From 5133ab016e8400e815b6dae9947206e57332616b Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Wed, 15 Mar 2006 16:00:34 +0000 Subject: r14451: In order to get pdb_ldap searching for SID_NAME_ALIAS groups in the ${MACHINESID} and S_1-5-32 domains correctly, I had to add a substr search on sambaSID. * add substr matching rule to OpenLDAP schema (we need to update the other schema as will since this is a pretty important change). Sites will need to - install the new schema - add 'indea sambaSID sub' to slapd.conf - run slapindex * remove uses of SID_NAME_WKN_GRP in pdb_ldap.c (This used to be commit 2c0a46d73122e9000a900f7e16f9b010ad4b78e3) --- examples/LDAP/samba.schema | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'examples/LDAP') diff --git a/examples/LDAP/samba.schema b/examples/LDAP/samba.schema index e7ecc9e070..4e1556eba5 100644 --- a/examples/LDAP/samba.schema +++ b/examples/LDAP/samba.schema @@ -295,9 +295,9 @@ attributetype ( 1.3.6.1.4.1.7165.2.1.54 NAME 'sambaPasswordHistory' attributetype ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID' DESC 'Security ID' EQUALITY caseIgnoreIA5Match + SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE ) - ## ## Primary group SID, compatible with ntSid ## -- cgit