# OpenSSH LDAP Public Key (openssh-lpk) schema, the widely-used Buchan
# openssh-lpk definition (OIDs under 1.3.6.1.4.1.24552.500.1).
#
# The SSO app (nodejs/models/user_ldap.js) stores each user's SSH public key in
# the `sshPublicKey` attribute and tags the user entry with the `ldapPublicKey`
# auxiliary objectClass, so the directory must know both for user create/update
# to succeed. ldapPublicKey is AUXILIARY (as in upstream openssh-lpk), so it
# attaches cleanly onto the inetOrgPerson user entry.

attributetype ( 1.3.6.1.4.1.24552.500.1.1
	NAME 'sshPublicKey'
	DESC 'SSH public key'
	EQUALITY octetStringMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )

objectclass ( 1.3.6.1.4.1.24552.500.1.2
	NAME 'ldapPublicKey'
	DESC 'SSH public key user'
	SUP top AUXILIARY
	MAY sshPublicKey )