API tools faq
paste
Guest User

Untitled

a guest
Jun 10th, 2016
63
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 36.12 KB | None | 0 0
raw download clone embed print report
  1. <objectType>
  2. <kind>account</kind>
  3. <displayName>Normal Account</displayName>
  4. <default>true</default>
  5. <objectClass>ri:inetOrgPerson</objectClass>
  6. <auxiliaryObjectClass>ri:ldapPublicKey</auxiliaryObjectClass>
  7. <auxiliaryObjectClass>ri:inetUser</auxiliaryObjectClass>
  8. <auxiliaryObjectClass>ri:organizationalPerson</auxiliaryObjectClass>
  9. <auxiliaryObjectClass>ri:person</auxiliaryObjectClass>
  10. <auxiliaryObjectClass>ri:posixAccount</auxiliaryObjectClass>
  11. <auxiliaryObjectClass>ri:shadowAccount</auxiliaryObjectClass>
  12. <auxiliaryObjectClass>ri:top</auxiliaryObjectClass>
  13. <attribute>
  14. <c:ref>ri:dn</c:ref>
  15. <displayName>Distinguished Name</displayName>
  16. <limitations>
  17. <minOccurs>0</minOccurs>
  18. <access>
  19. <read>true</read>
  20. <add>true</add>
  21. <modify>true</modify>
  22. </access>
  23. </limitations>
  24. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  25. <outbound>
  26. <source>
  27. <c:path>$user/name</c:path>
  28. </source>
  29. <expression>
  30. <script>
  31. <code>
  32. import javax.naming.ldap.Rdn
  33. import javax.naming.ldap.LdapName
  34.  
  35. dn = new LdapName('ou=people,dc=mgmt,dc=symcpe,dc=net')
  36. dn.add(new Rdn('uid',name.toString()))
  37. return dn.toString()
  38. </code>
  39. </script>
  40. </expression>
  41. </outbound>
  42. </attribute>
  43. <attribute>
  44. <c:ref>ri:uid</c:ref>
  45. <displayName>UID</displayName>
  46. <limitations>
  47. <minOccurs>0</minOccurs>
  48. <access>
  49. <read>true</read>
  50. <add>true</add>
  51. <modify>true</modify>
  52. </access>
  53. </limitations>
  54. <outbound>
  55. <strength>weak</strength>
  56. <source>
  57. <c:path>$user/name</c:path>
  58. </source>
  59. </outbound>
  60. <inbound>
  61. <target>
  62. <c:path>$user/name</c:path>
  63. </target>
  64. </inbound>
  65. </attribute>
  66. <attribute>
  67. <c:ref>ri:cn</c:ref>
  68. <displayName>Common Name</displayName>
  69. <limitations>
  70. <minOccurs>0</minOccurs>
  71. <access>
  72. <read>true</read>
  73. <add>true</add>
  74. <modify>true</modify>
  75. </access>
  76. </limitations>
  77. <outbound>
  78. <strength>weak</strength>
  79. <source>
  80. <c:path>$user/name</c:path>
  81. </source>
  82. </outbound>
  83. </attribute>
  84. <attribute>
  85. <c:ref>ri:sn</c:ref>
  86. <displayName>Sur Name</displayName>
  87. <limitations>
  88. <minOccurs>0</minOccurs>
  89. <access>
  90. <read>true</read>
  91. <add>true</add>
  92. <modify>true</modify>
  93. </access>
  94. </limitations>
  95. <outbound>
  96. <strength>weak</strength>
  97. <source>
  98. <c:path>$user/name</c:path>
  99. </source>
  100. </outbound>
  101. </attribute>
  102. <attribute>
  103. <c:ref>ri:displayName</c:ref>
  104. <displayName>Display Name</displayName>
  105. <limitations>
  106. <minOccurs>0</minOccurs>
  107. <access>
  108. <read>true</read>
  109. <add>true</add>
  110. <modify>true</modify>
  111. </access>
  112. </limitations>
  113. <outbound>
  114. <strength>weak</strength>
  115. <source>
  116. <c:path>$user/name</c:path>
  117. </source>
  118. </outbound>
  119. </attribute>
  120. <attribute>
  121. <c:ref>ri:gecos</c:ref>
  122. <displayName>Gecos</displayName>
  123. <limitations>
  124. <minOccurs>0</minOccurs>
  125. <access>
  126. <read>true</read>
  127. <add>true</add>
  128. <modify>true</modify>
  129. </access>
  130. </limitations>
  131. <outbound>
  132. <strength>weak</strength>
  133. <source>
  134. <c:path>$user/name</c:path>
  135. </source>
  136. </outbound>
  137. </attribute>
  138. <attribute>
  139. <c:ref>ri:givenName</c:ref>
  140. <displayName>Given Name</displayName>
  141. <limitations>
  142. <minOccurs>0</minOccurs>
  143. <access>
  144. <read>true</read>
  145. <add>true</add>
  146. <modify>true</modify>
  147. </access>
  148. </limitations>
  149. <outbound>
  150. <strength>weak</strength>
  151. <source>
  152. <c:path>$user/givenName</c:path>
  153. </source>
  154. </outbound>
  155. <inbound>
  156. <target>
  157. <c:path>$user/givenName</c:path>
  158. </target>
  159. </inbound>
  160. </attribute>
  161. <attribute>
  162. <c:ref>ri:mail</c:ref>
  163. <displayName>Email</displayName>
  164. <limitations>
  165. <minOccurs>0</minOccurs>
  166. <access>
  167. <read>true</read>
  168. <add>true</add>
  169. <modify>true</modify>
  170. </access>
  171. </limitations>
  172. <outbound>
  173. <strength>weak</strength>
  174. <source>
  175. <c:path>$user/mail</c:path>
  176. </source>
  177. </outbound>
  178. <inbound>
  179. <target>
  180. <c:path>$user/emailAddress</c:path>
  181. </target>
  182. </inbound>
  183. </attribute>
  184. <attribute>
  185. <c:ref>ri:gidNumber</c:ref>
  186. <displayName>Group ID</displayName>
  187. <limitations>
  188. <minOccurs>0</minOccurs>
  189. <access>
  190. <read>true</read>
  191. <add>true</add>
  192. <modify>true</modify>
  193. </access>
  194. </limitations>
  195. <outbound>
  196. <strength>weak</strength>
  197. <source>
  198. <c:path>extension/gidNumber</c:path>
  199. </source>
  200. </outbound>
  201. </attribute>
  202. <attribute>
  203. <c:ref>ri:homeDirectory</c:ref>
  204. <displayName>Home Directory</displayName>
  205. <limitations>
  206. <minOccurs>0</minOccurs>
  207. <access>
  208. <read>true</read>
  209. <add>true</add>
  210. <modify>true</modify>
  211. </access>
  212. </limitations>
  213. <outbound>
  214. <strength>weak</strength>
  215. <source>
  216. <c:path>$user/name</c:path>
  217. </source>
  218. <expression>
  219. <script>
  220. <code>'/home/'+name</code>
  221. </script>
  222. </expression>
  223. </outbound>
  224. </attribute>
  225. <attribute>
  226. <c:ref>ri:uidNumber</c:ref>
  227. <displayName>UID Number</displayName>
  228. <limitations>
  229. <minOccurs>0</minOccurs>
  230. <access>
  231. <read>true</read>
  232. <add>true</add>
  233. <modify>true</modify>
  234. </access>
  235. </limitations>
  236. <outbound>
  237. <strength>weak</strength>
  238. <source>
  239. <c:path>extension/uidNumber</c:path>
  240. </source>
  241. </outbound>
  242. </attribute>
  243. <attribute>
  244. <c:ref>ri:loginShell</c:ref>
  245. <displayName>Login Shell</displayName>
  246. <limitations>
  247. <minOccurs>0</minOccurs>
  248. <access>
  249. <read>true</read>
  250. <add>true</add>
  251. <modify>true</modify>
  252. </access>
  253. </limitations>
  254. <outbound>
  255. <strength>weak</strength>
  256. <expression>
  257. <value>/bin/bash</value>
  258. </expression>
  259. </outbound>
  260. </attribute>
  261. <attribute>
  262. <c:ref>ri:shadowExpire</c:ref>
  263. <limitations>
  264. <minOccurs>0</minOccurs>
  265. <access>
  266. <read>true</read>
  267. <add>true</add>
  268. <modify>true</modify>
  269. </access>
  270. </limitations>
  271. <outbound>
  272. <strength>weak</strength>
  273. <expression>
  274. <value>-1</value>
  275. </expression>
  276. </outbound>
  277. </attribute>
  278. <attribute>
  279. <c:ref>ri:shadowFlag</c:ref>
  280. <limitations>
  281. <minOccurs>0</minOccurs>
  282. <access>
  283. <read>true</read>
  284. <add>true</add>
  285. <modify>true</modify>
  286. </access>
  287. </limitations>
  288. <outbound>
  289. <strength>weak</strength>
  290. <expression>
  291. <value>0</value>
  292. </expression>
  293. </outbound>
  294. </attribute>
  295. <attribute>
  296. <c:ref>ri:shadowLastChange</c:ref>
  297. <limitations>
  298. <minOccurs>0</minOccurs>
  299. <access>
  300. <read>true</read>
  301. <add>true</add>
  302. <modify>true</modify>
  303. </access>
  304. </limitations>
  305. <outbound>
  306. <strength>weak</strength>
  307. <expression>
  308. <value>1</value>
  309. </expression>
  310. </outbound>
  311. </attribute>
  312. <attribute>
  313. <c:ref>ri:shadowMax</c:ref>
  314. <limitations>
  315. <minOccurs>0</minOccurs>
  316. <access>
  317. <read>true</read>
  318. <add>true</add>
  319. <modify>true</modify>
  320. </access>
  321. </limitations>
  322. <outbound>
  323. <strength>weak</strength>
  324. <expression>
  325. <value>99999</value>
  326. </expression>
  327. </outbound>
  328. </attribute>
  329. <attribute>
  330. <c:ref>ri:shadowMin</c:ref>
  331. <limitations>
  332. <minOccurs>0</minOccurs>
  333. <access>
  334. <read>true</read>
  335. <add>true</add>
  336. <modify>true</modify>
  337. </access>
  338. </limitations>
  339. <outbound>
  340. <strength>weak</strength>
  341. <expression>
  342. <value>0</value>
  343. </expression>
  344. </outbound>
  345. </attribute>
  346. <attribute>
  347. <c:ref>ri:shadowWarning</c:ref>
  348. <limitations>
  349. <minOccurs>0</minOccurs>
  350. <access>
  351. <read>true</read>
  352. <add>true</add>
  353. <modify>true</modify>
  354. </access>
  355. </limitations>
  356. <outbound>
  357. <strength>weak</strength>
  358. <expression>
  359. <value>7</value>
  360. </expression>
  361. </outbound>
  362. </attribute>
  363. <association>
  364. <c:ref>ri:openstackDomains</c:ref>
  365. <displayName>LDAP Group Membership</displayName>
  366. <kind>entitlement</kind>
  367. <intent>openstackDomains</intent>
  368. <direction>objectToSubject</direction>
  369. <associationAttribute>ri:member</associationAttribute>
  370. <valueAttribute>ri:dn</valueAttribute>
  371. </association>
  372. <association>
  373. <c:ref>ri:userGroups_GoN</c:ref>
  374. <displayName>Group Of Names Membership</displayName>
  375. <kind>entitlement</kind>
  376. <intent>userGroups_GoN</intent>
  377. <direction>objectToSubject</direction>
  378. <associationAttribute>ri:member</associationAttribute>
  379. <valueAttribute>ri:dn</valueAttribute>
  380. </association>
  381. <association>
  382. <c:ref>ri:userGroups_posix</c:ref>
  383. <displayName>POSIX Membership</displayName>
  384. <kind>entitlement</kind>
  385. <intent>userGroups_posix</intent>
  386. <direction>objectToSubject</direction>
  387. <associationAttribute>ri:memberUid</associationAttribute>
  388. <valueAttribute>ri:uid</valueAttribute>
  389. </association>
  390. <association>
  391. <c:ref>ri:serviceGroups</c:ref>
  392. <displayName>Service Groups</displayName>
  393. <kind>entitlement</kind>
  394. <intent>serviceGroups</intent>
  395. <direction>objectToSubject</direction>
  396. <associationAttribute>ri:memberUid</associationAttribute>
  397. <valueAttribute>ri:uid</valueAttribute>
  398. </association>
  399. <activation>
  400. <administrativeStatus>
  401. <outbound>
  402. <expression>
  403. <asIs/>
  404. </expression>
  405. </outbound>
  406. </administrativeStatus>
  407. </activation>
  408. <credentials>
  409. <password>
  410. <outbound>
  411. <expression>
  412. <asIs/>
  413. </expression>
  414. </outbound>
  415. </password>
  416. </credentials>
  417. </objectType>
  418. <objectType>
  419. <kind>entitlement</kind>
  420. <intent>openstackDomains</intent>
  421. <displayName>Openstack Domain Groups</displayName>
  422. <objectClass>ri:groupOfNames</objectClass>
  423. <attribute>
  424. <c:ref>ri:dn</c:ref>
  425. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:distinguishedName</matchingRule>
  426. <outbound>
  427. <source>
  428. <c:path>$focus/name</c:path>
  429. </source>
  430. <expression>
  431. <script>
  432. <code>
  433. import javax.naming.ldap.Rdn
  434. import javax.naming.ldap.LdapName
  435.  
  436. dn = new LdapName('ou=OpenstackDomains,dc=mgmt,dc=symcpe,dc=net')
  437. dn.add(new Rdn('cn', name.toString()))
  438. return dn.toString()
  439. </code>
  440. </script>
  441. </expression>
  442. </outbound>
  443. </attribute>
  444. <attribute>
  445. <c:ref>ri:member</c:ref>
  446. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:distinguishedName</matchingRule>
  447. </attribute>
  448. <attribute>
  449. <c:ref>ri:cn</c:ref>
  450. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  451. <outbound>
  452. <strength>weak</strength>
  453. <source>
  454. <c:path>$focus/name</c:path>
  455. </source>
  456. </outbound>
  457. </attribute>
  458. <attribute>
  459. <c:ref>ri:description</c:ref>
  460. <outbound>
  461. <source>
  462. <c:path>description</c:path>
  463. </source>
  464. </outbound>
  465. </attribute>
  466. <configuredCapabilities xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
  467. <cap:pagedSearch>
  468. <cap:defaultSortField>ri:uid</cap:defaultSortField>
  469. </cap:pagedSearch>
  470. </configuredCapabilities>
  471. </objectType>
  472. <objectType>
  473. <kind>entitlement</kind>
  474. <intent>userGroups_GoN</intent>
  475. <displayName>User Groups</displayName>
  476. <objectClass>ri:groupOfNames</objectClass>
  477. <attribute>
  478. <c:ref>ri:dn</c:ref>
  479. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:distinguishedName</matchingRule>
  480. <outbound>
  481. <source>
  482. <c:path>$focus/name</c:path>
  483. </source>
  484. <expression>
  485. <script>
  486. <code>
  487. import javax.naming.ldap.Rdn
  488. import javax.naming.ldap.LdapName
  489.  
  490. dn = new LdapName('ou=GoN,ou=Groups,dc=mgmt,dc=symcpe,dc=net')
  491. dn.add(new Rdn('cn', name.toString()))
  492. return dn.toString()
  493. </code>
  494. </script>
  495. </expression>
  496. </outbound>
  497. </attribute>
  498. <attribute>
  499. <c:ref>ri:member</c:ref>
  500. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  501. </attribute>
  502. <attribute>
  503. <c:ref>ri:cn</c:ref>
  504. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  505. <outbound>
  506. <strength>weak</strength>
  507. <source>
  508. <c:path>$focus/name</c:path>
  509. </source>
  510. </outbound>
  511. </attribute>
  512. <attribute>
  513. <c:ref>ri:description</c:ref>
  514. <outbound>
  515. <source>
  516. <c:path>description</c:path>
  517. </source>
  518. </outbound>
  519. </attribute>
  520. <configuredCapabilities xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
  521. <cap:pagedSearch>
  522. <cap:defaultSortField>ri:uid</cap:defaultSortField>
  523. </cap:pagedSearch>
  524. </configuredCapabilities>
  525. </objectType>
  526. <objectType>
  527. <kind>entitlement</kind>
  528. <intent>serviceGroups</intent>
  529. <displayName>Service Groups</displayName>
  530. <objectClass>ri:posixGroup</objectClass>
  531. <attribute>
  532. <c:ref>ri:dn</c:ref>
  533. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:distinguishedName</matchingRule>
  534. <outbound>
  535. <source>
  536. <c:path>$focus/name</c:path>
  537. </source>
  538. <expression>
  539. <script>
  540. <code>
  541. import javax.naming.ldap.Rdn
  542. import javax.naming.ldap.LdapName
  543.  
  544. dn = new LdapName('ou=Groups,ou=services,dc=mgmt,dc=symcpe,dc=net')
  545. dn.add(new Rdn('cn', name.toString()))
  546. return dn.toString()
  547. </code>
  548. </script>
  549. </expression>
  550. </outbound>
  551. </attribute>
  552. <attribute>
  553. <c:ref>ri:memberUid</c:ref>
  554. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  555. </attribute>
  556. <attribute>
  557. <c:ref>ri:cn</c:ref>
  558. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  559. <outbound>
  560. <strength>weak</strength>
  561. <source>
  562. <c:path>$focus/name</c:path>
  563. </source>
  564. </outbound>
  565. </attribute>
  566. <attribute>
  567. <c:ref>ri:description</c:ref>
  568. <outbound>
  569. <source>
  570. <c:path>description</c:path>
  571. </source>
  572. </outbound>
  573. </attribute>
  574. <attribute>
  575. <c:ref>ri:gidNumber</c:ref>
  576. <outbound>
  577. <strength>strong</strength>
  578. <source>
  579. <c:path>extension/gidNumber</c:path>
  580. </source>
  581. </outbound>
  582. </attribute>
  583. <configuredCapabilities xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
  584. <cap:pagedSearch>
  585. <cap:defaultSortField>ri:uid</cap:defaultSortField>
  586. </cap:pagedSearch>
  587. </configuredCapabilities>
  588. </objectType>
  589. <objectType>
  590. <kind>entitlement</kind>
  591. <intent>userGroups_posix</intent>
  592. <displayName>User Groups</displayName>
  593. <objectClass>ri:posixGroup</objectClass>
  594. <attribute>
  595. <c:ref>ri:dn</c:ref>
  596. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:distinguishedName</matchingRule>
  597. <outbound>
  598. <source>
  599. <c:path>$focus/name</c:path>
  600. </source>
  601. <expression>
  602. <script>
  603. <code>
  604. import javax.naming.ldap.Rdn
  605. import javax.naming.ldap.LdapName
  606.  
  607. dn = new LdapName('ou=posix,ou=Groups,dc=mgmt,dc=symcpe,dc=net')
  608. dn.add(new Rdn('cn', name.toString()))
  609. return dn.toString()
  610. </code>
  611. </script>
  612. </expression>
  613. </outbound>
  614. </attribute>
  615. <attribute>
  616. <c:ref>ri:memberUid</c:ref>
  617. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:distinguishedName</matchingRule>
  618. </attribute>
  619. <attribute>
  620. <c:ref>ri:cn</c:ref>
  621. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  622. <outbound>
  623. <strength>weak</strength>
  624. <source>
  625. <c:path>$focus/name</c:path>
  626. </source>
  627. </outbound>
  628. </attribute>
  629. <attribute>
  630. <c:ref>ri:description</c:ref>
  631. <outbound>
  632. <source>
  633. <c:path>description</c:path>
  634. </source>
  635. </outbound>
  636. </attribute>
  637. <attribute>
  638. <c:ref>ri:gidNumber</c:ref>
  639. <outbound>
  640. <strength>strong</strength>
  641. <source>
  642. <c:path>extension/gidNumber</c:path>
  643. </source>
  644. </outbound>
  645. </attribute>
  646. <configuredCapabilities xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3">
  647. <cap:pagedSearch>
  648. <cap:defaultSortField>ri:uid</cap:defaultSortField>
  649. </cap:pagedSearch>
  650. </configuredCapabilities>
  651. </objectType>
  652. <objectType>
  653. <kind>account</kind>
  654. <intent>service</intent>
  655. <displayName>Service Accounts</displayName>
  656. <objectClass>ri:inetOrgPerson</objectClass>
  657. <auxiliaryObjectClass>ri:ldapPublicKey</auxiliaryObjectClass>
  658. <auxiliaryObjectClass>ri:inetUser</auxiliaryObjectClass>
  659. <auxiliaryObjectClass>ri:organizationalPerson</auxiliaryObjectClass>
  660. <auxiliaryObjectClass>ri:person</auxiliaryObjectClass>
  661. <auxiliaryObjectClass>ri:posixAccount</auxiliaryObjectClass>
  662. <auxiliaryObjectClass>ri:shadowAccount</auxiliaryObjectClass>
  663. <auxiliaryObjectClass>ri:top</auxiliaryObjectClass>
  664. <attribute>
  665. <c:ref>ri:dn</c:ref>
  666. <displayName>Distinguished Name</displayName>
  667. <limitations>
  668. <minOccurs>0</minOccurs>
  669. <access>
  670. <read>true</read>
  671. <add>true</add>
  672. <modify>true</modify>
  673. </access>
  674. </limitations>
  675. <matchingRule xmlns:mr="http://prism.evolveum.com/xml/ns/public/matching-rule-3">mr:stringIgnoreCase</matchingRule>
  676. <outbound>
  677. <source>
  678. <c:path>$user/name</c:path>
  679. </source>
  680. <expression>
  681. <script>
  682. <code>
  683. import javax.naming.ldap.Rdn
  684. import javax.naming.ldap.LdapName
  685.  
  686. dn = new LdapName('ou=accounts,ou=services,dc=mgmt,dc=symcpe,dc=net')
  687. dn.add(new Rdn('uid',name.toString()))
  688. return dn.toString()
  689. </code>
  690. </script>
  691. </expression>
  692. </outbound>
  693. </attribute>
  694. <attribute>
  695. <c:ref>ri:uid</c:ref>
  696. <displayName>UID</displayName>
  697. <limitations>
  698. <minOccurs>0</minOccurs>
  699. <access>
  700. <read>true</read>
  701. <add>true</add>
  702. <modify>true</modify>
  703. </access>
  704. </limitations>
  705. <outbound>
  706. <strength>weak</strength>
  707. <source>
  708. <c:path>$user/name</c:path>
  709. </source>
  710. </outbound>
  711. <inbound>
  712. <target>
  713. <c:path>$user/name</c:path>
  714. </target>
  715. </inbound>
  716. </attribute>
  717. <attribute>
  718. <c:ref>ri:cn</c:ref>
  719. <displayName>Common Name</displayName>
  720. <limitations>
  721. <minOccurs>0</minOccurs>
  722. <access>
  723. <read>true</read>
  724. <add>true</add>
  725. <modify>true</modify>
  726. </access>
  727. </limitations>
  728. <outbound>
  729. <strength>weak</strength>
  730. <source>
  731. <c:path>$user/name</c:path>
  732. </source>
  733. </outbound>
  734. </attribute>
  735. <attribute>
  736. <c:ref>ri:sn</c:ref>
  737. <displayName>Sur Name</displayName>
  738. <limitations>
  739. <minOccurs>0</minOccurs>
  740. <access>
  741. <read>true</read>
  742. <add>true</add>
  743. <modify>true</modify>
  744. </access>
  745. </limitations>
  746. <outbound>
  747. <strength>weak</strength>
  748. <source>
  749. <c:path>$user/name</c:path>
  750. </source>
  751. </outbound>
  752. </attribute>
  753. <attribute>
  754. <c:ref>ri:displayName</c:ref>
  755. <displayName>Display Name</displayName>
  756. <limitations>
  757. <minOccurs>0</minOccurs>
  758. <access>
  759. <read>true</read>
  760. <add>true</add>
  761. <modify>true</modify>
  762. </access>
  763. </limitations>
  764. <outbound>
  765. <strength>weak</strength>
  766. <source>
  767. <c:path>$user/name</c:path>
  768. </source>
  769. </outbound>
  770. </attribute>
  771. <attribute>
  772. <c:ref>ri:gecos</c:ref>
  773. <displayName>Gecos</displayName>
  774. <limitations>
  775. <minOccurs>0</minOccurs>
  776. <access>
  777. <read>true</read>
  778. <add>true</add>
  779. <modify>true</modify>
  780. </access>
  781. </limitations>
  782. <outbound>
  783. <strength>weak</strength>
  784. <source>
  785. <c:path>$user/name</c:path>
  786. </source>
  787. </outbound>
  788. </attribute>
  789. <attribute>
  790. <c:ref>ri:givenName</c:ref>
  791. <displayName>Given Name</displayName>
  792. <limitations>
  793. <minOccurs>0</minOccurs>
  794. <access>
  795. <read>true</read>
  796. <add>true</add>
  797. <modify>true</modify>
  798. </access>
  799. </limitations>
  800. <outbound>
  801. <strength>weak</strength>
  802. <source>
  803. <c:path>$user/givenName</c:path>
  804. </source>
  805. </outbound>
  806. <inbound>
  807. <target>
  808. <c:path>$user/givenName</c:path>
  809. </target>
  810. </inbound>
  811. </attribute>
  812. <attribute>
  813. <c:ref>ri:mail</c:ref>
  814. <displayName>Email</displayName>
  815. <limitations>
  816. <minOccurs>0</minOccurs>
  817. <access>
  818. <read>true</read>
  819. <add>true</add>
  820. <modify>true</modify>
  821. </access>
  822. </limitations>
  823. <outbound>
  824. <strength>weak</strength>
  825. <source>
  826. <c:path>$user/mail</c:path>
  827. </source>
  828. </outbound>
  829. <inbound>
  830. <target>
  831. <c:path>$user/emailAddress</c:path>
  832. </target>
  833. </inbound>
  834. </attribute>
  835. <attribute>
  836. <c:ref>ri:gidNumber</c:ref>
  837. <displayName>Group ID</displayName>
  838. <limitations>
  839. <minOccurs>0</minOccurs>
  840. <access>
  841. <read>true</read>
  842. <add>true</add>
  843. <modify>true</modify>
  844. </access>
  845. </limitations>
  846. <outbound>
  847. <strength>weak</strength>
  848. <source>
  849. <c:path>extension/gidNumber</c:path>
  850. </source>
  851. </outbound>
  852. </attribute>
  853. <attribute>
  854. <c:ref>ri:homeDirectory</c:ref>
  855. <displayName>Home Directory</displayName>
  856. <limitations>
  857. <minOccurs>0</minOccurs>
  858. <access>
  859. <read>true</read>
  860. <add>true</add>
  861. <modify>true</modify>
  862. </access>
  863. </limitations>
  864. <outbound>
  865. <strength>weak</strength>
  866. <source>
  867. <c:path>$user/name</c:path>
  868. </source>
  869. <expression>
  870. <script>
  871. <code>'/home/'+name</code>
  872. </script>
  873. </expression>
  874. </outbound>
  875. </attribute>
  876. <attribute>
  877. <c:ref>ri:uidNumber</c:ref>
  878. <displayName>UID Number</displayName>
  879. <limitations>
  880. <minOccurs>0</minOccurs>
  881. <access>
  882. <read>true</read>
  883. <add>true</add>
  884. <modify>true</modify>
  885. </access>
  886. </limitations>
  887. <outbound>
  888. <strength>weak</strength>
  889. <source>
  890. <c:path>extension/uidNumber</c:path>
  891. </source>
  892. </outbound>
  893. </attribute>
  894. <attribute>
  895. <c:ref>ri:loginShell</c:ref>
  896. <displayName>Login Shell</displayName>
  897. <limitations>
  898. <minOccurs>0</minOccurs>
  899. <access>
  900. <read>true</read>
  901. <add>true</add>
  902. <modify>true</modify>
  903. </access>
  904. </limitations>
  905. <outbound>
  906. <strength>weak</strength>
  907. <expression>
  908. <value>/bin/bash</value>
  909. </expression>
  910. </outbound>
  911. </attribute>
  912. <attribute>
  913. <c:ref>ri:shadowExpire</c:ref>
  914. <limitations>
  915. <minOccurs>0</minOccurs>
  916. <access>
  917. <read>true</read>
  918. <add>true</add>
  919. <modify>true</modify>
  920. </access>
  921. </limitations>
  922. <outbound>
  923. <strength>weak</strength>
  924. <expression>
  925. <value>-1</value>
  926. </expression>
  927. </outbound>
  928. </attribute>
  929. <attribute>
  930. <c:ref>ri:shadowFlag</c:ref>
  931. <limitations>
  932. <minOccurs>0</minOccurs>
  933. <access>
  934. <read>true</read>
  935. <add>true</add>
  936. <modify>true</modify>
  937. </access>
  938. </limitations>
  939. <outbound>
  940. <strength>weak</strength>
  941. <expression>
  942. <value>0</value>
  943. </expression>
  944. </outbound>
  945. </attribute>
  946. <attribute>
  947. <c:ref>ri:shadowLastChange</c:ref>
  948. <limitations>
  949. <minOccurs>0</minOccurs>
  950. <access>
  951. <read>true</read>
  952. <add>true</add>
  953. <modify>true</modify>
  954. </access>
  955. </limitations>
  956. <outbound>
  957. <strength>weak</strength>
  958. <expression>
  959. <value>1</value>
  960. </expression>
  961. </outbound>
  962. </attribute>
  963. <attribute>
  964. <c:ref>ri:shadowMax</c:ref>
  965. <limitations>
  966. <minOccurs>0</minOccurs>
  967. <access>
  968. <read>true</read>
  969. <add>true</add>
  970. <modify>true</modify>
  971. </access>
  972. </limitations>
  973. <outbound>
  974. <strength>weak</strength>
  975. <expression>
  976. <value>99999</value>
  977. </expression>
  978. </outbound>
  979. </attribute>
  980. <attribute>
  981. <c:ref>ri:shadowMin</c:ref>
  982. <limitations>
  983. <minOccurs>0</minOccurs>
  984. <access>
  985. <read>true</read>
  986. <add>true</add>
  987. <modify>true</modify>
  988. </access>
  989. </limitations>
  990. <outbound>
  991. <strength>weak</strength>
  992. <expression>
  993. <value>0</value>
  994. </expression>
  995. </outbound>
  996. </attribute>
  997. <attribute>
  998. <c:ref>ri:shadowWarning</c:ref>
  999. <limitations>
  1000. <minOccurs>0</minOccurs>
  1001. <access>
  1002. <read>true</read>
  1003. <add>true</add>
  1004. <modify>true</modify>
  1005. </access>
  1006. </limitations>
  1007. <outbound>
  1008. <strength>weak</strength>
  1009. <expression>
  1010. <value>7</value>
  1011. </expression>
  1012. </outbound>
  1013. </attribute>
  1014. <association>
  1015. <c:ref>ri:userGroups_posix</c:ref>
  1016. <displayName>POSIX Membership</displayName>
  1017. <kind>entitlement</kind>
  1018. <intent>userGroups_posix</intent>
  1019. <direction>objectToSubject</direction>
  1020. <associationAttribute>ri:memberUid</associationAttribute>
  1021. <valueAttribute>ri:uid</valueAttribute>
  1022. </association>
  1023. <association>
  1024. <c:ref>ri:userGroups_GoN</c:ref>
  1025. <displayName>Group Of Names Membership</displayName>
  1026. <kind>entitlement</kind>
  1027. <intent>userGroups_GoN</intent>
  1028. <direction>objectToSubject</direction>
  1029. <associationAttribute>ri:member</associationAttribute>
  1030. <valueAttribute>ri:dn</valueAttribute>
  1031. </association>
  1032. <association>
  1033. <c:ref>ri:serviceGroups</c:ref>
  1034. <displayName>Service Groups</displayName>
  1035. <kind>entitlement</kind>
  1036. <intent>serviceGroups</intent>
  1037. <direction>objectToSubject</direction>
  1038. <associationAttribute>ri:memberUid</associationAttribute>
  1039. <valueAttribute>ri:uid</valueAttribute>
  1040. </association>
  1041. <activation>
  1042. <administrativeStatus>
  1043. <outbound>
  1044. <expression>
  1045. <asIs/>
  1046. </expression>
  1047. </outbound>
  1048. </administrativeStatus>
  1049. </activation>
  1050. <credentials>
  1051. <password>
  1052. <outbound>
  1053. <expression>
  1054. <asIs/>
  1055. </expression>
  1056. </outbound>
  1057. </password>
  1058. </credentials>
  1059. </objectType>
  1060. </schemaHandling>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!