From 0d02c460545eebe14bca5a23b3cc406bfba29f56 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andrej=20Rama=C5=A1euski?= <andrej@x2.cz> Date: Tue, 21 Apr 2020 22:13:27 +0200 Subject: [PATCH] Zapnuty auditlog a uprava attributu --- Dockerfile | 2 ++ bootstrap/ldif/10-audit.ldif | 7 +++++++ bootstrap/schema/pirati.schema | 12 ++++++------ 3 files changed, 15 insertions(+), 6 deletions(-) create mode 100644 bootstrap/ldif/10-audit.ldif diff --git a/Dockerfile b/Dockerfile index 163ad39..8bc4015 100644 --- a/Dockerfile +++ b/Dockerfile @@ -39,5 +39,7 @@ MAINTAINER Andrej RamaĊĦeuski <andrej.ramaseuski@pirati.cz> COPY --from=builder /usr/local/libexec/openldap/pw-bcrypt.so /usr/lib/ldap/pw-bcrypt.so ADD bootstrap /container/service/slapd/assets/config/bootstrap ADD environment /container/environment/01-custom +RUN mkdir /var/log/slapd && \ + chown openldap.openldap /var/log/slapd WORKDIR / diff --git a/bootstrap/ldif/10-audit.ldif b/bootstrap/ldif/10-audit.ldif new file mode 100644 index 0000000..7681cee --- /dev/null +++ b/bootstrap/ldif/10-audit.ldif @@ -0,0 +1,7 @@ +# Audit log +dn: olcOverlay=auditlog,olcDatabase={1}mdb,cn=config +changetype: add +objectClass: olcOverlayConfig +objectClass: olcAuditLogConfig +olcOverlay: auditlog +olcAuditlogFile: /var/log/slapd/auditlog.ldif diff --git a/bootstrap/schema/pirati.schema b/bootstrap/schema/pirati.schema index dcc9b80..af1db01 100644 --- a/bootstrap/schema/pirati.schema +++ b/bootstrap/schema/pirati.schema @@ -26,14 +26,14 @@ attributetype ( 1.3.6.1.4.1.55307.2.3.4 NAME 'forumId' USAGE userApplications ) attributetype ( 1.3.6.1.4.1.55307.2.3.5 NAME 'isEnabled' DESC 'Uzivatel je aktivni' - EQUALITY caseIgnoreMatch - SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{5} + EQUALITY booleanMatch + SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE USAGE userApplications ) attributetype ( 1.3.6.1.4.1.55307.2.3.6 NAME 'emailVerified' DESC 'Registracni email je overen' - EQUALITY caseIgnoreMatch - SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{5} + EQUALITY booleanMatch + SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE USAGE userApplications ) attributetype ( 1.3.6.1.4.1.55307.2.3.7 NAME 'contactEmail' @@ -45,7 +45,7 @@ attributetype ( 1.3.6.1.4.1.55307.2.3.7 NAME 'contactEmail' attributetype ( 1.3.6.1.4.1.55307.2.3.8 NAME 'isTeam' DESC 'Skupina je tym' EQUALITY booleanMatch - SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 + SYNTAX 1.3.6.1.4.1.1466.115.121.1.7{5} SINGLE-VALUE USAGE userApplications ) objectclass ( 1.3.6.1.4.1.55307.2.4.1 NAME 'groupOfPirates' @@ -53,7 +53,7 @@ objectclass ( 1.3.6.1.4.1.55307.2.4.1 NAME 'groupOfPirates' SUP top STRUCTURAL MUST cn - MAY ( member $ description $ gidNumber $ email $ superiorTeam $ teamLeader $ teamLeaderSubstitute $ isTeam ) ) + MAY ( member $ description $ email $ superiorTeam $ teamLeader $ teamLeaderSubstitute $ isTeam $ forumId ) ) objectclass ( 1.3.6.1.4.1.55307.2.4.2 NAME 'pirate' DESC 'Pirat' AUXILIARY -- GitLab