LDAP Directory Information Tree

This document describes how the debops.dokuwiki Ansible role fits in the LDAP directory structure organized by DebOps.

Directory structure

cn=host.example.org -> debops.ldap
- uid=dokuwiki
  - ou=Groups (conditional)
    - cn=DokuWiki Administrators
      - member: uid=admin,ou=People,dc=example.dc.org
ou=Groups -> debops.ldap (conditional)
- cn=DokuWiki Administrators
  - member: uid=admin,ou=People,dc=example.dc.org

Object Classes and Attributes

uid=dokuwiki
- debops.dokuwiki: Object Classes, Attributes

Access Control

DebOps LDAP environment includes the 'ldapns' schema which can be used to define access control rules to services. The lists below define the attribute values which will grant access to the service managed by the debops.dokuwiki role, and specifies other roles with the same access control rules:

objectClass authorizedServiceObject, attribute authorizedService:
- all (all services)
- dokuwiki
- web:public

LDAP filter definition: dokuwiki__ldap_user_filter

Parent nodes

debops.ldap

Child nodes

There are no child nodes defined for the debops.dokuwiki Ansible role.