1 dn: cn=sudoschema,cn=schema,cn=config 2 objectClass: olcSchemaConfig 3 cn: sudoschema 4 # 5 # OpenLDAP schema file for Sudo in on-line configuration (OLC) format. 6 # Import using ldapadd or another suitable LDAP browser. 7 # Converted to OLC format by Frederic Pasteleurs <frederic@askarel.be> 8 # 9 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.1 10 NAME 'sudoUser' 11 DESC 'User(s) who may run sudo' 12 EQUALITY caseExactIA5Match 13 SUBSTR caseExactIA5SubstringsMatch 14 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 15 # 16 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.2 17 NAME 'sudoHost' 18 DESC 'Host(s) who may run sudo' 19 EQUALITY caseExactIA5Match 20 SUBSTR caseExactIA5SubstringsMatch 21 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 22 # 23 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.3 24 NAME 'sudoCommand' 25 DESC 'Command(s) to be executed by sudo' 26 EQUALITY caseExactIA5Match 27 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 28 # 29 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.4 30 NAME 'sudoRunAs' 31 DESC 'User(s) impersonated by sudo (deprecated)' 32 EQUALITY caseExactIA5Match 33 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 34 # 35 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.5 36 NAME 'sudoOption' 37 DESC 'Options(s) followed by sudo' 38 EQUALITY caseExactIA5Match 39 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 40 # 41 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.6 42 NAME 'sudoRunAsUser' 43 DESC 'User(s) impersonated by sudo' 44 EQUALITY caseExactIA5Match 45 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 46 # 47 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.7 48 NAME 'sudoRunAsGroup' 49 DESC 'Group(s) impersonated by sudo' 50 EQUALITY caseExactIA5Match 51 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 52 # 53 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.8 54 NAME 'sudoNotBefore' 55 DESC 'Start of time interval for which the entry is valid' 56 EQUALITY generalizedTimeMatch 57 ORDERING generalizedTimeOrderingMatch 58 SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) 59 # 60 olcattributetypes: ( 1.3.6.1.4.1.15953.9.1.9 61 NAME 'sudoNotAfter' 62 DESC 'End of time interval for which the entry is valid' 63 EQUALITY generalizedTimeMatch 64 ORDERING generalizedTimeOrderingMatch 65 SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 ) 66 # 67 olcattributeTypes: ( 1.3.6.1.4.1.15953.9.1.10 68 NAME 'sudoOrder' 69 DESC 'an integer to order the sudoRole entries' 70 EQUALITY integerMatch 71 ORDERING integerOrderingMatch 72 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) 73 # 74 olcobjectclasses: ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' SUP top STRUCTURAL 75 DESC 'Sudoer Entries' 76 MUST ( cn ) 77 MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRunAs $ sudoRunAsUser $ sudoRunAsGroup $ sudoOption $ sudoOrder $ sudoNotBefore $ sudoNotAfter $ 78 description ) 79 )