ldap_scheme.yml

parents:
    ou=users:
        ou: users
        objectClass:
            - organizationalUnit
            - top

    ou=domains:
        ou: domains
        objectClass:
            - organizationalUnit
            - top

    ou=apps:
        ou: apps
        objectClass:
            - organizationalUnit
            - top

    ou=permission:
        ou: permission
        objectClass:
            - organizationalUnit
            - top

    ou=groups:
        ou: groups
        objectClass:
            - organizationalUnit
            - top

    ou=sudo:
        ou: sudo
        objectClass:
            - organizationalUnit
            - top

children:
    cn=admin,ou=sudo:
        cn: admin
        sudoUser: admin
        sudoHost: ALL
        sudoCommand: ALL
        sudoOption: "!authenticate"
        objectClass:
            - sudoRole
            - top
    cn=admins,ou=groups:
        cn: admins
        gidNumber: "4001"
        memberUid: admin
        objectClass:
            - posixGroup
            - top
    cn=all_users,ou=groups:
        cn: all_users
        gidNumber: "4002"
        objectClass:
            - posixGroup
            - groupOfNamesYnh
    cn=visitors,ou=groups:
        cn: visitors
        gidNumber: "4003"
        objectClass:
            - posixGroup
            - groupOfNamesYnh

depends_children:
    cn=mail.main,ou=permission:
        cn: mail.main
        gidNumber: "5001"
        objectClass:
            - posixGroup
            - permissionYnh
        groupPermission:
            - "cn=all_users,ou=groups,dc=yunohost,dc=org"
    cn=xmpp.main,ou=permission:
        cn: xmpp.main
        gidNumber: "5002"
        objectClass:
            - posixGroup
            - permissionYnh
        groupPermission:
            - "cn=all_users,ou=groups,dc=yunohost,dc=org"