[Samba] Extending Samba-4 Schema to get Microsoft LAPS working

[Rowland Penny]

On Thu, 22 Nov 2018 11:21:14 +0530
Ardos via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> I am using the command "ldbmodify -H path_to_sam_ldb 
> automount_classes.ldif --option="dsdb:schema update allowed"=true" as 
> given in the wiki. /
> /
> 
> Using the above method I was able to add the two attributes. But I am 
> not able to add these attributes to computers class.
> 
> Hence looking for help to create the ldif file to add these two 
> attributes to computer class.

You need another ldif:

dn: CN=Computer,CN=Schema,CN=Configuration,DC=sample,DC=com
changetype: modify
add: mayContain
mayContain: ms-Mcs-AdmPwdExpirationTime
-
add: mayContain
mayContain: ms-Mcs-AdmPwd

Rowland