mirror of
https://github.com/samba-team/samba.git
synced 2025-01-07 17:18:11 +03:00
8172f3eb22
This only solves part of bz #5480. The settings for Enforced & Link Enabled
now match the default settings of a Windows DC, but they are still "locked"
and cannot be changed via the GUI.
(This used to be commit 761e667e45)
81 lines
1.4 KiB
Plaintext
81 lines
1.4 KiB
Plaintext
###############################
|
|
# Domain Naming Context
|
|
###############################
|
|
dn: ${DOMAINDN}
|
|
changetype: modify
|
|
-
|
|
replace: forceLogoff
|
|
forceLogoff: 9223372036854775808
|
|
-
|
|
replace: lockoutDuration
|
|
lockoutDuration: -18000000000
|
|
-
|
|
replace: lockOutObservationWindow
|
|
lockOutObservationWindow: -18000000000
|
|
-
|
|
replace: lockoutThreshold
|
|
lockoutThreshold: 0
|
|
-
|
|
replace: maxPwdAge
|
|
maxPwdAge: -37108517437440
|
|
-
|
|
replace: minPwdAge
|
|
minPwdAge: 0
|
|
-
|
|
replace: minPwdLength
|
|
minPwdLength: 7
|
|
-
|
|
replace: modifiedCountAtLastProm
|
|
modifiedCountAtLastProm: 0
|
|
-
|
|
replace: nextRid
|
|
nextRid: 1000
|
|
-
|
|
replace: pwdProperties
|
|
pwdProperties: 1
|
|
-
|
|
replace: pwdHistoryLength
|
|
pwdHistoryLength: 24
|
|
-
|
|
replace: objectSid
|
|
objectSid: ${DOMAINSID}
|
|
-
|
|
replace: oEMInformation
|
|
oEMInformation: Provisioned by Samba4: ${LDAPTIME}
|
|
-
|
|
replace: serverState
|
|
serverState: 1
|
|
-
|
|
replace: nTMixedDomain
|
|
nTMixedDomain: 1
|
|
-
|
|
replace: msDS-Behavior-Version
|
|
msDS-Behavior-Version: 0
|
|
-
|
|
replace: ridManagerReference
|
|
ridManagerReference: CN=RID Manager$,CN=System,${DOMAINDN}
|
|
-
|
|
replace: uASCompat
|
|
uASCompat: 1
|
|
-
|
|
replace: modifiedCount
|
|
modifiedCount: 1
|
|
-
|
|
replace: objectCategory
|
|
objectCategory: CN=Domain-DNS,${SCHEMADN}
|
|
-
|
|
replace: fSMORoleOwner
|
|
fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
|
|
-
|
|
replace: isCriticalSystemObject
|
|
isCriticalSystemObject: TRUE
|
|
-
|
|
replace: subRefs
|
|
subRefs: ${CONFIGDN}
|
|
subRefs: ${SCHEMADN}
|
|
-
|
|
replace: gPLink
|
|
gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};0]
|
|
-
|
|
${DOMAINGUID_MOD}
|