2 ## schema file for OpenLDAP 2.0.x
3 ## Schema for storing Samba's smbpasswd file in LDAP
4 ## OIDs are owned by the Samba Team
6 ## Prerequisite schemas - uid (cosine.schema)
7 ## - displayName (inetorgperson.schema)
9 ## 1.3.1.5.1.4.1.7165.2.1.x - attributetypes
10 ## 1.3.1.5.1.4.1.7165.2.2.x - objectclasses
13 attributetype ( 1.3.6.1.4.1.7165.2.1.1 NAME 'lmPassword'
14 DESC 'LanManager Passwd'
15 EQUALITY caseIgnoreIA5Match
16 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
18 attributetype ( 1.3.6.1.4.1.7165.2.1.2 NAME 'ntPassword'
20 EQUALITY caseIgnoreIA5Match
21 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
23 attributetype ( 1.3.6.1.4.1.7165.2.1.3 NAME 'pwdLastSet'
25 EQUALITY caseIgnoreIA5Match
26 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
28 attributetype ( 1.3.6.1.4.1.7165.2.1.4 NAME 'acctFlags'
30 EQUALITY caseIgnoreIA5Match
31 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16} SINGLE-VALUE )
33 attributetype ( 1.3.6.1.4.1.7165.2.1.5 NAME 'logonTime'
35 EQUALITY caseIgnoreIA5Match
36 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
38 attributetype ( 1.3.6.1.4.1.7165.2.1.6 NAME 'logoffTime'
40 EQUALITY caseIgnoreIA5Match
41 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
43 attributetype ( 1.3.6.1.4.1.7165.2.1.7 NAME 'kickoffTime'
45 EQUALITY caseIgnoreIA5Match
46 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
48 attributetype ( 1.3.6.1.4.1.7165.2.1.8 NAME 'pwdCanChange'
49 DESC 'NT pwdCanChange'
50 EQUALITY caseIgnoreIA5Match
51 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
53 attributetype ( 1.3.6.1.4.1.7165.2.1.9 NAME 'pwdMustChange'
54 DESC 'NT pwdMustChange'
55 EQUALITY caseIgnoreIA5Match
56 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
58 attributetype ( 1.3.6.1.4.1.7165.2.1.10 NAME 'homeDrive'
60 EQUALITY caseIgnoreIA5Match
61 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE )
63 attributetype ( 1.3.6.1.4.1.7165.2.1.11 NAME 'scriptPath'
65 EQUALITY caseIgnoreIA5Match
66 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
68 attributetype ( 1.3.6.1.4.1.7165.2.1.12 NAME 'profilePath'
70 EQUALITY caseIgnoreIA5Match
71 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
73 attributetype ( 1.3.6.1.4.1.7165.2.1.13 NAME 'userWorkstations'
74 DESC 'userWorkstations'
75 EQUALITY caseIgnoreIA5Match
76 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
78 attributetype ( 1.3.6.1.4.1.7165.2.1.14 NAME 'rid'
80 EQUALITY caseIgnoreIA5Match
81 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
83 attributetype ( 1.3.6.1.4.1.7165.2.1.15 NAME 'primaryGroupID'
85 EQUALITY caseIgnoreIA5Match
86 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
88 attributetype ( 1.3.6.1.4.1.7165.2.1.17 NAME 'smbHome'
90 EQUALITY caseIgnoreIA5Match
91 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
94 ## The smbPasswordEntry objectclass has been depreciated in favor of the
95 ## sambaAccount objectclass
97 #objectclass ( 1.3.1.5.1.4.1.7165.2.2.1 NAME 'smbPasswordEntry' SUP top AUXILIARY
98 # DESC 'Samba smbpasswd entry'
99 # MUST ( uid $ uidNumber )
100 # MAY ( lmPassword $ ntPassword $ pwdLastSet $ acctFlags ))
102 objectclass ( 1.3.1.5.1.4.1.7165.2.2.2 NAME 'sambaAccount' SUP top STRUCTURAL
105 MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $
106 logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
107 displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
108 description $ userWorkstations $ primaryGroupID ))