Skip to content

CESNET/389ds-plugin-ssm

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

389ds-plugin-ssm

Server Side Modification plugin

The plugin provides facilities for server-side updating entry based on it's attribute values, modifiers DN, and time.

Compilation

$ apt-get install 389-ds-base-dev libnspr4-dev
$ make clean
$ make ssm

Instalation

$ cp ssm.so /usr/lib/x86_64-linux-gnu/dirsrv/plugins
$ cat SSM.ldif | ldapmodify -H ldap://localhost -D "cn=Directory Manager" -W
$ cp udb.conf /etc/dirsrv/slapd-ldap/
$ systemctl restart dirsrv@ldap

Configuration

Example of configuration file is in udb.conf and test.cfg. Syntax of conf file:

MODIFIED-ATTRIBUTE[,MODIFIED-ATTRIBUTE]
  FILTER↹OPERATION=TARGET-ATTRIBUTE=ACTION↹[OPERATION=TARGET-ATTRIBUTE=ACTION]
  FILTER↹OPERATION=TARGET-ATTRIBUTE=ACTION↹[OPERATION=TARGET-ATTRIBUTE=ACTION]

MODIFIED-LDAP-ATTRIBUTE

A comma-separated list of attributes which modification causes ACTION. Any attribute can be addressed as '*'.

FILTER

LDAP filter for limiting entries which should be subject of an ACTION.

The TAB character serves as FILTER and OPERATION separator. Space is not permitted.

OPERATION

One of possible LDAP operations: = serves for REPLACE, + for ADD, and - for DELETE.

TARGET-ATTRIBUTE

An attribute that should be modified by an ACTION.

ACTION

Possible actions are:

ACTION Explanation
!opinit_time() Place timestamp of entry modification into TARGET-ATTRIBUTE
!conn_dn() Place modifiers DN into TARGET-ATTRIBUTE
!concat(a, b, ...) Serialize strings a, b, ... and separate them by a space. If the first argument is preceded by $ than it is interpreted as the value of the TARGET-ATTRIBUTE.
string1, string2 Multiple strings are interpreted as multiple values assigned into TARGET-ATTRIBUTE

Examples

Every time entryStatus is modified update entryStatusTimestamp with modification timestamp and entryStatusModifier with modifiers DN:

entrystatus
  (objectclass=*)	=entrystatustimestamp=!opinit_time()	=entrystatusmodifier=!conn_dn()

Every time anything is changed on entry construct mail attribute by concating content of uid ttribute and string @example.com:

*
  (uid=*)	mail=!concat($uid,@example.com)

Every time userPassword is updated record change timestamp in passwordTimestamp attribute:

userpassword
  (objectclass=*)	=passwordtimestamp=!opinit_time()

Authors

This plugin was written by Milan Sova for Sun ONE Directory Server 4 around the year 1999. At the time he was working for the Faculty of Electrical Engineering of the Czech Technical University in Prague (FEL CTU). Later he moved to CESNET.

The plugin was ported for 389 Directory Server 1.4 by Jiří Cejp from FEL CTU.

It was documented and published by Jan Tomášek from CESNET.

About

Server Side Modification plugin

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published