From d65f58d1597e67b199ee3419cf017491f0a309ec Mon Sep 17 00:00:00 2001
From: Jonas Smedegaard <dr@jones.dk>
Date: Wed, 17 Sep 2008 09:04:06 +0200
Subject: Add horde admin to new SAM admin group with password write access.

---
 ldap/mkldapdb | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'ldap/mkldapdb')

diff --git a/ldap/mkldapdb b/ldap/mkldapdb
index 2e0d34a..4e297c3 100755
--- a/ldap/mkldapdb
+++ b/ldap/mkldapdb
@@ -73,3 +73,13 @@ cn: DSA
 description: Directory System Agent administrators
 uniqueMember: cn=cipux,ou=Entities,ou=Access Control,$basedn
 EOF
+ldapadd -x -h localhost -D "cn=admin,$basedn" -W <<EOF
+dn: cn=SAM,ou=Administrators,ou=Groups,ou=Access Control,$basedn
+objectClass: groupOfUniqueNames
+cn: SAM
+description: Samba and NSS services administrators
+uniqueMember: cn=horde,ou=Entities,ou=Access Control,$basedn
+EOF
+
+# TODO: Add "uid=cifsdc,ou=Entities,ou=Access Control,@SUFFIX@" to group
+#       "cn=SAM,ou=Administrators,ou=Access Control,@SUFFIX@" for samba
-- 
cgit v1.2.3