Changes between Version 8 and Version 9 of Software/eAM/oFedAcc

Timestamp:

Aug 5, 2014, 3:06:35 PM (10 years ago)

Author:

seskar

Comment:

—

Software/eAM/oFedAcc

@@ -169 +169 @@
  32. ERROR 32: Missing user's email address
  33. ERROR 33: Missing user's ssh public key:
+
+== GENI Extension Schema for LDAP ==
+
+In order to automate delegated account creation/deletion, the AM uses following LDAP schema extension (in this example stored in file: '''geni.schema'''): 
+{{{
+# octetString SYNTAX
+attributetype ( 1.3.6.1.4.1.4203.666.1.90 
+        NAME 'remoteDN' 
+        DESC 'MANDATORY: baseDN from remote' 
+        EQUALITY caseIgnoreIA5Match
+        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
+
+attributetype ( 1.3.6.1.4.1.4203.666.1.91 
+        NAME 'listOfChildren' 
+        DESC 'MANDATORY: List of children with this account cloned' 
+        EQUALITY caseIgnoreIA5Match
+        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
+
+
+# printableString SYNTAX yes|no
+objectclass ( 1.3.6.1.4.1.4203.666.1.100 
+        NAME 'geniAttributes' SUP top AUXILIARY
+        DESC 'MANDATORY: GENI related attributes'
+        MAY ( remoteDN $ listOfChildren ) 
+        )
+
+}}}
+
+In order for it to be loaded at start-up, this schema needs to be placed in server schema directory (for the latest version of [http://www.openldap.org/ slapd] in /etc/ldap/schema) and the following line has to be added to the LDAP configuration file (typically in /etc/ldap/slapd.conf):
+{{{
+include         /etc/ldap/schema/geni.schema
+}}}