203.4.48 NAME 'dhcpFailOverPrimar
- yPort' DESC 'Port on which primary server listens for connections from its fa
- il over peer (secondary server)' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.146
- 6.115.121.1.27 )
-olcAttributeTypes: {48}( 2.16.840.1.113719.1.203.4.49 NAME 'dhcpFailOverSecond
- aryPort' DESC 'Port on which secondary server listens for connections from it
- s fail over peer (primary server)' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1
- 466.115.121.1.27 )
-olcAttributeTypes: {49}( 2.16.840.1.113719.1.203.4.50 NAME 'dhcpFailOverRespon
- seDelay' DESC 'Maximum response time in seconds, before Server assumes that c
- onnection to fail over peer has failed' EQUALITY integerMatch SYNTAX 1.3.6.1.
- 4.1.1466.115.121.1.27 )
-olcAttributeTypes: {50}( 2.16.840.1.113719.1.203.4.51 NAME 'dhcpFailOverUnacke
- dUpdates' DESC 'Number of BNDUPD messages that server can send before it rece
- ives BNDACK from its fail over peer' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1
- .1466.115.121.1.27 )
-olcAttributeTypes: {51}( 2.16.840.1.113719.1.203.4.52 NAME 'dhcpFailOverSplit'
-  DESC 'Split between the primary and secondary servers for fail over purpose'
-  EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
-olcAttributeTypes: {52}( 2.16.840.1.113719.1.203.4.53 NAME 'dhcpFailOverLoadBa
- lanceTime' DESC 'Cutoff time in seconds, after which load balance is disabled
- ' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
-olcAttributeTypes: {53}( 2.16.840.1.113719.1.203.4.54 NAME 'dhcpFailOverPeerDN
- ' DESC 'The DNs of Fail over peers. In case of locator object, this will be l
- ist of fail over peers in the tree. In case of Subnet and pool, it will be a 
- single Fail Over Peer' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.146
- 6.115.121.1.12 )
-olcAttributeTypes: {54}( 2.16.840.1.113719.1.203.4.55 NAME 'dhcpServerDN' DESC
-  'List of all  DHCP Servers in the tree. Used by dhcpLocatorObject' EQUALITY 
- distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
-olcAttributeTypes: {55}( 2.16.840.1.113719.1.203.4.56 NAME 'dhcpComments' DESC
-  'Generic attribute that allows coments  within any DHCP object' EQUALITY cas
- eIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
-olcObjectClasses: {0}( 2.16.840.1.113719.1.203.6.1 NAME 'dhcpService' DESC 'Se
- rvice object that represents the actual DHCP Service configuration. This is a
-  container object.' SUP top STRUCTURAL MUST cn MAY ( dhcpPrimaryDN $ dhcpSeco
- ndaryDN $ dhcpServerDN $ dhcpSharedNetworkDN $ dhcpSubnetDN $ dhcpGroupDN $ d
- hcpHostDN $ dhcpClassesDN $ dhcpOptionsDN $ dhcpZoneDN $ dhcpKeyDN $ dhcpFail
- OverPeerDN $ dhcpStatements $ dhcpComments $ dhcpOption ) )
-olcObjectClasses: {1}( 2.16.840.1.113719.1.203.6.2 NAME 'dhcpSharedNetwork' DE
- SC 'This stores configuration information for a shared network.' SUP top STRU
- CTURAL MUST cn MAY ( dhcpSubnetDN $ dhcpPoolDN $ dhcpOptionsDN $ dhcpZoneDN $
-  dhcpStatements $ dhcpComments $ dhcpOption ) X-NDS_CONTAINMENT 'dhcpService'
-  )
-olcObjectClasses: {2}( 2.16.840.1.113719.1.203.6.3 NAME 'dhcpSubnet' DESC 'Thi
- s class defines a subnet. This is a container object.' SUP top STRUCTURAL MUS
- T ( cn $ dhcpNetMask ) MAY ( dhcpRange $ dhcpPoolDN $ dhcpGroupDN $ dhcpHostD
- N $ dhcpClassesDN $ dhcpLeasesDN $ dhcpOptionsDN $ dhcpZoneDN $ dhcpKeyDN $ d
- hcpFailOverPeerDN $ dhcpStatements $ dhcpComments $ dhcpOption ) X-NDS_CONTAI
- NMENT ( 'dhcpService' 'dhcpSharedNetwork' ) )
-olcObjectClasses: {3}( 2.16.840.1.113719.1.203.6.4 NAME 'dhcpPool' DESC 'This 
- stores configuration information about a pool.' SUP top STRUCTURAL MUST ( cn 
- $ dhcpRange ) MAY ( dhcpClassesDN $ dhcpPermitList $ dhcpLeasesDN $ dhcpOptio
- nsDN $ dhcpZoneDN $ dhcpKeyDN $ dhcpStatements $ dhcpComments $ dhcpOption ) 
- X-NDS_CONTAINMENT ( 'dhcpSubnet' 'dhcpSharedNetwork' ) )
-olcObjectClasses: {4}( 2.16.840.1.113719.1.203.6.5 NAME 'dhcpGroup' DESC 'Grou
- p object that lists host DNs and parameters. This is a container object.' SUP
-  top STRUCTURAL MUST cn MAY ( dhcpHostDN $ dhcpOptionsDN $ dhcpStatements $ d
- hcpComments $ dhcpOption ) X-NDS_CONTAINMENT ( 'dhcpSubnet' 'dhcpService' ) )
-olcObjectClasses: {5}( 2.16.840.1.113719.1.203.6.6 NAME 'dhcpHost' DESC 'This 
- represents information about a particular client' SUP top STRUCTURAL MUST cn 
- MAY ( dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $ dhcpComm
- ents $ dhcpOption ) X-NDS_CONTAINMENT ( 'dhcpService' 'dhcpSubnet' 'dhcpGroup
- ' ) )
-olcObjectClasses: {6}( 2.16.840.1.113719.1.203.6.7 NAME 'dhcpClass' DESC 'Repr
- esents information about a collection of related clients.' SUP top STRUCTURAL
-  MUST cn MAY ( dhcpSubClassesDN $ dhcpOptionsDN $ dhcpStatements $ dhcpCommen
- ts $ dhcpOption ) X-NDS_CONTAINMENT ( 'dhcpService' 'dhcpSubnet' ) )
-olcObjectClasses: {7}( 2.16.840.1.113719.1.203.6.8 NAME 'dhcpSubClass' DESC 'R
- epresents information about a collection of related classes.' SUP top STRUCTU
- RAL MUST cn MAY ( dhcpClassData $ dhcpOptionsDN $ dhcpStatements $ dhcpCommen
- ts $ dhcpOption ) X-NDS_CONTAINMENT 'dhcpClass' )
-olcObjectClasses: {8}( 2.16.840.1.113719.1.203.6.9 NAME 'dhcpOptions' DESC 'Re
- presents information about a collection of options defined.' SUP top AUXILIAR
- Y MUST cn MAY ( dhcpOption $ dhcpComments ) X-NDS_CONTAINMENT ( 'dhcpService'
-  'dhcpSharedNetwork' 'dhcpSubnet' 'dhcpPool' 'dhcpGroup' 'dhcpHost' 'dhcpClas
- s' ) )
-olcObjectClasses: {9}( 2.16.840.1.113719.1.203.6.10 NAME 'dhcpLeases' DESC 'Th
- is class represents an IP Address, which may or may not have been leased.' SU
- P top STRUCTURAL MUST ( cn $ dhcpAddressState ) MAY ( dhcpExpirationTime $ dh
- cpStartTimeOfState $ dhcpLastTransactionTime $ dhcpBootpFlag $ dhcpDomainName
-  $ dhcpDnsStatus $ dhcpRequestedHostName $ dhcpAssignedHostName $ dhcpReserve
- dForClient $ dhcpAssignedToClient $ dhcpRelayAgentInfo $ dhcpHWAddress ) X-ND
- S_CONTAINMENT ( 'dhcpService' 'dhcpSubnet' 'dhcpPool' ) )
-olcObjectClasses: {10}( 2.16.840.1.113719.1.203.6.11 NAME 'dhcpLog' DESC 'This
-  is the object that holds past information about the IP address. The cn is th
- e time/date stamp when the address was assigned or released, the address stat
- e at the time, if the address was assigned or released.' SUP top STRUCTURAL M
- UST cn MAY ( dhcpAddressState $ dhcpExpirationTime $ dhcpStartTimeOfState $ d
- hcpLastTransactionTime $ dhcpBootpFlag $ dhcpDomainName $ dhcpDnsStatus $ dhc
- pRequestedHostName $ dhcpAssignedHostName $ dhcpReservedForClient $ dhcpAssig
- nedToClient $ dhcpRelayAgentInfo $ dhcpHWAddress $ dhcpErrorLog ) X-NDS_CONTA
- INMENT ( 'dhcpLeases' 'dhcpPool' 'dhcpSubnet' 'dhcpSharedNetwork' 'dhcpServic
- e' ) )
-olcObjectClasses: {11}( 2.16.840.1.113719.1.203.6.12 NAME 'dhcpServer' DESC 'D
- HCP Server Object' SUP top STRUCTURAL MUST cn MAY ( dhcpServiceDN $ dhcpLocat
- orDN $ dhcpVersion $ dhcpImplementation $ dhcpHashBucketAssignment $ dhcpDela
- yedServiceParameter $ dhcpMaxClientLeadTime $ dhcpFailOverEndpointState $ dhc
- pStatements $ dhcpComments $ dhcpOption ) X-NDS_CONTAINMENT ( 'organization' 
- 'organizationalunit' 'domain' ) )
-olcObjectClasses: {12}( 2.16.840.1.113719.1.203.6.13 NAME 'dhcpTSigKey' DESC '
- TSIG key for secure dynamic updates' SUP top STRUCTURAL MUST ( cn $ dhcpKeyAl
- gorithm $ dhcpKeySecret ) MAY dhcpComments X-NDS_CONTAINMENT ( 'dhcpService' 
- 'dhcpSharedNetwork' 'dhcpSubnet' ) )
-olcObjectClasses: {13}( 2.16.840.1.113719.1.203.6.14 NAME 'dhcpDnsZone' DESC '
- DNS Zone for updating leases' SUP top STRUCTURAL MUST ( cn $ dhcpDnsZoneServe
- r ) MAY ( dhcpKeyDN $ dhcpComments ) X-NDS_CONTAINMENT ( 'dhcpService' 'dhcpS
- haredNetwork' 'dhcpSubnet' ) )
-olcObjectClasses: {14}( 2.16.840.1.113719.1.203.6.15 NAME 'dhcpFailOverPeer' D
- ESC 'This class defines the Fail over peer' SUP top STRUCTURAL MUST ( cn $ dh
- cpFailOverPrimaryServer $ dhcpFailOverSecondaryServer $ dhcpFailoverPrimaryPo
- rt $ dhcpFailOverSecondaryPort ) MAY ( dhcpFailOverResponseDelay $ dhcpFailOv
- erUnackedUpdates $ dhcpMaxClientLeadTime $ dhcpFailOverSplit $ dhcpHashBucket
- Assignment $ dhcpFailOverLoadBalanceTime $ dhcpComments ) X-NDS_CONTAINMENT (
-  'dhcpService' 'dhcpSharedNetwork' 'dhcpSubnet' ) )
-olcObjectClasses: {15}( 2.16.840.1.113719.1.203.6.16 NAME 'dhcpLocator' DESC '
- Locator object for DHCP configuration in the tree. There will be a single dhc
- pLocator object in the tree with links to all the DHCP objects in the tree' S
- UP top STRUCTURAL MUST cn MAY ( dhcpServiceDN $ dhcpServerDN $ dhcpSharedNetw
- orkDN $ dhcpSubnetDN $ dhcpPoolDN $ dhcpGroupDN $ dhcpHostDN $ dhcpClassesDN 
- $ dhcpKeyDN $ dhcpZoneDN $ dhcpFailOverPeerDN $ dhcpOption $ dhcpComments ) X
- -NDS_CONTAINMENT ( 'organization' 'organizationalunit' 'domain' ) )

+ 6 - 0
entrypoint.sh

@@ -25,6 +25,12 @@ if [ ! -d '/etc/openldap/slapd.d/cn=config' ]; then
 		chown -R ${USER}:${GROUP} /var/lib/openldap/run
 	fi
 
+	# Create the data directory
+	if [ ! -d /var/lib/openldap/openldap-data ]; then
+		mkdir -p /var/lib/openldap/openldap-data
+		chown -R ${USER}:${GROUP} /var/lib/openldap/openldap-data
+	fi
+
 	# Use the original slapd.conf file as template
 	cp /etc/openldap/slapd.ldif ${ROOT_LDIF}
 	

+ 0 - 6
ldifs/indices.ldif

@@ -1,6 +0,0 @@
-dn: olcDatabase={1}hdb,cn=config
-add: olcDbIndex
-olcDbIndex: cn eq,pres
-olcDbIndex: uid eq,pres
-olcDbIndex: uidNumber eq,pres
-olcDbIndex: gidNumber eq,pres

+ 0 - 9
ldifs/initial_data.ldif

@@ -1,9 +0,0 @@
-dn: ${SUFFIX}
-objectClass: dcObject
-objectClass: organization
-o: ${ORGANIZATION}
-dc: ${DOMAIN}
-
-dn: cn=Manager,${SUFFIX}
-objectClass: organizationalRole
-cn: Manager

+ 0 - 9
ldifs/krb_indices.ldif

@@ -1,9 +0,0 @@
-dn: oclDatabase={1}hdb,cn=config
-replace: olcAccess
-olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by dn="krb-admin,{{SUFFIX}}" write by anonymous auth by self write by * none
--
-add: olcAccess
-olcAccess: to dn.base="" by * read
--
-add: olcAccess
-olcAccess: to * by dn="cn=krb-admin,${SUFFIX}" write by * read

+ 0 - 13
ldifs/krb_structure.ldif

@@ -1,13 +0,0 @@
-dn: cn=krb-admin,${SUFFIX}
-cn: krb-admin
-objectClass: organizationalRole
-objectClass: simpleSecurityObject
-userPassword: ${LDAP_KRBADMIN_HASH}
-
-dn: ou=group,${SUFFIX}
-objectClass: organizationalUnit
-ou: groups
-
-dn: ou=users,${SUFFIX}
-objectClass: organizationalUnit
-ou: users

+ 0 - 10
ldifs/tls.ldif

@@ -1,10 +0,0 @@
-dn: cn=config
-changeType: modify
-add: olcTLSCACertificateFile
-olcTLSCACertificateFile: /etc/ssl/${CA_CERT}
--
-add: olcTLSCertificateFile
-olcTLSCertificateFile: /etc/ssl/${LDAP_TLS_CERT}
--
-add: olcTLSCertificateKeyFile
-olcTLSCertificateKeyFile: /etc/ssl/${LDAP_TLS_KEY}