mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2024-12-21 03:10:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

ITS#9156 Update ppolicy schema to the latest draft

Browse Source
This commit is contained in:
Ondřej Kuzník 2019-10-24 12:54:53 +01:00
parent 2b007d01db
commit 4bc54d104a
1 changed files with 62 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
servers/slapd/overlays/ppolicy.c
View File

@ -107,13 +107,15 @@ typedef struct pw_hist {
/* Operational attributes */ /* Operational attributes */
static AttributeDescription *ad_pwdChangedTime, *ad_pwdAccountLockedTime, static AttributeDescription *ad_pwdChangedTime, *ad_pwdAccountLockedTime,
*ad_pwdFailureTime, *ad_pwdHistory, *ad_pwdGraceUseTime, *ad_pwdReset, *ad_pwdFailureTime, *ad_pwdHistory, *ad_pwdGraceUseTime, *ad_pwdReset,
*ad_pwdPolicySubentry; *ad_pwdPolicySubentry, *ad_pwdStartTime, *ad_pwdEndTime,
*ad_pwdLastSuccess;
/* Policy attributes */ /* Policy attributes */
static AttributeDescription *ad_pwdMinAge, *ad_pwdMaxAge, *ad_pwdMaxIdle, static AttributeDescription *ad_pwdMinAge, *ad_pwdMaxAge, *ad_pwdMaxIdle,
*ad_pwdInHistory, *ad_pwdCheckQuality, *ad_pwdMinLength, *ad_pwdInHistory, *ad_pwdCheckQuality, *ad_pwdMinLength, *ad_pwdMaxLength,
*ad_pwdMaxFailure, *ad_pwdGraceExpiry, *ad_pwdGraceAuthNLimit, *ad_pwdMaxFailure, *ad_pwdGraceExpiry, *ad_pwdGraceAuthNLimit,
*ad_pwdExpireWarning, *ad_pwdLockoutDuration, *ad_pwdFailureCountInterval, *ad_pwdExpireWarning, *ad_pwdMinDelay, *ad_pwdMaxDelay,
*ad_pwdLockoutDuration, *ad_pwdFailureCountInterval,
*ad_pwdCheckModule, *ad_pwdLockout, *ad_pwdMustChange, *ad_pwdCheckModule, *ad_pwdLockout, *ad_pwdMustChange,
*ad_pwdAllowUserChange, *ad_pwdSafeModify, *ad_pwdAttribute, *ad_pwdAllowUserChange, *ad_pwdSafeModify, *ad_pwdAttribute,
*ad_pwdMaxRecordedFailure; *ad_pwdMaxRecordedFailure;
@ -184,6 +186,30 @@ static struct schema_info {
#endif #endif
"USAGE directoryOperation )", "USAGE directoryOperation )",
&ad_pwdPolicySubentry }, &ad_pwdPolicySubentry },
{ "( 1.3.6.1.4.1.42.2.27.8.1.27 "
"NAME ( 'pwdStartTime' ) "
"DESC 'The time the password becomes enabled' "
"EQUALITY generalizedTimeMatch "
"ORDERING generalizedTimeOrderingMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 "
"SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )",
&ad_pwdStartTime },
{ "( 1.3.6.1.4.1.42.2.27.8.1.28 "
"NAME ( 'pwdEndTime' ) "
"DESC 'The time the password becomes disabled' "
"EQUALITY generalizedTimeMatch "
"ORDERING generalizedTimeOrderingMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 "
"SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )",
&ad_pwdEndTime },
{ "( 1.3.6.1.4.1.42.2.27.8.1.29 "
"NAME ( 'pwdLastSuccess' ) "
"DESC 'The timestamp of the last successful authentication' "
"EQUALITY generalizedTimeMatch "
"ORDERING generalizedTimeOrderingMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 "
"SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )",
&ad_pwdLastSuccess },
{ "( 1.3.6.1.4.1.42.2.27.8.1.1 " { "( 1.3.6.1.4.1.42.2.27.8.1.1 "
"NAME ( 'pwdAttribute' ) " "NAME ( 'pwdAttribute' ) "
@ -225,6 +251,12 @@ static struct schema_info {
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 " "SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
"SINGLE-VALUE )", "SINGLE-VALUE )",
&ad_pwdMinLength }, &ad_pwdMinLength },
{ "( 1.3.6.1.4.1.42.2.27.8.1.31 "
"NAME ( 'pwdMaxLength' ) "
"EQUALITY integerMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
"SINGLE-VALUE )",
&ad_pwdMaxLength },
{ "( 1.3.6.1.4.1.42.2.27.8.1.7 " { "( 1.3.6.1.4.1.42.2.27.8.1.7 "
"NAME ( 'pwdExpireWarning' ) " "NAME ( 'pwdExpireWarning' ) "
"EQUALITY integerMatch " "EQUALITY integerMatch "
@ -239,6 +271,12 @@ static struct schema_info {
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 " "SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
"SINGLE-VALUE )", "SINGLE-VALUE )",
&ad_pwdGraceAuthNLimit }, &ad_pwdGraceAuthNLimit },
{ "( 1.3.6.1.4.1.42.2.27.8.1.30 "
"NAME ( 'pwdGraceExpiry' ) "
"EQUALITY integerMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
"SINGLE-VALUE )",
&ad_pwdGraceExpiry },
{ "( 1.3.6.1.4.1.42.2.27.8.1.9 " { "( 1.3.6.1.4.1.42.2.27.8.1.9 "
"NAME ( 'pwdLockout' ) " "NAME ( 'pwdLockout' ) "
"EQUALITY booleanMatch " "EQUALITY booleanMatch "
@ -284,6 +322,24 @@ static struct schema_info {
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 " "SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 "
"SINGLE-VALUE )", "SINGLE-VALUE )",
&ad_pwdSafeModify }, &ad_pwdSafeModify },
{ "( 1.3.6.1.4.1.42.2.27.8.1.24 "
"NAME ( 'pwdMinDelay' ) "
"EQUALITY integerMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
"SINGLE-VALUE )",
&ad_pwdMinDelay },
{ "( 1.3.6.1.4.1.42.2.27.8.1.25 "
"NAME ( 'pwdMaxDelay' ) "
"EQUALITY integerMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
"SINGLE-VALUE )",
&ad_pwdMaxDelay },
{ "( 1.3.6.1.4.1.42.2.27.8.1.26 "
"NAME ( 'pwdMaxIdle' ) "
"EQUALITY integerMatch "
"SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
"SINGLE-VALUE )",
&ad_pwdMaxIdle },
{ "( 1.3.6.1.4.1.42.2.27.8.1.32 " { "( 1.3.6.1.4.1.42.2.27.8.1.32 "
"NAME ( 'pwdMaxRecordedFailure' ) " "NAME ( 'pwdMaxRecordedFailure' ) "
"EQUALITY integerMatch " "EQUALITY integerMatch "
@ -314,9 +370,11 @@ static char *pwd_ocs[] = {
"AUXILIARY " "AUXILIARY "
"MUST ( pwdAttribute ) " "MUST ( pwdAttribute ) "
"MAY ( pwdMinAge $ pwdMaxAge $ pwdInHistory $ pwdCheckQuality $ " "MAY ( pwdMinAge $ pwdMaxAge $ pwdInHistory $ pwdCheckQuality $ "
"pwdMinLength $ pwdExpireWarning $ pwdGraceAuthNLimit $ pwdLockout $ " "pwdMinLength $ pwdMaxLength $ pwdExpireWarning $ "
"pwdGraceAuthNLimit $ pwdGraceExpiry $ pwdLockout $ "
"pwdLockoutDuration $ pwdMaxFailure $ pwdFailureCountInterval $ " "pwdLockoutDuration $ pwdMaxFailure $ pwdFailureCountInterval $ "
"pwdMustChange $ pwdAllowUserChange $ pwdSafeModify $ " "pwdMustChange $ pwdAllowUserChange $ pwdSafeModify $ "
"pwdMinDelay $ pwdMaxDelay $ pwdMaxIdle $ "
"pwdMaxRecordedFailure ) )", "pwdMaxRecordedFailure ) )",
NULL NULL
}; };