source4/setup/schema_samba4.ldif

   1 #
   2 # Schema elements which do not exist in AD, but which we use in Samba4
   3 #
   4 ## Samba4 OID allocation from Samba3's examples/LDAP/samba.schema
   5 ## 1.3.6.1.4.1.7165.4.1.x - attributetypes
   6 ## 1.3.6.1.4.1.7165.4.2.x - objectclasses
   7 ## 1.3.6.1.4.1.7165.4.3.x - LDB/LDAP Controls
   8 ## 1.3.6.1.4.1.7165.4.4.x - LDB/LDAP Extended Operations
   9 ## 1.3.6.1.4.1.7165.4.255.x - mapped OIDs due to conflicts between AD and standards-track
  10 #
  11 #
  12
  13
  14 #
  15 # Not used anymore
  16 #
  17 #dn: cn=ntpwdHash,${SCHEMADN}
  18 #cn: ntpwdHash
  19 #name: NTPWDHash
  20 #objectClass: top
  21 #objectClass: attributeSchema
  22 #lDAPDisplayName: ntpwdhash
  23 #isSingleValued: TRUE
  24 #systemFlags: 17
  25 #systemOnly: TRUE
  26 #schemaIDGUID: E961130F-5084-458C-9E9C-DEC16DA08592
  27 #adminDisplayName: NT-PWD-Hash
  28 #attributeID: 1.3.6.1.4.1.7165.4.1.1
  29 #attributeSyntax: 2.5.5.10
  30 #oMSyntax: 4
  31
  32 #
  33 # Not used anymore
  34 #
  35 #dn: cn=lmpwdHash,${SCHEMADN}
  36 #cn: lmpwdHash
  37 #name: lmpwdHash
  38 #objectClass: top
  39 #objectClass: attributeSchema
  40 #lDAPDisplayName: lmpwdhash
  41 #isSingleValued: TRUE
  42 #systemFlags: 17
  43 #systemOnly: TRUE
  44 #schemaIDGUID: CBD0D18C-9C54-4A77-87C4-5CEEAF781253
  45 #adminDisplayName: LM-PWD-Hash
  46 #attributeID: 1.3.6.1.4.1.7165.4.1.2
  47 #attributeSyntax: 2.5.5.10
  48 #oMSyntax: 4
  49
  50 #
  51 # Not used anymore
  52 #
  53 #dn: cn=sambaNtPwdHistory,${SCHEMADN}
  54 #cn: sambaNtPwdHistory
  55 #name: sambaNtPwdHistory
  56 #objectClass: top
  57 #objectClass: attributeSchema
  58 #lDAPDisplayName: sambaNtPwdHistory
  59 #isSingleValued: TRUE
  60 #systemFlags: 17
  61 #systemOnly: TRUE
  62 #schemaIDGUID: 8CCD7658-C574-4435-A38C-99572E349E6B
  63 #adminDisplayName: SAMBA-NT-PWD-History
  64 #attributeID: 1.3.6.1.4.1.7165.4.1.3
  65 #attributeSyntax: 2.5.5.10
  66 #oMSyntax: 4
  67
  68 #
  69 # Not used anymore
  70 #
  71 #dn: cn=sambaLmPwdHistory,${SCHEMADN}
  72 #cn: sambaLmPwdHistory
  73 #name: sambaLmPwdHistory
  74 #objectClass: top
  75 #objectClass: attributeSchema
  76 #lDAPDisplayName: sambaLmPwdHistory
  77 #isSingleValued: FALSE
  78 #systemFlags: 17
  79 #systemOnly: TRUE
  80 #schemaIDGUID: 0EAFE3DD-0F53-495E-8A34-97BB28AF17A4
  81 #adminDisplayName: SAMBA-LM-PWDHistory
  82 #attributeID: 1.3.6.1.4.1.7165.4.1.4
  83 #attributeSyntax: 2.5.5.10
  84 #oMSyntax: 4
  85
  86 dn: CN=sambaPassword,${SCHEMADN}
  87 objectClass: top
  88 objectClass: attributeSchema
  89 lDAPDisplayName: sambaPassword
  90 isSingleValued: FALSE
  91 systemFlags: 17
  92 systemOnly: TRUE
  93 schemaIDGUID: 87F10301-229A-4E69-B63A-998339ADA37A
  94 adminDisplayName: SAMBA-Password
  95 attributeID: 1.3.6.1.4.1.7165.4.1.5
  96 attributeSyntax: 2.5.5.5
  97 oMSyntax: 22
  98
  99 #
 100 # Not used anymore
 101 #
 102 #dn: cn=dnsDomain,${SCHEMADN}
 103 #objectClass: top
 104 #objectClass: attributeSchema
 105 #lDAPDisplayName: dnsDomain
 106 #isSingleValued: FALSE
 107 #systemFlags: 17
 108 #systemOnly: TRUE
 109 #schemaIDGUID: A40165E6-5E45-44A7-A8FA-186C94333018
 110 #adminDisplayName: DNS-Domain
 111 #attributeID: 1.3.6.1.4.1.7165.4.1.6
 112 #attributeSyntax: 2.5.5.4
 113 #oMSyntax: 20
 114
 115 dn: cn=privilege,${SCHEMADN}
 116 objectClass: top
 117 objectClass: attributeSchema
 118 lDAPDisplayName: privilege
 119 isSingleValued: FALSE
 120 systemFlags: 17
 121 systemOnly: TRUE
 122 schemaIDGUID: 7429BC94-CC6A-4481-8B2C-A97E316EB182
 123 adminDisplayName: Privilege
 124 attributeID: 1.3.6.1.4.1.7165.4.1.7
 125 attributeSyntax: 2.5.5.4
 126 oMSyntax: 20
 127
 128 #
 129 # Not used anymore
 130 #
 131 #dn: CN=unixName,${SCHEMADN}
 132 #cn: unixName
 133 #name: unixName
 134 #objectClass: top
 135 #objectClass: attributeSchema
 136 #lDAPDisplayName: unixName
 137 #isSingleValued: TRUE
 138 #systemFlags: 16
 139 #systemOnly: FALSE
 140 #schemaIDGUID: bf9679f2-0de6-11d0-a285-00aa003049e2
 141 #adminDisplayName: Unix-Name
 142 #attributeID: 1.3.6.1.4.1.7165.4.1.9
 143 #attributeSyntax: 2.5.5.4
 144 #oMSyntax: 20
 145
 146 #
 147 # Not used anymore
 148 #
 149 #dn: cn=krb5Key,${SCHEMADN}
 150 #cn: krb5Key
 151 #name: krb5Key
 152 #objectClass: top
 153 #objectClass: attributeSchema
 154 #lDAPDisplayName: krb5Key
 155 #isSingleValued: FALSE
 156 #systemFlags: 17
 157 #systemOnly: TRUE
 158 #schemaIDGUID: 0EAFE3DD-0F53-495E-8A34-97BB28AF17A4
 159 #adminDisplayName: krb5-Key
 160 #attributeID: 1.3.6.1.4.1.5322.10.1.10
 161 #attributeSyntax: 2.5.5.10
 162 #oMSyntax: 4
 163
 164 #Allocated: (not used anymore) DSDB_CONTROL_REPLICATED_OBJECT_OID 1.3.6.1.4.1.7165.4.3.1
 165
 166 #Allocated: DSDB_CONTROL_CURRENT_PARTITION_OID 1.3.6.1.4.1.7165.4.3.2
 167
 168 #Allocated: DSDB_EXTENDED_REPLICATED_OBJECTS_OID 1.3.6.1.4.1.7165.4.4.1
 169
 170 #Allocated: (middleName) attributeID: 1.3.6.1.4.1.7165.4.255.1
 171
 172 #Allocated: (defaultGroup) attributeID: 1.3.6.1.4.1.7165.4.255.2
 173
 174 #Allocated: (modifyTimestamp) samba4ModifyTimestamp: 1.3.6.1.4.1.7165.4.255.3
 175 #Allocated: (subSchema) samba4SubSchema: 1.3.6.1.4.1.7165.4.255.4
 176 #Allocated: (objectClasses) samba4ObjectClasses: 1.3.6.1.4.1.7165.4.255.5
 177 #Allocated: (ditContentRules) samba4DitContentRules: 1.3.6.1.4.1.7165.4.255.6
 178 #Allocated: (attributeTypes) samba4AttributeTypes: 1.3.6.1.4.1.7165.4.255.7
 179
 180 #
 181 # Fedora DS uses this attribute, and we need to set it via our module stack
 182 #
 183 dn: CN=aci,${SCHEMADN}
 184 cn: aci
 185 name: aci
 186 objectClass: top
 187 objectClass: attributeSchema
 188 lDAPDisplayName: aci
 189 isSingleValued: TRUE
 190 systemFlags: 16
 191 systemOnly: FALSE
 192 schemaIDGUID: d8e6c1fa-db08-4f26-a53b-23c414aac92d
 193 adminDisplayName: aci
 194 attributeID: 1.3.6.1.4.1.7165.4.1.11
 195 attributeSyntax: 2.5.5.4
 196 oMSyntax: 20
 197
 198 #
 199 # Based on domainDNS, but without the DNS bits.
 200 #
 201
 202 dn: CN=Samba4-Local-Domain,${SCHEMADN}
 203 objectClass: top
 204 objectClass: classSchema
 205 subClassOf: top
 206 governsID: 1.3.6.1.4.1.7165.4.2.2
 207 possibleInferiors: group
 208 possibleInferiors: lostAndFound
 209 possibleInferiors: builtinDomain
 210 possibleInferiors: computer
 211 possibleInferiors: user
 212 possibleInferiors: container
 213 possibleInferiors: groupPolicyContainer
 214 possibleInferiors: organization
 215 possibleInferiors: domainDNS
 216 possibleInferiors: locality
 217 possibleInferiors: msDS-AzAdminManager
 218 possibleInferiors: country
 219 possibleInferiors: organizationalUnit
 220 rDNAttID: cn
 221 showInAdvancedViewOnly: TRUE
 222 adminDisplayName: Samba4-Local-Domain
 223 adminDescription: Samba4-Local-Domain
 224 systemMayContain: msDS-Behavior-Version
 225 systemMayContain: managedBy
 226 objectClassCategory: 1
 227 lDAPDisplayName: samba4LocalDomain
 228 schemaIDGUID: 07be1647-8310-4fba-91ae-34e55d5a8293
 229 systemOnly: FALSE
 230 systemAuxiliaryClass: samDomain
 231 defaultSecurityDescriptor: D:(A;;RPLCLORC;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
 232 systemFlags: 16
 233 defaultHidingValue: TRUE
 234 defaultObjectCategory: CN=Builtin-Domain,${SCHEMADN}
 235
 236
 237 dn: CN=Samba4Top,${SCHEMADN}
 238 objectClass: top
 239 objectClass: classSchema
 240 subClassOf: top
 241 governsID: 1.3.6.1.4.1.7165.4.2.1
 242 mayContain: msDS-ObjectReferenceBL
 243 rDNAttID: cn
 244 showInAdvancedViewOnly: TRUE
 245 adminDisplayName: Samba4TopTop
 246 adminDescription: Attributes used in top in Samba4 that OpenLDAP does not
 247 objectClassCategory: 3
 248 lDAPDisplayName: samba4Top
 249 schemaIDGUID: 073598d0-635b-4685-a929-da731b98d84e
 250 systemOnly: TRUE
 251 systemPossSuperiors: lostAndFound
 252 systemMayContain: url
 253 systemMayContain: wWWHomePage
 254 systemMayContain: wellKnownObjects
 255 systemMayContain: wbemPath
 256 systemMayContain: uSNSource
 257 systemMayContain: uSNLastObjRem
 258 systemMayContain: USNIntersite
 259 systemMayContain: uSNDSALastObjRemoved
 260 systemMayContain: systemFlags
 261 systemMayContain: subRefs
 262 systemMayContain: siteObjectBL
 263 systemMayContain: serverReferenceBL
 264 systemMayContain: sDRightsEffective
 265 systemMayContain: revision
 266 systemMayContain: repsTo
 267 systemMayContain: repsFrom
 268 systemMayContain: directReports
 269 systemMayContain: replUpToDateVector
 270 systemMayContain: replPropertyMetaData
 271 systemMayContain: name
 272 systemMayContain: queryPolicyBL
 273 systemMayContain: proxyAddresses
 274 systemMayContain: proxiedObjectName
 275 systemMayContain: possibleInferiors
 276 systemMayContain: partialAttributeSet
 277 systemMayContain: partialAttributeDeletionList
 278 systemMayContain: otherWellKnownObjects
 279 systemMayContain: objectVersion
 280 systemMayContain: nonSecurityMemberBL
 281 systemMayContain: netbootSCPBL
 282 systemMayContain: ownerBL
 283 systemMayContain: msDS-ReplValueMetaData
 284 systemMayContain: msDS-ReplAttributeMetaData
 285 systemMayContain: msDS-NonMembersBL
 286 systemMayContain: msDS-NCReplOutboundNeighbors
 287 systemMayContain: msDS-NCReplInboundNeighbors
 288 systemMayContain: msDS-NCReplCursors
 289 systemMayContain: msDS-TasksForAzRoleBL
 290 systemMayContain: msDS-TasksForAzTaskBL
 291 systemMayContain: msDS-OperationsForAzRoleBL
 292 systemMayContain: msDS-OperationsForAzTaskBL
 293 systemMayContain: msDS-MembersForAzRoleBL
 294 systemMayContain: msDs-masteredBy
 295 systemMayContain: mS-DS-ConsistencyGuid
 296 systemMayContain: mS-DS-ConsistencyChildCount
 297 systemMayContain: msDS-Approx-Immed-Subordinates
 298 systemMayContain: msCOM-PartitionSetLink
 299 systemMayContain: msCOM-UserLink
 300 systemMayContain: masteredBy
 301 systemMayContain: managedObjects
 302 systemMayContain: lastKnownParent
 303 systemMayContain: isPrivilegeHolder
 304 systemMayContain: isDeleted
 305 systemMayContain: isCriticalSystemObject
 306 systemMayContain: showInAdvancedViewOnly
 307 systemMayContain: fSMORoleOwner
 308 systemMayContain: fRSMemberReferenceBL
 309 systemMayContain: frsComputerReferenceBL
 310 systemMayContain: fromEntry
 311 systemMayContain: flags
 312 systemMayContain: extensionName
 313 systemMayContain: dSASignature
 314 systemMayContain: dSCorePropagationData
 315 systemMayContain: displayNamePrintable
 316 systemMayContain: displayName
 317 systemMayContain: description
 318 systemMayContain: cn
 319 systemMayContain: canonicalName
 320 systemMayContain: bridgeheadServerListBL
 321 systemMayContain: allowedChildClassesEffective
 322 systemMayContain: allowedChildClasses
 323 systemMayContain: allowedAttributesEffective
 324 systemMayContain: allowedAttributes
 325 systemMayContain: adminDisplayName
 326 systemMayContain: adminDescription
 327 systemMustContain: objectCategory
 328 systemMustContain: nTSecurityDescriptor
 329 systemMustContain: instanceType
 330 systemAuxiliaryClass: samba4TopExtra
 331 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
 332 systemFlags: 16
 333 defaultHidingValue: TRUE
 334 objectCategory: CN=Class-Schema,${SCHEMADN}
 335 defaultObjectCategory: CN=Samba4Top,${SCHEMADN}
 336
 337
 338 dn: CN=Samba4TopExtra,${SCHEMADN}
 339 objectClass: top
 340 objectClass: classSchema
 341 subClassOf: top
 342 governsID: 1.3.6.1.4.1.7165.4.2.3
 343 rDNAttID: cn
 344 showInAdvancedViewOnly: TRUE
 345 adminDisplayName: Samba4TopExtra
 346 adminDescription: Attributes used in top in Samba4 that OpenLDAP does not
 347 objectClassCategory: 2
 348 lDAPDisplayName: samba4TopExtra
 349 schemaIDGUID: 073598d0-635b-4685-a929-da731b98d84e
 350 systemOnly: TRUE
 351 mayContain: privilege
 352 systemPossSuperiors: lostAndFound
 353 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
 354 systemFlags: 16
 355 defaultHidingValue: TRUE
 356 objectCategory: CN=Class-Schema,${SCHEMADN}
 357 defaultObjectCategory: CN=Samba4TopExtra,${SCHEMADN}
 358