dn: o=puavo
objectClass: dcObject
objectClass: organization
o: puavo
dc: puavo
description: LDAP root

dn: cn=IdPool,o=puavo
objectClass: top
objectClass: puavoIdPool
cn: IdPool
puavoNextGidNumber: 10000
puavoNextUidNumber: 10000
puavoNextId: 1
puavoNextRid: 3
puavoNextDatabaseId: 1
puavoNextKadminPort: 10000

dn: uid=admin,o=puavo
objectClass: account
objectClass: simpleSecurityObject
uid: admin
description: Root account with access to everything in LDAP. Used to create ne
 w databases and manage database ownership information.
userPassword: <%= @rootpw_hash %>

dn: uid=puavo,o=puavo
objectClass: account
objectClass: simpleSecurityObject
uid: puavo
description: Account for Puavo to search user DNs
userPassword: <%= @puavopw_hash %>

dn: <%= @kdcdn %>
objectClass: account
objectClass: simpleSecurityObject
uid: kdc
description: Account for KDC to read kerberos entries
userPassword: <%= @kdcpw_hash %>

dn: <%= @kadmindn %>
objectClass: account
objectClass: simpleSecurityObject
uid: kadmin
description: Account for kadmin to modify kerberos entries
userPassword: <%= @kadminpw_hash %>

dn: <%= @monitordn %>
objectClass: account
objectClass: simpleSecurityObject
uid: monitor
description: Monitoring tool account to read host information
userPassword: <%= @monitorpw_hash %>

dn: <%= @slavedn %>
objectClass: account
objectClass: simpleSecurityObject
uid: slave
description: Account for slave servers to read information from databases, no write access
userPassword: <%= @slavepw_hash %>

dn: <%= @pw_mgmt_dn %>
objectClass: account
objectClass: simpleSecurityObject
uid: pw-mgmt
description: Account for password management service
userPassword: <%= @pw_mgmt_pw_hash %>

dn: <%= @statistics_dn %>
objectClass: account
objectClass: simpleSecurityObject
uid: statistics
description: Account for gathering statistics
userPassword: <%= @statistics_pw_hash %>

dn: <%= @email_mgmt_dn %>
objectClass: account
objectClass: simpleSecurityObject
uid: email-mgmt
description: Account for verified email management
userPassword: <%= @email_mgmt_pw_hash %>

dn: <%= @examomatic_dn %>
objectClass: account
objectClass: simpleSecurityObject
uid: examomatic
description: Account for exam scheduler service
userPassword: <%= @examomatic_pw_hash %>

dn: ou=Services,o=puavo
ou: Services
objectClass: top
objectClass: organizationalUnit
