s4:provision_users.ldif: Add Protected Users group
[samba.git] / source4 / setup / provision_self_join.ldif
1 # Accounts for selfjoin (joins DC to itself)
2
3 # Object under "Domain Controllers"
4 dn: CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN}
5 objectClass: top
6 objectClass: person
7 objectClass: organizationalPerson
8 objectClass: user
9 objectClass: computer
10 accountExpires: 9223372036854775807
11 dNSHostName: ${DNSNAME}
12 # "MSDFSR-ComputerReferenceBL" doesn't exist since we still miss DFSR support
13 # "isCritcalSystemObject" is now filled in by the samldb LDB module
14 localPolicyFlags: 0
15 operatingSystem: Samba
16 operatingSystemVersion: ${SAMBA_VERSION_STRING}
17 sAMAccountName: ${NETBIOSNAME}$
18 userAccountControl: 532480
19 clearTextPassword:: ${MACHINEPASS_B64}
20 objectSid: ${DOMAINSID}-${DCRID}
21 # While some "servicePrincipalName" updates might be handled by the
22 # "samba_spnupdate" script, we need to get the basics in here before
23 # we add any others.
24 servicePrincipalName: HOST/${DNSNAME}
25 servicePrincipalName: HOST/${NETBIOSNAME}
26 servicePrincipalName: HOST/${DNSNAME}/${DNSNAME}
27
28
29 dn: CN=RID Set,CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN}
30 objectClass: rIDSet
31 rIDAllocationPool: ${RIDALLOCATIONSTART}-${RIDALLOCATIONEND}
32 rIDPreviousAllocationPool: ${RIDALLOCATIONSTART}-${RIDALLOCATIONEND}
33 rIDUsedPool: 0
34 rIDNextRID: ${RIDALLOCATIONSTART}