| Path : /usr/share/YaST2/modules/ |
| Current File : //usr/share/YaST2/modules/Ldap.ybc |
YaST bytecode 1.4.0 Ldap Ldap.ycp Autologin Directory FileUtils DNS Hostname Label Message Mode Nsswitch
Package Pam Popup
ProductFeatures Progress Report Service Stage Summary use_gui base_config_dn ldap/routines.ycp get_rdn get_cn get_dn
get_new_dn
get_string required_packages
write_only start old_start
nis_available _autofs_allowed !
_start_autofs "
login_enabled # member_attribute $ old_member_attribute % server &
old_server ' modified ( openldap_modified ) base_dn * old_base_dn + base_dn_changed , ldap_v2 - ldap_tls .
tls_cacertdir / tls_cacertfile 0
tls_checkpeer 1 pam_password 2 plus_lines_passwd 3 default_port 4 file_server 5 nss_base_passwd 6 nss_base_shadow 7 nss_base_group 8 user_base 9
group_base : nsswitch ; anonymous < bind_pass = bind_dn > current_module_dn ? current_template_dn @ create_ldap A nds B tls_switched_off C nds_checked D oes E expert_ui F new_objects G base_template_dn H
ldap_modified I config_modules J templates K bound L groups_dn M object_classes N
attr_types O hash_schemas P available_config_modules Q initial_defaults R initial_defaults_used S schema_initialized T ldap_initialized U
read_settings V restart_sshd W passwd_read X mkhomedir Y ppolicies Z
BaseDNChanged [
DomainChanged \ GetBaseDN ] GetDomain ^ SetBaseDN _ SetDomain ` SetDefaults a SetReadSettings b AutoPackages c Set d Import e Export f Summary g ShortSummary h ReadLdapConfEntry i ReadLdapConfEntries j WriteLdapConfEntry k WriteLdapConfEntries l AddLdapConfEntry m CheckOES n Read o LDAPErrorMessage p LDAPErrorMap q LDAPError r GetBindDN s GetFirstServer t GetFirstPort u LDAPInit v ConnectWithoutTLS w LDAPInitWithTLSCheck x LDAPBind y GetLDAPPassword z LDAPAskAndBind { SingleValued | AttributeDescription } ObjectClassExists ~ ObjectClassStructural GetAllAttributes GetRequiredAttributes GetOptionalAttributes GetObjectAttributes AddMissingAttributes
InitSchema ConvertDefaultValues
ReadTemplates ReadConfigModules GetLDAPEntry ParentExists GetMainConfigDN GetConfigModules GetTemplates GetDefaultObjectClasses CreateTemplate CreateModule ReadDN GetGroupsDN CheckTemplateDN CommitConfigModules CommitTemplates WriteToLDAP WriteLDAP WriteOpenLdapConf
WritePlusLine CheckOrderOfCreation CreateDefaultLDAPConfiguration CheckNDS Write
WriteNow CheckBaseConfig SetBindPassword SetAnonymous SetGUI RestartSSHD } & + . 4 : ? @ F K ! ! O " " T # # Y $ $ Z % % _ & & ` ' ' c ( ( f , , n - - o . . s / / t 0 0 v 1 1 y 2 2 | 3 3 ~ 4 4 5 5 6 6 7 7 8 8 9 9 ; ; < < = = > > ? ? @ @ A A B B F F G G H H I I J J K K L L M M N N O O P P Q Q R R S S
T T U U V V X X " Y Y % Z Z . [ [ 3 \ \ : ] ] ? ^ ^ G new_base_dn _ _ P
new_domain ` ` X settings a a c read b b n c c } settings d d settings e e f f g g m m l n n u o o * type error p p q q r r s s servers t t servers u u v v errmap w w args x x O pass y y d enable_anonymous z z enable_anonymous { { attr | | attr } } class ~ ~ class class class class classes object 0 I templ [ w dn dn template
cn classes * cn class h base
search_filter base dn modules templs objects * objects E o login abort 2
T
dn {
pass
anon
gui
restart 3 UI UserInput
OpenDialog CloseDialog ChangeWidget
QueryWidget
ReplaceWidget
SetFocus
3 SCR Read Write Execute UnmountAgent 0 ldap-client3 Autologin Read Write 3 Directory vardir 3 FileUtils Exists 3 DNS IsHostLocal 3 Hostname
CurrentDomain 3 Label CancelButton YesButton NoButton OKButton ErrorMsg 3 Message ErrorWritingFile FailedToInstallPackages 3 Mode commandline autoinst test 3 Nsswitch Write WriteDb WriteAutofs ReadDb 3 Package Installed InstalledAll
InstallAll 3 Pam Remove Set Enabled Add 3 Popup Error YesNo 3 ProductFeatures
GetFeature 3 Progress New NextStage 3 Report Error 3 Service Enabled Start Stop Status Adjust
RunInitScript Restart 3 Stage cont 3! Summary
NotConfigured AddHeader AddLine $& $+ 1. ldap/routines.ycp 0
ldap-client% dn . dn_list . $ splitstring ,- % dn . rdn . $ - issubstring = substring + search = %' cn . . -)
sformat
cn=%1,%2 %0 cn dn . . -2 tolower
sformat
cn=%1%2 issubstring , substring search , %: object attr . . (< -= -> 2 Ldap.ycp$4 $: $? $@ $F $K $O ! $T " $Y # $Z $ $_ % $` & $c ' $f ( $i ) $j * $k + $n , $o - $s . $t / $v 0 yes$y 1 exop$| 2 $~ 3 $ 4 $ 5 $ 6 $ 7 $ 8 $ 9 $ :
group group_compat passwd
passwd_compat $ ; $ < $ = $ > $ ? $ @ $ A $ B $ C $ D $ E $ F
suseGroupConfiguration
suseMaxUniqueId 60000 suseMinUniqueId 1000 suseNextUniqueId 1000 suseSearchFilter objectClass=posixGroup suseGroupTemplate
objectClass top suseObjectTemplate suseGroupTemplate suseNamingAttribute cn
susePlugin UsersPluginLDAPAll suseUserConfiguration
suseMaxPasswordLength 8 suseMaxUniqueId 60000 suseMinPasswordLength 5 suseMinUniqueId 1000 suseNextUniqueId 1000 susePasswordHash SSHA suseSearchFilter objectClass=posixAccount suseSkelDir /etc/skel suseUserTemplate
objectClass top suseObjectTemplate suseUserTemplate suseDefaultValue homeDirectory=/home/%uid loginShell=/bin/bash suseNamingAttribute uid
susePlugin UsersPluginLDAPAll$ G $ H $ I
$ J
$ K $ L $ M
$ N
$ O CLEAR CRYPT SHA SSHA MD5 SMD5$ P suseUserConfiguration suseGroupConfiguration$ Q
$ R $
S $ T $ U $ V $ W $" X $% Y
%. Z -/ + %3 [ -4 Z %: \ -; ) %? ] -@ \ %G ^ &H ) (I && ) * * 4J &K + %P _ -Q ^ %X ` ,Z
y2milestone
using initial defaults: %1 &[ Q eval -\ %c a &e U -f U %n b (p &q union pam_ldap nss_ldap -s install remove %} c &~
start_ldap & % ldap_server & ) ldap_domain & , ldap_v2 & - ldap_tls & 1 pam_password exop & = bind_dn & 4 file_server & base_config_dn & 5 nss_base_passwd & 6 nss_base_passwd & 7 nss_base_group & # member_attribute member & @ create_ldap & "
login_enabled & ! start_autofs & .
tls_cacertdir & / tls_cacertfile & 0
tls_checkpeer yes & X mkhomedir X ( ! & union autofs & * ) & & % & $ # & ' & ( - % d , c - % e e $
start_ldap ldap_server % ldap_domain ) ldap_v2 , ldap_tls - bind_dn = file_server 4 base_config_dn pam_password 1 member_attribute # create_ldap @
login_enabled " mkhomedir X ( 0 yes'
tls_checkpeer 0 ( . '
tls_cacertdir . ( / ' tls_cacertfile / ( 5 ) ' nss_base_passwd 5 ( 6 ) ' nss_base_shadow 6 ( 7 ) ' nss_base_group 7 ( ' start_autofs ! - % f summary $ & LDAP Client Enabled ldap-client& Yes ldap-client & LDAP Domain ldap-client& ) ) & LDAP Server ldap-client& % % & LDAP Version 2 ldap-client& , Yes ldap-client & LDAP TLS/SSL ldap-client& - Yes ldap-client - % g nc summary $ $ & + +
sformat
<b>Servers</b>:%1<br> ldap-client % %
sformat
<b>Base DN</b>:%1<br> ldap-client ) )
sformat
<b>Client Enabled</b>:%1 ldap-client Yes ldap-client No ldap-client( ! & + + <br> Automounter Configured ldap-client ( - 4 & + + <br> LDAP TLS/SSL Configured ldap-client - % h entry defvalue value ret $ $ SCR::Read add ! .etc.ldap_conf.v."/etc/ldap.conf" ( & ( 4 & &
sformat
%1 - %& i entry ret $( SCR::Read add ! .etc.ldap_conf.v."/etc/ldap.conf" (* -+ (, 4- -. -1
sformat
%1 %9 j entry value ,;
SCR::Write add ! .etc.ldap_conf.v."/etc/ldap.conf" %H k entry value current values $J i $K ,L foreach val lval $M splitstring (N tolower tolower &O add &Q add mergestring (S size &T mergestring ,U
SCR::Write add ! .etc.ldap_conf.v."/etc/ldap.conf" %] l entry value current $_ i &` maplist e tolower (b ! contains tolower 4c ,d
SCR::Write add ! .etc.ldap_conf.v."/etc/ldap.conf" union %l m &m D NOVLam-n D %u n $ &w E globals ui_mode expert,z m ,| foreach db passwd group
passwd_compat group_compat '} : & || || contains : passwd ldap && contains : passwd compat contains :
passwd_compat ldap && D contains : passwd nam& & || contains : passwd nis && contains : passwd compat || contains :
passwd_compat nis size :
passwd_compat & && ypbind & % h host & ) h base & * ) & & % ( && && || % && % 127.0.0.1 ) dc=example,dc=com /usr/bin/dig !
4 domain out first srv $ ( && 4 out $ SCR::Execute .target.bash_output
domainname( exit & deletechars stdout
$ SCR::Execute .target.bash_output
sformat
dig SRV _ldap._tcp.%1 +short $ splitstring stdout
$ splitstring ( 4 dn & % substring - size ,
y2milestone
( LDAP server address acquired from DNS...$ , foreach part splitstring . ( & + , & + + dc= ( SCR::Execute .target.bash
sformat
P ldapsearch -x -h %1 -s base -b '' namingContexts | grep -i '^namingContexts: %2' % 4 ,
y2milestone
proposing DN %1 based on %2 & ) & , h ldap_version 3 2& - h ssl no start_tls& . h
tls_cacertdir & / h tls_cacertfile & 0 h
tls_checkpeer yes& 5 h nss_base_passwd ) & 6 h nss_base_shadow ) & 7 h nss_base_group ) & 1 h pam_password exop( 1 exop4 ( && SCR::Execute .target.bash ldapsearch -x -b '' -s base SCR::Execute .target.bashr ldapsearch -x -b '' -s base supportedExtension | grep -i '^supportedExtension:[[:space:]]*1.3.6.1.4.1.4203.1.11.1'4 ,
y2warning
3 'exop' value not supported on server, using 'crypt'& 1 crypt & SCR::Read .sysconfig.ldap.BASE_CONFIG_DN( & & 4 SCR::Read .sysconfig.ldap.FILE_SERVER yes( || U = 4 & = SCR::Read .sysconfig.ldap.BIND_DN ( || = = & = h binddn ( || U # 4 map_attrs $ i nss_map_attribute, foreach map_attr ( issubstring tolower uniquemember4 attr $ splitstring ( tolower uniquemember4 & # # ( # uniquemember& # uniqueMember & $ # & & ! && autofs( ! SCR::Execute .passwd.init
base_directory /etc4 error $ SCR::Read
.passwd.error,
y2error
error: %1 4 & W & 2 SCR::Read .passwd.passwd.pluslines, foreach plus_line 2 plus $ splitstring :( - size
/sbin/nologin& " & X
mkhomedir, ( 4 (
size Q 4 old_s old_d old_m ,
y2milestone
using values defined externaly$ & $ * $ $ , c Q & & & * & $ ( # 4 & # member& ' - %* o
ldap_error
error_type ret $,
initialize*
The server could be down or unreachable.
ldap-client
missing_dn(
The value of DN is missing or invalid.
ldap-client at_not_found
Attribute type not found.
ldap-client oc_not_found
Object class not found.
ldap-client$> init4 Connection to the LDAP server cannot be established. ldap-client bind7 A problem occurred while connecting to the LDAP server. ldap-client read; A problem occurred while reading data from the LDAP server. ldap-client users, There was a problem with writing LDAP users. ldap-client groups- There was a problem with writing LDAP groups. ldap-client write9 There was a problem with writing data to the LDAP server. ldap-client schema= A problem occurred while reading schema from the LDAP server. ldap-client(O || !
4P ,Q
y2error
Unknown LDAP error ,R
y2error
-S (V &V YaST error? ,X HBox HSpacing 0.5 VBox VSpacing 0.5 Left Heading Label An unknown LDAP error occurred. ldap-client ReplacePoint id rp Empty VSpacing 0.5 Left CheckBox id details opt notify
&Show Details ldap-client
PushButton id ok opt key_F10 default HSpacing 0.5$i (j ,k id details Enabled *l &n (o details4p (q id details Value,r id rp VBox Label ,u id rp Empty && ok cancel,y % p - SCR::Read .ldap.error% q err_map error $ p $ msg (
server_msg 4 &
sformat
%1
%2
server_msg - % r ( && < size = 4 ,
y2milestone
. --- bind dn not read yet or empty, reading now& = SCR::Read .sysconfig.ldap.BIND_DN( || = = & = h binddn - = % s l_servers srv ( && < 4 ,
y2milestone
- --- server not read yet or empty, reading now& h host $ splitstring $ - splitstring : % t l_servers srv s_port ( && < 4 ,
y2milestone
- --- server not read yet or empty, reading now& h host $ splitstring $ ( ! issubstring :- 3 $ substring + search : ( || tointeger - 3 - tointeger % u ret args init $ $ hostname s % port t % version , use_tls - yes no$ SCR::Execute .ldap ( 4 & 5 Unknown error. Perhaps 'yast2-ldap' is not available. ldap-client4 & T ( ! 4 & q - % v ret , HBox HSpacing 0.5 VBox VSpacing 0.5 Left Heading Left Label 4 Connection to the LDAP server cannot be established. ldap-client ReplacePoint id rp Empty VSpacing 0.2 Left CheckBox id details opt notify
&Show Details ldap-client VSpacing Left Label A possible reason for the failed connection may be that your client is
configured for TLS/SSL but the server does not support it.
Retry connection without TLS/SSL?
ldap-client HBox
PushButton id yes opt key_F10 default
PushButton id no opt key_F9 HSpacing 0.5$ * & ( details4 (
id details Value, id rp VBox Label msg , id rp Empty && yes no, - yes% w ret init unknown $ (
& hostname s % port t % version , use_tls - yes no $$ SCR::Execute .ldap $& 5 Unknown error. Perhaps 'yast2-ldap' is not available. ldap-client(' 4( &) 4, (- ! 4. errmap $/ p (0 && && use_tls yes tls_error v 42 '3 use_tls &4 SCR::Execute .ldap (5 &6 (7 ! &8 q 4: ,;
y2milestone
switching TLS off...&< B 4@ &A msg (B
server_msg &C
sformat
%1
%2
server_msg &F T -H %O x ret $Q (R 4S args $T
(U ! ; &V bind_dn = bind_pw (W ! SCR::Execute
.ldap.bind &X q &Z K -\ %d y ret pw ,f
opt decorated VBox HSpacing ( Password id pw opt hstretch &LDAP Server Password ldap-client Label
sformat
Server: %1:%2 ldap-client s % t % Label
sformat
Administrator: %1 ldap-client r HBox
PushButton id ok opt key_F10 default
PushButton id anon opt key_F6 &Anonymous Access ldap-client
PushButton id cancel opt key_F9 (x ! ,y id anon Enabled ,z id pw${ $| (} ok4~ & id pw Value& ; ( cancel& & ; , - % z pw (
- $ y ( 4 ldap_msg $ x ) && 4 , o bind & y & x - % { & tolower ( ! haskey N 4 attr_type $ SCR::Read .ldap.schema.at name ( &
' N - N single % | ( ! haskey N 4 attr_type $ SCR::Read .ldap.schema.at name ( &
' N - N desc % } - SCR::Read .ldap.schema.oc.check name % ~ object_class $ SCR::Read .ldap.schema.oc name - kind % & tolower ( ! haskey M 4 object_class $ SCR::Read .ldap.schema.oc name ( &
' all union may must , foreach sup_oc sup sup_all $ ' all union all ' must union must M must ' M - M all % & tolower ( ! haskey M 4 , - M must % & tolower ( ! haskey M 4 , - M may % ret $ , foreach class & union - % ," foreach class objectClass ,# foreach attr ($ && ! haskey ! haskey tolower &% add -( %0 schemas schema_dn $2 SCR::Read .ldap.search
attrs subschemaSubentry base_dn scope $7 subschemaSubentry (8 || -9 q (; ! SCR::Execute .ldap.schema schema_dn -< q &> S -? %I template $K add default_values
,L foreach value suseDefaultValue lvalue at v $M splitstring =$N $O size substring + search = 'R default_values -T %[ all &] J
$^ SCR::Read .ldap.search base_dn filter objectClass=suseObjectTemplate attrs scope map not_found_ok(f 4g -h q &k J mapmap dn templ template $l &m -n -p %w modules &y I
$z SCR::Read .ldap.search base_dn filter# objectClass=suseModuleConfiguration attrs scope map not_found_ok( 4 - q & I mapmap dn mod - % objects ( ! T 4 msg $ u ( 4 , o init - ( ! S 4 msg $ ( 4 , o schema - ( && < ! ; 4 & < z ( < - $ SCR::Read .ldap.search base_dn attrs scope not_found_ok( 4 , o read q - -
% parent object ( ! issubstring ,- $ substring + search , $ ( - (
4 ( ! 4 ,
y2error
r A direct parent for DN %1 does not exist in the LDAP directory. The object with the selected DN cannot be created. - ,
sformat
v A direct parent for DN '%1'
does not exist in the LDAP directory.
The object with the selected DN cannot be created.
ldap-client - - % - % - eval I % - eval J % ocs $ maplist c objectClass tolower ( contains susegrouptemplate4 - top
posixGroup groupOfNames( contains suseusertemplate4 - top posixAccount
shadowAccount
InetOrgPerson - %
obj $ cn modified added& maplist c tolower ( contains suseuserconfiguration4 & union F suseUserTemplate
( contains susegroupconfiguration4 & union F suseGroupTemplate
4 ' objectClass top suseObjectTemplate&! -" %* obj templs templ_cn default_base $, cn objectClass add top suseModuleConfiguration modified added&2 union F
$3 $4 $5 (6 tolower suseuserconfiguration47 ,8 foreach dn t J cls $9 maplist c objectClass tolower (9 contains suseusertemplate&: add (< &= usertemplate &>
sformat
ou=people,%1 ) (A && A tolower susePasswordHash clear4B 'C susePasswordHash clear (F tolower susegroupconfiguration4G ,H foreach dn t J cls $I maplist c objectClass tolower (J contains susegrouptemplate&K add (M &N
grouptemplate &O
sformat
ou=group,%1 ) (R 4S tdn i $T
sformat
cn=%1,%2 $U )V size 4W &X
sformat
cn=%1%2,%3 &Y + &[ '] suseDefaultTemplate '^ suseDefaultBase -_ %h all $j SCR::Read .ldap.search base_dn filter attrs cn attrsOnly scope dn_only(r 4s ,t o read q -u -w % ( L & L objectClass=posixGroup - L % object cls $ ( - (
4 -
$ maplist c objectClass tolower ( contains suseobjecttemplate4 & ' modified edited- 4 , \ An object with the selected DN exists, but it is not a template object.
Select another one.
ldap-client- % , foreach dn modmap ( ! haskey I 4 ' I eval & H - , foreach attr val ( I 4 ' I ( ! haskey modified' I modified edited & H ,
y2debug
modified value: %1 - % , foreach dn template ( ! haskey J 4 ' J eval & H - , foreach attr val ( J 4 ' J ( ! haskey modified' J modified edited & H ,
y2debug
modified value: %1 - % ret $
, foreach dn object action (
- $ modified ( & remove modified- ( haskey default_values4 ' suseDefaultValue maplist key val default_values
sformat
%1=%2 & remove default_values ( added4 ( !
SCR::Write .ldap.add dn & p ( edited4 ( !
SCR::Write .ldap.modify dn check_attrs & p ( renamed4
arg_map $ dn old_dn check_attrs( tolower tolower old_dn 4 ' new_dn ' deleteOldRDN' subtree ( haskey old_dn& remove old_dn ( !
SCR::Write .ldap.modify & p ( deleted4 ( old_dn & old_dn ( !
SCR::Write .ldap.delete dn & p -" %* error $,
(- || ; < 4. &/ < z (2 < 43 &4 (5
46 msg $7 msg (8
server_msg &9 + +
server_msg ,: o write -= &&
< %E write_openldap_conf out open_host open_base $G ( (I ! openldap2-client-J $L SCR::Execute .target.bash_output /bin/rpm -V openldap2-client$O SCR::Read / .etc.ldap_conf.v."/etc/openldap/ldap.conf".host$Q SCR::Read / .etc.ldap_conf.v."/etc/openldap/ldap.conf".base(U ! issubstring stdout /etc/openldap/ldap.conf&V (X && & * 4Y &Z (] 4^ ,`
SCR::Write / .etc.ldap_conf.v."/etc/openldap/ldap.conf".host % ,b
SCR::Write / .etc.ldap_conf.v."/etc/openldap/ldap.conf".base ) ,d
y2milestone
) file /etc/openldap/ldap.conf was modified -f %o file what
plus_lines
$q /etc/passwd$r +::::::(s ! &t +::::::/sbin/nologin (v ! W 4w (x ! SCR::Execute .passwd.init
base_directory /etc4y ,z
y2error
error: %1 SCR::Read
.passwd.error-{ 4~ & W & 2 SCR::Read .passwd.passwd.pluslines $ 2 ( ! contains 4 & maplist plus_line ( && ! +::::::- ( && issubstring :/sbin/nologin- - ( ! contains & add (
SCR::Write .passwd.passwd.pluslines 4 , SCR::Execute .target.bash
sformat
/bin/cp %1 %1.YaST2save ( !
SCR::Write
.passwd.users
4 , - & /etc/shadow& +& SCR::Read .passwd.shadow.pluslines( && ! contains ! contains +::::::::4 & add (
SCR::Write .passwd.shadow.pluslines 4 , SCR::Execute .target.bash
sformat
/bin/cp %1 %1.YaST2save ( !
SCR::Write .passwd.shadow
4 , - % , foreach dn m I base_dn template_dn $ suseDefaultBase ( 4 object $ ( 4 ,
y2warning
reference to nothing? (%1) ' I remove suseDefaultBase(
4 default_base $ objectClass top organizationalUnit modified added ou ( A 4 ' acl * 3#subtree#[Public]#[All Attributes Rights]! 1#subtree#[Public]#[Entry Rights] ( || ! ! 4 ,
y2error
%1 cannot be created ' I remove suseDefaultBase $ suseDefaultTemplate ( && ! haskey J 4 object $ ( size 4 t_class template ,
y2milestone
, template does not exist, creating default...$ contains objectClass suseGroupConfiguration suseGroupTemplate suseUserTemplate$ modified added cn & union F
( || ! ! 4 ,
y2error
%1 cannot be created ' I remove suseDefaultTemplate , foreach dn m J groups $ suseSecondaryGroup ( size 4
new_groups $ , foreach group object $ ( ||
4 ,
y2warning
# no such group %1;removing reference 4 &
add '
suseSecondaryGroup - % msg object modules templs user_dn group_dn update_modules template_dn $ ( ! T 4 & u ( 4 , o init - (" ! S 4# &$ (% 4& ,' o schema (* && < ! K 4+ &, x < (- 4. ,/ o bind &0 < $4 (5 -6 (7
48 (9 4:
config_object $; objectClass top organizationalUnit modified added ou (@ A 4A 'B acl * 3#subtree#[Public]#[All Attributes Rights]! 1#subtree#[Public]#[Entry Rights] (G ! 4H ,I
y2error
%1 cannot be created $O
$P
$Q userconfiguration$R groupconfiguration(T I
4U ,V ,Z foreach dn m I cl $[ maplist c objectClass tolower (\ contains suseuserconfiguration&] (^ contains susegroupconfiguration&_ (c && I
4e 'f suseUserConfiguration (k && I
4m 'n suseGroupConfiguration ,r &s $t $w
suseDefaultTemplate(y suseDefaultTemplate 4z &{ + cn=usertemplate, '| suseDefaultTemplate &} ( && J
4 ' suseUserConfiguration &
suseDefaultTemplate( suseDefaultTemplate 4 & + cn=grouptemplate, ' suseDefaultTemplate & ( && J
4 ' suseGroupConfiguration ( , , - % vendor output ( ! T 4 msg $ u ( 4 - $ SCR::Read .ldap.search
attrs
vendorVersion
vendorName base_dn scope ,
y2debug
vendor: %1 $
, foreach attr value ( issubstring Novell4 ,
y2debug
value: %1 & A & C - A % caption no_of_steps ypbind_running ldap_ok " $ Writing LDAP Configuration... ldap-client$ ,
Stop services ldap-client Update configuration files ldap-client Start services ldap-client& Update configuration in LDAP directory ldap-client Stopping services... ldap-client Updating configuration files... ldap-client Starting services... ldap-client+ Updating configuration in LDAP directory... ldap-client Finished ldap-client , ( eval - abort $ ( ! 4 & ypbind , ypbind( &&
4 , foreach db passwd group
passwd_compat group_compat ' : , ( eval - abort ( ' 4 , j host % , j base ) ( # $ 4 , k nss_map_attribute uniqueMember # , (
, , j ldap_version 2,
j ldap_version 3( - , j ssl start_tls, j ssl no, j
tls_cacertdir . . , j tls_cacertfile / / ,
mkhomedir X , j pam_password 1 ( h
pam_filter 4 , l
pam_filter objectClass=posixAccount &" 8 ) &# 9 ) ,% j nss_base_passwd && 5 ) 5 5 ,( j nss_base_shadow && 6 ) 6 6 ,+ j nss_base_group && 7 ) 7 7 ,0 j
tls_checkpeer 0 yes 0 (2 43 (5 && 1 nds E 46 (7 && ! C !
48 ,9 (; A 4< &= 1 nds ,? j pam_password 1 (C ! D 4D (F
krb54G ,K
ldap-account_only4N ,O
ldap,R passwd compat,S
passwd_compat union :
passwd_compat ldap,V foreach db services netgroup aliases ,W files ldap(Z && contains : group compat contains : group_compat ldap4\ ,]
y2milestone
" group_compat present, not changing4` ,a group files ldap,d ,f (h ! D 4i ,k foreach db passwd group new_db $l + _compat'm : filter v : ldap(o || : : files'p : compat 'q : filter v : ldap,s : compat ,t : ,w foreach db services netgroup aliases db_l $x filter v ldap(z &{ files ,| , (
ldap4 ,
ldap(
ldap-account_only4 ,
ldap-account_only ( !
SCR::Write .etc.ldap_conf4 ,
y2error
error writing ldap.conf file ( 4 , SCR::UnmountAgent .etc.ldap_conf ,
SCR::Write .sysconfig.ldap.FILE_SERVER 4 yes no,
SCR::Write .sysconfig.ldap.BASE_CONFIG_DN ,
SCR::Write .sysconfig.ldap.BIND_DN = ( !
SCR::Write .sysconfig.ldap4 ,
y2error
! error writing /etc/sysconfig/ldap ( 4 ( && ! ldap4 ( ! 4 , autofs enable4 , autofs disable ( , " , ( eval - abort ( ! 4 ( && nscd ' 4 , SCR::Execute .target.bash /usr/sbin/nscd -i passwd, SCR::Execute .target.bash /usr/sbin/nscd -i group, nscd try-restart ( && zmd
novell-zmd 4 ,
novell-zmd try-restart ( 4 , ypbind ( V 4 , sshd ( 4 , autofs( ! 4 , autofs ( && 4 services $ , foreach service dbus haldaemon ( & add ( size 4 ,
y2milestone
services %1 will be restarted ,
SCR::Write .target.string + /restart_services + mergestring
, ( eval - abort $ ( && @ !
4 & ( && H 4 , ( && J I 4 & H (
Y
4
,
Y &
' &
Y
,
&
K (
' 4
&
T &
& % &
* ) (
H 4
&
I
&
J
(
&& size Q 4
first_s $
s % (!
&& && && ) Q ldap_domain || Q ldap_server 4%
&&
R ,'
y2milestone
initial defaults were used &)
Q
-,
next%2
abort needed_packages $4
-4
$6
pam_ldap nss_ldap(8
&& ! ! autofs49
&:
add autofs (=
&& ! 4>
(?
! ,@
&A
&B
! (E
&& * ) 5 * 4F
&G
5 ) &H
6 ) &I
7 ) -L
next%T
object $V
(W
4X
-Y
([
4\
(^
|| !
sformat
@ No entry with DN '%1'
exists on the LDAP server. Create it now?
ldap-client 4a
config_object (b
! -c
$d
objectClass top organizationalUnit modified added ou (i
A 4j
'k
acl * 3#subtree#[Public]#[All Attributes Rights]! 1#subtree#[Public]#[Entry Rights] -p
-r
-t
%{
&|
< %
&
; %
&
%
&
V