[SAMBA 4 directory] Changes "forceLogoff" and corrects the "subRefs"

- This changes the attribute "forceLogoff" to its' default
  values according to Windows Server 2003 R2
- Also this corrects the "subRefs" attribute of the base-DN which only refers
  to direct child partitions (and therefore not to the complete transitive closure)

diff --git a/source4/setup/provision_basedn_modify.ldif b/source4/setup/provision_basedn_modify.ldif
index 7b13a193cb530c803b37ae7ab7cc597aec8c028f..a7f3ce985c54a8b4c55a6ca90f149024537f570a 100644 (file)
--- a/source4/setup/provision_basedn_modify.ldif
+++ b/source4/setup/provision_basedn_modify.ldif
@@ -5,7 +5,7 @@ dn: ${DOMAINDN}
 changetype: modify
 -
 replace: forceLogoff
 changetype: modify
 -
 replace: forceLogoff

-forceLogoff: 9223372036854775808
+forceLogoff: -9223372036854775808

 -
 replace: lockoutDuration
 lockoutDuration: -18000000000
 -
 replace: lockoutDuration
 lockoutDuration: -18000000000


@@ -64,12 +64,14 @@ modifiedCount: 1
 replace: fSMORoleOwner
 fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
 -
 replace: fSMORoleOwner
 fSMORoleOwner: CN=NTDS Settings,${SERVERDN}
 -

+replace: systemFlags
+systemFlags: -1946157056
+-

 replace: isCriticalSystemObject
 isCriticalSystemObject: TRUE
 -
 replace: subRefs
 subRefs: ${CONFIGDN}
 replace: isCriticalSystemObject
 isCriticalSystemObject: TRUE
 -
 replace: subRefs
 subRefs: ${CONFIGDN}

-subRefs: ${SCHEMADN}

 -
 replace: gPLink
 gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};0]
 -
 replace: gPLink
 gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};0]