first commit

2026-10-09 02:35:14 +07:00
commit 4ca7a9a58e
108 changed files with 23035 additions and 0 deletions
@@ -0,0 +1,93 @@
+# =============================================================================
+# Seed OpenLDAP (osixia) — deploy-merged
+#   ou=users  → admin, engineer, analyst, viewer
+#   ou=groups → data-admin, data-engineer, data-analyst, data-viewer
+#
+# Sumber kebenaran GRUP untuk:
+#   - Trino      → LDAP group provider (Fase 3)
+#   - StarRocks  → LDAP group provider (Fase 4)
+#
+# Catatan: user juga terdaftar lokal di realm Keycloak (autentikasi OIDC).
+# LDAP menyediakan pemetaan user → grup. Password LDAP di sini adalah nilai
+# dev (selaras dengan realm-export.json) untuk kemungkinan bind per-user.
+# =============================================================================
+
+dn: ou=users,dc=sicabe,dc=local
+objectClass: organizationalUnit
+ou: users
+
+dn: ou=groups,dc=sicabe,dc=local
+objectClass: organizationalUnit
+ou: groups
+
+# ─── Users ──────────────────────────────────────────────────────────────────
+
+dn: uid=admin,ou=users,dc=sicabe,dc=local
+objectClass: inetOrgPerson
+objectClass: posixAccount
+uid: admin
+cn: Administrator
+sn: SiCABE
+mail: admin@sicabe.local
+userPassword: admin123
+uidNumber: 1000
+gidNumber: 1000
+homeDirectory: /home/admin
+
+dn: uid=engineer,ou=users,dc=sicabe,dc=local
+objectClass: inetOrgPerson
+objectClass: posixAccount
+uid: engineer
+cn: Data Engineer
+sn: SiCABE
+mail: engineer@sicabe.local
+userPassword: engineer123
+uidNumber: 1001
+gidNumber: 1001
+homeDirectory: /home/engineer
+
+dn: uid=analyst,ou=users,dc=sicabe,dc=local
+objectClass: inetOrgPerson
+objectClass: posixAccount
+uid: analyst
+cn: Data Analyst
+sn: SiCABE
+mail: analyst@sicabe.local
+userPassword: analyst123
+uidNumber: 1002
+gidNumber: 1002
+homeDirectory: /home/analyst
+
+dn: uid=viewer,ou=users,dc=sicabe,dc=local
+objectClass: inetOrgPerson
+objectClass: posixAccount
+uid: viewer
+cn: Viewer
+sn: SiCABE
+mail: viewer@sicabe.local
+userPassword: viewer123
+uidNumber: 1003
+gidNumber: 1003
+homeDirectory: /home/viewer
+
+# ─── Groups ─────────────────────────────────────────────────────────────────
+
+dn: cn=data-admin,ou=groups,dc=sicabe,dc=local
+objectClass: groupOfNames
+cn: data-admin
+member: uid=admin,ou=users,dc=sicabe,dc=local
+
+dn: cn=data-engineer,ou=groups,dc=sicabe,dc=local
+objectClass: groupOfNames
+cn: data-engineer
+member: uid=engineer,ou=users,dc=sicabe,dc=local
+
+dn: cn=data-analyst,ou=groups,dc=sicabe,dc=local
+objectClass: groupOfNames
+cn: data-analyst
+member: uid=analyst,ou=users,dc=sicabe,dc=local
+
+dn: cn=data-viewer,ou=groups,dc=sicabe,dc=local
+objectClass: groupOfNames
+cn: data-viewer
+member: uid=viewer,ou=users,dc=sicabe,dc=local