1##
2## schema file for OpenLDAP 2.x
3## Schema for storing Samba user accounts and group maps in LDAP
4## OIDs are owned by the Samba Team
5##
6## Prerequisite schemas - uid         (cosine.schema)
7##                      - displayName (inetorgperson.schema)
8##                      - gidNumber   (nis.schema)
9##
10## 1.3.6.1.4.1.7165.2.1.x - attributetypes
11## 1.3.6.1.4.1.7165.2.2.x - objectclasses
12##
13## Printer support
14## 1.3.6.1.4.1.7165.2.3.1.x - attributetypes
15## 1.3.6.1.4.1.7165.2.3.2.x - objectclasses
16##
17## Samba4
18## 1.3.6.1.4.1.7165.4.1.x - attributetypes
19## 1.3.6.1.4.1.7165.4.2.x - objectclasses
20## 1.3.6.1.4.1.7165.4.3.x - LDB/LDAP Controls
21## 1.3.6.1.4.1.7165.4.4.x - LDB/LDAP Extended Operations
22## 1.3.6.1.4.1.7165.4.255.x - mapped OIDs due to conflicts between AD and standards-track
23##
24## ----- READ THIS WHEN ADDING A NEW ATTRIBUTE OR OBJECT CLASS ------
25##
26## Run the 'get_next_oid' bash script in this directory to find the
27## next available OID for attribute type and object classes.
28##
29##   $ ./get_next_oid
30##   attributetype ( 1.3.6.1.4.1.7165.2.1.XX NAME ....
31##   objectclass ( 1.3.6.1.4.1.7165.2.2.XX NAME ....
32##
33## Also ensure that new entries adhere to the declaration style
34## used throughout this file
35##
36##    <attributetype|objectclass> ( 1.3.6.1.4.1.7165.2.XX.XX NAME ....
37##                               ^ ^                        ^
38##
39## The spaces are required for the get_next_oid script (and for
40## readability).
41##
42## ------------------------------------------------------------------
43
44# objectIdentifier SambaRoot 1.3.6.1.4.1.7165
45# objectIdentifier Samba3 SambaRoot:2
46# objectIdentifier Samba3Attrib Samba3:1
47# objectIdentifier Samba3ObjectClass Samba3:2
48# objectIdentifier Samba4 SambaRoot:4
49
50########################################################################
51##                            HISTORICAL                              ##
52########################################################################
53
54##
55## Password hashes
56##
57#attributetype ( 1.3.6.1.4.1.7165.2.1.1 NAME 'lmPassword'
58#         DESC 'LanManager Passwd'
59#         EQUALITY caseIgnoreIA5Match
60#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
61
62#attributetype ( 1.3.6.1.4.1.7165.2.1.2 NAME 'ntPassword'
63#         DESC 'NT Passwd'
64#         EQUALITY caseIgnoreIA5Match
65#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
66
67##
68## Account flags in string format ([UWDX     ])
69##
70#attributetype ( 1.3.6.1.4.1.7165.2.1.4 NAME 'acctFlags'
71#         DESC 'Account Flags'
72#         EQUALITY caseIgnoreIA5Match
73#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16} SINGLE-VALUE )
74
75##
76## Password timestamps & policies
77##
78#attributetype ( 1.3.6.1.4.1.7165.2.1.3 NAME 'pwdLastSet'
79#         DESC 'NT pwdLastSet'
80#         EQUALITY integerMatch
81#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
82
83#attributetype ( 1.3.6.1.4.1.7165.2.1.5 NAME 'logonTime'
84#         DESC 'NT logonTime'
85#         EQUALITY integerMatch
86#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
87
88#attributetype ( 1.3.6.1.4.1.7165.2.1.6 NAME 'logoffTime'
89#         DESC 'NT logoffTime'
90#         EQUALITY integerMatch
91#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
92
93#attributetype ( 1.3.6.1.4.1.7165.2.1.7 NAME 'kickoffTime'
94#         DESC 'NT kickoffTime'
95#         EQUALITY integerMatch
96#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
97
98#attributetype ( 1.3.6.1.4.1.7165.2.1.8 NAME 'pwdCanChange'
99#         DESC 'NT pwdCanChange'
100#         EQUALITY integerMatch
101#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
102
103#attributetype ( 1.3.6.1.4.1.7165.2.1.9 NAME 'pwdMustChange'
104#         DESC 'NT pwdMustChange'
105#         EQUALITY integerMatch
106#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
107
108##
109## string settings
110##
111#attributetype ( 1.3.6.1.4.1.7165.2.1.10 NAME 'homeDrive'
112#         DESC 'NT homeDrive'
113#         EQUALITY caseIgnoreIA5Match
114#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE )
115
116#attributetype ( 1.3.6.1.4.1.7165.2.1.11 NAME 'scriptPath'
117#         DESC 'NT scriptPath'
118#         EQUALITY caseIgnoreIA5Match
119#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
120
121#attributetype ( 1.3.6.1.4.1.7165.2.1.12 NAME 'profilePath'
122#         DESC 'NT profilePath'
123#         EQUALITY caseIgnoreIA5Match
124#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
125
126#attributetype ( 1.3.6.1.4.1.7165.2.1.13 NAME 'userWorkstations'
127#         DESC 'userWorkstations'
128#         EQUALITY caseIgnoreIA5Match
129#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{255} SINGLE-VALUE )
130
131#attributetype ( 1.3.6.1.4.1.7165.2.1.17 NAME 'smbHome'
132#         DESC 'smbHome'
133#         EQUALITY caseIgnoreIA5Match
134#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
135
136#attributetype ( 1.3.6.1.4.1.7165.2.1.18 NAME 'domain'
137#         DESC 'Windows NT domain to which the user belongs'
138#         EQUALITY caseIgnoreIA5Match
139#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
140
141##
142## user and group RID
143##
144#attributetype ( 1.3.6.1.4.1.7165.2.1.14 NAME 'rid'
145#         DESC 'NT rid'
146#         EQUALITY integerMatch
147#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
148
149#attributetype ( 1.3.6.1.4.1.7165.2.1.15 NAME 'primaryGroupID'
150#         DESC 'NT Group RID'
151#         EQUALITY integerMatch
152#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
153
154##
155## The smbPasswordEntry objectclass has been depreciated in favor of the
156## sambaAccount objectclass
157##
158#objectclass ( 1.3.6.1.4.1.7165.2.2.1 NAME 'smbPasswordEntry' SUP top AUXILIARY
159#        DESC 'Samba smbpasswd entry'
160#        MUST ( uid $ uidNumber )
161#        MAY  ( lmPassword $ ntPassword $ pwdLastSet $ acctFlags ))
162
163#objectclass ( 1.3.6.1.4.1.7165.2.2.2 NAME 'sambaAccount' SUP top STRUCTURAL
164#         DESC 'Samba Account'
165#         MUST ( uid $ rid )
166#         MAY  ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $
167#               logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
168#               displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
169#               description $ userWorkstations $ primaryGroupID $ domain ))
170
171#objectclass ( 1.3.6.1.4.1.7165.2.2.3 NAME 'sambaAccount' SUP top AUXILIARY
172#         DESC 'Samba Auxiliary Account'
173#         MUST ( uid $ rid )
174#         MAY  ( cn $ lmPassword $ ntPassword $ pwdLastSet $ logonTime $
175#              logoffTime $ kickoffTime $ pwdCanChange $ pwdMustChange $ acctFlags $
176#              displayName $ smbHome $ homeDrive $ scriptPath $ profilePath $
177#              description $ userWorkstations $ primaryGroupID $ domain ))
178
179########################################################################
180##                        END OF HISTORICAL                           ##
181########################################################################
182
183#######################################################################
184##                Attributes used by Samba 3.0 schema                ##
185#######################################################################
186
187##
188## Password hashes
189##
190attributetype ( 1.3.6.1.4.1.7165.2.1.24 NAME 'sambaLMPassword'
191          DESC 'LanManager Password'
192          EQUALITY caseIgnoreIA5Match
193          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
194
195attributetype ( 1.3.6.1.4.1.7165.2.1.25 NAME 'sambaNTPassword'
196          DESC 'MD4 hash of the unicode password'
197          EQUALITY caseIgnoreIA5Match
198          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
199
200##
201## Account flags in string format ([UWDX     ])
202##
203attributetype ( 1.3.6.1.4.1.7165.2.1.26 NAME 'sambaAcctFlags'
204          DESC 'Account Flags'
205          EQUALITY caseIgnoreIA5Match
206          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16} SINGLE-VALUE )
207
208##
209## Password timestamps & policies
210##
211attributetype ( 1.3.6.1.4.1.7165.2.1.27 NAME 'sambaPwdLastSet'
212          DESC 'Timestamp of the last password update'
213          EQUALITY integerMatch
214          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
215
216attributetype ( 1.3.6.1.4.1.7165.2.1.28 NAME 'sambaPwdCanChange'
217          DESC 'Timestamp of when the user is allowed to update the password'
218          EQUALITY integerMatch
219          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
220
221attributetype ( 1.3.6.1.4.1.7165.2.1.29 NAME 'sambaPwdMustChange'
222          DESC 'Timestamp of when the password will expire'
223          EQUALITY integerMatch
224          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
225
226attributetype ( 1.3.6.1.4.1.7165.2.1.30 NAME 'sambaLogonTime'
227          DESC 'Timestamp of last logon'
228          EQUALITY integerMatch
229          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
230
231attributetype ( 1.3.6.1.4.1.7165.2.1.31 NAME 'sambaLogoffTime'
232          DESC 'Timestamp of last logoff'
233          EQUALITY integerMatch
234          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
235
236attributetype ( 1.3.6.1.4.1.7165.2.1.32 NAME 'sambaKickoffTime'
237          DESC 'Timestamp of when the user will be logged off automatically'
238          EQUALITY integerMatch
239          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
240
241attributetype ( 1.3.6.1.4.1.7165.2.1.48 NAME 'sambaBadPasswordCount'
242          DESC 'Bad password attempt count'
243          EQUALITY integerMatch
244          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
245
246attributetype ( 1.3.6.1.4.1.7165.2.1.49 NAME 'sambaBadPasswordTime'
247          DESC 'Time of the last bad password attempt'
248          EQUALITY integerMatch
249          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
250
251attributetype ( 1.3.6.1.4.1.7165.2.1.55 NAME 'sambaLogonHours'
252          DESC 'Logon Hours'
253          EQUALITY caseIgnoreIA5Match
254          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{42} SINGLE-VALUE )
255
256##
257## string settings
258##
259attributetype ( 1.3.6.1.4.1.7165.2.1.33 NAME 'sambaHomeDrive'
260          DESC 'Driver letter of home directory mapping'
261          EQUALITY caseIgnoreIA5Match
262          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE )
263
264attributetype ( 1.3.6.1.4.1.7165.2.1.34 NAME 'sambaLogonScript'
265          DESC 'Logon script path'
266          EQUALITY caseIgnoreMatch
267          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE )
268
269attributetype ( 1.3.6.1.4.1.7165.2.1.35 NAME 'sambaProfilePath'
270          DESC 'Roaming profile path'
271          EQUALITY caseIgnoreMatch
272          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE )
273
274attributetype ( 1.3.6.1.4.1.7165.2.1.36 NAME 'sambaUserWorkstations'
275          DESC 'List of user workstations the user is allowed to logon to'
276          EQUALITY caseIgnoreMatch
277          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE )
278
279attributetype ( 1.3.6.1.4.1.7165.2.1.37 NAME 'sambaHomePath'
280          DESC 'Home directory UNC path'
281          EQUALITY caseIgnoreMatch
282          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
283
284attributetype ( 1.3.6.1.4.1.7165.2.1.38 NAME 'sambaDomainName'
285          DESC 'Windows NT domain to which the user belongs'
286          EQUALITY caseIgnoreMatch
287          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
288
289attributetype ( 1.3.6.1.4.1.7165.2.1.47 NAME 'sambaMungedDial'
290          DESC 'Base64 encoded user parameter string'
291          EQUALITY caseExactMatch
292          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
293
294attributetype ( 1.3.6.1.4.1.7165.2.1.54 NAME 'sambaPasswordHistory'
295          DESC 'Concatenated MD5 hashes of the salted NT passwords used on this account'
296          EQUALITY caseIgnoreIA5Match
297          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} )
298
299##
300## SID, of any type
301##
302
303attributetype ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID'
304          DESC 'Security ID'
305          EQUALITY caseIgnoreIA5Match
306          SUBSTR caseExactIA5SubstringsMatch
307          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE )
308
309##
310## Primary group SID, compatible with ntSid
311##
312
313attributetype ( 1.3.6.1.4.1.7165.2.1.23 NAME 'sambaPrimaryGroupSID'
314          DESC 'Primary Group Security ID'
315          EQUALITY caseIgnoreIA5Match
316          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE )
317
318attributetype ( 1.3.6.1.4.1.7165.2.1.51 NAME 'sambaSIDList'
319          DESC 'Security ID List'
320          EQUALITY caseIgnoreIA5Match
321          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} )
322
323##
324## group mapping attributes
325##
326attributetype ( 1.3.6.1.4.1.7165.2.1.19 NAME 'sambaGroupType'
327          DESC 'NT Group Type'
328          EQUALITY integerMatch
329          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
330
331##
332## Store info on the domain
333##
334
335attributetype ( 1.3.6.1.4.1.7165.2.1.21 NAME 'sambaNextUserRid'
336          DESC 'Next NT rid to give our for users'
337          EQUALITY integerMatch
338          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
339
340attributetype ( 1.3.6.1.4.1.7165.2.1.22 NAME 'sambaNextGroupRid'
341          DESC 'Next NT rid to give out for groups'
342          EQUALITY integerMatch
343          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
344
345attributetype ( 1.3.6.1.4.1.7165.2.1.39 NAME 'sambaNextRid'
346          DESC 'Next NT rid to give out for anything'
347          EQUALITY integerMatch
348          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
349
350attributetype ( 1.3.6.1.4.1.7165.2.1.40 NAME 'sambaAlgorithmicRidBase'
351          DESC 'Base at which the samba RID generation algorithm should operate'
352          EQUALITY integerMatch
353          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
354
355attributetype ( 1.3.6.1.4.1.7165.2.1.41 NAME 'sambaShareName'
356          DESC 'Share Name'
357          EQUALITY caseIgnoreMatch
358          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
359
360attributetype ( 1.3.6.1.4.1.7165.2.1.42 NAME 'sambaOptionName'
361          DESC 'Option Name'
362          EQUALITY caseIgnoreMatch
363          SUBSTR caseIgnoreSubstringsMatch
364          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
365
366attributetype ( 1.3.6.1.4.1.7165.2.1.43 NAME 'sambaBoolOption'
367          DESC 'A boolean option'
368          EQUALITY booleanMatch
369          SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
370
371attributetype ( 1.3.6.1.4.1.7165.2.1.44 NAME 'sambaIntegerOption'
372          DESC 'An integer option'
373          EQUALITY integerMatch
374          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
375
376attributetype ( 1.3.6.1.4.1.7165.2.1.45 NAME 'sambaStringOption'
377          DESC 'A string option'
378          EQUALITY caseExactIA5Match
379          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
380
381attributetype ( 1.3.6.1.4.1.7165.2.1.46 NAME 'sambaStringListOption'
382          DESC 'A string list option'
383          EQUALITY caseIgnoreMatch
384          SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
385
386
387##attributetype ( 1.3.6.1.4.1.7165.2.1.50 NAME 'sambaPrivName'
388##        SUP name )
389
390##attributetype ( 1.3.6.1.4.1.7165.2.1.52 NAME 'sambaPrivilegeList'
391##        DESC 'Privileges List'
392##        EQUALITY caseIgnoreIA5Match
393##        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} )
394
395attributetype ( 1.3.6.1.4.1.7165.2.1.53 NAME 'sambaTrustFlags'
396          DESC 'Trust Password Flags'
397          EQUALITY caseIgnoreIA5Match
398          SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
399
400# "min password length"
401attributetype ( 1.3.6.1.4.1.7165.2.1.58 NAME 'sambaMinPwdLength'
402          DESC 'Minimal password length (default: 5)'
403          EQUALITY integerMatch
404          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
405
406# "password history"
407attributetype ( 1.3.6.1.4.1.7165.2.1.59 NAME 'sambaPwdHistoryLength'
408          DESC 'Length of Password History Entries (default: 0 => off)'
409          EQUALITY integerMatch
410          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
411
412# "user must logon to change password"
413attributetype ( 1.3.6.1.4.1.7165.2.1.60 NAME 'sambaLogonToChgPwd'
414          DESC 'Force Users to logon for password change (default: 0 => off, 2 => on)'
415          EQUALITY integerMatch
416          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
417
418# "maximum password age"
419attributetype ( 1.3.6.1.4.1.7165.2.1.61 NAME 'sambaMaxPwdAge'
420          DESC 'Maximum password age, in seconds (default: -1 => never expire passwords)'
421          EQUALITY integerMatch
422          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
423
424# "minimum password age"
425attributetype ( 1.3.6.1.4.1.7165.2.1.62 NAME 'sambaMinPwdAge'
426          DESC 'Minimum password age, in seconds (default: 0 => allow immediate password change)'
427          EQUALITY integerMatch
428          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
429
430# "lockout duration"
431attributetype ( 1.3.6.1.4.1.7165.2.1.63 NAME 'sambaLockoutDuration'
432          DESC 'Lockout duration in minutes (default: 30, -1 => forever)'
433          EQUALITY integerMatch
434          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
435
436# "reset count minutes"
437attributetype ( 1.3.6.1.4.1.7165.2.1.64 NAME 'sambaLockoutObservationWindow'
438          DESC 'Reset time after lockout in minutes (default: 30)'
439          EQUALITY integerMatch
440          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
441
442# "bad lockout attempt"
443attributetype ( 1.3.6.1.4.1.7165.2.1.65 NAME 'sambaLockoutThreshold'
444          DESC 'Lockout users after bad logon attempts (default: 0 => off)'
445          EQUALITY integerMatch
446          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
447
448# "disconnect time"
449attributetype ( 1.3.6.1.4.1.7165.2.1.66 NAME 'sambaForceLogoff'
450          DESC 'Disconnect Users outside logon hours (default: -1 => off, 0 => on)'
451          EQUALITY integerMatch
452          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
453
454# "refuse machine password change"
455attributetype ( 1.3.6.1.4.1.7165.2.1.67 NAME 'sambaRefuseMachinePwdChange'
456          DESC 'Allow Machine Password changes (default: 0 => off)'
457          EQUALITY integerMatch
458          SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
459
460
461
462
463#######################################################################
464##              objectClasses used by Samba 3.0 schema               ##
465#######################################################################
466
467## The X.500 data model (and therefore LDAPv3) says that each entry can
468## only have one structural objectclass.  OpenLDAP 2.0 does not enforce
469## this currently but will in v2.1
470
471##
472## added new objectclass (and OID) for 3.0 to help us deal with backwards
473## compatibility with 2.2 installations (e.g. ldapsam_compat)  --jerry
474##
475objectclass ( 1.3.6.1.4.1.7165.2.2.6 NAME 'sambaSamAccount' SUP top AUXILIARY
476          DESC 'Samba 3.0 Auxilary SAM Account'
477          MUST ( uid $ sambaSID )
478          MAY  ( cn $ sambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $
479                 sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $
480                 sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $
481               displayName $ sambaHomePath $ sambaHomeDrive $ sambaLogonScript $
482                 sambaProfilePath $ description $ sambaUserWorkstations $
483                 sambaPrimaryGroupSID $ sambaDomainName $ sambaMungedDial $
484                 sambaBadPasswordCount $ sambaBadPasswordTime $
485                 sambaPasswordHistory $ sambaLogonHours))
486
487##
488## Group mapping info
489##
490objectclass ( 1.3.6.1.4.1.7165.2.2.4 NAME 'sambaGroupMapping' SUP top AUXILIARY
491          DESC 'Samba Group Mapping'
492          MUST ( gidNumber $ sambaSID $ sambaGroupType )
493          MAY  ( displayName $ description $ sambaSIDList ))
494
495##
496## Trust password for trust relationships (any kind)
497##
498objectclass ( 1.3.6.1.4.1.7165.2.2.14 NAME 'sambaTrustPassword' SUP top STRUCTURAL
499          DESC 'Samba Trust Password'
500          MUST ( sambaDomainName $ sambaNTPassword $ sambaTrustFlags )
501          MAY ( sambaSID $ sambaPwdLastSet ))
502
503##
504## Whole-of-domain info
505##
506objectclass ( 1.3.6.1.4.1.7165.2.2.5 NAME 'sambaDomain' SUP top STRUCTURAL
507          DESC 'Samba Domain Information'
508          MUST ( sambaDomainName $
509                 sambaSID )
510          MAY ( sambaNextRid $ sambaNextGroupRid $ sambaNextUserRid $
511                sambaAlgorithmicRidBase $
512                sambaMinPwdLength $ sambaPwdHistoryLength $ sambaLogonToChgPwd $
513                sambaMaxPwdAge $ sambaMinPwdAge $
514                sambaLockoutDuration $ sambaLockoutObservationWindow $ sambaLockoutThreshold $
515                sambaForceLogoff $ sambaRefuseMachinePwdChange ))
516
517##
518## used for idmap_ldap module
519##
520objectclass ( 1.3.6.1.4.1.7165.2.2.7 NAME 'sambaUnixIdPool' SUP top AUXILIARY
521        DESC 'Pool for allocating UNIX uids/gids'
522        MUST ( uidNumber $ gidNumber ) )
523
524
525objectclass ( 1.3.6.1.4.1.7165.2.2.8 NAME 'sambaIdmapEntry' SUP top AUXILIARY
526        DESC 'Mapping from a SID to an ID'
527        MUST ( sambaSID )
528          MAY ( uidNumber $ gidNumber ) )
529
530objectclass ( 1.3.6.1.4.1.7165.2.2.9 NAME 'sambaSidEntry' SUP top STRUCTURAL
531          DESC 'Structural Class for a SID'
532          MUST ( sambaSID ) )
533
534objectclass ( 1.3.6.1.4.1.7165.2.2.10 NAME 'sambaConfig' SUP top AUXILIARY
535          DESC 'Samba Configuration Section'
536          MAY ( description ) )
537
538objectclass ( 1.3.6.1.4.1.7165.2.2.11 NAME 'sambaShare' SUP top STRUCTURAL
539          DESC 'Samba Share Section'
540          MUST ( sambaShareName )
541          MAY ( description ) )
542
543objectclass ( 1.3.6.1.4.1.7165.2.2.12 NAME 'sambaConfigOption' SUP top STRUCTURAL
544          DESC 'Samba Configuration Option'
545          MUST ( sambaOptionName )
546          MAY ( sambaBoolOption $ sambaIntegerOption $ sambaStringOption $
547                sambaStringListoption $ description ) )
548
549
550## retired during privilege rewrite
551##objectclass ( 1.3.6.1.4.1.7165.2.2.13 NAME 'sambaPrivilege' SUP top AUXILIARY
552##        DESC 'Samba Privilege'
553##        MUST ( sambaSID )
554##        MAY ( sambaPrivilegeList ) )
555