diff options
| author | Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de> | 2009-08-17 21:29:47 +0200 |
|---|---|---|
| committer | Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de> | 2009-09-07 08:37:24 +0200 |
| commit | 5f2832a5dc02e6d240c398e3fada4c92ae99d4ea (patch) | |
| tree | 7a71f685447e1a00601b14d64cb93679db5c3ef5 /source4/setup | |
| parent | 353481daa2497f52c8eec6d760981f17a5f528ca (diff) | |
| download | samba-5f2832a5dc02e6d240c398e3fada4c92ae99d4ea.tar.gz samba-5f2832a5dc02e6d240c398e3fada4c92ae99d4ea.tar.bz2 samba-5f2832a5dc02e6d240c398e3fada4c92ae99d4ea.zip | |
s4:samldb - Major rework
This fixes up the change of the primary group of a user when using the ADUC
console:
- When the "primaryGroupId" attribute changes, we have to delete the
"member"/"memberOf" attribute reference of the new primary group and add one
for the old primary group.
- Deny deletion of primary groups according to Windows Server (so we cannot
have invalid "primaryGroupID" attributes in our AD).
- We cannot add a primary group directly before it isn't a secondary one of a
user account.
- We cannot add a secondary reference ("member" attribute) when the group has
been chosen as primary one.
This also removes the LDB templates which are basically overhead now.
This should also fix bug #6599.
Diffstat (limited to 'source4/setup')
| -rw-r--r-- | source4/setup/provision_templates.ldif | 43 | ||||
| -rw-r--r-- | source4/setup/provision_templates_init.ldif | 10 |
2 files changed, 0 insertions, 53 deletions
diff --git a/source4/setup/provision_templates.ldif b/source4/setup/provision_templates.ldif deleted file mode 100644 index 04257549d5..0000000000 --- a/source4/setup/provision_templates.ldif +++ /dev/null @@ -1,43 +0,0 @@ -### -# Templates to be put in templates.ldb. Not part of main samdb any more. -### - -dn: CN=Templates -objectClass: top -objectClass: container -description: Container for SAM account templates - -dn: CN=TemplateUser,CN=Templates -userAccountControl: 546 -badPwdCount: 0 -codePage: 0 -countryCode: 0 -badPasswordTime: 0 -lastLogoff: 0 -lastLogon: 0 -pwdLastSet: 0 -primaryGroupID: 513 -accountExpires: 9223372036854775807 -logonCount: 0 - -dn: CN=TemplateTrustingDomain,CN=Templates -userAccountControl: 2080 -badPwdCount: 0 -codePage: 0 -countryCode: 0 -badPasswordTime: 0 -lastLogoff: 0 -lastLogon: 0 -primaryGroupID: 513 -accountExpires: 9223372036854775807 -logonCount: 0 - -dn: CN=TemplateGroup,CN=Templates -groupType: -2147483646 - -dn: CN=TemplateForeignSecurityPrincipal,CN=Templates - -dn: CN=TemplateSecret,CN=Templates - -dn: CN=TemplateTrustedDomain,CN=Templates - diff --git a/source4/setup/provision_templates_init.ldif b/source4/setup/provision_templates_init.ldif deleted file mode 100644 index 6d6a3c228c..0000000000 --- a/source4/setup/provision_templates_init.ldif +++ /dev/null @@ -1,10 +0,0 @@ -dn: @OPTIONS -checkBaseOnSearch: TRUE - -dn: @INDEXLIST -@IDXATTR: cn - -dn: @ATTRIBUTES -cn: CASE_INSENSITIVE -dn: CASE_INSENSITIVE - |