grahamc/hydra2 - Change SJXHTJTRMT75AMKDZB2YPNMI73LHUNUA7POQNSDUY7WTNNHYYY6QC

migrate to new openldap module syntax

Created by Jörg Thalheim on September 23, 2021

SJXHTJTRMT75AMKDZB2YPNMI73LHUNUA7POQNSDUY7WTNNHYYY6QC

Dependencies

In channels

main

Change contents

Replacement in flake.nix at line 854 [4.1]

B:BD[3.233] → [3.233:508]

              services.openldap = {
                enable = true;
                suffix = "dc=example";
                rootdn = "cn=root,dc=example";
                rootpw = "notapassword";
                database = "bdb";
                dataDir = "/var/lib/openldap";

[3.233]

[3.569]

              services.openldap.enable = true;
              services.openldap.settings.children = {
                "olcDatabase={1}mdb".attrs = {
                  objectClass = [ "olcDatabaseConfig" "olcMdbConfig" ];
                  database = "{1}mdbg";
                  olcSuffix = "dc=example";
                  olcRootDN = "cn=root,dc=example";
                  olcRootPW = "notapassword";
                  olcDbDirectory = "/var/lib/openldap";
                };
              };

Replacement in flake.nix at line 866 [4.1]

B:BD[3.570] → [2.0:211]

∅:D[2.211] → [3.611:819]

B:BD[3.611] → [3.611:819]

                # userPassword generated via `slappasswd`
                # The admin user has the password `password` and `user` has the password `foobar`.
                declarativeContents."dc=example" = ''
                  dn: dc=example
                  dc: example
                  o: Root
                  objectClass: top
                  objectClass: dcObject
                  objectClass: organization

[3.570]

[3.819]

              # userPassword generated via `slappasswd`
              # The admin user has the password `password` and `user` has the password `foobar`.
              services.openldap.declarativeContents."dc=example" = ''
                dn: dc=example
                dc: example
                o: Root
                objectClass: top
                objectClass: dcObject
                objectClass: organization

Replacement in flake.nix at line 876 [4.1]

B:BD[3.820] → [3.820:1016]

                  dn: ou=users,dc=example
                  ou: users
                  description: All users
                  objectClass: top
                  objectClass: organizationalUnit

[3.820]

[3.1016]

                dn: ou=users,dc=example
                ou: users
                description: All users
                objectClass: top
                objectClass: organizationalUnit

Replacement in flake.nix at line 882 [4.1]

B:BD[3.1017] → [5.0:199]

                  dn: ou=groups,dc=example
                  ou: groups
                  description: All groups
                  objectClass: top
                  objectClass: organizationalUnit

[3.1017]

[5.199]

                dn: ou=groups,dc=example
                ou: groups
                description: All groups
                objectClass: top
                objectClass: organizationalUnit

Replacement in flake.nix at line 888 [4.1]

B:BD[5.200] → [5.200:445]

                  dn: cn=hydra_admin,ou=groups,dc=example
                  cn: hydra_admin
                  description: Hydra Admin user group
                  objectClass: groupOfNames
                  member: cn=admin,ou=users,dc=example

[5.200]

[5.445]

                dn: cn=hydra_admin,ou=groups,dc=example
                cn: hydra_admin
                description: Hydra Admin user group
                objectClass: groupOfNames
                member: cn=admin,ou=users,dc=example

Replacement in flake.nix at line 894 [4.1]

∅:D[5.446] → [3.1017:1255]

B:BD[3.1017] → [3.1017:1255]

B:BD[3.1255] → [2.212:283]

                  dn: cn=user,ou=users,dc=example
                  objectClass: organizationalPerson
                  objectClass: inetOrgPerson
                  sn: user
                  cn: user
                  mail: user@example
                  userPassword: {SSHA}gLgBMb86/3wecoCp8gtORgIF2/qCRpqs

[5.446]

[5.447]

                dn: cn=user,ou=users,dc=example
                objectClass: organizationalPerson
                objectClass: inetOrgPerson
                sn: user
                cn: user
                mail: user@example
                userPassword: {SSHA}gLgBMb86/3wecoCp8gtORgIF2/qCRpqs

Replacement in flake.nix at line 902 [4.1]

B:BD[5.448] → [5.448:690]

B:BD[5.690] → [2.284:355]

∅:D[2.355] → [3.1294:1409]

∅:D[6.484] → [3.1294:1409]

∅:D[5.731] → [3.1294:1409]

B:BD[3.1294] → [3.1294:1409]

                  dn: cn=admin,ou=users,dc=example
                  objectClass: organizationalPerson
                  objectClass: inetOrgPerson
                  sn: admin
                  cn: admin
                  mail: admin@example
                  userPassword: {SSHA}BsgOQcRnoiULzwLrGmuzVGH6EC5Dkwmf
                '';
              };
              systemd.services.hdyra-server.environment.CATALYST_DEBUG = "1";

[5.448]

[3.1409]

                dn: cn=admin,ou=users,dc=example
                objectClass: organizationalPerson
                objectClass: inetOrgPerson
                sn: admin
                cn: admin
                mail: admin@example
                userPassword: {SSHA}BsgOQcRnoiULzwLrGmuzVGH6EC5Dkwmf
              '';
              systemd.services.hydra-server.environment.CATALYST_DEBUG = "1";