[Samba] ip attrs on computer object

[Kees van Vloten]

Op 18-04-2024 om 09:22 schreef Arnaud FLORENT via samba:
>
> Le 16/04/2024 à 17:14, Arnaud FLORENT via samba a écrit :
>> Hi
>>
>> Le 16/04/2024 à 17:08, Kees van Vloten via samba a écrit :
>>> Hi team,
>>>
>>> I am trying to store some ip-data on the computer-account object in 
>>> ldap. I managed to store ip-address in 'ipHostNumber' and 
>>> mac-address in 'macAddress' (after adding objectClass: 
>>> "ieee802Device").
>>>
>>> The last attribute I want to store is 'ipNetmaskNumber' (which is in 
>>> the 2008R2 schema), but that fails because it is non-existent in the 
>>> objectClasses.  This attribute exists in the schema, but I can't 
>>> figure out how to make it usable on the computer-account object.
>>>
>>> What would be the objectClass to add?
>> ipNetwork
>>>
>>> Or is this a bad idea and should I better follow a different approach?
>> sorry i cant tell
>
> it looks that ipNetwork represents an abstraction of a network
>
> https://learn.microsoft.com/en-us/windows/win32/adschema/c-ipnetwork
>
>
> so it may not be the right class to use for a computer...
>
> may be you should follow a different approach...
>
Indeed, you cannot, samba returns an error when you try.

There is another attribute networkAdrress that I am now using for the 
subnet + prefix (10.0.0.0/8). That solves the issue.

Thank you for looking into it.

I would love to have a bigger picture of the AD-schema with 
objectClasses, their purpose, how objectClasses  can be combined (or 
not) and a list of (optional) attributes.
It would make it a lot easier to solve the question I had.  Is anybody 
aware a good tool for this purpose?

- Kees.

>
>
>
>>>
>>> (samba 4.19.5 on bookworm)
>>>
>>> - Kees.
>>>
>>>