94 lines
2.8 KiB
Plaintext
94 lines
2.8 KiB
Plaintext
|
# =============================================================================
|
||
|
|
# Seed OpenLDAP (osixia) — deploy-merged
|
||
|
|
# ou=users → admin, engineer, analyst, viewer
|
||
|
|
# ou=groups → data-admin, data-engineer, data-analyst, data-viewer
|
||
|
|
#
|
||
|
|
# Sumber kebenaran GRUP untuk:
|
||
|
|
# - Trino → LDAP group provider (Fase 3)
|
||
|
|
# - StarRocks → LDAP group provider (Fase 4)
|
||
|
|
#
|
||
|
|
# Catatan: user juga terdaftar lokal di realm Keycloak (autentikasi OIDC).
|
||
|
|
# LDAP menyediakan pemetaan user → grup. Password LDAP di sini adalah nilai
|
||
|
|
# dev (selaras dengan realm-export.json) untuk kemungkinan bind per-user.
|
||
|
|
# =============================================================================
|
||
|
|
|
||
|
|
dn: ou=users,dc=sicabe,dc=local
|
||
|
|
objectClass: organizationalUnit
|
||
|
|
ou: users
|
||
|
|
|
||
|
|
dn: ou=groups,dc=sicabe,dc=local
|
||
|
|
objectClass: organizationalUnit
|
||
|
|
ou: groups
|
||
|
|
|
||
|
|
# ─── Users ──────────────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
dn: uid=admin,ou=users,dc=sicabe,dc=local
|
||
|
|
objectClass: inetOrgPerson
|
||
|
|
objectClass: posixAccount
|
||
|
|
uid: admin
|
||
|
|
cn: Administrator
|
||
|
|
sn: SiCABE
|
||
|
|
mail: admin@sicabe.local
|
||
|
|
userPassword: admin123
|
||
|
|
uidNumber: 1000
|
||
|
|
gidNumber: 1000
|
||
|
|
homeDirectory: /home/admin
|
||
|
|
|
||
|
|
dn: uid=engineer,ou=users,dc=sicabe,dc=local
|
||
|
|
objectClass: inetOrgPerson
|
||
|
|
objectClass: posixAccount
|
||
|
|
uid: engineer
|
||
|
|
cn: Data Engineer
|
||
|
|
sn: SiCABE
|
||
|
|
mail: engineer@sicabe.local
|
||
|
|
userPassword: engineer123
|
||
|
|
uidNumber: 1001
|
||
|
|
gidNumber: 1001
|
||
|
|
homeDirectory: /home/engineer
|
||
|
|
|
||
|
|
dn: uid=analyst,ou=users,dc=sicabe,dc=local
|
||
|
|
objectClass: inetOrgPerson
|
||
|
|
objectClass: posixAccount
|
||
|
|
uid: analyst
|
||
|
|
cn: Data Analyst
|
||
|
|
sn: SiCABE
|
||
|
|
mail: analyst@sicabe.local
|
||
|
|
userPassword: analyst123
|
||
|
|
uidNumber: 1002
|
||
|
|
gidNumber: 1002
|
||
|
|
homeDirectory: /home/analyst
|
||
|
|
|
||
|
|
dn: uid=viewer,ou=users,dc=sicabe,dc=local
|
||
|
|
objectClass: inetOrgPerson
|
||
|
|
objectClass: posixAccount
|
||
|
|
uid: viewer
|
||
|
|
cn: Viewer
|
||
|
|
sn: SiCABE
|
||
|
|
mail: viewer@sicabe.local
|
||
|
|
userPassword: viewer123
|
||
|
|
uidNumber: 1003
|
||
|
|
gidNumber: 1003
|
||
|
|
homeDirectory: /home/viewer
|
||
|
|
|
||
|
|
# ─── Groups ─────────────────────────────────────────────────────────────────
|
||
|
|
|
||
|
|
dn: cn=data-admin,ou=groups,dc=sicabe,dc=local
|
||
|
|
objectClass: groupOfNames
|
||
|
|
cn: data-admin
|
||
|
|
member: uid=admin,ou=users,dc=sicabe,dc=local
|
||
|
|
|
||
|
|
dn: cn=data-engineer,ou=groups,dc=sicabe,dc=local
|
||
|
|
objectClass: groupOfNames
|
||
|
|
cn: data-engineer
|
||
|
|
member: uid=engineer,ou=users,dc=sicabe,dc=local
|
||
|
|
|
||
|
|
dn: cn=data-analyst,ou=groups,dc=sicabe,dc=local
|
||
|
|
objectClass: groupOfNames
|
||
|
|
cn: data-analyst
|
||
|
|
member: uid=analyst,ou=users,dc=sicabe,dc=local
|
||
|
|
|
||
|
|
dn: cn=data-viewer,ou=groups,dc=sicabe,dc=local
|
||
|
|
objectClass: groupOfNames
|
||
|
|
cn: data-viewer
|
||
|
|
member: uid=viewer,ou=users,dc=sicabe,dc=local
|