| Igor Sarkisov | 0f783fa | 2020-10-06 04:39:26 -0700 | [diff] [blame^] | 1 | #
|
| 2 | # Active Directory Schema for sudo configuration (sudoers)
|
| 3 | #
|
| 4 | # To extend your Active Directory schema, run one of the following command
|
| 5 | # on your Windows DC (default port - Active Directory):
|
| 6 | #
|
| 7 | # ldifde -i -f schema.ActiveDirectory -c "CN=Schema,CN=Configuration,DC=X" #schemaNamingContext
|
| 8 | #
|
| 9 | # or on your Windows DC if using another port (with Active Directory LightWeight Directory Services / ADAM-Active Directory Application Mode)
|
| 10 | # Port 50000 by example (or any other port specified when defining the ADLDS/ADAM instance
|
| 11 | #
|
| 12 | # ldifde -i -f schema.ActiveDirectory -t 50000 -c "CN=Schema,CN=Configuration,DC=X" #schemaNamingContext
|
| 13 | #
|
| 14 | # or
|
| 15 | #
|
| 16 | # ldifde -i -f schema.ActiveDirectory -s server:port -c "CN=Schema,CN=Configuration,DC=X" #schemaNamingContext
|
| 17 | #
|
| 18 | # Can add username domain and password
|
| 19 | #
|
| 20 | # -b username domain password
|
| 21 | #
|
| 22 | # Can create Log file in current or any directory
|
| 23 | #
|
| 24 | # -j .
|
| 25 | #
|
| 26 |
|
| 27 | dn: CN=sudoUser,CN=Schema,CN=Configuration,DC=X
|
| 28 | changetype: add
|
| 29 | objectClass: top
|
| 30 | objectClass: attributeSchema
|
| 31 | cn: sudoUser
|
| 32 | distinguishedName: CN=sudoUser,CN=Schema,CN=Configuration,DC=X
|
| 33 | instanceType: 4
|
| 34 | attributeID: 1.3.6.1.4.1.15953.9.1.1
|
| 35 | attributeSyntax: 2.5.5.5
|
| 36 | isSingleValued: FALSE
|
| 37 | showInAdvancedViewOnly: TRUE
|
| 38 | adminDisplayName: sudoUser
|
| 39 | adminDescription: User(s) who may run sudo
|
| 40 | oMSyntax: 22
|
| 41 | searchFlags: 1
|
| 42 | lDAPDisplayName: sudoUser
|
| 43 | name: sudoUser
|
| 44 | schemaIDGUID:: JrGcaKpnoU+0s+HgeFjAbg==
|
| 45 | objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=X
|
| 46 |
|
| 47 | dn: CN=sudoHost,CN=Schema,CN=Configuration,DC=X
|
| 48 | changetype: add
|
| 49 | objectClass: top
|
| 50 | objectClass: attributeSchema
|
| 51 | cn: sudoHost
|
| 52 | distinguishedName: CN=sudoHost,CN=Schema,CN=Configuration,DC=X
|
| 53 | instanceType: 4
|
| 54 | attributeID: 1.3.6.1.4.1.15953.9.1.2
|
| 55 | attributeSyntax: 2.5.5.5
|
| 56 | isSingleValued: FALSE
|
| 57 | showInAdvancedViewOnly: TRUE
|
| 58 | adminDisplayName: sudoHost
|
| 59 | adminDescription: Host(s) who may run sudo
|
| 60 | oMSyntax: 22
|
| 61 | lDAPDisplayName: sudoHost
|
| 62 | name: sudoHost
|
| 63 | schemaIDGUID:: d0TTjg+Y6U28g/Y+ns2k4w==
|
| 64 | objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=X
|
| 65 |
|
| 66 | dn: CN=sudoCommand,CN=Schema,CN=Configuration,DC=X
|
| 67 | changetype: add
|
| 68 | objectClass: top
|
| 69 | objectClass: attributeSchema
|
| 70 | cn: sudoCommand
|
| 71 | distinguishedName: CN=sudoCommand,CN=Schema,CN=Configuration,DC=X
|
| 72 | instanceType: 4
|
| 73 | attributeID: 1.3.6.1.4.1.15953.9.1.3
|
| 74 | attributeSyntax: 2.5.5.5
|
| 75 | isSingleValued: FALSE
|
| 76 | showInAdvancedViewOnly: TRUE
|
| 77 | adminDisplayName: sudoCommand
|
| 78 | adminDescription: Command(s) to be executed by sudo
|
| 79 | oMSyntax: 22
|
| 80 | lDAPDisplayName: sudoCommand
|
| 81 | name: sudoCommand
|
| 82 | schemaIDGUID:: D6QR4P5UyUen3RGYJCHCPg==
|
| 83 | objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=X
|
| 84 |
|
| 85 | dn: CN=sudoRunAs,CN=Schema,CN=Configuration,DC=X
|
| 86 | changetype: add
|
| 87 | objectClass: top
|
| 88 | objectClass: attributeSchema
|
| 89 | cn: sudoRunAs
|
| 90 | distinguishedName: CN=sudoRunAs,CN=Schema,CN=Configuration,DC=X
|
| 91 | instanceType: 4
|
| 92 | attributeID: 1.3.6.1.4.1.15953.9.1.4
|
| 93 | attributeSyntax: 2.5.5.5
|
| 94 | isSingleValued: FALSE
|
| 95 | showInAdvancedViewOnly: TRUE
|
| 96 | adminDisplayName: sudoRunAs
|
| 97 | adminDescription: User(s) impersonated by sudo (deprecated)
|
| 98 | oMSyntax: 22
|
| 99 | lDAPDisplayName: sudoRunAs
|
| 100 | name: sudoRunAs
|
| 101 | schemaIDGUID:: CP98mCQTyUKKxGrQeM80hQ==
|
| 102 | objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=X
|
| 103 |
|
| 104 | dn: CN=sudoOption,CN=Schema,CN=Configuration,DC=X
|
| 105 | changetype: add
|
| 106 | objectClass: top
|
| 107 | objectClass: attributeSchema
|
| 108 | cn: sudoOption
|
| 109 | distinguishedName: CN=sudoOption,CN=Schema,CN=Configuration,DC=X
|
| 110 | instanceType: 4
|
| 111 | attributeID: 1.3.6.1.4.1.15953.9.1.5
|
| 112 | attributeSyntax: 2.5.5.5
|
| 113 | isSingleValued: FALSE
|
| 114 | showInAdvancedViewOnly: TRUE
|
| 115 | adminDisplayName: sudoOption
|
| 116 | adminDescription: Option(s) followed by sudo
|
| 117 | oMSyntax: 22
|
| 118 | lDAPDisplayName: sudoOption
|
| 119 | name: sudoOption
|
| 120 | schemaIDGUID:: ojaPzBBlAEmsvrHxQctLnA==
|
| 121 | objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=X
|
| 122 |
|
| 123 | dn: CN=sudoRunAsUser,CN=Schema,CN=Configuration,DC=X
|
| 124 | changetype: add
|
| 125 | objectClass: top
|
| 126 | objectClass: attributeSchema
|
| 127 | cn: sudoRunAsUser
|
| 128 | distinguishedName: CN=sudoRunAsUser,CN=Schema,CN=Configuration,DC=X
|
| 129 | instanceType: 4
|
| 130 | attributeID: 1.3.6.1.4.1.15953.9.1.6
|
| 131 | attributeSyntax: 2.5.5.5
|
| 132 | isSingleValued: FALSE
|
| 133 | showInAdvancedViewOnly: TRUE
|
| 134 | adminDisplayName: sudoRunAsUser
|
| 135 | adminDescription: User(s) impersonated by sudo
|
| 136 | oMSyntax: 22
|
| 137 | lDAPDisplayName: sudoRunAsUser
|
| 138 | name: sudoRunAsUser
|
| 139 | schemaIDGUID:: 9C52yPYd3RG3jMR2VtiVkw==
|
| 140 | objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=X
|
| 141 |
|
| 142 | dn: CN=sudoRunAsGroup,CN=Schema,CN=Configuration,DC=X
|
| 143 | changetype: add
|
| 144 | objectClass: top
|
| 145 | objectClass: attributeSchema
|
| 146 | cn: sudoRunAsGroup
|
| 147 | distinguishedName: CN=sudoRunAsGroup,CN=Schema,CN=Configuration,DC=X
|
| 148 | instanceType: 4
|
| 149 | attributeID: 1.3.6.1.4.1.15953.9.1.7
|
| 150 | attributeSyntax: 2.5.5.5
|
| 151 | isSingleValued: FALSE
|
| 152 | showInAdvancedViewOnly: TRUE
|
| 153 | adminDisplayName: sudoRunAsGroup
|
| 154 | adminDescription: Groups(s) impersonated by sudo
|
| 155 | oMSyntax: 22
|
| 156 | lDAPDisplayName: sudoRunAsGroup
|
| 157 | name: sudoRunAsGroup
|
| 158 | schemaIDGUID:: xJhSt/Yd3RGJPTB1VtiVkw==
|
| 159 | objectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=X
|
| 160 |
|
| 161 | dn:
|
| 162 | changetype: modify
|
| 163 | add: schemaUpdateNow
|
| 164 | schemaUpdateNow: 1
|
| 165 | -
|
| 166 |
|
| 167 | dn: CN=sudoRole,CN=Schema,CN=Configuration,DC=X
|
| 168 | changetype: add
|
| 169 | objectClass: top
|
| 170 | objectClass: classSchema
|
| 171 | cn: sudoRole
|
| 172 | distinguishedName: CN=sudoRole,CN=Schema,CN=Configuration,DC=X
|
| 173 | instanceType: 4
|
| 174 | possSuperiors: container
|
| 175 | possSuperiors: top
|
| 176 | subClassOf: top
|
| 177 | governsID: 1.3.6.1.4.1.15953.9.2.1
|
| 178 | mayContain: sudoCommand
|
| 179 | mayContain: sudoHost
|
| 180 | mayContain: sudoOption
|
| 181 | mayContain: sudoRunAs
|
| 182 | mayContain: sudoRunAsUser
|
| 183 | mayContain: sudoRunAsGroup
|
| 184 | mayContain: sudoUser
|
| 185 | rDNAttID: cn
|
| 186 | showInAdvancedViewOnly: FALSE
|
| 187 | adminDisplayName: sudoRole
|
| 188 | adminDescription: Sudoer Entries
|
| 189 | objectClassCategory: 1
|
| 190 | lDAPDisplayName: sudoRole
|
| 191 | name: sudoRole
|
| 192 | schemaIDGUID:: SQn432lnZ0+ukbdh3+gN3w==
|
| 193 | systemOnly: FALSE
|
| 194 | objectCategory: CN=Class-Schema,CN=Schema,CN=Configuration,DC=X
|
| 195 | defaultObjectCategory: CN=sudoRole,CN=Schema,CN=Configuration,DC=X
|
