# =============================================================================
# Seed OpenLDAP (osixia) — deploy-merged
#   ou=users  → admin, engineer, analyst, viewer
#   ou=groups → data-admin, data-engineer, data-analyst, data-viewer
#
# Sumber kebenaran GRUP untuk:
#   - Trino      → LDAP group provider (Fase 3)
#   - StarRocks  → LDAP group provider (Fase 4)
#
# Catatan: user juga terdaftar lokal di realm Keycloak (autentikasi OIDC).
# LDAP menyediakan pemetaan user → grup. Password LDAP di sini adalah nilai
# dev (selaras dengan realm-export.json) untuk kemungkinan bind per-user.
# =============================================================================

dn: ou=users,dc=sicabe,dc=local
objectClass: organizationalUnit
ou: users

dn: ou=groups,dc=sicabe,dc=local
objectClass: organizationalUnit
ou: groups

# ─── Users ──────────────────────────────────────────────────────────────────

dn: uid=admin,ou=users,dc=sicabe,dc=local
objectClass: inetOrgPerson
objectClass: posixAccount
uid: admin
cn: Administrator
sn: SiCABE
mail: admin@sicabe.local
userPassword: admin123
uidNumber: 1000
gidNumber: 1000
homeDirectory: /home/admin

dn: uid=engineer,ou=users,dc=sicabe,dc=local
objectClass: inetOrgPerson
objectClass: posixAccount
uid: engineer
cn: Data Engineer
sn: SiCABE
mail: engineer@sicabe.local
userPassword: engineer123
uidNumber: 1001
gidNumber: 1001
homeDirectory: /home/engineer

dn: uid=analyst,ou=users,dc=sicabe,dc=local
objectClass: inetOrgPerson
objectClass: posixAccount
uid: analyst
cn: Data Analyst
sn: SiCABE
mail: analyst@sicabe.local
userPassword: analyst123
uidNumber: 1002
gidNumber: 1002
homeDirectory: /home/analyst

dn: uid=viewer,ou=users,dc=sicabe,dc=local
objectClass: inetOrgPerson
objectClass: posixAccount
uid: viewer
cn: Viewer
sn: SiCABE
mail: viewer@sicabe.local
userPassword: viewer123
uidNumber: 1003
gidNumber: 1003
homeDirectory: /home/viewer

# ─── Groups ─────────────────────────────────────────────────────────────────

dn: cn=data-admin,ou=groups,dc=sicabe,dc=local
objectClass: groupOfNames
cn: data-admin
member: uid=admin,ou=users,dc=sicabe,dc=local

dn: cn=data-engineer,ou=groups,dc=sicabe,dc=local
objectClass: groupOfNames
cn: data-engineer
member: uid=engineer,ou=users,dc=sicabe,dc=local

dn: cn=data-analyst,ou=groups,dc=sicabe,dc=local
objectClass: groupOfNames
cn: data-analyst
member: uid=analyst,ou=users,dc=sicabe,dc=local

dn: cn=data-viewer,ou=groups,dc=sicabe,dc=local
objectClass: groupOfNames
cn: data-viewer
member: uid=viewer,ou=users,dc=sicabe,dc=local