From ed39262fa647434d4a0e31f07754a263ce2b16e3 Mon Sep 17 00:00:00 2001 From: neil_a_wilson <neil_a_wilson@localhost> Date: Fri, 09 Feb 2007 21:51:09 +0000 Subject: [PATCH] Add an initial set of privilege support to OpenDS. The current privileges are currently defined and implemented: * config-read (allow reading the configuration) * config-write (allow updating the configuration) * ldif-import (allow invoking LDIF import tasks) * ldif-export (allow invoking LDIF export tasks) * backend-backup (allow invoking backup tasks) * backend-restore (allow invoking restore tasks) * server-shutdown (allow invoking server shutdown tasks) * server-restart (allow invoking server restart tasks) * server-restart (allow invoking server restart tasks) * password-reset (allow resetting user passwords) * update-schema (allow updating the server schema) * privilege-change (allow changing the set of privileges for a user) --- opends/resource/schema/02-config.ldif | 9 +++++++++ 1 files changed, 9 insertions(+), 0 deletions(-) diff --git a/opends/resource/schema/02-config.ldif b/opends/resource/schema/02-config.ldif index b7605d5..9a1ca7b 100644 --- a/opends/resource/schema/02-config.ldif +++ b/opends/resource/schema/02-config.ldif @@ -1042,6 +1042,12 @@ NAME 'ds-cfg-heartbeat-interval' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'OpenDS Directory Server' ) +attributeTypes: ( 1.3.6.1.4.1.26027.1.1.307 + NAME 'ds-privilege-name' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 + USAGE directoryOperation X-ORIGIN 'OpenDS Directory Server' ) +attributeTypes: ( 1.3.6.1.4.1.26027.1.1.308 + NAME 'ds-cfg-default-root-privilege-name' + SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'OpenDS Directory Server' ) objectClasses: ( 1.3.6.1.4.1.26027.1.2.1 NAME 'ds-cfg-access-control-handler' SUP top STRUCTURAL MUST ( cn $ ds-cfg-acl-handler-class $ ds-cfg-acl-handler-enabled ) @@ -1429,4 +1435,7 @@ objectClasses: ( 1.3.6.1.4.1.26027.1.2.81 NAME 'ds-cfg-group-implementation' SUP top STRUCTURAL MUST ( cn $ ds-cfg-group-implementation-class $ ds-cfg-group-implementation-enabled ) X-ORIGIN 'OpenDS Directory Server' ) +objectClasses: ( 1.3.6.1.4.1.26027.1.2.82 NAME 'ds-cfg-root-dn-base' SUP top + STRUCTURAL MUST cn MAY ds-cfg-default-root-privilege-name + X-ORIGIN 'OpenDS Directory Server' ) -- Gitblit v1.10.0