r20492: Add in instructions/sample LDIF to setup Fedora DS as a backend.

Add a new module entrypoint to handle the new, interesting and
different mappings required for Fedora DS.

Andrew Bartlett
(This used to be commit 600c7f1a68c175b835ce45d13794a6f66bcc8493)

2 files changed, 30 insertions, 2 deletions

diff --git a/source4/setup/fedora-ds-init.ldif b/source4/setup/fedora-ds-init.ldif
new file mode 100644
index 0000000000..f7d350c550
--- /dev/null
+++ b/source4/setup/fedora-ds-init.ldif
@@ -0,0 +1,26 @@
+# These entries need to be added to get the container for the 
+# provision to be aimed at.
+
+dn: cn="dc=tammy,dc=abartlet,dc=net",cn=mapping tree,cn=config
+objectclass: top
+objectclass: extensibleObject
+objectclass: nsMappingTree
+nsslapd-state: backend
+nsslapd-backend: UserData
+cn: dc=tammy,dc=abartlet,dc=net
+
+dn: cn=UserData,cn=ldbm database,cn=plugins,cn=config
+objectclass: extensibleObject
+objectclass: nsBackendInstance
+nsslapd-suffix: dc=tammy,dc=abartlet,dc=net
+
+# Generate 99_ad.ldif with 
+
+# bin/ad2oLschema -I setup/fedora-ds-init.ldif --option=convert:target=fedora-ds -O /opt/fedora-ds/slapd-piglett/config/schema/99_ad.ldif -H /data/samba/samba4/prefix/private/sam.ldb
+# Then install 00_staish_core.ldif 30ns-common.ldif and 99_ad.ldif
+# into /opt/fedora-ds/slapd-piglett/config/schema/
+#
+
+
+# provision with --ldap-backend=ldap://localhost:4389 --ldap-module=nsuniqueid
+
diff --git a/source4/setup/provision b/source4/setup/provision
index 163cb93274..8912b28792 100755
--- a/source4/setup/provision
+++ b/source4/setup/provision
@@ -30,7 +30,8 @@ options = GetOptions(ARGV,
 		'quiet',
 		'blank',
 		'ldap-base',
-		'ldap-backend=s');
+		'ldap-backend=s',
+                'ldap-module=s');
 
 if (options == undefined) {
    println("Failed to parse options");
@@ -79,6 +80,7 @@ provision [options]
  --blank			do not add users or groups, just the structure
  --ldap-base			output only an LDIF file, suitable for creating an LDAP baseDN
  --ldap-backend LDAPSERVER      LDAP server to use for this provision
+ --ldap-module= MODULE          LDB mapping module to use for the LDAP backend
 
 You must provide at least a realm and domain
 
@@ -112,7 +114,7 @@ for (r in options) {
 }
 
 if (options["ldap-backend"] != undefined) {
-	subobj["LDAPMODULES"] = "entryUUID,paged_searches";
+	subobj["LDAPMODULES"] = subobj["LDAPMODULE"] + ",paged_searches";
 }
 
 var blank = (options["blank"] != undefined);