LDAP Directory Information Tree

This document describes how the debops.sshd Ansible role fits in the LDAP directory structure organized by DebOps.

Directory structure

Object Classes and Attributes

Access Control

DebOps LDAP environment includes the 'ldapns' schema which can be used to define access control rules to services. The lists below define the attribute values which will grant access to the service managed by the debops.sshd role, and specifies other roles with the same access control rules:

  • objectClass authorizedServiceObject, attribute authorizedService:
    • all (all services)
    • shell
    • sshd
  • objectClass hostObject, attribute host:
    • posix:all (all hosts)
    • posix:hostname.example.org
    • posix:*.example.org
    • posix:urn:<pattern> (see sshd__ldap_posix_urns variable)

LDAP filter definition: sshd__ldap_filter

Child nodes

There are no child nodes defined for the debops.sshd Ansible role.