[Samba] Extending Samba-4 Schema to get Microsoft LAPS working

Ardos raghav at ardos.in
Fri Nov 23 02:33:15 UTC 2018


Thank you very much for your support.

With your ldif, one of the attributes got added to computer container. 
Second one is having a trouble. The modification command is reporting it 
is not able to find the attribute although it is very much in the 
schema. I am checking this part out. Any suggestions to figure out 
what's wrong and correct it?

Best regards,


On 22/11/18 4:38 PM, Rowland Penny via samba wrote:
> On Thu, 22 Nov 2018 11:21:14 +0530
> Ardos via samba <samba at lists.samba.org> wrote:
>> Hi,
>> I am using the command "ldbmodify -H path_to_sam_ldb
>> automount_classes.ldif --option="dsdb:schema update allowed"=true" as
>> given in the wiki. /
>> /
>> Using the above method I was able to add the two attributes. But I am
>> not able to add these attributes to computers class.
>> Hence looking for help to create the ldif file to add these two
>> attributes to computer class.
> You need another ldif:
> dn: CN=Computer,CN=Schema,CN=Configuration,DC=sample,DC=com
> changetype: modify
> add: mayContain
> mayContain: ms-Mcs-AdmPwdExpirationTime
> -
> add: mayContain
> mayContain: ms-Mcs-AdmPwd
> Rowland

More information about the samba mailing list