# /!\ Caution : LDAPVI syntax
add olcDatabase={1}mdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcMdbConfig
olcDatabase: {1}mdb
olcSuffix: o=ls
olcDbDirectory: /var/lib/ldap/
olcRootDN: uid=admin,o=ls
olcLastMod: TRUE
olcAddContentACL: FALSE
olcMonitoring: TRUE
olcSyncUseSubentry: FALSE
olcMaxDerefDepth: 0
olcDbMaxSize: 1073741824
olcLimits: {0}dn.regex="uid=[^,]*,ou=sysaccounts,o=ls"  time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited
olcLimits: {1}dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" size.soft=unlimited  size.hard=unlimited  time.soft=unlimited  time.hard=unlimited
olcLimits: {2}* size.pr=1000 size.prtotal=unlimited
olcReadOnly: FALSE
olcAccess: {0}to * by dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth manage by * break
olcAccess: {1}to dn.regex="^o=ls$"  attrs=entry,children,objectclass  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * read
olcAccess: {2}to dn.regex="^ou=groups,o=ls$"  attrs=children,objectclass  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * none
olcAccess: {3}to dn.regex="^cn=[^,]+,ou=groups,o=ls$"  attrs=entry,objectclass  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * none
olcAccess: {4}to dn.regex="^cn=[^,]+,ou=groups,o=ls$"  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * none
olcAccess: {5}to dn.regex="^ou=people,o=ls$"  filter="(loginShell=/bin/bash)"  attrs=children,objectclass  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * read
olcAccess: {6}to dn.regex="^uid=[^,]+,ou=people,o=ls$"  filter="(loginShell=/bin/bash)"  attrs=entry,objectclass  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * read
olcAccess: {7}to dn.regex="^uid=[^,]+,ou=people,o=ls$"  attrs=userPassword  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=samba,ou=sysaccounts,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by self write  by anonymous auth  by * none
olcAccess: {8}to dn.regex="^uid=[^,]+,ou=sysaccounts,o=ls$"  attrs=userPassword  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by anonymous auth  by * none
olcAccess: {9}to dn.regex="^uid=[^,]+,ou=people,o=ls$"  filter="(loginShell=/bin/bash)"  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by * none
olcAccess: {10}to dn.regex="^uid=[^,]+,ou=people,o=ls$"  attrs=uid,lsallowedservices,uidNumber,gidNumber,homeDirectory,loginShell,sambaSID,sambaAcctFlags,sambaPrimaryGroupSID  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * none
olcAccess: {11}to dn.regex="^uid=[^,]+,ou=people,o=ls$"  attrs=sambaLMPassword,sambaNTPassword  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by dn.base="uid=samba,ou=sysaccounts,o=ls" write  by self write  by * none
olcAccess: {12}to dn.regex="^uid=[^,]+,ou=people,o=ls$"  filter="(loginShell=/bin/bash)"  attrs=c,cn,jpegPhoto,personalTitle,sn,givenName,postalAddress,postalCode,l,st,telephoneNumber,mobile,fax,mail,description  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by self write  by users read  by * read
olcAccess: {13}to attrs=entry  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by users read  by * none
olcAccess: {14}to *  by group/lsgroup/uniqueMember.exact="cn=adminldap,ou=groups,o=ls" write  by dn.base="uid=ldapsaisie,ou=sysaccounts,o=ls" write  by * none
olcDbIndex: objectClass eq
olcDbIndex: cn eq,approx,sub
olcDbIndex: uid eq,approx,sub
olcDbIndex: uidNumber eq
olcDbIndex: gidNumber eq
olcDbIndex: sambaSID eq
olcDbIndex: lsAllowedServices eq
olcDbIndex: memberUid eq
olcDbIndex: sambaDomainName eq
olcDbIndex: sn eq,approx,sub
olcDbIndex: givenName eq,approx,sub
olcDbIndex: mail eq,approx,sub
olcDbIndex: uniqueMember eq

add olcOverlay={0}ppolicy,olcDatabase={1}mdb,cn=config
objectclass: olcOverlayConfig
objectclass: olcPPolicyConfig
objectclass: top
olcoverlay: {0}ppolicy
olcppolicydefault: cn=default,ou=ppolicies,o=ls
olcppolicyforwardupdates: FALSE
olcppolicyhashcleartext: TRUE
olcppolicyuselockout: TRUE

add olcOverlay={1}dynlist,olcDatabase={1}mdb,cn=config
objectclass: olcOverlayConfig
objectclass: olcDynamicList
objectclass: top
olcdlattrset: {0}LSdyngroup lsDynGroupMemberDnURI lsDynGroupMemberDn
olcdlattrset: {1}LSdyngroup lsDynGroupMemberUidURI lsDynGroupMemberUid:uid

add o=ls
objectClass: top
objectClass: organization
o: ls

add sambaDomainName=LS,o=ls
objectClass: sambaDomain
objectClass: sambaUnixIdPool
objectClass: top
sambaDomainName: LS
sambaSID: S-1-5-21-4207250186-2406131440-3849861866
uidNumber: 800000
gidNumber: 800002

add ou=sysaccounts,o=ls
objectClass: top
objectClass: organizationalUnit
ou: sysaccounts

add uid=mail,ou=sysaccounts,o=ls
objectClass: top
objectClass: lssysaccount
uid: mail
userPassword: toto
pwdPolicySubentry: cn=sysaccounts,ou=ppolicies,o=ls

add uid=samba,ou=sysaccounts,o=ls
objectClass: top
objectClass: lssysaccount
uid: samba
userPassword: toto
pwdPolicySubentry: cn=sysaccounts,ou=ppolicies,o=ls

add uid=ldapsaisie,ou=sysaccounts,o=ls
objectClass: top
objectClass: lssysaccount
uid: ldapsaisie
userPassword: toto
pwdPolicySubentry: cn=sysaccounts,ou=ppolicies,o=ls

add ou=groups,o=ls
objectClass: top
objectClass: organizationalUnit
ou: groups

add cn=adminldap,ou=groups,o=ls
objectClass: top
objectClass: lsgroup
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: adminldap
gidNumber: 70000
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-70000
sambaGroupType: 2
uniqueMember: uid=admin,ou=people,o=ls

add cn=invite,ou=groups,o=ls
objectClass: top
objectClass: lsgroup
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: invite
gidNumber: 101009
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-203019
sambaGroupType: 2

add cn=ls,ou=groups,o=ls
objectClass: top
objectClass: lsgroup
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: ls
gidNumber: 102001
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-205003
sambaGroupType: 2
uniqueMember: uid=invite,ou=people,o=ls

add cn=informatique,ou=groups,o=ls
objectClass: top
objectClass: lsgroup
objectClass: posixGroup
objectClass: sambaGroupMapping
gidNumber: 102009
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-205019
sambaGroupType: 2
cn: informatique
uniqueMember: uid=eeggs,ou=people,o=ls
uniqueMember: uid=admin,ou=people,o=ls

add cn=direction,ou=groups,o=ls
objectClass: top
objectClass: lsgroup
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: direction
gidNumber: 102007
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-205015
sambaGroupType: 2
uniqueMember: uid=hmartin,ou=people,o=ls
uniqueMember: uid=eeggs,ou=people,o=ls

add cn=administratif,ou=groups,o=ls
objectClass: top
objectClass: lsgroup
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: administratif
gidNumber: 102005
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-205011
sambaGroupType: 2

add cn=communication,ou=groups,o=ls
objectClass: top
objectClass: lsgroup
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: communication
gidNumber: 102003
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-205007
sambaGroupType: 2

add ou=people,o=ls
objectClass: top
objectClass: organizationalUnit
ou: people

add uid=hmartin,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
uid: hmartin
homeDirectory: /home/com
loginShell: /bin/false
uidNumber: 101022
sambaAcctFlags: [U          ]
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-203044
givenName: Henri
sn: MARTIN
gidNumber: 102001
lsAllowedServices: MAIL
lsAllowedServices: SAMBA
lsAllowedServices: FTP
cn: Henri MARTIN
sambaPrimaryGroupSID: S-1-5-21-2421470416-3566881284-3047381809-205003
personalTitle: M.
lsGodfatherDn: uid=eeggs,ou=people,o=ls
userPassword: toto
sambaLMPassword: 0182BD0BD4444BF836077A718CCDF409
sambaNTPassword: 259745CB123A52AA2E693AAACCA2DB52
mail: henri.martin@ls.com

add uid=s.ldapsaisie,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
loginShell: /bin/false
uidNumber: 101036
userPassword: toto
sambaAcctFlags: [U          ]
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-203072
sambaNTPassword: 8DB716B655D71DF6BD056A41B22B9EA9
sambaLMPassword: 6CE56DC112C920EF0F5E44C88BF9DC39
givenName: Secretariat
mail: secretariat@ldapsaisie.biz
lsAllowedServices: MAIL
lsAllowedServices: SAMBA
lsAllowedServices: FTP
sambaPrimaryGroupSID: S-1-5-21-2421470416-3566881284-3047381809-513
personalTitle: M.
sn: LdapSaisie
cn: Secretariat LdapSaisie
gidNumber: 70000
uid: s.ldapsaisie
homeDirectory: /home/s.ldapsaisie

add uid=ls,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
uid: ls
homeDirectory: /home/ls
loginShell: /bin/false
uidNumber: 101068
userPassword: toto
sambaAcctFlags: [U          ]
sambaLMPassword: 6E72264E11F708C0AAD3B435B51404EE
sambaNTPassword: 8D9B9B87EE8C0423691F4F0E00C5BDE1
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-203136
gidNumber: 102001
lsAllowedServices: MAIL
lsAllowedServices: SAMBA
lsAllowedServices: FTP
sambaPrimaryGroupSID: S-1-5-21-2421470416-3566881284-3047381809-205003
personalTitle: M.
givenName: Ldap
sn: Saisie
cn: LdapSaisie
mail: ldap.saisie@ls.com
description: toto

add uid=erwpa,ou=people,o=ls
uid: erwpa
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
uidNumber: 101082
sambaAcctFlags: [U          ]
homeDirectory: /home/erwpa
loginShell: /bin/false
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-203164
sn: PAGEARD
gidNumber: 102009
mail: erwan.page@ldapsaisie.biz
lsAllowedServices: MAIL
lsAllowedServices: SAMBA
lsAllowedServices: FTP
cn: Erwan PAGE
sambaPrimaryGroupSID: S-1-5-21-2421470416-3566881284-3047381809-205019
personalTitle: M.
givenName: Erwan
lsGodfatherDn: uid=eeggs,ou=people,o=ls
userPassword: toto
sambaLMPassword: B3298C30FB103112C187B8085FE1D9DF
sambaNTPassword: 59D2D06177D147726BBA6AECBCB080BC

add uid=eeggs2,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
uid: eeggs2
uidNumber: 1000000
gidNumber: 102009
facsimileTelephoneNumber: 030000000
lsAllowedServices: MAIL
lsAllowedServices: FTP
description: Utilisateur test Easter-eggs 2
cn: Easter Eggs 2
personalTitle: M.
homeDirectory: /home/eeggs
loginShell: /bin/false
sn: Eggs
givenName: Easter
mail: bn8@zionetrix.net
userPassword: toto

add uid=eeggs3,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
uid: eeggs3
uidNumber: 10000000
gidNumber: 102009
facsimileTelephoneNumber: 030000000
lsAllowedServices: MAIL
lsAllowedServices: FTP
description: Utilisateur test Easter-eggs 2
cn: Easter Eggs 2
personalTitle: M.
homeDirectory: /home/eeggs
loginShell: /bin/false
sn: Eggs
givenName: Easter
mail: bn8@zionetrix.net
userPassword: toto

add ou=companies,o=ls
objectClass: organizationalUnit
objectClass: top
ou: companies

add ou=company2,ou=companies,o=ls
objectClass: top
objectClass: lscompany
ou: company2
description:: dGVzdCAyIA==

add ou=people,ou=company2,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: people

add ou=groups,ou=company2,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: groups

add ou=company1,ou=companies,o=ls
objectClass: top
objectClass: lscompany
ou: company1
description: Test company 1

add ou=people,ou=company1,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: people

add ou=groups,ou=company1,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: groups

add ou=company3,ou=companies,o=ls
objectClass: top
objectClass: lscompany
ou: company3
description: test 3

add ou=people,ou=company3,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: people

add ou=groups,ou=company3,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: groups

add cn=test,ou=groups,ou=company2,ou=companies,o=ls
objectClass: lsgroup
objectClass: posixGroup
cn: test
gidNumber: 102010

add cn=group1,ou=groups,ou=company1,ou=companies,o=ls
objectClass: lsgroup
objectClass: posixGroup
cn: group1
gidNumber: 102011
uniqueMember: uid=user1,ou=people,ou=company1,ou=companies,o=ls

add uid=user1,ou=people,ou=company1,ou=companies,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
givenName: prenom1
loginShell: /bin/false
personalTitle: M.
uid: user1
uidNumber: 10000001
sn: nom1
cn: prenom1 nom1
gidNumber: 101009
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-20001002
homeDirectory: /home/user1
mail: user1@ls.com
description: user1
userPassword: toto
sambaLMPassword: FC26CDB2863917C1AAD3B435B51404EE
sambaNTPassword: 00B2C85DDFBD8CC81602D6FC7340EB0B

add uid=user2,ou=people,ou=company1,ou=companies,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
givenName: prenom2
loginShell: /bin/false
personalTitle: M.
uid: user2
uidNumber: 10000002
sn: nom2
cn: prenom2 nom2
gidNumber: 102001
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-20001004
homeDirectory: /home/user2
mail: user2@ls.com
userPassword: toto
sambaLMPassword: C53D7C8685D27214AAD3B435B51404EE
sambaNTPassword: C549EE84021E5E8372E10CEDEAFD02A8

add ou=company4,ou=companies,o=ls
objectClass: top
objectClass: lscompany
ou: company4
description: test

add ou=people,ou=company4,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: people

add ou=groups,ou=company4,ou=companies,o=ls
objectClass: top
objectClass: organizationalUnit
ou: groups

add cn=testpasdn,ou=groups,o=ls
objectClass: lsgroup
objectClass: posixGroup
cn: testpasdn
gidNumber: 102012
uniqueMember: uid=erwpa,ou=people,o=ls
uniqueMember: uid=eeggs,ou=people,o=ls
uniqueMember: uid=ls,ou=people,o=ls

add uid=eeggs,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
loginShell: /bin/bash
personalTitle: M.
uidNumber: 10000008
sn: Eggs
gidNumber: 102009
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-20001016
userPassword: toto
sambaLMPassword: A466CD4F80A06085E68AA26A841A86FA
sambaNTPassword: 1F2029FF8619E2FEE2189C5A9653BDD5
uid: eeggs
givenName: Easter
cn: Easter Eggs
homeDirectory: /home/eeggs
mail: easter.eggs@ls.com

add cn=secretariat,ou=groups,o=ls
objectClass: lsgroup
objectClass: posixGroup
cn: secretariat
gidNumber: 102013
uniqueMember: uid=hmartin,ou=people,o=ls

add uid=invite,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
givenName: Utilisateur
loginShell: /bin/false
personalTitle: M.
uid: invite
uidNumber: 10000012
sn: de passage
cn: Utilisateur de passage
gidNumber: 101009
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-20001024
homeDirectory: /home/invite
mail: invite@ldapsaisie.biz
userPassword: toto
sambaLMPassword: 0182BD0BD4444BF836077A718CCDF409
sambaNTPassword: 259745CB123A52AA2E693AAACCA2DB52

add uid=demo,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
givenName: Demonstration
loginShell: /bin/false
personalTitle: M.
uid: demo
uidNumber: 10000014
sn: LdapSaisie
cn: Demonstration LdapSaisie
gidNumber: 70000
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-20001028
homeDirectory: /home/demo
mail: demo@ls.com
description:: VXRpbGlzYXRldXIgZGUgZMOpbW9uc3RyYXRpb24=
userPassword: demo
sambaLMPassword: 193DB29CB51FD313AAD3B435B51404EE
sambaNTPassword: 527C9C819B286EFB8EC4EBB5B5AE71CF

add uid=admin,ou=people,o=ls
objectClass: top
objectClass: lspeople
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
givenName: Administration
loginShell: /bin/false
personalTitle: M.
uid: admin
uidNumber: 10000015
sn: LdapSaisie
cn: Administration LdapSaisie
gidNumber: 70000
sambaSID: S-1-5-21-2421470416-3566881284-3047381809-20001030
homeDirectory: /home/admin
userPassword: admin
sambaLMPassword: F0D412BD764FFE81AAD3B435B51404EE
sambaNTPassword: 209C6174DA490CAEB422F3FA5A7AE634
description:: VXRpbGlzYXRldXIgZGUgZMOpbW9uc3RyYXRpb24gOiBBZG1pbmlzdHJhdGV1cg==
jpegPhoto:: iVBORw0KGgoAAAANSUhEUgAAAOkAAAAyCAYAAAC5zvwPAAAABHNCSVQICAgIfAhkiA
[encoded data, 8295 characters]
 uQmCC
mail: admin@ls.com

add cn=test34,ou=groups,o=ls
objectClass: lsgroup
objectClass: posixGroup
cn: test34
gidNumber: 800001
uniqueMember: uid=eeggs,ou=people,o=ls
description: test
lsGodfatherDn: uid=eeggs,ou=people,o=ls

add ou=ppolicies,o=ls
objectclass: organizationalUnit
ou: ppolicies

add cn=default,ou=ppolicies,o=ls
cn: default
objectclass: top
objectclass: device
objectclass: pwdPolicy
objectclass: pwdPolicyChecker
pwdAttribute: userPassword
pwdMinAge: 0
pwdMaxAge: 0
pwdInHistory: 3
pwdCheckQuality: 1
pwdMinLength: 8
pwdExpireWarning: 0
pwdGraceAuthnLimit: 0
pwdLockout: FALSE
pwdLockoutDuration: 0
pwdMaxFailure: 0
pwdFailureCountInterval: 0
pwdMustChange: FALSE
pwdAllowUserChange: FALSE
pwdSafeModify: FALSE

add cn=sysaccounts,ou=ppolicies,o=ls
cn: sysaccounts
objectclass: top
objectclass: device
objectclass: pwdPolicy
objectclass: pwdPolicyChecker
pwdAttribute: userPassword
pwdMinAge: 0
pwdMaxAge: 0
pwdInHistory: 0
pwdCheckQuality: 1
pwdMinLength: 10
pwdExpireWarning: 0
pwdGraceAuthnLimit: 0
pwdLockout: FALSE
pwdLockoutDuration: 0
pwdMaxFailure: 0
pwdFailureCountInterval: 0
pwdMustChange: FALSE
pwdAllowUserChange: FALSE
pwdSafeModify: FALSE

add ou=dyngroups,o=ls
objectClass: top
objectClass: organizationalUnit
ou: groups

add cn=UnixUsers,ou=dyngroups,o=ls
cn: UnixUsers
description: Users who can login on unix machines
gidnumber: 800024
lsdyngroupmemberdnuri: ldap:///ou=people,o=ls??one?(!(loginShell=/bin/false)
 )
lsdyngroupmemberuiduri: ldap:///ou=people,o=ls?uid?one?(!(loginShell=/bin/fa
 lse))
lsgodfatherdn: uid=admin,ou=people,o=ls
memberuid: eeggs
objectclass: lsdyngroup
objectclass: posixGroup
uniquemember: uid=eeggs,ou=people,o=ls
