mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
18 lines
611 B
Plaintext
18 lines
611 B
Plaintext
# NOTE: This account is SAMBA4 specific!
|
|
# we have it to avoid the need for the bind daemon to
|
|
# have access to the whole secrets.keytab for the domain,
|
|
# otherwise bind could impersonate any user
|
|
dn: CN=dns-${HOSTNAME},CN=Users,${DOMAINDN}
|
|
objectClass: top
|
|
objectClass: person
|
|
objectClass: organizationalPerson
|
|
objectClass: user
|
|
description: DNS Service Account for ${HOSTNAME}
|
|
userAccountControl: 512
|
|
accountExpires: 9223372036854775807
|
|
sAMAccountName: dns-${HOSTNAME}
|
|
servicePrincipalName: DNS/${DNSNAME}
|
|
servicePrincipalName: DNS/${DNSDOMAIN}
|
|
clearTextPassword:: ${DNSPASS_B64}
|
|
isCriticalSystemObject: TRUE
|