blob: fa302e7500e32af28882778068755f854bc7b921 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
# gnupg-ldap-init.ldif -*- conf -*-
#
# Entries connecting the schema specified in gnupg-ldap-schema.ldif.
# Revision: 2020-10-07
dn: cn=PGPServerInfo,dc=example,dc=com
objectClass: pgpServerInfo
cn: PGPServerInfo
# Note that we suggest the use of ou=GnuPG keys instead of the often
# used PGP Keys. This makes it easy to spot this is a new schema.
pgpBaseKeySpaceDN: ou=GnuPG Keys,dc=example,dc=com
# Using the value GnuPG here indicates that pgpVersion below has a
# well-defined meaning.
pgpSoftware: GnuPG
# pgpVersion is a string with space delimited items:
#
# Item 1 - Implemented schema version. This is an integer with one
# of these values:
# 1 = Classic PGP schema (default)
# 2 = The attributes gpgFingerprint, gpgSubFingerprint,
# gpgSubCertID, and gpgMailbox are part of the schema.
# Item 2 - A string with the LDAP server type
# "-" = Unknown (default)
# "ntds" = Windows Directory Service (AD DS)
# "openldap" = OpenLDAP
# "cnfpr" = As with "ntds" the DN has CN=fingerprint
# instead of the legacy pgpCertID=keyid.
# Use this for openldap if your client software
# is new enough (gnupg >= (2.2.28 or 2.5.12).
#
pgpVersion: 2 cnfpr
dn: ou=GnuPG Keys,dc=example,dc=com
objectClass: organizationalUnit
ou: GnuPG Keys
dn: ou=GnuPG Users,dc=example,dc=com
objectclass: organizationalUnit
ou: GnuPG Users
|
