97 lines
2.5 KiB
Text
97 lines
2.5 KiB
Text
# BaseDN
|
|
dn: %%ldap_base_dn
|
|
%set %%attribute, %%organization = %%ldap_base_dn.split(',', 1)[0].split('=')
|
|
%%attribute: %%organization
|
|
objectClass: top
|
|
%if %%attribute == 'o'
|
|
objectClass: organization
|
|
%else
|
|
objectClass: organizationalUnit
|
|
%end if
|
|
|
|
# Remote
|
|
%for %%remote in %%accounts.remotes
|
|
%set %%name = %%normalize_family(%%remote)
|
|
dn: %%accounts['remote_' + %%name]['dn_' + %%name]
|
|
cn: %%remote
|
|
sn: %%remote
|
|
uid: %%remote
|
|
userPassword:: %%ssha_encode(%%accounts['remote_' + %%name]['password_' + %%name])
|
|
objectClass: top
|
|
objectClass: inetOrgPerson
|
|
|
|
%end for
|
|
# Accounts
|
|
%set %%users = %%calc_ldapclient_base_dn(%%ldap_base_dn, '')
|
|
dn: %%calc_ldapclient_base_dn(%%ldap_base_dn, None, accounts=True)
|
|
ou: accounts
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
|
|
## Users
|
|
%set %%users = %%calc_ldapclient_base_dn(%%ldap_base_dn, '')
|
|
dn: %%users
|
|
ou: users
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
|
|
%for %%user in %%accounts.users.ldap_user_mail
|
|
dn: cn=%%user,%%users
|
|
cn: %%user
|
|
mail: %%user
|
|
sn: %%user.ldap_user_sn
|
|
givenName: %%user.ldap_user_gn
|
|
uid: %%user.ldap_user_uid
|
|
userPassword:: %%ssha_encode(%%user.ldap_user_password)
|
|
homeDirectory: /srv/home/users/%%user
|
|
mailLocalAddress: %%user
|
|
%if %%user.ldap_user_aliases
|
|
%for %%alias in %%user.ldap_user_aliases
|
|
mailLocalAddress: %%alias
|
|
%end for
|
|
%end if
|
|
uidNumber: 0
|
|
gidNumber: 0
|
|
objectClass: top
|
|
objectClass: inetOrgPerson
|
|
objectClass: posixAccount
|
|
objectClass: inetLocalMailRecipient
|
|
|
|
%end for
|
|
## Families
|
|
dn: %%calc_ldapclient_base_dn(%%ldap_base_dn, '-')
|
|
ou: families
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
|
|
%for %%family in %%accounts.families
|
|
%set %%families = %%calc_ldapclient_base_dn(%%ldap_base_dn, %%family)
|
|
dn: %%families
|
|
ou: %%family
|
|
objectClass: top
|
|
objectClass: organizationalUnit
|
|
|
|
%for %%user in %%accounts['family_' + %%family]['users_' + %%family]['ldap_user_mail_' + %%family]
|
|
dn: cn=%%user,%%families
|
|
cn: %%user
|
|
mail: %%user
|
|
sn: %%user['ldap_user_sn_' + %%family]
|
|
givenName: %%user['ldap_user_gn_' + %%family]
|
|
uid: %%user['ldap_user_uid_' + %%family]
|
|
userPassword:: %%ssha_encode(%%user['ldap_user_password_' + %%family])
|
|
homeDirectory: /srv/home/families/%%family/%%user
|
|
mailLocalAddress: %%user
|
|
%if %%user['ldap_user_aliases_' + %%family]
|
|
%for %%alias in %%user['ldap_user_aliases_' + %%family]
|
|
mailLocalAddress: %%alias
|
|
%end for
|
|
%end if
|
|
uidNumber: 0
|
|
gidNumber: 0
|
|
objectClass: top
|
|
objectClass: inetOrgPerson
|
|
objectClass: posixAccount
|
|
objectClass: inetLocalMailRecipient
|
|
|
|
%end for
|
|
%end for
|