Skip to content
Snippets Groups Projects
Commit 9f24d7ed authored by Martin Haase's avatar Martin Haase
Browse files

current ldap schemas 

git-svn-id: https://textgridlab.org/svn/textgrid/trunk/middleware/tgauth@6698 7c539038-3410-0410-b1ec-0f2a7bf1c452
parent 514f9742
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
info.textgrid.middleware.tgauth.rbac/ldap-schemas/rbac.schema 0 → 100644
+ 143
− 0
View file @ 9f24d7ed
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.1
NAME 'rbacName'
DESC 'Eindeutiger Name eines RBAC-Eintrags'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.2
NAME 'rbacResourceName'
DESC 'Eine Resource, die mit RBAC verwaltet wird'
EQUALITY caseIgnoreMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.3
NAME 'rbacOperation'
DESC 'Eine Operation, die auf eine rbacResource anwendbar ist'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.4
NAME 'rbacPerformer'
DESC 'Inhaber einer Role'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.5
NAME 'rbacAllow'
DESC 'Berechtigung einer Role'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.6
NAME 'rbacSessionRole'
DESC 'Eine aktive Session-Rolle'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.7
NAME 'rbacSessionUser'
DESC 'Der Besitzer einer Session'
EQUALITY caseIgnoreMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.8
NAME 'rbacDescription'
DESC 'Eine RBAC-spezifische Beschreibung'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.9
NAME 'rbacPermission'
DESC 'Eine Berechtigung bestehend aus Rolle und Operation'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.10
NAME 'rbacSDRole'
DESC 'Eine Rolle in einem SSD- oder DSD-Set'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.11
NAME 'rbacCardinality'
DESC 'Die Kardinalitaet eine SSD- oder DSD-Set'
EQUALITY integerMatch
ORDERING integerOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.12
NAME 'rbacSessionCreationTimestamp'
DESC 'Der Zeitpunkt, zu dem eine Session angelegt wurde'
EQUALITY generalizedTimeMatch
ORDERING generalizedTimeOrderingMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
attributetype ( 1.3.6.1.4.1.10126.1.23.1.3.13
NAME 'rbacSessionCheckTimestamp'
DESC 'Der Zeitpunkt, zu dem eine Session das letzte mal
verwendet wurde, um eine Entscheidung zu treffen.'
EQUALITY generalizedTimeMatch
ORDERING generalizedTimeOrderingMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
objectclass ( 1.3.6.1.4.1.10126.1.23.1.4.2
NAME 'rbacRole'
DESC 'Eine RBAC-Rolle'
SUP top
STRUCTURAL
MUST ( rbacName )
MAY ( rbacAllow $ rbacPerformer $ rbacDescription ) )
objectclass ( 1.3.6.1.4.1.10126.1.23.1.4.3
NAME 'rbacSession'
DESC 'Eine RBAC-Session'
SUP top
STRUCTURAL
MUST ( rbacName $ rbacSessionUser $ rbacSessionCreationTimestamp )
MAY ( rbacSessionRole $ rbacDescription $ rbacSessionCheckTimestamp ) )
objectClass ( 1.3.6.1.4.1.10126.1.23.1.4.4
NAME 'rbacResource'
DESC 'Eine RBAC-Resource'
AUXILIARY
MAY ( rbacName $ rbacOperation $ rbacDescription $ rbacPermission ) )
objectclass ( 1.3.6.1.4.1.10126.1.23.1.4.5
NAME 'rbacSSD'
DESC 'Ein SSD-Set'
SUP top
STRUCTURAL
MUST ( rbacName $ rbacCardinality )
MAY ( rbacSDRole ) )
objectclass ( 1.3.6.1.4.1.10126.1.23.1.4.6
NAME 'rbacDSD'
DESC 'Ein DSD-Set'
SUP top
STRUCTURAL
MUST ( rbacName $ rbacCardinality )
MAY ( rbacSDRole ) )
info.textgrid.middleware.tgauth.rbac/ldap-schemas/textgrid.schema 0 → 100644
+ 117
− 0
View file @ 9f24d7ed
attributetype ( 1.3.6.1.4.1.10126.1.35.3.1
NAME 'TGResourceURI'
DESC 'URI of a Textgrid object'
EQUALITY caseExactMatch
SUBSTR caseExactSubstringsMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.8
NAME 'TGProjectFile'
DESC 'URI of the Textgrid object representing the ProjectFile for a TextGridProject'
EQUALITY caseExactMatch
SUBSTR caseExactSubstringsMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.2
NAME 'TGResourceOwner'
DESC 'Owner of a Textgrid object, in eduPersonPrincipalName format'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.3
NAME 'TGProjectId'
DESC 'Id of TextGrid project, format: tgpr123'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.4
NAME 'TGProjectName'
DESC '(short) Name of TextGrid project'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.5
NAME 'TGProjectDescription'
DESC '(longer) description of TextGrid project'
EQUALITY caseIgnoreMatch
SUBSTR caseIgnoreSubstringsMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.6
NAME 'TGisPublic'
DESC 'Flag if this TextGrid Resource is publicly readable'
EQUALITY booleanMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.7
NAME 'TGProjectDeactivated'
DESC 'Flag if the project is deactivated'
EQUALITY booleanMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.9
NAME 'TGWantsNewsletter'
DESC 'Flag if the user wants the TextGrid newsletter'
EQUALITY booleanMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.10
NAME 'TGisProjectFile'
DESC 'Flag if the project is deactivated'
EQUALITY booleanMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.11
NAME 'TGagreeSearch'
DESC 'Flag if user agrees to be searchable by name / e-mail'
EQUALITY booleanMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
attributetype ( 1.3.6.1.4.1.10126.1.35.3.12
NAME 'TGuserSuppliedData'
DESC 'Flag if user supplied his personal data (name, mail) himself (set to FALSE if fetched from external source)'
EQUALITY booleanMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
objectclass ( 1.3.6.1.4.1.10126.1.35.4.1
NAME 'TextGridResource'
DESC 'Main ObjectClass of a TextGrid resource'
SUP top
STRUCTURAL
MUST ( TGResourceURI $ TGisPublic $ TGProjectId )
MAY ( TGResourceOwner $ TGisProjectFile ) )
objectclass ( 1.3.6.1.4.1.10126.1.35.4.2
NAME 'TextGridProject'
DESC 'Auxiliary information for a project role'
SUP top
AUXILIARY
MUST ( TGProjectId )
MAY ( TGProjectName $ TGProjectDescription $ TGProjectDeactivated $ TGProjectFile) )
objectclass ( 1.3.6.1.4.1.10126.1.35.4.3
NAME 'TextGridUser'
DESC 'User Account in TextGrid'
SUP top
AUXILIARY
MUST ( )
MAY ( TGWantsNewsletter $ TGagreeSearch $ TGuserSuppliedData ) )
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment