# Isode RBAC demonstration LDIF file 2
#
# Example RBAC data.  Having configured the DSA to use RBAC,
# this data may be loaded either with Sodium (using 
# Operations->Bulk Tools->LDIF Load...)
#
# or from the command line:
#   ldapadd -x -D 'cn=DSA Manager,cn=dsa,o=Example' -W XX < rbac-data.ldif
#
# where "XX" is the DSA manager's password.  All of the passwords below are
# specified as "x".
#
# Objects, Example
dn: ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: Objects

# confidential, Objects, Example
dn: ou=confidential,ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: confidential
unsignedSecurityLabelInfo;binary:: MBiAADEUAgEDBgEpEwxDT05GSURFTlRJQUw=

# plain, Objects, Example
dn: ou=plain,ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: plain

# restricted, Objects, Example
dn: ou=restricted,ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: restricted
unsignedSecurityLabelInfo;binary:: MBaAADESAgECBgEpEwpSRVNUUklDVEVE

# secret, Objects, Example
dn: ou=secret,ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: secret
unsignedSecurityLabelInfo;binary:: MBKAADEOAgEEBgEpEwZTRUNSRVQ=

# topsecret, Objects, Example
dn: ou=topsecret,ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: topsecret
unsignedSecurityLabelInfo;binary:: MBaAADESAgEFBgEpEwpUT1AgU0VDUkVU

# unclassified, Objects, Example
dn: ou=unclassified,ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: unclassified
unsignedSecurityLabelInfo;binary:: MBiAADEUAgEBBgEpEwxVTkNMQVNTSUZJRUQ=

# unmarked, Objects, Example
dn: ou=unmarked,ou=Objects,o=Example
objectClass: organizationalUnit
objectClass: top
ou: unmarked
unsignedSecurityLabelInfo;binary:: MBSAADEQAgEABgEpEwhVTk1BUktFRA==

# People, Example
dn: ou=People,o=Example
objectClass: organizationalUnit
objectClass: top
ou: People

# confidential, People, Example
dn: cn=confidential,ou=People,o=Example
objectClass: organizationalPerson
objectClass: person
objectClass: top
objectClass: clearedUser
objectClass: inetOrgPerson
cn: confidential
sn: Confidential
clearance;binary:: MAcGASkDAgRw
userPassword: x

# plain, People, Example
dn: cn=plain,ou=People,o=Example
objectClass: person
objectClass: top
objectClass: organizationalPerson
objectClass: inetOrgPerson
cn: plain
sn: Plain
userPassword: x

# restricted, People, Example
dn: cn=restricted,ou=People,o=Example
objectClass: organizationalPerson
objectClass: person
objectClass: top
objectClass: clearedUser
objectClass: inetOrgPerson
cn: restricted
sn: Restricted
clearance;binary:: MAcGASkDAgVg
userPassword: x

# secret, People, Example
dn: cn=secret,ou=People,o=Example
objectClass: organizationalPerson
objectClass: person
objectClass: top
objectClass: clearedUser
objectClass: inetOrgPerson
cn: secret
sn: Secret
clearance;binary:: MAcGASkDAgN4
userPassword: x

# topsecret, People, Example
dn: cn=topsecret,ou=People,o=Example
objectClass: organizationalPerson
objectClass: person
objectClass: top
objectClass: clearedUser
objectClass: inetOrgPerson
cn: topsecret
sn: Top Secret
clearance;binary:: MAcGASkDAgJ8
userPassword: x

# unclassified, People, Example
dn: cn=unclassified,ou=People,o=Example
objectClass: organizationalPerson
objectClass: person
objectClass: top
objectClass: clearedUser
objectClass: inetOrgPerson
cn: unclassified
sn: Unclassified
clearance;binary:: MAMGASk=
userPassword: x

# unmarked, People, Example
dn: cn=unmarked,ou=People,o=Example
objectClass: organizationalPerson
objectClass: person
objectClass: top
objectClass: clearedUser
objectClass: inetOrgPerson
cn: unmarked
sn: Unmarked
clearance;binary:: MAcGASkDAgeA
userPassword: x