summaryrefslogtreecommitdiff
path: root/examples/LDAP/samba.schema
AgeCommit message (Collapse)AuthorFilesLines
2003-05-14fix group mapping in LDAP under new schemaGerald Carter1-1/+1
(This used to be commit 0714dda7cc4a1df73e1b9d11daae80a1f46583de)
2003-05-14*****LDAP schema changes*****Gerald Carter1-25/+134
New objectclass named sambaSamAccount which uses attribute prefaced with the phrase 'samba' to prevent future name clashes. Change in functionality of the 'ldap filter' parameter. This always defaults to "(uid=%u)" now and is and'd with the approriate objectclass depending on whether you are using ldapsam_compat or ldapsam conversion script for migrating from sambaAccount to sambaSamAccount will come next. (This used to be commit 998586e65271daa919e47e1206c0007454cbca66)
2003-05-11As discussed on samba-technical - move to 'primaryGroupSid' insted ofAndrew Bartlett1-1/+11
primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid for the primary user identifier. Also cope with legacy installations where primaryGroupID might have been stored as 0. Andrew Bartlett (This used to be commit 0e432817cb927b41af7b49fb0b5081ffdb46f85e)
2003-04-28A new pdb_ldap!Andrew Bartlett1-5/+34
This patch removes 'non unix account range' (same as idra's change in HEAD), and uses the winbind uid range instead. More importanly, this patch changes the LDAP schema to use 'ntSid' instead of 'rid' as the primary attribute. This makes it in common with the group mapping code, and should allow it to be used closely with a future idmap_ldap. Existing installations can use the existing functionality by using the ldapsam_compat backend, and users who compile with --with-ldapsam will get this by default. More importantly, this patch adds a 'sambaDomain' object to our schema - which contains 2 'next rid' attributes, the domain name and the domain sid. Yes, there are *2* next rid attributes. The problem is that we don't 'own' the entire RID space - we can only allocate RIDs that could be 'algorithmic' RIDs. Therefore, we use the fact that UIDs in 'winbind uid' range will be mapped by IDMAP, not the algorithm. Andrew Bartlett (This used to be commit 3e07406ade81e136f67439d4f8fd7fe1dbb6db14)
2003-04-18uidPool and gidPool don't use cn anymore (but we don't use thsi anyways)Gerald Carter1-2/+2
(This used to be commit 7f0fd03f699f24094e32a92dbb0ec55d9a602c36)
2003-03-27Fix schema error not detected by OpenLDAP 2.0.23 but by 2.1.16.Volker Lendecke1-1/+1
Volker (This used to be commit 5acb9f421c149126370e79d66d3d9ace6be9a695)
2003-03-19Put group mapping into LDAP.Volker Lendecke1-0/+25
Volker (This used to be commit da83d97eb50c3c3a67985e22410842100207431f)
2003-01-06removed idpool from schema file (experimental) to remove the dependencyGerald Carter1-6/+6
on nis.schema. add $(LDFLAGS) to libsmbclient build (This used to be commit cd16064784a5e5fd9d2a67d4dfba605f7d8046ac)
2002-08-17sync 3_0 branch with HEADJelmer Vernooij1-2/+14
(This used to be commit 19ab776bf9c91cf4e56887fd7a63d3253b7e36ef)
2002-02-11merge from 2.2Gerald Carter1-2/+2
(This used to be commit bb574aab8f3f4ac2f7ae919790481a419f8173cb)
2002-02-11fixes from 2,2Gerald Carter1-27/+59
(This used to be commit 46bd77a02a47c26c4981472c8cea09e64c2ef4d2)
2002-01-06 sync up comments with 2.2Gerald Carter1-1/+1
(This used to be commit 3d4adad1501fc02ee0c60c69c01a92bdb16a1711)
2002-01-04sync with 2.2Gerald Carter1-3/+3
(This used to be commit 9e3b432c57747e6fd876c53a576858ef1227ba8e)
2001-12-28merge from 2.2Gerald Carter1-0/+1
(This used to be commit 241b5218ea5ad83ecb02a0f838e84abee0672371)
2001-12-26sync with 2.2Gerald Carter1-0/+107
(This used to be commit aca58b0b72d2eb5024b4d5103fde5b281212d714)