Zapnuty auditlog a uprava attributu

Dockerfile

@@ -39,5 +39,7 @@ MAINTAINER Andrej Ramašeuski <andrej.ramaseuski@pirati.cz>
 COPY --from=builder /usr/local/libexec/openldap/pw-bcrypt.so /usr/lib/ldap/pw-bcrypt.so
 ADD bootstrap /container/service/slapd/assets/config/bootstrap
 ADD environment /container/environment/01-custom
+RUN mkdir /var/log/slapd && \
+    chown openldap.openldap /var/log/slapd
 
 WORKDIR /

bootstrap/ldif/10-audit.ldif

+# Audit log
+dn: olcOverlay=auditlog,olcDatabase={1}mdb,cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcAuditLogConfig
+olcOverlay: auditlog
+olcAuditlogFile: /var/log/slapd/auditlog.ldif

bootstrap/schema/pirati.schema

@@ -26,14 +26,14 @@ attributetype ( 1.3.6.1.4.1.55307.2.3.4 NAME 'forumId'
 	USAGE userApplications )
 attributetype ( 1.3.6.1.4.1.55307.2.3.5 NAME 'isEnabled'
 	DESC 'Uzivatel je aktivni'
-	EQUALITY caseIgnoreMatch
-	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{5}
+	EQUALITY booleanMatch
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
 	SINGLE-VALUE
 	USAGE userApplications )
 attributetype ( 1.3.6.1.4.1.55307.2.3.6 NAME 'emailVerified'
 	DESC 'Registracni email je overen'
-	EQUALITY caseIgnoreMatch
-	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{5}
+	EQUALITY booleanMatch
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
 	SINGLE-VALUE
 	USAGE userApplications )
 attributetype ( 1.3.6.1.4.1.55307.2.3.7 NAME 'contactEmail'
@@ -45,7 +45,7 @@ attributetype ( 1.3.6.1.4.1.55307.2.3.7 NAME 'contactEmail'
 attributetype ( 1.3.6.1.4.1.55307.2.3.8 NAME 'isTeam'
 	DESC 'Skupina je tym'
 	EQUALITY booleanMatch
-	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
+	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7{5}
 	SINGLE-VALUE
 	USAGE userApplications )
 objectclass ( 1.3.6.1.4.1.55307.2.4.1 NAME 'groupOfPirates'
@@ -53,7 +53,7 @@ objectclass ( 1.3.6.1.4.1.55307.2.4.1 NAME 'groupOfPirates'
 	SUP top
 	STRUCTURAL
 	MUST cn
-	MAY ( member $ description $ gidNumber $ email $ superiorTeam $ teamLeader $ teamLeaderSubstitute $ isTeam ) )
+	MAY ( member $ description $ email $ superiorTeam $ teamLeader $ teamLeaderSubstitute $ isTeam $ forumId ) )
 objectclass ( 1.3.6.1.4.1.55307.2.4.2 NAME 'pirate'
 	DESC 'Pirat'
 	AUXILIARY