ldapcherry/conf/roles.yml

admin-lv3:
    display_name: Administrators Level 3
    backends_groups:
        ldap:
            - cn=dns admins,ou=group,dc=example,dc=com
            - cn=nagios admins,ou=group,dc=example,dc=com
            - cn=puppet admins,ou=group,dc=example,dc=com
            - cn=users,ou=group,dc=example,dc=com
        ad:
            - Domain Users
            - Administrators
            - Domain Controllers 

admin-lv2:
    display_name: Administrators Level 2
    LC_admins: True
    backends_groups:
        ldap:
            - cn=nagios admins,ou=group,dc=example,dc=com
            - cn=users,ou=group,dc=example,dc=com
        ad:
            - Domain Users

developpers:
    display_name: Developpers
    backends_groups:
        ldap:
            - cn=developpers,ou=group,dc=example,dc=com
            - cn=users,ou=group,dc=example,dc=com
        ad:
            - Domain Users

users:
    display_name: Simple Users
    backends_groups:
        ldap:
            - cn=users,ou=group,dc=example,dc=com
        ad:
            - Domain Users
adding a canevas for role definition 2015-04-15 20:13:56 +02:00			`admin-lv3:`
			`display_name: Administrators Level 3`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`backends_groups:`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ldap:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- cn=dns admins,ou=group,dc=example,dc=com`
			`- cn=nagios admins,ou=group,dc=example,dc=com`
			`- cn=puppet admins,ou=group,dc=example,dc=com`
			`- cn=users,ou=group,dc=example,dc=com`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ad:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- Domain Users`
			`- Administrators`
			`- Domain Controllers`
adding a canevas for role definition 2015-04-15 20:13:56 +02:00
			`admin-lv2:`
			`display_name: Administrators Level 2`
unit test + admin roles fix * adding various unit tests * now admin roles are inherited (ex admin-lv2 is admin -> admin-lv3 is admin * adding an exception when requesting groups for none existant role 2015-05-16 23:52:59 +02:00			`LC_admins: True`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`backends_groups:`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ldap:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- cn=nagios admins,ou=group,dc=example,dc=com`
			`- cn=users,ou=group,dc=example,dc=com`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ad:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- Domain Users`
adding a canevas for role definition 2015-04-15 20:13:56 +02:00
			`developpers:`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`display_name: Developpers`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`backends_groups:`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ldap:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- cn=developpers,ou=group,dc=example,dc=com`
			`- cn=users,ou=group,dc=example,dc=com`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ad:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- Domain Users`
adding a canevas for role definition 2015-04-15 20:13:56 +02:00
			`users:`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`display_name: Simple Users`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`backends_groups:`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ldap:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- cn=users,ou=group,dc=example,dc=com`
implementing nesting roles 2015-05-15 01:03:31 +02:00			`ad:`
simplify roles configuration (backend groups) 2015-06-04 23:34:31 +02:00			`- Domain Users`