-# Net::LDAP::Entry will lc all our attribute names anyway, so
-# we don't really care about correctCapitalization for LDAP
-# attributes which won't pass through DBI
-my $objectclass_sql = {
-
-HrEduPerson => q{
-
- select
- concat('uid=',trim(userid),',dc=ffzg,dc=hr') as dn,
- 'person
- organizationalPerson
- inetOrgPerson
- hrEduPerson' as objectClass,
-
- trim(userid) as uid,
- firstname as givenName,
- surname as sn,
- concat(firstname,' ',surname) as cn,
-
- -- SAFEQ specific mappings from UMgr-LDAP.conf
- cardnumber as objectGUID,
- surname as displayName,
- rfid_sid as pager,
- email as mail,
- categorycode as ou,
- categorycode as organizationalUnit,
- categorycode as memberOf,
- categorycode as department,
- concat('/home/',borrowernumber) as homeDirectory
- from borrowers
-
-},
-
-organizationalUnit => q{
-
- select
- concat('ou=',categorycode) as dn,
- 'organizationalUnit
- top' as objectClass,
-
- hex(md5(categorycode)) % 10000 as objectGUID,
-
- categorycode as ou,
- description as displayName
- from categories
-
-},
-};
-