1 # 2 # OpenLDAP schema file for Sudo 3 # Save as /etc/openldap/schema/sudo.schema and restart slapd. 4 # For a version that uses online configuration, see schema.olcSudo. 5 # 6 7 attributetype ( 1.3.6.1.4.1.15953.9.1.1 8 NAME 'sudoUser' 9 DESC 'User(s) who may run sudo' 10 EQUALITY caseExactIA5Match 11 SUBSTR caseExactIA5SubstringsMatch 12 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 13 14 attributetype ( 1.3.6.1.4.1.15953.9.1.2 15 NAME 'sudoHost' 16 DESC 'Host(s) who may run sudo' 17 EQUALITY caseExactIA5Match 18 SUBSTR caseExactIA5SubstringsMatch 19 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 20 21 attributetype ( 1.3.6.1.4.1.15953.9.1.3 22 NAME 'sudoCommand' 23 DESC 'Command(s) to be executed by sudo' 24 EQUALITY caseExactIA5Match 25 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 26 27 attributetype ( 1.3.6.1.4.1.15953.9.1.4 28 NAME 'sudoRunAs' 29 DESC 'User(s) impersonated by sudo (deprecated)' 30 EQUALITY caseExactIA5Match 31 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 32 33 attributetype ( 1.3.6.1.4.1.15953.9.1.5 34 NAME 'sudoOption' 35 DESC 'Options(s) followed by sudo' 36 EQUALITY caseExactIA5Match 37 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 38 39 attributetype ( 1.3.6.1.4.1.15953.9.1.6 40 NAME 'sudoRunAsUser' 41 DESC 'User(s) impersonated by sudo' 42 EQUALITY caseExactIA5Match 43 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 44 45 attributetype ( 1.3.6.1.4.1.15953.9.1.7 46 NAME 'sudoRunAsGroup' 47 DESC 'Group(s) impersonated by sudo' 48 EQUALITY caseExactIA5Match 49 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 50 51 attributetype ( 1.3.6.1.4.1.15953.9.1.8 52 NAME 'sudoNotBefore' 53 DESC 'Start of time interval for which the entry is valid' 54 EQUALITY generalizedTimeMatch 55 ORDERING generalizedTimeOrderingMatch 56 SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) 57 58 attributetype ( 1.3.6.1.4.1.15953.9.1.9 59 NAME 'sudoNotAfter' 60 DESC 'End of time interval for which the entry is valid' 61 EQUALITY generalizedTimeMatch 62 ORDERING generalizedTimeOrderingMatch 63 SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) 64 65 attributetype ( 1.3.6.1.4.1.15953.9.1.10 66 NAME 'sudoOrder' 67 DESC 'an integer to order the sudoRole entries' 68 EQUALITY integerMatch 69 ORDERING integerOrderingMatch 70 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) 71 72 objectclass ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL 73 DESC 'Sudoer Entries' 74 MUST ( cn ) 75 MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $ sudoRunAsUser $ 76 sudoRunAsGroup $ sudoOption $ sudoOrder $ sudoNotBefore $ 77 sudoNotAfter $ description ) 78 )