summaryrefslogtreecommitdiff
path: root/examples/LDAP
diff options
context:
space:
mode:
authorMichael Adam <obnox@samba.org>2007-09-11 16:25:47 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 12:30:39 -0500
commitc6df77f63f2fc8bb706c6d97d6da139b11f24107 (patch)
treec8264be45351ecc9019a1b335b95f5001a9f989c /examples/LDAP
parent3395099fa893b8d1142dab73cca531ba7e5fef8c (diff)
downloadsamba-c6df77f63f2fc8bb706c6d97d6da139b11f24107.tar.gz
samba-c6df77f63f2fc8bb706c6d97d6da139b11f24107.tar.bz2
samba-c6df77f63f2fc8bb706c6d97d6da139b11f24107.zip
r25088: Change the objectclass sambaTrustedDomainPassword to
have the current and possibly the previous trust password stored as clear text passwords. (Previous use of NTPassword was a mistake - this is a hash value.) Michael (This used to be commit 0beae52ff469903adbfefdffd93a34bb7ad7d68d)
Diffstat (limited to 'examples/LDAP')
-rw-r--r--examples/LDAP/samba.schema14
1 files changed, 13 insertions, 1 deletions
diff --git a/examples/LDAP/samba.schema b/examples/LDAP/samba.schema
index 31a7a67b8e..1818ca971f 100644
--- a/examples/LDAP/samba.schema
+++ b/examples/LDAP/samba.schema
@@ -457,6 +457,17 @@ attributetype ( 1.3.6.1.4.1.7165.2.1.67 NAME 'sambaRefuseMachinePwdChange'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
+#
+attributetype ( 1.3.6.1.4.1.7165.2.1.68 NAME 'sambaClearTextPassword'
+ DESC 'Clear text password (used for trusted domain passwords)'
+ EQUALITY octetStringMatch
+ 1.3.6.1.4.1.1466.115.121.1.40 )
+
+#
+attributetype ( 1.3.6.1.4.1.7165.2.1.69 NAME 'sambaPreviousClearTextPassword'
+ DESC 'Previous clear text password (used for trusted domain passwords)'
+ EQUALITY octetStringMatch
+ 1.3.6.1.4.1.1466.115.121.1.40 )
@@ -507,7 +518,8 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.14 NAME 'sambaTrustPassword' SUP top STRUCTUR
objectclass ( 1.3.6.1.4.1.7165.2.2.15 NAME 'sambaTrustedDomainPassword' SUP top STRUCTURAL
DESC 'Samba Trusted Domain Password'
MUST ( sambaDomainName $ sambaSID $
- sambaNTPassword $ sambaPwdLastSet ))
+ sambaClearTextPassword $ sambaPwdLastSet )
+ MAY ( sambaPreviousClearTextPassword ))
##
## Whole-of-domain info