| 1 | #
|
|---|
| 2 | # Schema elements which do not exist in AD, but which we use in Samba4
|
|---|
| 3 | #
|
|---|
| 4 | ## Samba4 OID allocation from Samba3's examples/LDAP/samba.schema
|
|---|
| 5 | ## 1.3.6.1.4.1.7165.4.1.x - attributetypes
|
|---|
| 6 |
|
|---|
| 7 | ## 1.3.6.1.4.1.7165.4.2.x - objectclasses
|
|---|
| 8 |
|
|---|
| 9 | ## 1.3.6.1.4.1.7165.4.3.x - LDB/LDAP Controls
|
|---|
| 10 | ### see dsdb/samdb/samdb.h
|
|---|
| 11 |
|
|---|
| 12 | ## 1.3.6.1.4.1.7165.4.4.x - LDB/LDAP Extended Operations
|
|---|
| 13 | ### see dsdb/samdb/samdb.h
|
|---|
| 14 |
|
|---|
| 15 | ## 1.3.6.1.4.1.7165.4.255.x - mapped OIDs due to conflicts between AD and standards-track
|
|---|
| 16 | #
|
|---|
| 17 | #
|
|---|
| 18 |
|
|---|
| 19 |
|
|---|
| 20 | #
|
|---|
| 21 | # Not used anymore
|
|---|
| 22 | #
|
|---|
| 23 | #dn: cn=ntpwdHash,${SCHEMADN}
|
|---|
| 24 | #cn: ntpwdHash
|
|---|
| 25 | #name: NTPWDHash
|
|---|
| 26 | #objectClass: top
|
|---|
| 27 | #objectClass: attributeSchema
|
|---|
| 28 | #lDAPDisplayName: ntpwdhash
|
|---|
| 29 | #isSingleValued: TRUE
|
|---|
| 30 | #systemFlags: 17
|
|---|
| 31 | #systemOnly: TRUE
|
|---|
| 32 | #schemaIDGUID: E961130F-5084-458C-9E9C-DEC16DA08592
|
|---|
| 33 | #adminDisplayName: NT-PWD-Hash
|
|---|
| 34 | #attributeID: 1.3.6.1.4.1.7165.4.1.1
|
|---|
| 35 | #attributeSyntax: 2.5.5.10
|
|---|
| 36 | #oMSyntax: 4
|
|---|
| 37 |
|
|---|
| 38 | #
|
|---|
| 39 | # Not used anymore
|
|---|
| 40 | #
|
|---|
| 41 | #dn: cn=lmpwdHash,${SCHEMADN}
|
|---|
| 42 | #cn: lmpwdHash
|
|---|
| 43 | #name: lmpwdHash
|
|---|
| 44 | #objectClass: top
|
|---|
| 45 | #objectClass: attributeSchema
|
|---|
| 46 | #lDAPDisplayName: lmpwdhash
|
|---|
| 47 | #isSingleValued: TRUE
|
|---|
| 48 | #systemFlags: 17
|
|---|
| 49 | #systemOnly: TRUE
|
|---|
| 50 | #schemaIDGUID: CBD0D18C-9C54-4A77-87C4-5CEEAF781253
|
|---|
| 51 | #adminDisplayName: LM-PWD-Hash
|
|---|
| 52 | #attributeID: 1.3.6.1.4.1.7165.4.1.2
|
|---|
| 53 | #attributeSyntax: 2.5.5.10
|
|---|
| 54 | #oMSyntax: 4
|
|---|
| 55 |
|
|---|
| 56 | #
|
|---|
| 57 | # Not used anymore
|
|---|
| 58 | #
|
|---|
| 59 | #dn: cn=sambaNtPwdHistory,${SCHEMADN}
|
|---|
| 60 | #cn: sambaNtPwdHistory
|
|---|
| 61 | #name: sambaNtPwdHistory
|
|---|
| 62 | #objectClass: top
|
|---|
| 63 | #objectClass: attributeSchema
|
|---|
| 64 | #lDAPDisplayName: sambaNtPwdHistory
|
|---|
| 65 | #isSingleValued: TRUE
|
|---|
| 66 | #systemFlags: 17
|
|---|
| 67 | #systemOnly: TRUE
|
|---|
| 68 | #schemaIDGUID: 8CCD7658-C574-4435-A38C-99572E349E6B
|
|---|
| 69 | #adminDisplayName: SAMBA-NT-PWD-History
|
|---|
| 70 | #attributeID: 1.3.6.1.4.1.7165.4.1.3
|
|---|
| 71 | #attributeSyntax: 2.5.5.10
|
|---|
| 72 | #oMSyntax: 4
|
|---|
| 73 |
|
|---|
| 74 | #
|
|---|
| 75 | # Not used anymore
|
|---|
| 76 | #
|
|---|
| 77 | #dn: cn=sambaLmPwdHistory,${SCHEMADN}
|
|---|
| 78 | #cn: sambaLmPwdHistory
|
|---|
| 79 | #name: sambaLmPwdHistory
|
|---|
| 80 | #objectClass: top
|
|---|
| 81 | #objectClass: attributeSchema
|
|---|
| 82 | #lDAPDisplayName: sambaLmPwdHistory
|
|---|
| 83 | #isSingleValued: FALSE
|
|---|
| 84 | #systemFlags: 17
|
|---|
| 85 | #systemOnly: TRUE
|
|---|
| 86 | #schemaIDGUID: 0EAFE3DD-0F53-495E-8A34-97BB28AF17A4
|
|---|
| 87 | #adminDisplayName: SAMBA-LM-PWDHistory
|
|---|
| 88 | #attributeID: 1.3.6.1.4.1.7165.4.1.4
|
|---|
| 89 | #attributeSyntax: 2.5.5.10
|
|---|
| 90 | #oMSyntax: 4
|
|---|
| 91 |
|
|---|
| 92 | #
|
|---|
| 93 | # Not used anymore
|
|---|
| 94 | #
|
|---|
| 95 | #dn: CN=sambaPassword,${SCHEMADN}
|
|---|
| 96 | #objectClass: top
|
|---|
| 97 | #objectClass: attributeSchema
|
|---|
| 98 | #lDAPDisplayName: sambaPassword
|
|---|
| 99 | #isSingleValued: FALSE
|
|---|
| 100 | #systemFlags: 17
|
|---|
| 101 | #systemOnly: TRUE
|
|---|
| 102 | #schemaIDGUID: 87F10301-229A-4E69-B63A-998339ADA37A
|
|---|
| 103 | #adminDisplayName: SAMBA-Password
|
|---|
| 104 | #attributeID: 1.3.6.1.4.1.7165.4.1.5
|
|---|
| 105 | #attributeSyntax: 2.5.5.5
|
|---|
| 106 | #oMSyntax: 22
|
|---|
| 107 |
|
|---|
| 108 | #
|
|---|
| 109 | # Not used anymore
|
|---|
| 110 | #
|
|---|
| 111 | #dn: cn=dnsDomain,${SCHEMADN}
|
|---|
| 112 | #objectClass: top
|
|---|
| 113 | #objectClass: attributeSchema
|
|---|
| 114 | #lDAPDisplayName: dnsDomain
|
|---|
| 115 | #isSingleValued: FALSE
|
|---|
| 116 | #systemFlags: 17
|
|---|
| 117 | #systemOnly: TRUE
|
|---|
| 118 | #schemaIDGUID: A40165E6-5E45-44A7-A8FA-186C94333018
|
|---|
| 119 | #adminDisplayName: DNS-Domain
|
|---|
| 120 | #attributeID: 1.3.6.1.4.1.7165.4.1.6
|
|---|
| 121 | #attributeSyntax: 2.5.5.4
|
|---|
| 122 | #oMSyntax: 20
|
|---|
| 123 |
|
|---|
| 124 | dn: cn=privilege,${SCHEMADN}
|
|---|
| 125 | objectClass: top
|
|---|
| 126 | objectClass: attributeSchema
|
|---|
| 127 | cn: privilege
|
|---|
| 128 | lDAPDisplayName: privilege
|
|---|
| 129 | isSingleValued: FALSE
|
|---|
| 130 | systemFlags: 17
|
|---|
| 131 | systemOnly: TRUE
|
|---|
| 132 | schemaIDGUID: 7429BC94-CC6A-4481-8B2C-A97E316EB182
|
|---|
| 133 | adminDisplayName: Privilege
|
|---|
| 134 | attributeID: 1.3.6.1.4.1.7165.4.1.7
|
|---|
| 135 | attributeSyntax: 2.5.5.4
|
|---|
| 136 | oMSyntax: 20
|
|---|
| 137 |
|
|---|
| 138 | #
|
|---|
| 139 | # Not used anymore
|
|---|
| 140 | #
|
|---|
| 141 | #dn: CN=unixName,${SCHEMADN}
|
|---|
| 142 | #cn: unixName
|
|---|
| 143 | #name: unixName
|
|---|
| 144 | #objectClass: top
|
|---|
| 145 | #objectClass: attributeSchema
|
|---|
| 146 | #lDAPDisplayName: unixName
|
|---|
| 147 | #isSingleValued: TRUE
|
|---|
| 148 | #systemFlags: 16
|
|---|
| 149 | #systemOnly: FALSE
|
|---|
| 150 | #schemaIDGUID: bf9679f2-0de6-11d0-a285-00aa003049e2
|
|---|
| 151 | #adminDisplayName: Unix-Name
|
|---|
| 152 | #attributeID: 1.3.6.1.4.1.7165.4.1.9
|
|---|
| 153 | #attributeSyntax: 2.5.5.4
|
|---|
| 154 | #oMSyntax: 20
|
|---|
| 155 |
|
|---|
| 156 | #
|
|---|
| 157 | # Not used anymore
|
|---|
| 158 | #
|
|---|
| 159 | #dn: cn=krb5Key,${SCHEMADN}
|
|---|
| 160 | #cn: krb5Key
|
|---|
| 161 | #name: krb5Key
|
|---|
| 162 | #objectClass: top
|
|---|
| 163 | #objectClass: attributeSchema
|
|---|
| 164 | #lDAPDisplayName: krb5Key
|
|---|
| 165 | #isSingleValued: FALSE
|
|---|
| 166 | #systemFlags: 17
|
|---|
| 167 | #systemOnly: TRUE
|
|---|
| 168 | #schemaIDGUID: 0EAFE3DD-0F53-495E-8A34-97BB28AF17A4
|
|---|
| 169 | #adminDisplayName: krb5-Key
|
|---|
| 170 | #attributeID: 1.3.6.1.4.1.5322.10.1.10
|
|---|
| 171 | #attributeSyntax: 2.5.5.10
|
|---|
| 172 | #oMSyntax: 4
|
|---|
| 173 |
|
|---|
| 174 | #Allocated: (not used anymore) DSDB_CONTROL_REPLICATED_OBJECT_OID 1.3.6.1.4.1.7165.4.3.1
|
|---|
| 175 |
|
|---|
| 176 | #Allocated: DSDB_CONTROL_CURRENT_PARTITION_OID 1.3.6.1.4.1.7165.4.3.2
|
|---|
| 177 |
|
|---|
| 178 | #Allocated: DSDB_CONTROL_REPLICATED_UPDATE_OID 1.3.6.1.4.1.7165.4.3.3
|
|---|
| 179 |
|
|---|
| 180 | #Allocated: DSDB_EXTENDED_REPLICATED_OBJECTS_OID 1.3.6.1.4.1.7165.4.4.1
|
|---|
| 181 | #Allocated: DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID 1.3.6.1.4.1.7165.4.4.2
|
|---|
| 182 | #Allocated: LDB_EXTENDED_SEQUENCE_NUMBER 1.3.6.1.4.1.7165.4.4.3
|
|---|
| 183 |
|
|---|
| 184 | #Allocated: (middleName) attributeID: 1.3.6.1.4.1.7165.4.255.1
|
|---|
| 185 |
|
|---|
| 186 | #Allocated: (defaultGroup) attributeID: 1.3.6.1.4.1.7165.4.255.2
|
|---|
| 187 |
|
|---|
| 188 | #Allocated: (modifyTimestamp) samba4ModifyTimestamp: 1.3.6.1.4.1.7165.4.255.3
|
|---|
| 189 | #Allocated: (subSchema) samba4SubSchema: 1.3.6.1.4.1.7165.4.255.4
|
|---|
| 190 | #Allocated: (objectClasses) samba4ObjectClasses: 1.3.6.1.4.1.7165.4.255.5
|
|---|
| 191 | #Allocated: (ditContentRules) samba4DitContentRules: 1.3.6.1.4.1.7165.4.255.6
|
|---|
| 192 | #Allocated: (attributeTypes) samba4AttributeTypes: 1.3.6.1.4.1.7165.4.255.7
|
|---|
| 193 | #Allocated: (dynamicObject) samba4DynamicObject: 1.3.6.1.4.1.7165.4.255.8
|
|---|
| 194 | #Allocated: (entryTTL) samba4EntryTTL: 1.3.6.1.4.1.7165.4.255.9
|
|---|
| 195 |
|
|---|
| 196 | #
|
|---|
| 197 | # Based on domainDNS, but without the DNS bits.
|
|---|
| 198 | #
|
|---|
| 199 |
|
|---|
| 200 | dn: CN=Samba4-Local-Domain,${SCHEMADN}
|
|---|
| 201 | objectClass: top
|
|---|
| 202 | objectClass: classSchema
|
|---|
| 203 | cn: Samba4-Local-Domain
|
|---|
| 204 | subClassOf: top
|
|---|
| 205 | governsID: 1.3.6.1.4.1.7165.4.2.2
|
|---|
| 206 | rDNAttID: cn
|
|---|
| 207 | adminDisplayName: Samba4-Local-Domain
|
|---|
| 208 | adminDescription: Samba4-Local-Domain
|
|---|
| 209 | systemMayContain: msDS-Behavior-Version
|
|---|
| 210 | systemMayContain: managedBy
|
|---|
| 211 | objectClassCategory: 1
|
|---|
| 212 | lDAPDisplayName: samba4LocalDomain
|
|---|
| 213 | schemaIDGUID: 07be1647-8310-4fba-91ae-34e55d5a8293
|
|---|
| 214 | systemOnly: FALSE
|
|---|
| 215 | systemAuxiliaryClass: samDomain
|
|---|
| 216 | defaultSecurityDescriptor: D:(A;;RPLCLORC;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
|
|---|
| 217 | systemFlags: 16
|
|---|
| 218 | defaultHidingValue: TRUE
|
|---|
| 219 | defaultObjectCategory: CN=Samba4-Local-Domain,${SCHEMADN}
|
|---|
| 220 |
|
|---|
| 221 |
|
|---|
| 222 | dn: CN=Samba4Top,${SCHEMADN}
|
|---|
| 223 | objectClass: top
|
|---|
| 224 | objectClass: classSchema
|
|---|
| 225 | cn: Samba4Top
|
|---|
| 226 | subClassOf: top
|
|---|
| 227 | governsID: 1.3.6.1.4.1.7165.4.2.1
|
|---|
| 228 | mayContain: msDS-ObjectReferenceBL
|
|---|
| 229 | rDNAttID: cn
|
|---|
| 230 | adminDisplayName: Samba4TopTop
|
|---|
| 231 | adminDescription: Attributes used in top in Samba4 that OpenLDAP does not
|
|---|
| 232 | objectClassCategory: 3
|
|---|
| 233 | lDAPDisplayName: samba4Top
|
|---|
| 234 | schemaIDGUID: 073598d0-635b-4685-a929-da731b98d84e
|
|---|
| 235 | systemOnly: TRUE
|
|---|
| 236 | systemPossSuperiors: lostAndFound
|
|---|
| 237 | systemMayContain: url
|
|---|
| 238 | systemMayContain: wWWHomePage
|
|---|
| 239 | systemMayContain: wellKnownObjects
|
|---|
| 240 | systemMayContain: wbemPath
|
|---|
| 241 | systemMayContain: uSNSource
|
|---|
| 242 | systemMayContain: uSNLastObjRem
|
|---|
| 243 | systemMayContain: USNIntersite
|
|---|
| 244 | systemMayContain: uSNDSALastObjRemoved
|
|---|
| 245 | systemMayContain: systemFlags
|
|---|
| 246 | systemMayContain: subRefs
|
|---|
| 247 | systemMayContain: siteObjectBL
|
|---|
| 248 | systemMayContain: serverReferenceBL
|
|---|
| 249 | systemMayContain: sDRightsEffective
|
|---|
| 250 | systemMayContain: revision
|
|---|
| 251 | systemMayContain: repsTo
|
|---|
| 252 | systemMayContain: repsFrom
|
|---|
| 253 | systemMayContain: directReports
|
|---|
| 254 | systemMayContain: replUpToDateVector
|
|---|
| 255 | systemMayContain: replPropertyMetaData
|
|---|
| 256 | systemMayContain: name
|
|---|
| 257 | systemMayContain: queryPolicyBL
|
|---|
| 258 | systemMayContain: parentGUID
|
|---|
| 259 | systemMayContain: proxyAddresses
|
|---|
| 260 | systemMayContain: proxiedObjectName
|
|---|
| 261 | systemMayContain: possibleInferiors
|
|---|
| 262 | systemMayContain: partialAttributeSet
|
|---|
| 263 | systemMayContain: partialAttributeDeletionList
|
|---|
| 264 | systemMayContain: otherWellKnownObjects
|
|---|
| 265 | systemMayContain: objectVersion
|
|---|
| 266 | systemMayContain: nonSecurityMemberBL
|
|---|
| 267 | systemMayContain: netbootSCPBL
|
|---|
| 268 | systemMayContain: ownerBL
|
|---|
| 269 | systemMayContain: msDS-ReplValueMetaData
|
|---|
| 270 | systemMayContain: msDS-ReplAttributeMetaData
|
|---|
| 271 | systemMayContain: msDS-NonMembersBL
|
|---|
| 272 | systemMayContain: msDS-NCReplOutboundNeighbors
|
|---|
| 273 | systemMayContain: msDS-NCReplInboundNeighbors
|
|---|
| 274 | systemMayContain: msDS-NCReplCursors
|
|---|
| 275 | systemMayContain: msDS-TasksForAzRoleBL
|
|---|
| 276 | systemMayContain: msDS-TasksForAzTaskBL
|
|---|
| 277 | systemMayContain: msDS-OperationsForAzRoleBL
|
|---|
| 278 | systemMayContain: msDS-OperationsForAzTaskBL
|
|---|
| 279 | systemMayContain: msDS-MembersForAzRoleBL
|
|---|
| 280 | systemMayContain: msDs-masteredBy
|
|---|
| 281 | systemMayContain: mS-DS-ConsistencyGuid
|
|---|
| 282 | systemMayContain: mS-DS-ConsistencyChildCount
|
|---|
| 283 | systemMayContain: msDS-Approx-Immed-Subordinates
|
|---|
| 284 | systemMayContain: msCOM-PartitionSetLink
|
|---|
| 285 | systemMayContain: msCOM-UserLink
|
|---|
| 286 | systemMayContain: masteredBy
|
|---|
| 287 | systemMayContain: managedObjects
|
|---|
| 288 | systemMayContain: lastKnownParent
|
|---|
| 289 | systemMayContain: isPrivilegeHolder
|
|---|
| 290 | systemMayContain: isDeleted
|
|---|
| 291 | systemMayContain: isCriticalSystemObject
|
|---|
| 292 | systemMayContain: showInAdvancedViewOnly
|
|---|
| 293 | systemMayContain: fSMORoleOwner
|
|---|
| 294 | systemMayContain: fRSMemberReferenceBL
|
|---|
| 295 | systemMayContain: frsComputerReferenceBL
|
|---|
| 296 | systemMayContain: fromEntry
|
|---|
| 297 | systemMayContain: flags
|
|---|
| 298 | systemMayContain: extensionName
|
|---|
| 299 | systemMayContain: dSASignature
|
|---|
| 300 | systemMayContain: dSCorePropagationData
|
|---|
| 301 | systemMayContain: displayNamePrintable
|
|---|
| 302 | systemMayContain: displayName
|
|---|
| 303 | systemMayContain: description
|
|---|
| 304 | systemMayContain: cn
|
|---|
| 305 | systemMayContain: canonicalName
|
|---|
| 306 | systemMayContain: bridgeheadServerListBL
|
|---|
| 307 | systemMayContain: allowedChildClassesEffective
|
|---|
| 308 | systemMayContain: allowedChildClasses
|
|---|
| 309 | systemMayContain: allowedAttributesEffective
|
|---|
| 310 | systemMayContain: allowedAttributes
|
|---|
| 311 | systemMayContain: adminDisplayName
|
|---|
| 312 | systemMayContain: adminDescription
|
|---|
| 313 | systemMustContain: objectCategory
|
|---|
| 314 | systemMustContain: nTSecurityDescriptor
|
|---|
| 315 | systemMustContain: instanceType
|
|---|
| 316 | systemAuxiliaryClass: samba4TopExtra
|
|---|
| 317 | defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
|
|---|
| 318 | systemFlags: 16
|
|---|
| 319 | defaultHidingValue: TRUE
|
|---|
| 320 | objectCategory: CN=Class-Schema,${SCHEMADN}
|
|---|
| 321 | defaultObjectCategory: CN=Samba4Top,${SCHEMADN}
|
|---|
| 322 |
|
|---|
| 323 |
|
|---|
| 324 | dn: CN=Samba4TopExtra,${SCHEMADN}
|
|---|
| 325 | objectClass: top
|
|---|
| 326 | objectClass: classSchema
|
|---|
| 327 | cn: Samba4TopExtra
|
|---|
| 328 | subClassOf: top
|
|---|
| 329 | governsID: 1.3.6.1.4.1.7165.4.2.3
|
|---|
| 330 | rDNAttID: cn
|
|---|
| 331 | adminDisplayName: Samba4TopExtra
|
|---|
| 332 | adminDescription: Attributes used in top in Samba4 that OpenLDAP does not
|
|---|
| 333 | objectClassCategory: 2
|
|---|
| 334 | lDAPDisplayName: samba4TopExtra
|
|---|
| 335 | schemaIDGUID: 073598d0-635b-4685-a929-da731b98d84e
|
|---|
| 336 | systemOnly: TRUE
|
|---|
| 337 | mayContain: privilege
|
|---|
| 338 | systemPossSuperiors: lostAndFound
|
|---|
| 339 | defaultSecurityDescriptor: D:(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)(A;;RPLCLORC;;;AU)
|
|---|
| 340 | systemFlags: 16
|
|---|
| 341 | defaultHidingValue: TRUE
|
|---|
| 342 | objectCategory: CN=Class-Schema,${SCHEMADN}
|
|---|
| 343 | defaultObjectCategory: CN=Samba4TopExtra,${SCHEMADN}
|
|---|
| 344 |
|
|---|