Extending Samba 4 schema for OSX GPO support

Andrew Bartlett abartlet at samba.org
Tue Nov 23 14:18:07 MST 2010

On Tue, 2010-11-23 at 16:09 -0500, Aubrey Ekstrom wrote:
> Hi Andrew,
> I saw your comments to Karmen on my post. The ldif file I am using is the schema Apple recommends for extending MS A/D schema to support OS X with GPO, and is exported out of Apple's OS X Server Open Directory. It is in the exact format Apple says to use. I don't mind modifying it to get it working, and I am happy to share anything I discover or figure out or just share my success, but that is the answer to your question. I have not tested importing that file into an actual MS Active Directory however, but there are plenty of posts on both Apple's and Microsoft's web sites (and elsewhere) of people who have successfully done just that. Hope that helps!

What exact process is expected to be used to add these schema elements
to Microsoft's AD?

Andrew Bartlett

Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20101124/53cf71c9/attachment.pgp>

More information about the samba-technical mailing list