summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMartin Konold <martin.konold@erfrakon.de>2009-06-22 13:18:42 (GMT)
committerMartin Konold <martin.konold@erfrakon.de>2009-06-22 13:18:42 (GMT)
commit3f0004bb8131aef565fec806d0779432c9c8dd8f (patch)
treea8f7e1c59652e2697c6eaa67c1dc40a446f3aa1c
parent82ed400fb486b5e1b180ccdde6bd2baa5596ecec (diff)
downloadkolab-schema-3f0004bb8131aef565fec806d0779432c9c8dd8f.tar.gz
Martin Konold: Added new attribute which contains a comma separated list of secure ciphers. (Required for SSL/TLS)
-rw-r--r--kolab2.schema18
1 files changed, 15 insertions, 3 deletions
diff --git a/kolab2.schema b/kolab2.schema
index 38ad6c3..3e33e97 100644
--- a/kolab2.schema
+++ b/kolab2.schema
@@ -1,7 +1,7 @@
# $Id$
-# (c) 2003, 2004 Tassilo Erlewein <tassilo.erlewein@erfrakon.de>
-# (c) 2003-2009 Martin Konold <martin.konold@erfrakon.de>
-# (c) 2003 Achim Frank <achim.frank@erfrakon.de>
+# (c) 2003-2004 Tassilo Erlewein <tassilo.erlewein@erfrakon.de>
+# (c) 2003-2009 Martin Konold <martin.konold@erfrakon.de>
+# (c) 2003 Achim Frank <achim.frank@erfrakon.de>
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
@@ -705,6 +705,17 @@ attributetype ( 1.3.6.1.4.1.19414.2.1.800
EQUALITY booleanMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )
+# Configurable list of ciphers considered to be secure enough for our purposes.
+# E.g. TLS 1.0 and SSL 3.0
+attributetype ( 1.3.6.1.4.1.19414.2.1.801
+ NAME 'kolabSecureCiphers'
+ DESC 'comma separated list of ciphers considered to be secure'
+ EQUALITY caseIgnoreIA5Match
+ SUBSTR caseIgnoreIA5SubstringsMatch
+ SINGLE-VALUE
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
+
+
######################################################
# proftpd attributes (unused since Kolab Server 2.2) #
######################################################
@@ -840,6 +851,7 @@ objectclass ( 1.3.6.1.4.1.19414.2.2.1
kolabfilter-allow-sender-header $
kolabfilter-reject-forged-from-header $
kolabPolicyDaemon $
+ kolabSecureCiphers $
proftpd-ftp $
proftpd-defaultquota $
kolabFreeBusyFuture $