{{ ansible_header | comment }}

# This file comes from the installation of Re2o
# https://gitlab.federez.net/re2o/re2o/-/blob/master/install_utils/db.ldiff

dn: {{ re2o_ldap.suffix }}
o: rezo
structuralObjectClass: organization
description: ldap
objectClass: top
objectClass: dcObject
objectClass: organization
contextCSN: 20161004233332.689769Z#000000#000#000000

dn: cn=admin,{{ re2o_ldap.suffix }}
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
structuralObjectClass: organizationalRole
description:: TERBUCBhZG1pbmlzdHJhdG9yDQo=
userPassword: {{ re2o_ldap.root_password_hash }}

dn: cn=Utilisateurs,{{ re2o_ldap.suffix }}
gidNumber: 500
cn: Utilisateurs
structuralObjectClass: posixGroup
sambaSID: 500
uid: Users
objectClass: posixGroup
objectClass: top
objectClass: sambaSamAccount
objectClass: radiusprofile

dn: ou=groups,{{ re2o_ldap.suffix }}
objectClass: organizationalUnit
description: Groupes d'utilisateurs
ou: groups
structuralObjectClass: organizationalUnit

dn: ou=services,ou=groups,{{ re2o_ldap.suffix }}
objectClass: organizationalUnit
description: Groupes de comptes techniques
ou: services
structuralObjectClass: organizationalUnit

dn: ou=service-users,{{ re2o_ldap.suffix }}
objectClass: organizationalUnit
description: Utilisateurs techniques de l'annuaire
ou: service-users
structuralObjectClass: organizationalUnit

dn: cn=freeradius,ou=service-users,{{ re2o_ldap.suffix }}
objectClass: applicationProcess
objectClass: simpleSecurityObject
cn: freeradius
userPassword: {{ re2o_ldap.root_password_hash }}
structuralObjectClass: applicationProcess

dn: cn=nssauth,ou=service-users,{{ re2o_ldap.suffix }}
objectClass: applicationProcess
objectClass: simpleSecurityObject
cn: nssauth
structuralObjectClass: applicationProcess
userPassword: {{ re2o_ldap.root_password_hash }}

dn: cn=auth,ou=services,ou=groups,{{ re2o_ldap.suffix }}
objectClass: groupOfNames
cn: auth
member: cn=nssauth,ou=service-users,{{ re2o_ldap.suffix }}
structuralObjectClass: groupOfNames

dn: ou=posix,ou=groups,{{ re2o_ldap.suffix }}
objectClass: organizationalUnit
description: Groupes de comptes POSIX
ou: posix
structuralObjectClass: organizationalUnit

dn: cn=wifi,ou=service-users,{{ re2o_ldap.suffix }}
objectClass: applicationProcess
objectClass: simpleSecurityObject
cn: wifi
structuralObjectClass: applicationProcess
userPassword: {{ re2o_ldap.root_password_hash }}

dn: cn=usermgmt,ou=services,ou=groups,{{ re2o_ldap.suffix }}
objectClass: groupOfNames
cn: usermgmt
structuralObjectClass: groupOfNames
member: cn=wifi,ou=service-users,{{ re2o_ldap.suffix }}

dn: cn=replica,ou=service-users,{{ re2o_ldap.suffix }}
objectClass: applicationProcess
objectClass: simpleSecurityObject
cn: replica
structuralObjectClass: applicationProcess
userPassword: {{ re2o_ldap.root_password_hash }}

dn: cn=readonly,ou=services,ou=groups,{{ re2o_ldap.suffix }}
objectClass: groupOfNames
cn: readonly
structuralObjectClass: groupOfNames
member: cn=replica,ou=service-users,{{ re2o_ldap.suffix }}
member: cn=freeradius,ou=service-users,{{ re2o_ldap.suffix }}