| 1 | # Accounts for selfjoin (joins DC to itself)
|
|---|
| 2 |
|
|---|
| 3 | # Object under "Domain Controllers"
|
|---|
| 4 | dn: CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN}
|
|---|
| 5 | objectClass: top
|
|---|
| 6 | objectClass: person
|
|---|
| 7 | objectClass: organizationalPerson
|
|---|
| 8 | objectClass: user
|
|---|
| 9 | objectClass: computer
|
|---|
| 10 | accountExpires: 9223372036854775807
|
|---|
| 11 | dNSHostName: ${DNSNAME}
|
|---|
| 12 | # "MSDFSR-ComputerReferenceBL" doesn't exist since we still miss DFSR support
|
|---|
| 13 | # "isCritcalSystemObject" is now filled in by the samldb LDB module
|
|---|
| 14 | localPolicyFlags: 0
|
|---|
| 15 | operatingSystem: Samba
|
|---|
| 16 | operatingSystemVersion: ${SAMBA_VERSION_STRING}
|
|---|
| 17 | sAMAccountName: ${NETBIOSNAME}$
|
|---|
| 18 | # The "servicePrincipalName" updates are now handled by the "samba_spnupdate"
|
|---|
| 19 | # script
|
|---|
| 20 | userAccountControl: 532480
|
|---|
| 21 | clearTextPassword:: ${MACHINEPASS_B64}
|
|---|
| 22 | objectSid: ${DOMAINSID}-${DCRID}
|
|---|
| 23 |
|
|---|
| 24 | # Here are missing the objects for the NTFRS subscription since we don't
|
|---|
| 25 | # support this technique yet.
|
|---|
| 26 |
|
|---|
| 27 | # Objects under "Configuration/Sites/<Default sitename>/Servers"
|
|---|
| 28 |
|
|---|
| 29 | dn: ${SERVERDN}
|
|---|
| 30 | objectClass: top
|
|---|
| 31 | objectClass: server
|
|---|
| 32 | systemFlags: 1375731712
|
|---|
| 33 | dNSHostName: ${DNSNAME}
|
|---|
| 34 | serverReference: CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN}
|
|---|
| 35 |
|
|---|
| 36 | dn: CN=NTDS Settings,${SERVERDN}
|
|---|
| 37 | objectClass: top
|
|---|
| 38 | objectClass: applicationSettings
|
|---|
| 39 | objectClass: nTDSDSA
|
|---|
| 40 | dMDLocation: ${SCHEMADN}
|
|---|
| 41 | hasMasterNCs: ${CONFIGDN}
|
|---|
| 42 | hasMasterNCs: ${SCHEMADN}
|
|---|
| 43 | hasMasterNCs: ${DOMAINDN}
|
|---|
| 44 | invocationId: ${INVOCATIONID}
|
|---|
| 45 | msDS-Behavior-Version: ${DOMAIN_CONTROLLER_FUNCTIONALITY}
|
|---|
| 46 | msDS-HasDomainNCs: ${DOMAINDN}
|
|---|
| 47 | # "msDS-HasInstantiatedNCs"s for DNS don't exist since we don't support AD DNS
|
|---|
| 48 | msDS-HasInstantiatedNCs: B:8:0000000D:${CONFIGDN}
|
|---|
| 49 | msDS-HasInstantiatedNCs: B:8:0000000D:${SCHEMADN}
|
|---|
| 50 | msDS-HasInstantiatedNCs: B:8:00000005:${DOMAINDN}
|
|---|
| 51 | # "msDS-hasMasterNCs"s for DNS don't exist since we don't support AD DNS
|
|---|
| 52 | msDS-hasMasterNCs: ${CONFIGDN}
|
|---|
| 53 | msDS-hasMasterNCs: ${SCHEMADN}
|
|---|
| 54 | msDS-hasMasterNCs: ${DOMAINDN}
|
|---|
| 55 | options: 1
|
|---|
| 56 | systemFlags: 33554432
|
|---|
| 57 | ${NTDSGUID}
|
|---|
