From 5f2832a5dc02e6d240c398e3fada4c92ae99d4ea Mon Sep 17 00:00:00 2001 From: Matthias Dieter Wallnöfer Date: Mon, 17 Aug 2009 21:29:47 +0200 Subject: s4:samldb - Major rework This fixes up the change of the primary group of a user when using the ADUC console: - When the "primaryGroupId" attribute changes, we have to delete the "member"/"memberOf" attribute reference of the new primary group and add one for the old primary group. - Deny deletion of primary groups according to Windows Server (so we cannot have invalid "primaryGroupID" attributes in our AD). - We cannot add a primary group directly before it isn't a secondary one of a user account. - We cannot add a secondary reference ("member" attribute) when the group has been chosen as primary one. This also removes the LDB templates which are basically overhead now. This should also fix bug #6599. --- source4/setup/provision_templates.ldif | 43 ----------------------------- source4/setup/provision_templates_init.ldif | 10 ------- 2 files changed, 53 deletions(-) delete mode 100644 source4/setup/provision_templates.ldif delete mode 100644 source4/setup/provision_templates_init.ldif (limited to 'source4/setup') diff --git a/source4/setup/provision_templates.ldif b/source4/setup/provision_templates.ldif deleted file mode 100644 index 04257549d5..0000000000 --- a/source4/setup/provision_templates.ldif +++ /dev/null @@ -1,43 +0,0 @@ -### -# Templates to be put in templates.ldb. Not part of main samdb any more. -### - -dn: CN=Templates -objectClass: top -objectClass: container -description: Container for SAM account templates - -dn: CN=TemplateUser,CN=Templates -userAccountControl: 546 -badPwdCount: 0 -codePage: 0 -countryCode: 0 -badPasswordTime: 0 -lastLogoff: 0 -lastLogon: 0 -pwdLastSet: 0 -primaryGroupID: 513 -accountExpires: 9223372036854775807 -logonCount: 0 - -dn: CN=TemplateTrustingDomain,CN=Templates -userAccountControl: 2080 -badPwdCount: 0 -codePage: 0 -countryCode: 0 -badPasswordTime: 0 -lastLogoff: 0 -lastLogon: 0 -primaryGroupID: 513 -accountExpires: 9223372036854775807 -logonCount: 0 - -dn: CN=TemplateGroup,CN=Templates -groupType: -2147483646 - -dn: CN=TemplateForeignSecurityPrincipal,CN=Templates - -dn: CN=TemplateSecret,CN=Templates - -dn: CN=TemplateTrustedDomain,CN=Templates - diff --git a/source4/setup/provision_templates_init.ldif b/source4/setup/provision_templates_init.ldif deleted file mode 100644 index 6d6a3c228c..0000000000 --- a/source4/setup/provision_templates_init.ldif +++ /dev/null @@ -1,10 +0,0 @@ -dn: @OPTIONS -checkBaseOnSearch: TRUE - -dn: @INDEXLIST -@IDXATTR: cn - -dn: @ATTRIBUTES -cn: CASE_INSENSITIVE -dn: CASE_INSENSITIVE - -- cgit