[Samba] Samba 4 Active Directory Quotas
Rowland Penny
rowlandpenny at googlemail.com
Sun Dec 28 02:24:33 MST 2014
On 28/12/14 02:10, Greg Zartman wrote:
> On Sat, Dec 27, 2014 at 2:43 AM, Rowland Penny
> <rowlandpenny at googlemail.com <mailto:rowlandpenny at googlemail.com>> wrote:
>
> Yes, samba4 comes with a script: oLschema2ldif
>
>
> Humm... Not liking the errors in this method. Looking at the ldif, I
> think we could rework this so that one could modify the LDAP schema
> directly using LDAP syntax. In my case, I'm using Net::LDAP.
> Something more like this:
>
> dn: CN=systemQuotas,CN=Schema,CN=Configuration,DOMAIN_TOP_DN
> objectClass: top
> objectClass: classSchema
> governsID: 1.3.6.1.4.1.19937.1.2.1
> cn: systemQuotas
> name: systemQuotas
> ldapDisplayName: systemQuotas
> subClassOf: posixAccount
> objectClassCategory: 3
> mustContain: uidNumber
> mayContain: quota
> defaultObjectCategory:
> CN=systemQuotas,CN=Schema,CN=Configuration,DOMAIN_TOP_DN
> possSuperiors: top
> -
>
> dn:
> changetype: modify
> replace: schemaupdatenow
> schemaupdatenow: 1
>
> Partially taken from here:
> http://msdn.microsoft.com/en-us/library/cc223302.aspx
>
> Need to test this out a bit more and add the quota attribute, but I
> think this will ultimately add what I'm after.
Not sure if this will work, but by all means try it, if you do, make
sure that you do it on a DC that you don't mind loosing, just in case it
screws up the AD.
If it does work, please let us know.
Rowland
>
>
>
>
> Note that the objectClass in the above ldif is a subclass of
> 'posixAccount' and to use it, you will have to add the 'uid'
> attribute to all users, you do not need to add (and in fact should
> not) the 'posixAccount' objectClass'.
>
>
> Yup, I did find this objectClass, which I have been using to delineate
> Centos (SME Server) users from other users in the active directory.
>
> Thanks Rowland.
>
> --
> Greg J. Zartman
> Board Member
>
> Koozali SME Server
> www.koozali.org <http://www.koozali.org>
>
> SME Server user, contributor, and community member since 2000
More information about the samba
mailing list