samba-mirror/secrets.ldif at a949db7c6d4bd35df59ba066111e6566172d4814

mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00

Andrew Bartlett 1d9ffbbe67 r13320: Fix kpasswd's use of the local HDB. /dev/null was a bad idea, we want

'no filename' instead.

Andrew Bartlett
(This used to be commit 7de385dca4)

2007-10-10 13:51:43 -05:00

 dn: @INDEXLIST
 @IDXATTR: cn
 @IDXATTR: flatname
 @IDXATTR: realm
 dn: @ATTRIBUTES
 realm: CASE_INSENSITIVE
 flatname: CASE_INSENSITIVE
 sAMAccountName: CASE_INSENSITIVE
 #Add modules to the list to activate them by default
 #beware often order is important
 dn: @MODULES
 @LIST: operational
 dn: CN=LSA Secrets
 objectClass: top
 objectClass: container
 cn: LSA Secrets
 dn: CN=Primary Domains
 objectClass: top
 objectClass: container
 cn: Primary Domains
 dn: flatname=${DOMAIN},CN=Primary Domains
 objectClass: top
 objectClass: primaryDomain
 objectClass: kerberosSecret
 flatname: ${DOMAIN}
 realm: ${REALM}
 secret: ${MACHINEPASS}
 secureChannelType: 6
 sAMAccountName: ${NETBIOSNAME}$
 whenCreated: ${LDAPTIME}
 whenChanged: ${LDAPTIME}
 msDS-KeyVersionNumber: 1
 objectSid: ${DOMAINSID}
 privateKeytab: secrets.keytab
 # A hook from our credentials system into HDB, as we must be on a KDC,
 # we can look directly into the database.
 dn: samAccountName=krbtgt,flatname=${DOMAIN},CN=Principals
 objectClass: top
 objectClass: secret
 objectClass: kerberosSecret
 flatname: ${DOMAIN}
 realm: ${REALM}
 sAMAccountName: krbtgt
 whenCreated: ${LDAPTIME}
 whenChanged: ${LDAPTIME}
 objectSid: ${DOMAINSID}
 servicePrincipalName: kadmin/changepw
 krb5Keytab: HDB:ldb:sam.ldb:
 #The trailing : here is a HACK, but it matches the Heimdal format.