RE: shadow accounts

["Howard Chu" <hyc@symas.com>]

> -----Original Message-----
> From: Douglas B. Jones [mailto:douglas@gpc.edu]

> Thanks for the confirmation! Would it be possible for you to
> share your schema on the shadow part?

This is an excerpt from the connexitor.schema file that is bundled with our
Connexitor product line. There's more to it of course but this has the
relevant parts.

# Connexitor schema
# Copyright (c) 2003 Symas Corporation.
# All Rights Reserved.
#
# Schema used by Connexitor Enterprise Management System and
# Unix and NT authorization agents.
#
# Note: Some Unix-oriented attributes are from RFC2307.

# OID Base is iso(1) org(3) dod(6) internet(1) private(4) enterprise(1)
symas(4754)

objectidentifier sBase 1.3.6.1.4.1.4754
objectidentifier sSid sBase:0
objectidentifier sAid sBase:1
objectidentifier sOid sBase:2

objectidentifier syntaxes 1.3.6.1.4.1.1466.115.121.1
objectidentifier boolean syntaxes:7
objectidentifier integer syntaxes:27
objectidentifier generalizedTime syntaxes:24
objectidentifier directoryString syntaxes:15

# Attribute Type Definitions

attribute ( sAid:13.9 NAME 'passwordLastChange' SYNTAX generalizedTime )
attribute ( sAid:13.10 NAME 'passwordMinChange' SYNTAX integer )
attribute ( sAid:13.11 NAME 'passwordMaxChange' SYNTAX integer )
attribute ( sAid:13.12 NAME 'passwordInactive' SYNTAX integer )
attribute ( sAid:13.13 NAME 'passwordExpire' SYNTAX generalizedTime )
attribute ( sAid:13.14 NAME 'passwordWarn' SYNTAX integer )
attribute ( sAid:13.15 NAME 'passwordFlag' SYNTAX integer )

objectclass ( sOid:3.0.0 NAME 'oUnixUser' SUP oUser
        MUST ( uidNumber $ gidNumber $ homeDirectory )
        MAY ( userPassword $ loginShell $ gecos ) )

objectclass ( sOid:3.0.1 NAME 'oUnixPwdQuality' SUP oResource AUXILIARY
        MAY ( passwordLastChange $ passwordMinChange $ passwordMaxChange $
                passwordInactive $ passwordExpire $ passwordWarn $
                passwordFlag ) )

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support