source4/setup/schema_samba4.ldif

   1 #
   2 # Schema elements which do not exist in AD, but which we use in Samba4
   3 #
   4 ## Samba4 OID allocation from Samba3's examples/LDAP/samba.schema
   5 ## 1.3.6.1.4.1.7165.4.1.x - attributetypes
   6 ## 1.3.6.1.4.1.7165.4.2.x - objectclasses
   7 ## 1.3.6.1.4.1.7165.4.3.x - LDB/LDAP Controls
   8 ## 1.3.6.1.4.1.7165.4.4.x - LDB/LDAP Extended Operations
   9 ## 1.3.6.1.4.1.7165.4.255.x - mapped OIDs due to conflicts between AD and standards-track
  10 #
  11 #
  12
  13
  14 #
  15 # Not used anymore
  16 #
  17 #dn: cn=ntpwdHash,${SCHEMADN}
  18 #cn: ntpwdHash
  19 #name: NTPWDHash
  20 #objectClass: top
  21 #objectClass: attributeSchema
  22 #lDAPDisplayName: ntpwdhash
  23 #isSingleValued: TRUE
  24 #systemFlags: 17
  25 #systemOnly: TRUE
  26 #schemaIDGUID: E961130F-5084-458C-9E9C-DEC16DA08592
  27 #adminDisplayName: NT-PWD-Hash
  28 #attributeID: 1.3.6.1.4.1.7165.4.1.1
  29 #attributeSyntax: 2.5.5.10
  30 #oMSyntax: 4
  31
  32 #
  33 # Not used anymore
  34 #
  35 #dn: cn=lmpwdHash,${SCHEMADN}
  36 #cn: lmpwdHash
  37 #name: lmpwdHash
  38 #objectClass: top
  39 #objectClass: attributeSchema
  40 #lDAPDisplayName: lmpwdhash
  41 #isSingleValued: TRUE
  42 #systemFlags: 17
  43 #systemOnly: TRUE
  44 #schemaIDGUID: CBD0D18C-9C54-4A77-87C4-5CEEAF781253
  45 #adminDisplayName: LM-PWD-Hash
  46 #attributeID: 1.3.6.1.4.1.7165.4.1.2
  47 #attributeSyntax: 2.5.5.10
  48 #oMSyntax: 4
  49
  50 #
  51 # Not used anymore
  52 #
  53 #dn: cn=sambaNtPwdHistory,${SCHEMADN}
  54 #cn: sambaNtPwdHistory
  55 #name: sambaNtPwdHistory
  56 #objectClass: top
  57 #objectClass: attributeSchema
  58 #lDAPDisplayName: sambaNtPwdHistory
  59 #isSingleValued: TRUE
  60 #systemFlags: 17
  61 #systemOnly: TRUE
  62 #schemaIDGUID: 8CCD7658-C574-4435-A38C-99572E349E6B
  63 #adminDisplayName: SAMBA-NT-PWD-History
  64 #attributeID: 1.3.6.1.4.1.7165.4.1.3
  65 #attributeSyntax: 2.5.5.10
  66 #oMSyntax: 4
  67
  68 #
  69 # Not used anymore
  70 #
  71 #dn: cn=sambaLmPwdHistory,${SCHEMADN}
  72 #cn: sambaLmPwdHistory
  73 #name: sambaLmPwdHistory
  74 #objectClass: top
  75 #objectClass: attributeSchema
  76 #lDAPDisplayName: sambaLmPwdHistory
  77 #isSingleValued: FALSE
  78 #systemFlags: 17
  79 #systemOnly: TRUE
  80 #schemaIDGUID: 0EAFE3DD-0F53-495E-8A34-97BB28AF17A4
  81 #adminDisplayName: SAMBA-LM-PWDHistory
  82 #attributeID: 1.3.6.1.4.1.7165.4.1.4
  83 #attributeSyntax: 2.5.5.10
  84 #oMSyntax: 4
  85
  86 #
  87 # Not used anymore
  88 #
  89 #dn: CN=sambaPassword,${SCHEMADN}
  90 #objectClass: top
  91 #objectClass: attributeSchema
  92 #lDAPDisplayName: sambaPassword
  93 #isSingleValued: FALSE
  94 #systemFlags: 17
  95 #systemOnly: TRUE
  96 #schemaIDGUID: 87F10301-229A-4E69-B63A-998339ADA37A
  97 #adminDisplayName: SAMBA-Password
  98 #attributeID: 1.3.6.1.4.1.7165.4.1.5
  99 #attributeSyntax: 2.5.5.5
 100 #oMSyntax: 22
 101
 102 #
 103 # Not used anymore
 104 #
 105 #dn: cn=dnsDomain,${SCHEMADN}
 106 #objectClass: top
 107 #objectClass: attributeSchema
 108 #lDAPDisplayName: dnsDomain
 109 #isSingleValued: FALSE
 110 #systemFlags: 17
 111 #systemOnly: TRUE
 112 #schemaIDGUID: A40165E6-5E45-44A7-A8FA-186C94333018
 113 #adminDisplayName: DNS-Domain
 114 #attributeID: 1.3.6.1.4.1.7165.4.1.6
 115 #attributeSyntax: 2.5.5.4
 116 #oMSyntax: 20
 117
 118 dn: cn=privilege,${SCHEMADN}
 119 objectClass: top
 120 objectClass: attributeSchema
 121 lDAPDisplayName: privilege
 122 isSingleValued: FALSE
 123 systemFlags: 17
 124 systemOnly: TRUE
 125 schemaIDGUID: 7429BC94-CC6A-4481-8B2C-A97E316EB182
 126 adminDisplayName: Privilege
 127 attributeID: 1.3.6.1.4.1.7165.4.1.7
 128 attributeSyntax: 2.5.5.4
 129 oMSyntax: 20
 130
 131 #
 132 # Not used anymore
 133 #
 134 #dn: CN=unixName,${SCHEMADN}
 135 #cn: unixName
 136 #name: unixName
 137 #objectClass: top
 138 #objectClass: attributeSchema
 139 #lDAPDisplayName: unixName
 140 #isSingleValued: TRUE
 141 #systemFlags: 16
 142 #systemOnly: FALSE
 143 #schemaIDGUID: bf9679f2-0de6-11d0-a285-00aa003049e2
 144 #adminDisplayName: Unix-Name
 145 #attributeID: 1.3.6.1.4.1.7165.4.1.9
 146 #attributeSyntax: 2.5.5.4
 147 #oMSyntax: 20
 148
 149 #
 150 # Not used anymore
 151 #
 152 #dn: cn=krb5Key,${SCHEMADN}
 153 #cn: krb5Key
 154 #name: krb5Key
 155 #objectClass: top
 156 #objectClass: attributeSchema
 157 #lDAPDisplayName: krb5Key
 158 #isSingleValued: FALSE
 159 #systemFlags: 17
 160 #systemOnly: TRUE
 161 #schemaIDGUID: 0EAFE3DD-0F53-495E-8A34-97BB28AF17A4
 162 #adminDisplayName: krb5-Key
 163 #attributeID: 1.3.6.1.4.1.5322.10.1.10
 164 #attributeSyntax: 2.5.5.10
 165 #oMSyntax: 4
 166
 167 #Allocated: (not used anymore) DSDB_CONTROL_REPLICATED_OBJECT_OID 1.3.6.1.4.1.7165.4.3.1
 168
 169 #Allocated: DSDB_CONTROL_CURRENT_PARTITION_OID 1.3.6.1.4.1.7165.4.3.2
 170
 171 #Allocated: DSDB_EXTENDED_REPLICATED_OBJECTS_OID 1.3.6.1.4.1.7165.4.4.1
 172
 173 #Allocated: (middleName) attributeID: 1.3.6.1.4.1.7165.4.255.1
 174
 175 #Allocated: (defaultGroup) attributeID: 1.3.6.1.4.1.7165.4.255.2
 176
 177 #Allocated: (modifyTimestamp) samba4ModifyTimestamp: 1.3.6.1.4.1.7165.4.255.3
 178 #Allocated: (subSchema) samba4SubSchema: 1.3.6.1.4.1.7165.4.255.4
 179 #Allocated: (objectClasses) samba4ObjectClasses: 1.3.6.1.4.1.7165.4.255.5
 180 #Allocated: (ditContentRules) samba4DitContentRules: 1.3.6.1.4.1.7165.4.255.6
 181 #Allocated: (attributeTypes) samba4AttributeTypes: 1.3.6.1.4.1.7165.4.255.7
 182
 183 #
 184 # Fedora DS uses this attribute, and we need to set it via our module stack
 185 #
 186 dn: CN=aci,${SCHEMADN}
 187 cn: aci
 188 name: aci
 189 objectClass: top
 190 objectClass: attributeSchema
 191 lDAPDisplayName: aci
 192 isSingleValued: TRUE
 193 systemFlags: 16
 194 systemOnly: FALSE
 195 schemaIDGUID: d8e6c1fa-db08-4f26-a53b-23c414aac92d
 196 adminDisplayName: aci
 197 attributeID: 1.3.6.1.4.1.7165.4.1.11
 198 attributeSyntax: 2.5.5.4
 199 oMSyntax: 20
 200
 201 #
 202 # Based on domainDNS, but without the DNS bits.
 203 #
 204
 205 dn: CN=Samba4-Local-Domain,${SCHEMADN}
 206 objectClass: top
 207 objectClass: classSchema
 208 subClassOf: top
 209 governsID: 1.3.6.1.4.1.7165.4.2.2
 210 possibleInferiors: group
 211 possibleInferiors: lostAndFound
 212 possibleInferiors: builtinDomain
 213 possibleInferiors: computer
 214 possibleInferiors: user
 215 possibleInferiors: container
 216 possibleInferiors: groupPolicyContainer
 217 possibleInferiors: organization
 218 possibleInferiors: domainDNS
 219 possibleInferiors: locality
 220 possibleInferiors: msDS-AzAdminManager
 221 possibleInferiors: country
 222 possibleInferiors: organizationalUnit
 223 rDNAttID: cn
 224 showInAdvancedViewOnly: TRUE
 225 adminDisplayName: Samba4-Local-Domain
 226 adminDescription: Samba4-Local-Domain
 227 systemMayContain: msDS-Behavior-Version
 228 systemMayContain: managedBy
 229 objectClassCategory: 1
 230 lDAPDisplayName: samba4LocalDomain
 231 schemaIDGUID: 07be1647-8310-4fba-91ae-34e55d5a8293
 232 systemOnly: FALSE
 233 systemAuxiliaryClass: samDomain
 234 defaultSecurityDescriptor: D:(A;;RPLCLORC;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
 235 systemFlags: 16
 236 defaultHidingValue: TRUE
 237 defaultObjectCategory: CN=Builtin-Domain,${SCHEMADN}
 238
 239
 240 dn: CN=Samba4Top,${SCHEMADN}
 241 objectClass: top
 242 objectClass: classSchema
 243 subClassOf: top
 244 governsID: 1.3.6.1.4.1.7165.4.2.1
 245 mayContain: msDS-ObjectReferenceBL
 246 rDNAttID: cn
 247 showInAdvancedViewOnly: TRUE
 248 adminDisplayName: Samba4TopTop
 249 adminDescription: Attributes used in top in Samba4 that OpenLDAP does not
 250 objectClassCategory: 3
 251 lDAPDisplayName: samba4Top
 252 schemaIDGUID: 073598d0-635b-4685-a929-da731b98d84e
 253 systemOnly: TRUE
 254 systemPossSuperiors: lostAndFound
 255 systemMayContain: url
 256 systemMayContain: wWWHomePage
 257 systemMayContain: wellKnownObjects
 258 systemMayContain: wbemPath
 259 systemMayContain: uSNSource
 260 systemMayContain: uSNLastObjRem
 261 systemMayContain: USNIntersite
 262 systemMayContain: uSNDSALastObjRemoved
 263 systemMayContain: systemFlags
 264 systemMayContain: subRefs
 265 systemMayContain: siteObjectBL
 266 systemMayContain: serverReferenceBL
 267 systemMayContain: sDRightsEffective
 268 systemMayContain: revision
 269 systemMayContain: repsTo
 270 systemMayContain: repsFrom
 271 systemMayContain: directReports
 272 systemMayContain: replUpToDateVector
 273 systemMayContain: replPropertyMetaData
 274 systemMayContain: name
 275 systemMayContain: queryPolicyBL
 276 systemMayContain: proxyAddresses
 277 systemMayContain: proxiedObjectName
 278 systemMayContain: possibleInferiors
 279 systemMayContain: partialAttributeSet
 280 systemMayContain: partialAttributeDeletionList
 281 systemMayContain: otherWellKnownObjects
 282 systemMayContain: objectVersion
 283 systemMayContain: nonSecurityMemberBL
 284 systemMayContain: netbootSCPBL
 285 systemMayContain: ownerBL
 286 systemMayContain: msDS-ReplValueMetaData
 287 systemMayContain: msDS-ReplAttributeMetaData
 288 systemMayContain: msDS-NonMembersBL
 289 systemMayContain: msDS-NCReplOutboundNeighbors
 290 systemMayContain: msDS-NCReplInboundNeighbors
 291 systemMayContain: msDS-NCReplCursors
 292 systemMayContain: msDS-TasksForAzRoleBL
 293 systemMayContain: msDS-TasksForAzTaskBL
 294 systemMayContain: msDS-OperationsForAzRoleBL
 295 systemMayContain: msDS-OperationsForAzTaskBL
 296 systemMayContain: msDS-MembersForAzRoleBL
 297 systemMayContain: msDs-masteredBy
 298 systemMayContain: mS-DS-ConsistencyGuid
 299 systemMayContain: mS-DS-ConsistencyChildCount
 300 systemMayContain: msDS-Approx-Immed-Subordinates
 301 systemMayContain: msCOM-PartitionSetLink
 302 systemMayContain: msCOM-UserLink
 303 systemMayContain: masteredBy
 304 systemMayContain: managedObjects
 305 systemMayContain: lastKnownParent
 306 systemMayContain: isPrivilegeHolder
 307 systemMayContain: isDeleted
 308 systemMayContain: isCriticalSystemObject
 309 systemMayContain: showInAdvancedViewOnly
 310 systemMayContain: fSMORoleOwner
 311 systemMayContain: fRSMemberReferenceBL
 312 systemMayContain: frsComputerReferenceBL
 313 systemMayContain: fromEntry
 314 systemMayContain: flags
 315 systemMayContain: extensionName
 316 systemMayContain: dSASignature
 317 systemMayContain: dSCorePropagationData
 318 systemMayContain: displayNamePrintable
 319 systemMayContain: displayName
 320 systemMayContain: description
 321 systemMayContain: cn
 322 systemMayContain: canonicalName
 323 systemMayContain: bridgeheadServerListBL
 324 systemMayContain: allowedChildClassesEffective
 325 systemMayContain: allowedChildClasses
 326 systemMayContain: allowedAttributesEffective
 327 systemMayContain: allowedAttributes
 328 systemMayContain: adminDisplayName
 329 systemMayContain: adminDescription
 330 systemMustContain: objectCategory
 331 systemMustContain: nTSecurityDescriptor
 332 systemMustContain: instanceType
 333 systemAuxiliaryClass: samba4TopExtra
 334 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
 335 systemFlags: 16
 336 defaultHidingValue: TRUE
 337 objectCategory: CN=Class-Schema,${SCHEMADN}
 338 defaultObjectCategory: CN=Samba4Top,${SCHEMADN}
 339
 340
 341 dn: CN=Samba4TopExtra,${SCHEMADN}
 342 objectClass: top
 343 objectClass: classSchema
 344 subClassOf: top
 345 governsID: 1.3.6.1.4.1.7165.4.2.3
 346 rDNAttID: cn
 347 showInAdvancedViewOnly: TRUE
 348 adminDisplayName: Samba4TopExtra
 349 adminDescription: Attributes used in top in Samba4 that OpenLDAP does not
 350 objectClassCategory: 2
 351 lDAPDisplayName: samba4TopExtra
 352 schemaIDGUID: 073598d0-635b-4685-a929-da731b98d84e
 353 systemOnly: TRUE
 354 mayContain: privilege
 355 systemPossSuperiors: lostAndFound
 356 defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
 357 systemFlags: 16
 358 defaultHidingValue: TRUE
 359 objectCategory: CN=Class-Schema,${SCHEMADN}
 360 defaultObjectCategory: CN=Samba4TopExtra,${SCHEMADN}
 361