sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Code
4c1a7d7556
samba-mirror/source4/setup/provision.ldif

90 lines
2.1 KiB
Plaintext
Raw Normal View History

r23815: Thanks to Matthias Wallnoefer <mwallnoefer@yahoo.de> for pointing out that we had the wrong objectClass for OU=Domain Controllers,${DOMAINDN} (was CN=Domain Controllers,${DOMAINDN}) This fixes both the SAMR server and the LDIF templates. Andrew Bartlett (This used to be commit 625a9e6c041bedc93925bdebb3a60af1dbdde317)
2007-07-10 17:26:10 +04:00
dn: OU=Domain Controllers,${DOMAINDN}
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
objectClass: top
r23815: Thanks to Matthias Wallnoefer <mwallnoefer@yahoo.de> for pointing out that we had the wrong objectClass for OU=Domain Controllers,${DOMAINDN} (was CN=Domain Controllers,${DOMAINDN}) This fixes both the SAMR server and the LDIF templates. Andrew Bartlett (This used to be commit 625a9e6c041bedc93925bdebb3a60af1dbdde317)
2007-07-10 17:26:10 +04:00
objectClass: organizationalUnit
r16264: Add, but do not yet enable, the partitions module. This required changes to the rootDSE module, to allow registration of partitions. In doing so I renamed the 'register' operation to 'register_control' and 'register_partition', which changed a few more modules. Due to the behaviour of certain LDAP servers, we create the baseDN entry in two parts: Firstly, we allow the admin to export a simple LDIF file to add to their server. Then we perform a modify to add the remaining attributes. To delete all users in partitions, we must now search and delete all objects in the partition, rather than a simple search from the root. Against LDAP, this might not delete all objects, so we allow this to fail. In testing, we found that the 'Domain Controllers' container was misnamed, and should be 'CN=', rather than 'OU='. To avoid the Templates being found in default searches, they have been moved to CN=Templates from CN=Templates,${BASEDN}. Andrew Bartlett (This used to be commit b49a4fbb57f10726bd288fdc9fc95c0cbbe9094a)
2006-06-15 22:04:24 +04:00
cn: Domain Controllers
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
description: Default container for domain controllers
r16166: Remove hexidecimal constants from the Samba4 provision files. This change is required for compatibility with the OSX client, in particular, but returning 0x80000002 rather than -2147483646 violates what LDAP clients expect in general. Andrew Bartlett (This used to be commit 81f3cd1c4592d2108d521acd701ed4a70a23c465)
2006-06-13 00:00:18 +04:00
systemFlags: 2348810240
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
isCriticalSystemObject: TRUE
Remove default 'showInAdvancedViewOnly' values. This means we only show and set the values when they are not the values the schema and objectclass module would impose. Andrew Bartlett (This used to be commit c2f2e01357c1b087aa1261fb2cac8687426d5a78)
2008-01-18 10:10:18 +03:00
showInAdvancedViewOnly: FALSE
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
r20557: use ${DOMAINDN} instead of ${BASEDN} metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-01-05 20:40:43 +03:00
dn: CN=ForeignSecurityPrincipals,${DOMAINDN}
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
objectClass: top
objectClass: container
cn: ForeignSecurityPrincipals
description: Default container for security identifiers (SIDs) associated with objects from external, trusted domains
r16166: Remove hexidecimal constants from the Samba4 provision files. This change is required for compatibility with the OSX client, in particular, but returning 0x80000002 rather than -2147483646 violates what LDAP clients expect in general. Andrew Bartlett (This used to be commit 81f3cd1c4592d2108d521acd701ed4a70a23c465)
2006-06-13 00:00:18 +04:00
systemFlags: 2348810240
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
isCriticalSystemObject: TRUE
Remove default 'showInAdvancedViewOnly' values. This means we only show and set the values when they are not the values the schema and objectclass module would impose. Andrew Bartlett (This used to be commit c2f2e01357c1b087aa1261fb2cac8687426d5a78)
2008-01-18 10:10:18 +03:00
showInAdvancedViewOnly: FALSE
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
r20557: use ${DOMAINDN} instead of ${BASEDN} metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-01-05 20:40:43 +03:00
dn: CN=System,${DOMAINDN}
r4682: A LDB-based secrets implementation in Samba4. This uses LDB (a local secrets.ldb and the global samdb) to fill out the secrets from an LSA perspective. Some small changes to come, but the bulk of the work is now done. A re-provision is required after this change. Andrew Bartlett (This used to be commit ded33033521a6a1c7ea80758c5c5aeeebb182a51)
2005-01-11 17:04:58 +03:00
objectClass: top
objectClass: container
cn: System
description: Builtin system settings
r16166: Remove hexidecimal constants from the Samba4 provision files. This change is required for compatibility with the OSX client, in particular, but returning 0x80000002 rather than -2147483646 violates what LDAP clients expect in general. Andrew Bartlett (This used to be commit 81f3cd1c4592d2108d521acd701ed4a70a23c465)
2006-06-13 00:00:18 +04:00
systemFlags: 2348810240
r4682: A LDB-based secrets implementation in Samba4. This uses LDB (a local secrets.ldb and the global samdb) to fill out the secrets from an LSA perspective. Some small changes to come, but the bulk of the work is now done. A re-provision is required after this change. Andrew Bartlett (This used to be commit ded33033521a6a1c7ea80758c5c5aeeebb182a51)
2005-01-11 17:04:58 +03:00
isCriticalSystemObject: TRUE
r20557: use ${DOMAINDN} instead of ${BASEDN} metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-01-05 20:40:43 +03:00
dn: CN=RID Manager$,CN=System,${DOMAINDN}
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
objectclass: top
objectclass: rIDManager
cn: RID Manager$
r16166: Remove hexidecimal constants from the Samba4 provision files. This change is required for compatibility with the OSX client, in particular, but returning 0x80000002 rather than -2147483646 violates what LDAP clients expect in general. Andrew Bartlett (This used to be commit 81f3cd1c4592d2108d521acd701ed4a70a23c465)
2006-06-13 00:00:18 +04:00
systemFlags: 2348810240
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
isCriticalSystemObject: TRUE
Be consistant in using ${SEVERDN}. This ensures we don't fall out of sync with the provision scripts. Andrew Bartlett (This used to be commit 566c60b4649e2b94bf467993acd4bf72c7368e5a)
2008-04-09 08:51:22 +04:00
fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
rIDAvailablePool: 4611686014132423217
r20557: use ${DOMAINDN} instead of ${BASEDN} metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-01-05 20:40:43 +03:00
dn: CN=DomainUpdates,CN=System,${DOMAINDN}
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
objectClass: top
objectClass: container
cn: DomainUpdates
r20557: use ${DOMAINDN} instead of ${BASEDN} metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-01-05 20:40:43 +03:00
dn: CN=Windows2003Update,CN=DomainUpdates,CN=System,${DOMAINDN}
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
objectClass: top
objectClass: container
cn: Windows2003Update
revision: 8
r20557: use ${DOMAINDN} instead of ${BASEDN} metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-01-05 20:40:43 +03:00
dn: CN=Infrastructure,${DOMAINDN}
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
objectclass: top
objectclass: infrastructureUpdate
cn: Infrastructure
r16166: Remove hexidecimal constants from the Samba4 provision files. This change is required for compatibility with the OSX client, in particular, but returning 0x80000002 rather than -2147483646 violates what LDAP clients expect in general. Andrew Bartlett (This used to be commit 81f3cd1c4592d2108d521acd701ed4a70a23c465)
2006-06-13 00:00:18 +04:00
systemFlags: 2348810240
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
isCriticalSystemObject: TRUE
Be consistant in using ${SEVERDN}. This ensures we don't fall out of sync with the provision scripts. Andrew Bartlett (This used to be commit 566c60b4649e2b94bf467993acd4bf72c7368e5a)
2008-04-09 08:51:22 +04:00
fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
r4806: - add some data to the configuration naming context - add some stuff to make w2k3 dc join to get the correct values metze (This used to be commit d1490635622023f5c672eea70260265960ac48b6)
2005-01-17 19:18:48 +03:00
r20557: use ${DOMAINDN} instead of ${BASEDN} metze (This used to be commit 2a6e6a2695b256411c91768c7bee748228e40e6f)
2007-01-05 20:40:43 +03:00
dn: CN=Builtin,${DOMAINDN}
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
objectClass: top
objectClass: builtinDomain
cn: Builtin
r16166: Remove hexidecimal constants from the Samba4 provision files. This change is required for compatibility with the OSX client, in particular, but returning 0x80000002 rather than -2147483646 violates what LDAP clients expect in general. Andrew Bartlett (This used to be commit 81f3cd1c4592d2108d521acd701ed4a70a23c465)
2006-06-13 00:00:18 +04:00
forceLogoff: 9223372036854775808
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
lockoutDuration: -18000000000
lockOutObservationWindow: -18000000000
lockoutThreshold: 0
maxPwdAge: -37108517437440
minPwdAge: 0
minPwdLength: 0
modifiedCountAtLastProm: 0
nextRid: 1000
pwdProperties: 0
pwdHistoryLength: 0
objectSid: S-1-5-32
serverState: 1
uASCompat: 1
modifiedCount: 1
isCriticalSystemObject: TRUE
Remove default 'showInAdvancedViewOnly' values. This means we only show and set the values when they are not the values the schema and objectclass module would impose. Andrew Bartlett (This used to be commit c2f2e01357c1b087aa1261fb2cac8687426d5a78)
2008-01-18 10:10:18 +03:00
showInAdvancedViewOnly: FALSE
r459: added an initial provision.ldif - this is temporary, and needs to be replaced with a more sophisticated provisioning system (This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2004-05-03 18:59:23 +04:00
r23027: Make sure the parent object always exists. Andrew Bartlett (This used to be commit 55c7c0906ccb741ab002f460164ccbbe56b55a98)
2007-05-21 08:06:42 +04:00
dn: CN=Policies,CN=System,${DOMAINDN}
objectClass: top
objectClass: container
From a request from Peter Huang, include IPsec sechema. (We may need to include more defaults in the template, but I want to start small for now). Andrew Bartlett (This used to be commit a466dda118f785bf784548106637577a5e25a30e)
2008-02-09 01:59:45 +03:00
dn: CN=IP Security,CN=System,${DOMAINDN}
objectClass: top
objectClass: container
s4:provision: Added ComPartitionSets entry. Without this entry, opening the COM+ tab under the properties of an OU within ADUC results in the following error: "Unable to retrieve all user properties, 0x80072030"
2009-05-24 12:37:37 +04:00
dn: CN=ComPartitionSets,CN=System,${DOMAINDN}
objectClass: top
objectClass: container
systemFlags: -1946157056
Copy Permalink