[Samba] Re: Novell EDirectory as LDAP backend
Stefan Voelkel
Stefan.Voelkel at millenux.com
Mon Mar 17 14:23:53 GMT 2003
Hello,
I think this (from sambaAccount)
MustContain { "uid"},
should be
MustContain { "uniqueId"},
since this is a ldap schema to nds conversion and the uid attribute from
ldap is mapped to uniqueId in nds.
I also added some flags to the password fields.
Attached the modified version.
regards
sv
-------------- next part --------------
--
-- Submitted by Bruno Gimenes Pereti <pereti at ut mp dot edu dot br>
-- Modified by Rolf Offermanns <rolf.offermanns(at)gmx DOT net>
-- Modified by Stefan Völkel <Stefan.Voelkel(at)millenux DOT com>
--
-- schema file for Novell's eDirectory 8.6/8.7
--
SambaAccountSchemaExtensions DEFINITIONS ::=
BEGIN
-- Password hashes
"lmPassword" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR, DS_SIZED_ATTR, DS_SYNC_IMMEDIATE },
LowerBound 0,
UpperBound 32,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 1 }
}
"ntPassword" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR, DS_SIZED_ATTR, DS_SYNC_IMMEDIATE },
LowerBound 0,
UpperBound 32,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 2 }
}
-- Account flags in string format ([UWDX ])
"acctFlags" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 4 }
}
-- Password timestamps & policies
"pwdLastSet" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 3 }
}
"logonTime" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 5 }
}
"logoffTime" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 6 }
}
"kickoffTime" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 7 }
}
"pwdCanChange" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 8 }
}
"pwdMustChange" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 9 }
}
-- string settings
"homeDrive" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 10 }
}
"scriptPath" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 5 1 4 1 7165 2 1 11 }
}
"profilePath" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 12 }
}
"userWorkstations" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 13 }
}
"smbHome" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 17 }
}
"domain" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_CI_STRING,
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 18 }
}
-- user and group RID
"rid" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 14 }
}
"primaryGroupID" ATTRIBUTE ::=
{
Operation ADD,
SyntaxID SYN_INTEGER,
Flags { DS_SINGLE_VALUED_ATTR },
ASN1ObjID { 1 3 6 1 4 1 7165 2 1 15 }
}
"sambaAccount" OBJECT-CLASS ::=
{
Operation ADD,
Flags {DS_AUXILIARY_CLASS},
SubClassOf {"TOP"},
MustContain { "uniqueID"},
MustContain { "rid"},
MayContain { "CN"},
MayContain { "lmPassword"},
MayContain { "ntPassword"},
MayContain { "pwdLastSet"},
MayContain { "logonTime"},
MayContain { "logoffTime"},
MayContain { "kickoffTime"},
MayContain { "pwdCanChange"},
MayContain { "pwdMustChange"},
MayContain { "acctFlags"},
MayContain { "displayName"},
MayContain { "smbHome"},
MayContain { "homeDrive"},
MayContain { "scriptPath"},
MayContain { "profilePath"},
MayContain { "description"},
MayContain { "userWorkstations"},
MayContain { "primaryGroupID"},
MayContain { "domain"},
ASN1ObjID { 1 3 6 1 4 1 7165 2 2 3 }
}
-- Used for Winbind experimentation
"uidPool" OBJECT-CLASS ::=
{
Operation ADD,
Flags {DS_AUXILIARY_CLASS},
SubClassOf {"TOP"},
MustContain { "uidNumber"},
MustContain { "CN"},
ASN1ObjID { 1 3 6 1 4 1 7165 1 2 2 3 }
}
"gidPool" OBJECT-CLASS ::=
{
Operation ADD,
Flags {DS_AUXILIARY_CLASS},
SubClassOf {"TOP"},
MustContain { "gidNumber"},
MustContain { "CN"},
ASN1ObjID { 1 3 6 1 4 1 7165 1 2 2 4 }
}
END
More information about the samba
mailing list