mirror of
https://github.com/samba-team/samba.git
synced 2025-08-02 00:22:11 +03:00
More work to have OpenLDAP accept the full AD schema
We need to avoid handling DN+Binary and DN+String with the refint module for now, as this is a currently unsupported syntax. Also rename entryTTL to avoid a conflict with the operational attribute of the same name. Andrew Bartlett
This commit is contained in:
@ -1255,12 +1255,12 @@ def provision_backend(setup_dir=None, message=None,
|
||||
|
||||
elif ldap_backend_type == "openldap":
|
||||
attrs = ["linkID", "lDAPDisplayName"]
|
||||
res = schemadb.search(expression="(&(&(linkID=*)(!(linkID:1.2.840.113556.1.4.803:=1)))(objectclass=attributeSchema))", base=names.schemadn, scope=SCOPE_SUBTREE, attrs=attrs)
|
||||
res = schemadb.search(expression="(&(linkID=*)(!(linkID:1.2.840.113556.1.4.803:=1))(objectclass=attributeSchema)(omSyntax=127))", base=names.schemadn, scope=SCOPE_SUBTREE, attrs=attrs)
|
||||
|
||||
memberof_config = "# Generated from schema in %s\n" % schemadb_path
|
||||
refint_attributes = ""
|
||||
for i in range (0, len(res)):
|
||||
expression = "(&(objectclass=attributeSchema)(linkID=%d))" % (int(res[i]["linkID"][0])+1)
|
||||
expression = "(&(objectclass=attributeSchema)(linkID=%d)(omSyntax=127))" % (int(res[i]["linkID"][0])+1)
|
||||
target = schemadb.searchone(basedn=names.schemadn,
|
||||
expression=expression,
|
||||
attribute="lDAPDisplayName",
|
||||
|
@ -11,7 +11,6 @@ distinguishedName
|
||||
description
|
||||
cn
|
||||
top
|
||||
entryTTL
|
||||
uidNumber
|
||||
gidNumber
|
||||
#The memberOf plugin provides this attribute
|
||||
@ -30,6 +29,10 @@ name:samba4RDN
|
||||
#Remap these so that we don't put operational attributes in a schema MAY
|
||||
modifyTimeStamp:samba4ModifyTimestamp
|
||||
2.5.18.2:1.3.6.1.4.1.7165.4.255.3
|
||||
dynamicObject:samba4DynaimcObject
|
||||
1.3.6.1.4.1.1466.101.119.2:1.3.6.1.4.1.7165.4.255.8
|
||||
entryTTL:samba4EntryTTL
|
||||
1.3.6.1.4.1.1466.101.119.3:1.3.6.1.4.1.7165.4.255.9
|
||||
#MiddleName has a conflicting OID
|
||||
2.16.840.1.113730.3.1.34:1.3.6.1.4.1.7165.4.255.1
|
||||
#defaultGroup has a conflicting OID
|
||||
|
@ -189,6 +189,8 @@ oMSyntax: 20
|
||||
#Allocated: (objectClasses) samba4ObjectClasses: 1.3.6.1.4.1.7165.4.255.5
|
||||
#Allocated: (ditContentRules) samba4DitContentRules: 1.3.6.1.4.1.7165.4.255.6
|
||||
#Allocated: (attributeTypes) samba4AttributeTypes: 1.3.6.1.4.1.7165.4.255.7
|
||||
#Allocated: (dynamicObject) samba4DynamicObject: 1.3.6.1.4.1.7165.4.255.8
|
||||
#Allocated: (entryTTL) samba4EntryTTL: 1.3.6.1.4.1.7165.4.255.9
|
||||
|
||||
#
|
||||
# Fedora DS uses this attribute, and we need to set it via our module stack
|
||||
|
Reference in New Issue
Block a user