diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2003-05-11 05:59:34 +0000 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2003-05-11 05:59:34 +0000 |
| commit | 2735fb0119c5c938e236db406c74f914a0360151 (patch) | |
| tree | a535c610eba7bd5bf78de240196decd8bb6d9309 /examples/LDAP | |
| parent | 00583954447ec7af9dbbde183bba12a8711e61d0 (diff) | |
| download | samba-2735fb0119c5c938e236db406c74f914a0360151.tar.gz samba-2735fb0119c5c938e236db406c74f914a0360151.tar.xz samba-2735fb0119c5c938e236db406c74f914a0360151.zip | |
As discussed on samba-technical - move to 'primaryGroupSid' insted of
primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid
for the primary user identifier.
Also cope with legacy installations where primaryGroupID might have been
stored as 0.
Andrew Bartlett
(This used to be commit 0e432817cb927b41af7b49fb0b5081ffdb46f85e)
Diffstat (limited to 'examples/LDAP')
| -rw-r--r-- | examples/LDAP/samba.schema | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/examples/LDAP/samba.schema b/examples/LDAP/samba.schema index f9475f07ea..3a620b9a59 100644 --- a/examples/LDAP/samba.schema +++ b/examples/LDAP/samba.schema @@ -119,6 +119,16 @@ attributetype ( 1.3.6.1.4.1.7165.2.1.20 NAME 'ntSid' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE ) + +## +## Primary group SID, compatible with ntSid +## + +attributetype ( 1.3.6.1.4.1.7165.2.1.23 NAME 'primaryGroupSID' + DESC 'Primary Group Security ID' + EQUALITY caseIgnoreIA5Match + SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE ) + ## ## group mapping attributes ## @@ -168,7 +178,7 @@ objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaAccount' SUP top AUXILIARY MAY ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $ logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $ displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $ - description $ userWorkstations $ primaryGroupID $ domain )) + description $ userWorkstations $ primaryGroupSID $ domain )) ############################################################################ ## |