Updated schema files

Added trust.schema

git-svn-id: https://oss.gonicus.de/repositories/gosa/trunk@2233 594d385d-05f5-0310-b6e9-bd551577e9d8

diff --git a/contrib/openldap/gosa+samba3.schema b/contrib/openldap/gosa+samba3.schema
index 8f1deffe06b70a2bb790256ac803d62d7a772582..45b9708bbd795b42edd246d2cd50c2e10190aeb8 100644 (file)
--- a/contrib/openldap/gosa+samba3.schema
+++ b/contrib/openldap/gosa+samba3.schema
@@ -276,8 +276,8 @@ objectclass ( 1.3.6.1.4.1.10098.1.2.1.19.11 NAME 'gosaUserTemplate' SUP top AUXI
 
 objectclass ( 1.3.6.1.4.1.10098.1.2.1.19.12 NAME 'gosaGroupOfNames'
         DESC 'GOsa object grouping (v2.4)'
-               SUP groupOfNames STRUCTURAL
-               MUST ( cn $ gosaGroupObjects ) MAY ( member ) )
+               SUP top STRUCTURAL
+               MUST ( cn $ gosaGroupObjects ) MAY ( member $ description ) )
 
 objectclass ( 1.3.6.1.4.1.10098.1.2.1.19.13 NAME 'gosaWebdavAccount'
         DESC 'GOsa webdav enabling account (v2.4)'

diff --git a/contrib/openldap/gosa.schema b/contrib/openldap/gosa.schema
index aa21573be929684d03c7976b46868f4d1e424506..17891503b104a4930ea42318fe8e4fcf03780a5f 100644 (file)
--- a/contrib/openldap/gosa.schema
+++ b/contrib/openldap/gosa.schema
@@ -275,8 +275,8 @@ objectclass ( 1.3.6.1.4.1.10098.1.2.1.19.11 NAME 'gosaUserTemplate' SUP top AUXI
 
 objectclass ( 1.3.6.1.4.1.10098.1.2.1.19.12 NAME 'gosaGroupOfNames'
         DESC 'GOsa object grouping (v2.4)'
-        SUP groupOfNames STRUCTURAL
-               MUST ( cn $ gosaGroupObjects ) MAY ( member ) )
+        SUP top STRUCTURAL
+               MUST ( cn $ gosaGroupObjects ) MAY ( description $ member ) )
 
 objectclass ( 1.3.6.1.4.1.10098.1.2.1.19.13 NAME 'gosaWebdavAccount'
         DESC 'GOsa webdav enabling account (v2.4)'

diff --git a/contrib/openldap/trust.schema b/contrib/openldap/trust.schema
new file mode 100644 (file)
index 0000000..6b6fab0
--- /dev/null
+++ b/contrib/openldap/trust.schema
@@ -0,0 +1,21 @@
+# this file goes into /etc/openldap/schema or into your schema directory for your LDAP v3 server
+# make sure you have it, otherwise, Directory administrator will complain when changing user accounts
+# unless you don't do schema checking
+
+attributetype ( 5.3.6.1.1.1.1.0 NAME 'trustModel'
+       DESC 'Access scheme'
+       EQUALITY caseIgnoreIA5Match
+       SUBSTR caseIgnoreIA5SubstringsMatch
+       SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
+
+attributetype ( 5.3.6.1.1.1.1.1 NAME 'accessTo'
+       DESC 'Access to which servers user is allowed'
+       EQUALITY caseIgnoreIA5Match
+       SUBSTR caseIgnoreIA5SubstringsMatch
+       SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+
+objectclass ( 5.3.6.1.1.1.2.0 NAME 'trustAccount' SUP top AUXILIARY
+       DESC 'Sets trust accounts information'
+       MUST ( trustModel )
+       MAY ( accessTo ) )
+