diff options
author | Stefan Metzmacher <metze@samba.org> | 2010-06-25 11:11:56 +0200 |
---|---|---|
committer | Stefan Metzmacher <metze@samba.org> | 2010-06-26 09:50:54 +0200 |
commit | 712a149802e9613f105861e838a29bb226e62e02 (patch) | |
tree | e50278f97e9c49df7a8d01bc6875485aeae3ca75 /source4/setup/provision_self_join_modify.ldif | |
parent | 89f94a43d89c9c0238f7b1d3d294175f8482adf9 (diff) | |
download | samba-712a149802e9613f105861e838a29bb226e62e02.tar.gz samba-712a149802e9613f105861e838a29bb226e62e02.tar.bz2 samba-712a149802e9613f105861e838a29bb226e62e02.zip |
s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool'
On Windows dcpromo imports nextRid from the local SAM,
which means it's not hardcoded to 1000.
The initlal rIDAvailablePool starts at nextRid + 100.
I also found that the RID Set of the local dc
should be created via provision and not at runtime,
when the first rid is needed.
(Tested with dcpromo on w2k8r2, while disabling the DNS
check box).
After provision we should have this (assuming nextRid=1000):
rIDAllocationPool: 1100-1599
rIDPrevAllocationPool: 1100-1599
rIDUsedPool: 0
rIDNextRID: 1100
rIDAvailablePool: 1600-1073741823
Because provision sets rIDNextRid=1100, the first created account
(typically DNS related accounts) will get 1101 as rid!
metze
Diffstat (limited to 'source4/setup/provision_self_join_modify.ldif')
-rw-r--r-- | source4/setup/provision_self_join_modify.ldif | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/source4/setup/provision_self_join_modify.ldif b/source4/setup/provision_self_join_modify.ldif index f81a2b69c7..c2bba888b7 100644 --- a/source4/setup/provision_self_join_modify.ldif +++ b/source4/setup/provision_self_join_modify.ldif @@ -28,11 +28,21 @@ changetype: modify replace: interSiteTopologyGenerator interSiteTopologyGenerator: CN=NTDS Settings,${SERVERDN} +dn: CN=RID Set,CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN} +changetype: add +objectClass: rIDSet +rIDAllocationPool: ${RIDALLOCATIONSTART}-${RIDALLOCATIONEND} +rIDPreviousAllocationPool: ${RIDALLOCATIONSTART}-${RIDALLOCATIONEND} +rIDUsedPool: 0 +rIDNextRID: ${RIDALLOCATIONSTART} + dn: CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN} changetype: modify add: servicePrincipalName servicePrincipalName: E3514235-4B06-11D1-AB04-00C04FC2DCD2/${NTDSGUID}/${DNSDOMAIN} servicePrincipalName: ldap/${NTDSGUID}._msdcs.${DNSDOMAIN} +add: rIDSetReferences +rIDSetReferences: CN=RID Set,CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN} # NOTE: This account is SAMBA4 specific! dn: CN=dns,CN=Users,${DOMAINDN} |