MINI MINI MANI MO
#
# File: oidrdbmsupg10i.ldif (A.K.A. oidSchemaUpgradeFrom90110RDBMS.sbs)
#
# Description:
# Upgrade script of RDBMS LDAP functionality to 10i. It is
# assumed that the 8.1.7, 9i, and 9iR2 schemas are already
# installed.
#
# Modified:
# 05/16/03 nlewis 2958194: add orclgroup oc to enterprise role for DAS
# 01/14/03 shwong allow optional privs and labels bug 2746291
# 12/06/02 shwong make orclDBLSPolicyOptions optional in orclDBLSPolicy
# 11/18/02 shwong make more OLS attributes searchable
# 10/11/02 shwong make certain OLS attributes searchable
# 08/30/02 shwong remove orclDBLSDefWrite
# 08/13/02 nlewis update dbsec container with new oc and attribute
# 07/24/02 shwong add Oracle Label Security object classes and attributes
# 06/27/02 nlewis creation, bug 2280116: add orclprivilegegroup to ent role
#
#
# Notes: This LDIF file will only work with Oracle Internet Directory
# version 2.0.5 and above.
# This file should be loaded by 'ldapmodify' with the following
# options "-c -a -v"
#
# Copyright (c) 2002, 2003, Oracle Corporation. All rights reserved.
#
#
# RDBMS attributes (prefix = orclDB)
#
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.14 NAME 'orclDBOIDAuthentication' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
#
# RDBMS/Oracle Label Security attributes (prefix = orclDBLS)
# reserved OID number space 2.16.840.1.113894.2.1.200.*
#
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.1 NAME 'orclDBLSAuditEnable' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.2 NAME 'orclDBLSAuditOptionSuccess' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.3 NAME 'orclDBLSAuditOptionType' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.4 NAME 'orclDBLSColumnName' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.5 NAME 'orclDBLSDefRead' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.6 NAME 'orclDBLSDefRow' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.7 NAME 'orclDBLSFullName' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.8 NAME 'orclDBLSGroupParent' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.9 NAME 'orclDBLSMaxRead' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.10 NAME 'orclDBLSMaxWrite' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.11 NAME 'orclDBLSMinWrite' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.12 NAME 'orclDBLSNumericTag' EQUALITY integerMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.27' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.13 NAME 'orclDBLSPackageName' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.14 NAME 'orclDBLSPolicyOptions' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
dn: cn=subschemasubentry
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113894.2.1.200.15 NAME 'orclDBLSPrivs' EQUALITY caseIgnoreMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )
#
#
# RDBMS Objectclasses
#
# Add orclprivilegegroup objectclass to enterprise role for AQ support.
# (Bug 2280116)
# Add orclgroup objectclass to enterprise role for DAS display (2958194)
#
dn: cn=subschemasubentry
changetype: modify
add: objectclasses
objectclasses: ( 2.16.840.1.113894.2.2.11 NAME 'orclDBEnterpriseRole_10i' SUP ( orclprivilegegroup $ orclgroup ) AUXILIARY )
dn: cn=subschemasubentry
changetype: modify
add: objectclasses
objectclasses: ( 2.16.840.1.113894.2.2.12 NAME 'orclDBSecConfig10i' SUP top AUXILIARY MUST ( orclDBOIDAuthentication ) )
#
# RDBMS/Oracle Label Security Objectclasses
# OID reserved number space: 2.16.840.1.113894.2.2.200.*
#
dn: cn=subschemasubentry
changetype: modify
add: objectclasses
objectclasses: ( 2.16.840.1.113894.2.2.200.1 NAME 'orclDBLSAuditOption' DESC 'Oracle Label Security Policy Audit Option' SUP 'top' STRUCTURAL MUST ( cn $ orclDBLSAuditEnable $ orclDBLSAuditOptionType $ orclDBLSAuditOptionSuccess ) )
dn: cn=subschemasubentry
changetype: modify
add: objectclasses
objectclasses: ( 2.16.840.1.113894.2.2.200.2 NAME 'orclDBLSLabelComponent' DESC 'Oracle Label Security Policy Label Component' SUP 'top' STRUCTURAL MUST ( cn $ orclDBLSFullName $ orclDBLSNumericTag ) AUXILIARY MAY ( orclDBLSGroupParent ) )
dn: cn=subschemasubentry
changetype: modify
add: objectclasses
objectclasses: ( 2.16.840.1.113894.2.2.200.3 NAME 'orclDBLSPolicy' DESC 'Oracle Label Security Policy' SUP 'groupOfUniqueNames' STRUCTURAL MUST ( cn $ orclDBLSColumnName $ orclDBLSPackageName ) AUXILIARY MAY ( orclDBLSPolicyOptions ) )
dn: cn=subschemasubentry
changetype: modify
add: objectclasses
objectclasses: ( 2.16.840.1.113894.2.2.200.4 NAME 'orclDBLSProfile' DESC 'Oracle Label Security Authorization Profile' SUP 'groupOfUniqueNames' STRUCTURAL MUST ( cn ) AUXILIARY MAY ( orclDBLSMaxRead $ orclDBLSMaxWrite $ orclDBLSMinWrite $ orclDBLSDefRead $ orclDBLSDefRow $ orclDBLSPrivs ) )
# Make certain OLS attributes searchable
dn: cn=catalogs
changetype: modify
add: orclindexedattribute
orclindexedattribute: orclDBLSFullName
dn: cn=catalogs
changetype: modify
add: orclindexedattribute
orclindexedattribute: orclDBLSNumericTag
dn: cn=catalogs
changetype: modify
add: orclindexedattribute
orclindexedattribute: orclDBLSColumnName
dn: cn=catalogs
changetype: modify
add: orclindexedattribute
orclindexedattribute: orclDBLSGroupParent
#
# Update version entries in directory
#
#
dn: cn=RDBMS,cn=OracleSchemaVersion
changetype: modify
replace: orclProductVersion
orclProductVersion: 90400
OHA YOOOO