wmantly
ef7b6215bd
The app (nodejs/models/user_ldap.js) adds objectClass theta42Person whenever a user has a dateOfBirth, and lists it among every new user's objectClasses. But the all-in-one image's static slapd.conf only included core/cosine/inetorgperson/ nis — never the project's own theta42 schema — so slapd rejects objectClass: theta42Person with LDAP 0x15 (objectClass: value #0 invalid per syntax). Symptom: PUT /api/user/<uid> (and user creation) failing. ops/ldap-setup.sh loads this schema for bare-metal (as a cn=config LDIF); the Docker image uses slapd.conf, so ship it as a .schema file and include it. - ops/schema/theta42.schema: dateOfBirth attribute + theta42Person auxiliary objectClass (same OIDs/definition as ldap-setup.sh section 5). - Dockerfile.openldap: COPY it to /etc/openldap/schema/theta42.schema. - docker-entrypoint.sh: include it in the generated slapd.conf (after nis). Co-Authored-By: Claude <noreply@anthropic.com>
23 lines
933 B
Plaintext
23 lines
933 B
Plaintext
# theta42 custom schema — dateOfBirth (ISO 8601 YYYY-MM-DD) + the theta42Person
|
|
# auxiliary objectClass that carries it.
|
|
#
|
|
# This mirrors the cn=config LDIF that ops/ldap-setup.sh section 5 loads on
|
|
# bare-metal deployments, in slapd.conf .schema form so the all-in-one Docker
|
|
# image (which uses a static slapd.conf) can `include` it. The app
|
|
# (nodejs/models/user_ldap.js) adds objectClass theta42Person when a user has a
|
|
# dateOfBirth, so the directory must know this objectClass or user
|
|
# create/update fails with LDAP 0x15 (objectClass: value invalid per syntax).
|
|
|
|
attributetype ( 1.3.6.1.4.1.99999.1.1
|
|
NAME 'dateOfBirth'
|
|
DESC 'Date of birth in ISO 8601 format YYYY-MM-DD'
|
|
EQUALITY caseExactMatch
|
|
SUBSTR caseExactSubstringsMatch
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
|
SINGLE-VALUE )
|
|
|
|
objectclass ( 1.3.6.1.4.1.99999.2.1
|
|
NAME 'theta42Person'
|
|
DESC 'Theta42 SSO extended person attributes'
|
|
AUXILIARY
|
|
MAY ( dateOfBirth ) ) |