Appendix C. 'firewall-1.conf' File for Use with OpenLDAP v1

Appendix C. firewall-1.conf File for Use with OpenLDAP v1

To use OpenLDAP v1 with FireWall-1, add the following line to your slapd.conf file:

include         /etc/openldap/firewall-1.conf

The contents of firewall-1.conf follow.

attribute       fw1auth-method                          ces
attribute       fw1auth-server                          ces
attribute       fw1pwdlastmod                           ces
attribute       fw1skey-number                          ces
attribute       fw1skey-seed                            ces
attribute       fw1skey-passwd                          ces
attribute       fw1skey-mdm                             ces
attribute       fw1expiration-date                      ces
attribute       fw1hour-range-from                      ces
attribute       fw1hour-range-to                        ces
attribute       fw1day                                  ces
attribute       fw1allowed-src                          ces
attribute       fw1allowed-dst                          ces
attribute       fw1allowed-vlan                         ces
attribute       fw1SR-keym                              ces
attribute       fw1SR-datam                             ces
attribute       fw1SR-mdm                               ces
attribute       fw1enc-fwz-expiration                   ces
attribute       fw1sr-auth-track                        ces
attribute       fw1grouptemplate                        ces
attribute       fw1ISAKMP-EncMethod                     ces
attribute       fw1ISAKMP-AuthMethods                   ces
attribute       fw1ISAKMP-HashMethods                   ces
attribute       fw1ISAKMP-Transfork                     ces
attribute       fw1ISAKMP-DataIntegrityMethod           ces
attribute       fw1ISAKMP-SharedSecret                  ces
attribute       fw1ISAKMP-DataEncMethod                 ces
attribute       fw1enc-methods                          ces


objectclass fw1template
       requires
                objectClass,
                cn
       allows
                member,
                description,
                fw1auth-method,
                fw1auth-server,
                fw1pwdlastmod,
                fw1skey-number,
                fw1skey-seed,
                fw1skey-passwd,
                fw1skey-mdm,
                fw1expiration-date,
                fw1hour-range-from,
                fw1hour-range-to,
                fw1day,
                fw1allowed-src,
                fw1allowed-dst,
                fw1allowed-vlan,
                fw1SR-keym,
                fw1SR-datam,
                fw1SR-mdm,
                fw1enc-fwz-expiration,
                fw1sr-auth-track,
                fw1grouptemplate,
                fw1ISAKMP-EncMethod,
                fw1ISAKMP-AuthMethods,
                fw1ISAKMP-HashMethods,
                fw1ISAKMP-Transform,
                fw1ISAKMP-DataIntegrityMethod,
                fw1ISAKMP-SharedSecret,
                fw1ISAKMP-DataEncMethod,
                fw1enc-methods
objectclass fw1person
       requires
                objectClass,
                cn
       allows
                description,
                fw1auth-method,
                fw1auth-server,
                fw1pwdlastmod,
                fw1skey-number,
                fw1skey-seed,
                fw1skey-passwd,
                fw1skey-mdm,
                fw1expiration-date,
                fw1hour-range-from,
                fw1hour-range-to,
                fw1day,
                fw1allowed-src,
                fw1allowed-dst,
                fw1allowed-vlan,
                fw1SR-keym,
                fw1SR-datam,
                fw1SR-mdm,
                fw1enc-fwz-expiration,
                fw1sr-auth-track,
                fw1grouptemplate,
                fw1ISAKMP-EncMethod,
                fw1ISAKMP-AuthMethods,
                fw1ISAKMP-HashMethods,
                fw1ISAKMP-Transform,
                fw1ISAKMP-DataIntegrityMethod,
                fw1ISAKMP-SharedSecret,
                fw1ISAKMP-DataEncMethod,
                fw1enc-methods