[Samba] Extending the schema

Jim Potter jimpotter at orange.net
Sun Mar 17 15:59:21 MDT 2013

Hi all,

I'm trying to extend the schema on my Samba4 setup by adding apple's
schema. I followed the instructions from



(I think this is a modified apple.schema but I haven't found the

and have got it to import the schema OK (I had to remove the class rDNAttID
for all the classes). I'll post my notes on it presently...

My question is - how do I know this hasn't done anything disastrous? It all
looks OK given 5 rigorous minutes of testing but extending schema on AD is
generally considered foolhardy as far as I can see. What could go wrong in
the future?

And what is this about rDNAttIds? Is this a difference/potential
incompatibility/something to watch out for between samba4 and MS AD? For
instance, if I had a MS AD domain with apple extensions, would this cause
any more problems adding a samba4 DC?

thanks again,


More information about the samba mailing list