/usr/share/augeas/lenses/dist/ldif.aug is in augeas-lenses 1.2.0-0ubuntu1.3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 | (*
Module: Ldif
Parses the LDAP Data Interchange Format (LDIF)
Author: Dominic Cleal <dcleal@redhat.com>
About: Reference
This lens tries to keep as close as possible to RFC2849
<http://tools.ietf.org/html/rfc2849>
and OpenLDAP's ldif(5)
About: Licence
This file is licensed under the LGPLv2+, like the rest of Augeas.
*)
module Ldif =
autoload xfm
(************************************************************************
* Group: USEFUL PRIMITIVES
************************************************************************)
(* View: comment *)
let comment = Util.comment_generic /#[ \t]*/ "# "
(* View: empty
Map empty lines, including empty comments *)
let empty = [ del /#?[ \t]*\n/ "\n" ]
(* View: eol
Only eol, don't include whitespace *)
let eol = Util.del_str "\n"
(* View: sep_colon
The separator for attributes and values *)
let sep_colon = del /:[ \t]*/ ": "
(* View: sep_base64
The separator for attributes and base64 encoded values *)
let sep_base64 = del /::[ \t]*/ ":: "
(* View: sep_url
The separator for attributes and URL-sourced values *)
let sep_url = del /:<[ \t]*/ ":< "
(* Variable: ldapoid_re
Format of an LDAP OID from RFC 2251 *)
let ldapoid_re = /[0-9][0-9\.]*/
(* View: sep_modspec
Separator between modify operations *)
let sep_modspec = Util.del_str "-" . eol
(************************************************************************
* Group: BASIC ATTRIBUTES
************************************************************************)
(* Different types of values, all permitting continuation where the next line
begins with whitespace *)
let attr_safe_string =
let line = /[^ \t\n:<][^\n]*/
in let lines = line . (/\n[ \t]+[^ \t\n][^\n]*/)*
in sep_colon . store lines
let attr_base64_string =
let line = /[a-zA-Z0-9=+]+/
in let lines = line . (/\n[ \t]+/ . line)*
in sep_base64 . [ label "@base64" . store lines ]
let attr_url_string =
let line = /[^ \t\n][^\n]*/
in let lines = line . (/\n[ \t]+/ . line)*
in sep_url . [ label "@url" . store lines ]
let attr_intflag = sep_colon . store /0|1/
(* View: attr_version
version-spec = "version:" FILL version-number *)
let attr_version = Build.key_value_line "version" sep_colon (store /[0-9]+/)
(* View: attr_dn
dn-spec = "dn:" (FILL distinguishedName /
":" FILL base64-distinguishedName) *)
let attr_dn = del /dn/i "dn"
. ( attr_safe_string | attr_base64_string )
. eol
(* View: attr_type
AttributeType = ldap-oid / (ALPHA *(attr-type-chars)) *)
let attr_type = ldapoid_re | /[a-zA-Z][a-zA-Z0-9-]*/
- /dn/i
- /changeType/i
- /include/i
(* View: attr_option
options = option / (option ";" options) *)
let attr_option = Util.del_str ";"
. [ label "@option" . store /[a-zA-Z0-9-]+/ ]
(* View: attr_description
Attribute name, possibly with options *)
let attr_description = key attr_type . attr_option*
(* View: attr_val_spec
Generic attribute with a value *)
let attr_val_spec = [ attr_description
. ( attr_safe_string
| attr_base64_string
| attr_url_string )
. eol ]
(* View: attr_changetype
Parameters:
t:regexp - value of changeType *)
let attr_changetype (t:regexp) =
key /changeType/i . sep_colon . store t . eol
(* View: attr_modspec *)
let attr_modspec = key /add|delete|replace/ . sep_colon . store attr_type
. attr_option* . eol
(* View: attr_dn_value
Parses an attribute line with a DN on the RHS
Parameters:
k:regexp - match attribute name as key *)
let attr_dn_value (k:regexp) =
[ key k . ( attr_safe_string | attr_base64_string ) . eol ]
(* View: sep_line *)
let sep_line = empty | comment
(* View: attr_include
OpenLDAP extension, must be separated by blank lines *)
let attr_include = eol . [ key "include" . sep_colon
. store /[^ \t\n][^\n]*/ . eol . comment* . eol ]
(* View: sep_record *)
let sep_record = ( sep_line | attr_include )*
(************************************************************************
* Group: LDIF CONTENT RECORDS
************************************************************************)
(* View: ldif_attrval_record
ldif-attrval-record = dn-spec SEP 1*attrval-spec *)
let ldif_attrval_record = [ seq "record"
. attr_dn
. ( sep_line* . attr_val_spec )+ ]
(* View: ldif_content
ldif-content = version-spec 1*(1*SEP ldif-attrval-record) *)
let ldif_content = [ label "@content"
. ( sep_record . attr_version )?
. ( sep_record . ldif_attrval_record )+
. sep_record ]
(************************************************************************
* Group: LDIF CHANGE RECORDS
************************************************************************)
(* View: change_add
change-add = "add" SEP 1*attrval-spec *)
let change_add = [ attr_changetype "add" ] . ( sep_line* . attr_val_spec )+
(* View: change_delete
change-delete = "add" SEP 1*attrval-spec *)
let change_delete = [ attr_changetype "delete" ]
(* View: change_modspec
change-modspec = add/delete/replace: AttributeDesc SEP *attrval-spec "-" *)
let change_modspec = attr_modspec . ( sep_line* . attr_val_spec )*
(* View: change_modify
change-modify = "modify" SEP *mod-spec *)
let change_modify = [ attr_changetype "modify" ]
. ( sep_line* . [ change_modspec
. sep_line* . sep_modspec ] )+
(* View: change_modrdn
("modrdn" / "moddn") SEP newrdn/newsuperior/deleteoldrdn *)
let change_modrdn =
let attr_deleteoldrdn = [ key "deleteoldrdn" . attr_intflag . eol ]
in let attrs_modrdn = attr_dn_value "newrdn"
| attr_dn_value "newsuperior"
| attr_deleteoldrdn
in [ attr_changetype /modr?dn/ ]
. ( sep_line | attrs_modrdn )* . attrs_modrdn
(* View: change_record
changerecord = "changetype:" FILL (changeadd/delete/modify/moddn) *)
let change_record = ( change_add | change_delete | change_modify
| change_modrdn)
(* View: change_control
"control:" FILL ldap-oid 0*1(1*SPACE ("true" / "false")) 0*1(value-spec) *)
let change_control =
let attr_criticality = [ Util.del_ws_spc . label "criticality"
. store /true|false/ ]
in let attr_ctrlvalue = [ label "value" . (attr_safe_string
| attr_base64_string
| attr_url_string ) ]
in [ key "control" . sep_colon . store ldapoid_re
. attr_criticality? . attr_ctrlvalue? . eol ]
(* View: ldif_change_record
ldif-change-record = dn-spec SEP *control changerecord *)
let ldif_change_record = [ seq "record" . attr_dn
. ( ( sep_line | change_control )* . change_control )?
. sep_line* . change_record ]
(* View: ldif_changes
ldif-changes = version-spec 1*(1*SEP ldif-change-record) *)
let ldif_changes = [ label "@changes"
. ( sep_record . attr_version )?
. ( sep_record . ldif_change_record )+
. sep_record ]
(************************************************************************
* Group: LENS
************************************************************************)
(* View: lns *)
let lns = sep_record | ldif_content | ldif_changes
let filter = incl "/etc/openldap/schema/*.ldif"
let xfm = transform lns filter
|