Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package 389-ds for openSUSE:Factory checked
in at 2022-01-13 23:20:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/389-ds (Old)
and /work/SRC/openSUSE:Factory/.389-ds.new.1892 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "389-ds"
Thu Jan 13 23:20:53 2022 rev:48 rq:945952 version:2.0.11~git13.e14935725
Changes:
--------
--- /work/SRC/openSUSE:Factory/389-ds/389-ds.changes 2021-10-12
21:50:58.560011097 +0200
+++ /work/SRC/openSUSE:Factory/.389-ds.new.1892/389-ds.changes 2022-01-13
23:21:28.960049101 +0100
@@ -1,0 +2,60 @@
+Mon Jan 10 05:25:04 UTC 2022 - William Brown <william.br...@suse.com>
+
+- Add missing support utils plugin
+
+-------------------------------------------------------------------
+Mon Jan 10 05:22:58 UTC 2022 - william.br...@suse.com
+
+- Update to version 2.0.11~git13.e14935725:
+ * Issue 5080 - BUG - multiple index types not handled in openldap migration
(#5094)
+ * Issue 5079 - BUG - multiple ways to specific primary (#5087)
+ * Issue 4992 - BUG - slapd.socket container fix (#4993)
+ * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
+ * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
+ * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
+ * Issue 5046 - BUG - update concread (#5047)
+ * Issue 5043 - BUG - Result must be used compiler warning (#5045)
+ * Issue 4165 - Don't apply RootDN access control restrictions to UNIX
connections
+ * Issue 4931 - RFE: dsidm - add creation of service accounts
+ * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
+ * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
+ * Issue 5008 - If a non critical plugin can not be loaded/initialized,
bootstrap should succeeds (#5009)
+
+-------------------------------------------------------------------
+Mon Jan 10 03:50:25 UTC 2022 - william.br...@suse.com
+
+- Resolve boo#1194068 by adding required schema
+- Update to version 2.0.11~git0.237913e86:
+ * Bump version to 2.0.11
+ * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
+ * Issue 5014 - UI - Add group creation to LDAP editor
+ * Issue 5006 - UI - LDAP editor tree not being properly updated
+ * Issue 5001 - Update CI test for new availableSASLMechs attribute
+ * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
+ * Issue 5001 - Fix next round of UI bugs:
+ * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
+ * Issue 4978 - use more portable python command for checking containers
+ * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
+ * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous
(#4981)
+ * Issue 4978 - make installer robust
+ * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
+ * Issue 4973 - update snmp to use /run/dirsrv for PID file
+ * Issue 4962 - Fix various UI bugs - Plugins (#4969)
+ * Issue 4973 - installer changes permissions on /run
+ * Issue 4092 - systemd-tmpfiles warnings
+ * Issue 4956 - Automember allows invalid regex, and does not log proper error
+ * Issue 4731 - Promoting/demoting a replica can crash the server
+ * Issue 4962 - Fix various UI bugs part 1
+ * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
+ * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
+ * Issue 2790 - Set db home directory by default
+ * Bump github contianer shm size to 4 gigs
+ * Issue 4299 - Merge LDAP editor code into Cockpit UI
+ * Issue 4938 - max_failure_count can be reached in dscontainer on slow
machine with missing debug exception trace
+ * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
+ * Issue 4847 - BUG - potential deadlock in replica (#4936)
+ * Issue 4513 - fix ACI CI tests involving ip/hostname rules
+ * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused
(#4926)
+ * Issue 4916 - Memory leak in ldap-agent
+
+-------------------------------------------------------------------
Old:
----
389-ds-base-2.0.10~git0.21dd2802c.tar.xz
New:
----
389-ds-base-2.0.11~git13.e14935725.tar.xz
70yast.ldif
supportutils-plugin-dirsrv-v0.1.0~git0.37cb939.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ 389-ds.spec ++++++
--- /var/tmp/diff_new_pack.7lf5LC/_old 2022-01-13 23:21:30.288049970 +0100
+++ /var/tmp/diff_new_pack.7lf5LC/_new 2022-01-13 23:21:30.292049973 +0100
@@ -1,7 +1,7 @@
#
# spec file for package 389-ds
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -20,10 +20,6 @@
%define skip_python2 1
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
-# Home directory
-%global pkgname dirsrv
-%global groupname %{pkgname}.target
-
%define homedir %{_localstatedir}/lib/dirsrv
%define logdir %{_localstatedir}/log/dirsrv
%define lockdir %{_localstatedir}/lock/dirsrv
@@ -37,7 +33,7 @@
%define svrcorelib libsvrcore0
Name: 389-ds
-Version: 2.0.10~git0.21dd2802c
+Version: 2.0.11~git13.e14935725
Release: 0
Summary: 389 Directory Server
License: GPL-3.0-or-later AND MPL-2.0
@@ -47,7 +43,8 @@
Source1: extra-schema.tgz
Source2: LICENSE.openldap
Source3: vendor.tar.xz
-# Source4: cargo_config
+Source4: supportutils-plugin-dirsrv-v0.1.0~git0.37cb939.tar.xz
+Source5: 70yast.ldif
Source9: %{name}-rpmlintrc
Source10: %{user_group}-user.conf
# 389-ds does not support i686
@@ -58,6 +55,7 @@
BuildRequires: cyrus-sasl-devel
BuildRequires: db-devel >= 4.5
BuildRequires: doxygen
+BuildRequires: fdupes
BuildRequires: gawk
BuildRequires: gcc-c++
BuildRequires: gdb
@@ -119,6 +117,9 @@
# and requires insecure password storage. We really should remove
# it.
Recommends: cyrus-sasl-digestmd5
+# Recommended to be installed to assist with debugging and problem
+# solving.
+Recommends: supportutils
Requires(post): fillup
Requires(post): permissions
@@ -222,6 +223,10 @@
# Extract the vendor.tar.gz. The -D -T here prevents removal of the sources
# from the previous setup step.
%setup -q -n %{name}-base-%{version} -D -T -a 3
+# When we update and revendor, we need to move the cargo.lock to the correct
place.
+cp Cargo.lock src/Cargo.lock
+# Setup support utils
+%setup -q -n %{name}-base-%{version} -D -T -a 4
%build
%sysusers_generate_pre %{SOURCE10} %{user_group} %{user_group}-user.conf
@@ -252,7 +257,7 @@
--libexecdir=%{_prefix}/lib/dirsrv/ \
--with-pythonexec="%{_bindir}/%{use_python}" \
--with-systemd \
- --with-systemdgroupname=%{groupname} \
+ --with-systemdgroupname=dirsrv.target \
--with-systemdsystemunitdir="%{_unitdir}" \
--with-systemdsystemconfdir="%{_sysconfdir}/systemd/system" \
--with-tmpfiles-d="%{_sysconfdir}/tmpfiles.d" \
@@ -280,12 +285,17 @@
mkdir -p %{buildroot}%{homedir}
mkdir -p %{buildroot}%{lockdir}
mkdir -p %{buildroot}%{_sysusersdir}
+mkdir -p %{buildroot}/usr/lib/supportconfig/plugins/
#remove libtool archives and static libs
find %{buildroot} -type f -name "*.la" -delete -print
# install extra schema files
cp -R extra-schema "%{buildroot}/%{_datadir}/dirsrv/"
+cp %{SOURCE5} "%{buildroot}/%{_datadir}/dirsrv/schema/"
+
+# Install the support utils plugin.
+cp supportutils-plugin-dirsrv-*/dirsrv
"%{buildroot}/usr/lib/supportconfig/plugins/dirsrv"
# bring OpenLDAP copyright notice here because it is referenced by several
extra schema files
cp %{SOURCE2} ./
@@ -296,16 +306,24 @@
mv src/svrcore/LICENSE{,.svrcore}
install -m 0644 %{SOURCE10} %{buildroot}%{_sysusersdir}/
-%pre -f %{user_group}.pre
+# Sssshhh duplicate checker ...
+%fdupes %{buildroot}/%{_prefix}
+
+%pre
+%service_add_pre dirsrv.target
%post
+%service_add_post dirsrv.target
%fillup_only -n dirsrv
%set_permissions %{_sbindir}/ns-slapd
-
%verifyscript
%verify_permissions -e %{_sbindir}/ns-slapd
+%preun
+%service_del_preun dirsrv.target
+
%postun
+%service_del_postun dirsrv.target
output=/dev/null
# reload to pick up any changes to systemd files
/bin/systemctl daemon-reload >$output 2>&1 || :
@@ -314,20 +332,17 @@
%fillup_only -n dirsrv.systemd
exit 0
-%preun
-%service_del_preun %{pkgname}.target
-
%pre snmp
%service_add_pre dirsrv-snmp.service
%post snmp
-%service_add_post %{pkgname}-snmp.service
+%service_add_post dirsrv-snmp.service
%preun snmp
-%service_del_preun %{pkgname}-snmp.service
+%service_del_preun dirsrv-snmp.service
%postun snmp
-%service_del_postun %{pkgname}-snmp.service
+%service_del_postun dirsrv-snmp.service
%post -n %{svrcorelib} -p /sbin/ldconfig
@@ -371,6 +386,9 @@
%{_prefix}/lib/sysctl.d/*
%dir %{_datadir}/gdb/auto-load/usr/sbin/
%{_datadir}/gdb/auto-load/usr/sbin/ns-slapd-gdb.py
+%dir %{_prefix}/lib/supportconfig
+%dir %{_prefix}/lib/supportconfig/plugins
+%attr(750,root,root) %{_prefix}/lib/supportconfig/plugins/dirsrv
%files devel
%doc README*
@@ -394,10 +412,10 @@
%files snmp
%license LICENSE LICENSE.GPLv3+ LICENSE.openssl
# TODO: README.devel
-%config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf
+%config(noreplace)%{_sysconfdir}/dirsrv/config/ldap-agent.conf
%{_sbindir}/ldap-agent*
%{_mandir}/man1/ldap-agent.1*
-%{_unitdir}/%{pkgname}-snmp.service
+%{_unitdir}/dirsrv-snmp.service
%files -n lib389
%license src/lib389/LICENSE
++++++ 389-ds-base-2.0.10~git0.21dd2802c.tar.xz ->
389-ds-base-2.0.11~git13.e14935725.tar.xz ++++++
++++ 26084 lines of diff (skipped)
++++++ 389-ds-base.obsinfo ++++++
--- /var/tmp/diff_new_pack.7lf5LC/_old 2022-01-13 23:21:31.652050863 +0100
+++ /var/tmp/diff_new_pack.7lf5LC/_new 2022-01-13 23:21:31.656050865 +0100
@@ -1,6 +1,5 @@
name: 389-ds-base
-version: 2.0.10~git0.21dd2802c
-mtime: 1632143575
-commit: 21dd2802cf11ace44165843f324706b48502ade0
-
+version: 2.0.11~git13.e14935725
+mtime: 1641772775
+commit: e149357257e97647ef561453ee89cdedd19c24ae
++++++ 389-ds-rpmlintrc ++++++
--- /var/tmp/diff_new_pack.7lf5LC/_old 2022-01-13 23:21:31.672050875 +0100
+++ /var/tmp/diff_new_pack.7lf5LC/_new 2022-01-13 23:21:31.676050878 +0100
@@ -1,2 +1,8 @@
-addFilter("W: incorrect-fsf-address")
+# I think this is because of lib389?
+addFilter("E: shlib-policy-missing-lib")
+
+# This is a plugin so it belongs here.
+addFilter("E:
devel-file-in-non-devel-package.*/usr/lib64/dirsrv/librewriters.so")
+
+
++++++ 70yast.ldif ++++++
++++ 629 lines (skipped)
++++++ _service ++++++
--- /var/tmp/diff_new_pack.7lf5LC/_old 2022-01-13 23:21:31.728050912 +0100
+++ /var/tmp/diff_new_pack.7lf5LC/_new 2022-01-13 23:21:31.728050912 +0100
@@ -3,8 +3,7 @@
<param name="url">https://github.com/389ds/389-ds-base.git</param>
<param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
<param name="scm">git</param>
- <param name="revision">389-ds-base-2.0.10</param>
- <param name="match-tag">389-ds-base-2.0.10</param>
+ <param name="revision">389-ds-base-2.0</param>
<param name="versionrewrite-pattern">389-ds-base-(.*)</param>
<param name="versionrewrite-replacement">\1</param>
<param name="changesgenerate">enable</param>
@@ -19,10 +18,25 @@
<service name="cargo_vendor" mode="disabled">
<param name="srcdir">389-ds-base</param>
<param name="compression">xz</param>
+ <param name="update">true</param>
</service>
<service name="cargo_audit" mode="disabled">
<param name="srcdir">389-ds-base</param>
</service>
+ <service name="obs_scm" mode="disabled">
+ <param
name="url">https://github.com/SUSE/supportutils-plugin-dirsrv.git</param>
+ <param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
+ <param name="scm">git</param>
+ <param name="revision">v0.1.0</param>
+ <param name="match-tag">v0.1.0</param>
+ <param name="changesgenerate">disable</param>
+ <param name="without-version">true</param>
+ </service>
+ <service mode="disabled" name="tar" />
+ <service mode="disabled" name="recompress">
+ <param name="file">*.tar</param>
+ <param name="compression">xz</param>
+ </service>
</services>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.7lf5LC/_old 2022-01-13 23:21:31.744050923 +0100
+++ /var/tmp/diff_new_pack.7lf5LC/_new 2022-01-13 23:21:31.748050925 +0100
@@ -5,6 +5,6 @@
<param
name="url">https://pagure.io/forks/firstyear/389-ds-base.git</param>
<param
name="changesrevision">52fa3f10591fc102b1e08def13e1e2bf48ecfd2e</param></service><service
name="tar_scm">
<param
name="url">https://github.com/389ds/389-ds-base.git</param>
- <param
name="changesrevision">21dd2802cf11ace44165843f324706b48502ade0</param></service></servicedata>
+ <param
name="changesrevision">e149357257e97647ef561453ee89cdedd19c24ae</param></service></servicedata>
(No newline at EOF)
++++++ extra-schema.tgz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/extra-schema/dhcp.ldif new/extra-schema/dhcp.ldif
--- old/extra-schema/dhcp.ldif 2017-08-10 14:39:56.544921842 +0200
+++ new/extra-schema/dhcp.ldif 1970-01-01 01:00:00.000000000 +0100
@@ -1,563 +0,0 @@
-# Text is transformed by Howard Guo <h...@suse.com> on 2017-08-10 for usage
with 389-ds.
-dn: cn=schema
-changetype: modify
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.1
- NAME 'dhcpPrimaryDN'
- EQUALITY distinguishedNameMatch
- DESC 'The DN of the dhcpServer which is the primary server for the
configuration.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.2
- NAME 'dhcpSecondaryDN'
- EQUALITY distinguishedNameMatch
- DESC 'The DN of dhcpServer(s) which provide backup service for the
configuration.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.3
- NAME 'dhcpStatements'
- EQUALITY caseIgnoreIA5Match
- DESC 'Flexible storage for specific data depending on what object this
exists in. Like conditional statements, server parameters, etc. This allows the
standard to evolve without needing to adjust the schema.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.4
- NAME 'dhcpRange'
- EQUALITY caseIgnoreIA5Match
- DESC 'The starting & ending IP Addresses in the range (inclusive), separated
by a hyphen; if the range only contains one address, then just the address can
be specified with no hyphen. Each range is defined as a separate value.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.5
- NAME 'dhcpPermitList'
- EQUALITY caseIgnoreIA5Match
- DESC 'This attribute contains the permit lists associated with a pool. Each
permit list is defined as a separate value.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.6
- NAME 'dhcpNetMask'
- EQUALITY integerMatch
- DESC 'The subnet mask length for the subnet. The mask can be easily
computed from this length.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.7
- NAME 'dhcpOption'
- EQUALITY caseIgnoreIA5Match
- DESC 'Encoded option values to be sent to clients. Each value represents a
single option and contains (OptionTag, Length, OptionValue) encoded in the
format used by DHCP.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.8
- NAME 'dhcpClassData'
- EQUALITY caseIgnoreIA5Match
- DESC 'Encoded text string or list of bytes expressed in hexadecimal,
separated by colons. Clients match subclasses based on matching the class data
with the results of match or spawn with statements in the class name
declarations.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.9
- NAME 'dhcpOptionsDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name(s) of the dhcpOption objects containing the
configuration options provided by the server.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.10
- NAME 'dhcpHostDN'
- EQUALITY distinguishedNameMatch
- DESC 'the distinguished name(s) of the dhcpHost objects.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.11
- NAME 'dhcpPoolDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name(s) of pools.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.12
- NAME 'dhcpGroupDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name(s) of the groups.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.13
- NAME 'dhcpSubnetDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name(s) of the subnets.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.14
- NAME 'dhcpLeaseDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name of a client address.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE)
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.15
- NAME 'dhcpLeasesDN'
- DESC 'The distinguished name(s) client addresses.'
- EQUALITY distinguishedNameMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.16
- NAME 'dhcpClassesDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name(s) of a class(es) in a subclass.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.17
- NAME 'dhcpSubclassesDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name(s) of subclass(es).'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.18
- NAME 'dhcpSharedNetworkDN'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name(s) of sharedNetworks.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.19
- NAME 'dhcpServiceDN'
- EQUALITY distinguishedNameMatch
- DESC 'The DN of dhcpService object(s)which contain the configuration
information. Each dhcpServer object has this attribute identifying the DHCP
configuration(s) that the server is associated with.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.20
- NAME 'dhcpVersion'
- DESC 'The version attribute of this object.'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.21
- NAME 'dhcpImplementation'
- EQUALITY caseIgnoreIA5Match
- DESC 'Description of the DHCP Server implementation e.g. DHCP Servers
vendor.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.22
- NAME 'dhcpAddressState'
- EQUALITY caseIgnoreIA5Match
- DESC 'This stores information about the current binding-status of an
address. For dynamic addresses managed by DHCP, the values should be
restricted to the following: "FREE", "ACTIVE", "EXPIRED", "RELEASED", "RESET",
"ABANDONED", "BACKUP". For other addresses, it SHOULD be one of the following:
"UNKNOWN", "RESERVED" (an address that is managed by DHCP that is reserved for
a specific client), "RESERVED-ACTIVE" (same as reserved, but address is
currently in use), "ASSIGNED" (assigned manually or by some other mechanism),
"UNASSIGNED", "NOTASSIGNABLE".'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.23
- NAME 'dhcpExpirationTime'
- EQUALITY generalizedTimeMatch
- DESC 'This is the time the current lease for an address expires.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.24
- NAME 'dhcpStartTimeOfState'
- EQUALITY generalizedTimeMatch
- DESC 'This is the time of the last state change for a leased address.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.25
- NAME 'dhcpLastTransactionTime'
- EQUALITY generalizedTimeMatch
- DESC 'This is the last time a valid DHCP packet was received from the
client.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.26
- NAME 'dhcpBootpFlag'
- EQUALITY booleanMatch
- DESC 'This indicates whether the address was assigned via BOOTP.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.27
- NAME 'dhcpDomainName'
- EQUALITY caseIgnoreIA5Match
- DESC 'This is the name of the domain sent to the client by the server. It
is essentially the same as the value for DHCP option 15 sent to the client, and
represents only the domain - not the full FQDN. To obtain the full FQDN
assigned to the client you must prepend the "dhcpAssignedHostName" to this
value with a ".".'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.28
- NAME 'dhcpDnsStatus'
- EQUALITY integerMatch
- DESC 'This indicates the status of updating DNS resource records on behalf
of the client by the DHCP server for this address. The value is a 16-bit
bitmask.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.29
- NAME 'dhcpRequestedHostName'
- EQUALITY caseIgnoreIA5Match
- DESC 'This is the hostname that was requested by the client.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.30
- NAME 'dhcpAssignedHostName'
- EQUALITY caseIgnoreIA5Match
- DESC 'This is the actual hostname that was assigned to a client. It may not
be the name that was requested by the client. The fully qualified domain name
can be determined by appending the value of "dhcpDomainName" (with a dot
separator) to this name.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.31
- NAME 'dhcpReservedForClient'
- EQUALITY distinguishedNameMatch
- DESC 'The distinguished name of a "dhcpClient" that an address is reserved
for. This may not be the same as the "dhcpAssignedToClient" attribute if the
address is being reassigned but the current lease has not yet expired.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.32
- NAME 'dhcpAssignedToClient'
- EQUALITY distinguishedNameMatch
- DESC 'This is the distinguished name of a "dhcpClient" that an address is
currently assigned to. This attribute is only present in the class when the
address is leased.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.33
- NAME 'dhcpRelayAgentInfo'
- EQUALITY octetStringMatch
- DESC 'If the client request was received via a relay agent, this contains
information about the relay agent that was available from the DHCP request.
This is a hex-encoded option value.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.34
- NAME 'dhcpHWAddress'
- EQUALITY caseIgnoreIA5Match
- DESC 'The clients hardware address that requested this IP address.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.35
- NAME 'dhcpHashBucketAssignment'
- EQUALITY octetStringMatch
- DESC 'HashBucketAssignment bit map for the DHCP Server, as defined in DHC
Load Balancing Algorithm [RFC 3074].'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.36
- NAME 'dhcpDelayedServiceParameter'
- EQUALITY integerMatch
- DESC 'Delay in seconds corresponding to Delayed Service Parameter
configuration, as defined in DHC Load Balancing Algorithm [RFC 3074]. '
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.37
- NAME 'dhcpMaxClientLeadTime'
- EQUALITY integerMatch
- DESC 'Maximum Client Lead Time configuration in seconds, as defined in DHCP
Failover Protocol [FAILOVR]'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.38
- NAME 'dhcpFailOverEndpointState'
- EQUALITY caseIgnoreIA5Match
- DESC 'Server (Failover Endpoint) state, as defined in DHCP Failover Protocol
[FAILOVR]'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.39
- NAME 'dhcpErrorLog'
- EQUALITY caseIgnoreIA5Match
- DESC 'Generic error log attribute that allows logging error conditions
within a dhcpService or a dhcpSubnet, like no IP addresses available for lease.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.40
- NAME 'dhcpLocatorDN'
- EQUALITY distinguishedNameMatch
- DESC 'The DN of dhcpLocator object which contain the DNs of all DHCP
configuration objects. There will be a single dhcpLocator object in the tree
with links to all the DHCP objects in the tree'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.41
- NAME 'dhcpKeyAlgorithm'
- EQUALITY caseIgnoreIA5Match
- DESC 'Algorithm to generate TSIG Key'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.42
- NAME 'dhcpKeySecret'
- EQUALITY octetStringMatch
- DESC 'Secret to generate TSIG Key' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.43
- NAME 'dhcpDnsZoneServer'
- EQUALITY caseIgnoreIA5Match
- DESC 'Master server of the DNS Zone'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.44
- NAME 'dhcpKeyDN'
- EQUALITY distinguishedNameMatch
- DESC 'The DNs of TSIG Key to use in secure dynamic updates. In case of
locator object, this will be list of TSIG keys. In case of DHCP Service,
Shared Network, Subnet and DNS Zone, it will be a single key.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12)
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.45
- NAME 'dhcpZoneDN'
- EQUALITY distinguishedNameMatch
- DESC 'The DNs of DNS Zone. In case of locator object, this will be list of
DNS Zones in the tree. In case of DHCP Service, Shared Network and Subnet, it
will be a single DNS Zone.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12)
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.46
- NAME 'dhcpFailOverPrimaryServer'
- EQUALITY caseIgnoreIA5Match
- DESC 'IP address or DNS name of the server playing primary role in DHC Load
Balancing and Fail over.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.47
- NAME 'dhcpFailOverSecondaryServer'
- EQUALITY caseIgnoreIA5Match
- DESC 'IP address or DNS name of the server playing secondary role in DHC
Load Balancing and Fail over.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.48
- NAME 'dhcpFailOverPrimaryPort'
- EQUALITY integerMatch
- DESC 'Port on which primary server listens for connections from its fail
over peer (secondary server)'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.49
- NAME 'dhcpFailOverSecondaryPort'
- EQUALITY integerMatch
- DESC 'Port on which secondary server listens for connections from its fail
over peer (primary server)'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.50
- NAME 'dhcpFailOverResponseDelay'
- EQUALITY integerMatch
- DESC 'Maximum response time in seconds, before Server assumes that
connection to fail over peer has failed'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.51
- NAME 'dhcpFailOverUnackedUpdates'
- EQUALITY integerMatch
- DESC 'Number of BNDUPD messages that server can send before it receives
BNDACK from its fail over peer'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.52
- NAME 'dhcpFailOverSplit'
- EQUALITY integerMatch
- DESC 'Split between the primary and secondary servers for fail over purpose'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.53
- NAME 'dhcpFailOverLoadBalanceTime'
- EQUALITY integerMatch
- DESC 'Cutoff time in seconds, after which load balance is disabled'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.54
- NAME 'dhcpFailOverPeerDN'
- EQUALITY distinguishedNameMatch
- DESC 'The DNs of Fail over peers. In case of locator object, this will be
list of fail over peers in the tree. In case of Subnet and pool, it will be a
single Fail Over Peer'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.55
- NAME 'dhcpServerDN'
- EQUALITY distinguishedNameMatch
- DESC 'List of all DHCP Servers in the tree. Used by dhcpLocatorObject'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.56
- NAME 'dhcpComments'
- EQUALITY caseIgnoreIA5Match
- DESC 'Generic attribute that allows coments within any DHCP object'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.57
- NAME 'dhcpClientId'
- EQUALITY caseIgnoreIA5Match
- DESC 'client Identifier.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 2.16.840.1.113719.1.203.4.58
- NAME 'dhcpRange6'
- EQUALITY caseIgnoreIA5Match
- DESC 'The starting & ending IP Addresses in the range (inclusive),
separated by a hyphen; if the range only contains one address, then just the
address can be specified with no hyphen. Each range is defined as a separate
value.'
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.1
- NAME 'dhcpService'
- DESC 'Service object that represents the actual DHCP Service configuration.
This is a container object.'
- SUP top
- MUST (cn)
- MAY ( dhcpPrimaryDN $ dhcpSecondaryDN $ dhcpServerDN $ dhcpSharedNetworkDN $
dhcpSubnetDN $ dhcpGroupDN $ dhcpHostDN $ dhcpClassesDN $ dhcpOptionsDN $
dhcpZoneDN $ dhcpKeyDN $ dhcpFailOverPeerDN $ dhcpStatements $dhcpComments $
dhcpOption) )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.2
- NAME 'dhcpSharedNetwork'
- DESC 'This stores configuration information for a shared network.'
- SUP top
- MUST cn
- MAY ( dhcpSubnetDN $ dhcpPoolDN $ dhcpOptionsDN $ dhcpZoneDN $
dhcpStatements $dhcpComments $ dhcpOption) X-NDS_CONTAINMENT ('dhcpService' ) )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.3
- NAME 'dhcpSubnet'
- DESC 'This class defines a subnet. This is a container object.'
- SUP top
- MUST ( cn $ dhcpNetMask )
- MAY ( dhcpRange $ dhcpPoolDN $ dhcpGroupDN $ dhcpHostDN $ dhcpClassesDN $
dhcpLeasesDN $ dhcpOptionsDN $ dhcpZoneDN $ dhcpKeyDN $ dhcpFailOverPeerDN $
dhcpStatements $ dhcpComments $ dhcpOption ) X-NDS_CONTAINMENT ('dhcpService'
'dhcpSharedNetwork') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.4
- NAME 'dhcpPool'
- DESC 'This stores configuration information about a pool.'
- SUP top
- MUST ( cn $ dhcpRange )
- MAY ( dhcpClassesDN $ dhcpPermitList $ dhcpLeasesDN $ dhcpOptionsDN $
dhcpZoneDN $dhcpKeyDN $ dhcpStatements $ dhcpComments $ dhcpOption )
- X-NDS_CONTAINMENT ('dhcpSubnet' 'dhcpSharedNetwork') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.5
- NAME 'dhcpGroup'
- DESC 'Group object that lists host DNs and parameters. This is a container
object.'
- SUP top
- MUST cn
- MAY ( dhcpHostDN $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $
dhcpOption )
- X-NDS_CONTAINMENT ('dhcpSubnet' 'dhcpService' ) )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.6
- NAME 'dhcpHost'
- DESC 'This represents information about a particular client'
- SUP top
- MUST cn
- MAY (dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements $
dhcpComments $ dhcpOption $ dhcpClientId)
- X-NDS_CONTAINMENT ('dhcpService' 'dhcpSubnet' 'dhcpGroup') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.7
- NAME 'dhcpClass'
- DESC 'Represents information about a collection of related clients.'
- SUP top
- MUST cn
- MAY (dhcpSubClassesDN $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $
dhcpOption)
- X-NDS_CONTAINMENT ('dhcpService' 'dhcpSubnet' ) )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.8
- NAME 'dhcpSubClass'
- DESC 'Represents information about a collection of related classes.'
- SUP top
- MUST cn
- MAY (dhcpClassData $ dhcpOptionsDN $ dhcpStatements $ dhcpComments $
dhcpOption) X-NDS_CONTAINMENT 'dhcpClass' )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.9
- NAME 'dhcpOptions'
- DESC 'Represents information about a collection of options defined.'
- SUP top AUXILIARY
- MUST cn
- MAY ( dhcpOption $ dhcpComments )
- X-NDS_CONTAINMENT ('dhcpService' 'dhcpSharedNetwork' 'dhcpSubnet'
'dhcpPool' 'dhcpGroup' 'dhcpHost' 'dhcpClass' ) )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.10
- NAME 'dhcpLeases'
- DESC 'This class represents an IP Address, which may or may not have been
leased.'
- SUP top
- MUST ( cn $ dhcpAddressState )
- MAY ( dhcpExpirationTime $ dhcpStartTimeOfState $ dhcpLastTransactionTime $
dhcpBootpFlag $ dhcpDomainName $ dhcpDnsStatus $ dhcpRequestedHostName $
dhcpAssignedHostName $ dhcpReservedForClient $ dhcpAssignedToClient $
dhcpRelayAgentInfo $ dhcpHWAddress )
- X-NDS_CONTAINMENT ( 'dhcpService' 'dhcpSubnet' 'dhcpPool') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.11
- NAME 'dhcpLog'
- DESC 'This is the object that holds past information about the IP address.
The cn is the time/date stamp when the address was assigned or released, the
address state at the time, if the address was assigned or released.'
- SUP top
- MUST ( cn )
- MAY ( dhcpAddressState $ dhcpExpirationTime $ dhcpStartTimeOfState $
dhcpLastTransactionTime $ dhcpBootpFlag $ dhcpDomainName $ dhcpDnsStatus $
dhcpRequestedHostName $ dhcpAssignedHostName $ dhcpReservedForClient $
dhcpAssignedToClient $ dhcpRelayAgentInfo $ dhcpHWAddress $ dhcpErrorLog)
- X-NDS_CONTAINMENT ('dhcpLeases' 'dhcpPool' 'dhcpSubnet' 'dhcpSharedNetwork'
'dhcpService' ) )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.12
- NAME 'dhcpServer'
- DESC 'DHCP Server Object'
- SUP top
- MUST ( cn )
- MAY (dhcpServiceDN $ dhcpLocatorDN $ dhcpVersion $ dhcpImplementation $
dhcpHashBucketAssignment $ dhcpDelayedServiceParameter $ dhcpMaxClientLeadTime
$ dhcpFailOverEndpointState $ dhcpStatements $ dhcpComments $ dhcpOption)
- X-NDS_CONTAINMENT ('organization' 'organizationalunit' 'domain') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.13
- NAME 'dhcpTSigKey'
- DESC 'TSIG key for secure dynamic updates'
- SUP top
- MUST (cn $ dhcpKeyAlgorithm $ dhcpKeySecret )
- MAY ( dhcpComments )
- X-NDS_CONTAINMENT ('dhcpService' 'dhcpSharedNetwork' 'dhcpSubnet') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.14
- NAME 'dhcpDnsZone'
- DESC 'DNS Zone for updating leases'
- SUP top
- MUST (cn $ dhcpDnsZoneServer )
- MAY (dhcpKeyDN $ dhcpComments)
- X-NDS_CONTAINMENT ('dhcpService' 'dhcpSharedNetwork' 'dhcpSubnet') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.15
- NAME 'dhcpFailOverPeer'
- DESC 'This class defines the Fail over peer'
- SUP top
- MUST ( cn $ dhcpFailOverPrimaryServer $ dhcpFailOverSecondaryServer $
dhcpFailoverPrimaryPort $ dhcpFailOverSecondaryPort) MAY
(dhcpFailOverResponseDelay $ dhcpFailOverUnackedUpdates $
dhcpMaxClientLeadTime $ dhcpFailOverSplit $ dhcpHashBucketAssignment $
dhcpFailOverLoadBalanceTime $ dhcpComments )
- X-NDS_CONTAINMENT ('dhcpService' 'dhcpSharedNetwork' 'dhcpSubnet') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.16
- NAME 'dhcpLocator'
- DESC 'Locator object for DHCP configuration in the tree. There will be a
single dhcpLocator object in the tree with links to all the DHCP objects in the
tree'
- SUP top
- MUST ( cn )
- MAY ( dhcpServiceDN $dhcpServerDN $ dhcpSharedNetworkDN $ dhcpSubnetDN $
dhcpPoolDN $ dhcpGroupDN $ dhcpHostDN $ dhcpClassesDN $ dhcpKeyDN $ dhcpZoneDN
$ dhcpFailOverPeerDN $ dhcpOption $ dhcpComments)
- X-NDS_CONTAINMENT ('organization' 'organizationalunit' 'domain') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.17
- NAME 'dhcpSubnet6'
- DESC 'This class defines an IPv6 subnet. This is a container object.'
- SUP top
- MUST ( cn )
- MAY ( dhcpRange6 $ dhcpPoolDN $ dhcpGroupDN $ dhcpHostDN $ dhcpClassesDN $
dhcpLeasesDN $ dhcpOptionsDN $ dhcpZoneDN $ dhcpKeyDN $ dhcpFailOverPeerDN $
dhcpStatements $ dhcpComments $ dhcpOption $ dhcpPermitList ) X-NDS_CONTAINMENT
('dhcpService' 'dhcpSharedNetwork') )
--
-add: objectclasses
-objectclasses: ( 2.16.840.1.113719.1.203.6.18
- NAME 'dhcpPool6'
- DESC 'This stores configuration information about an IPv6 pool.'
- SUP top
- MUST ( cn $ dhcpRange6 )
- MAY ( dhcpClassesDN $ dhcpPermitList $ dhcpLeasesDN $ dhcpOptionsDN $
dhcpZoneDN $dhcpKeyDN $ dhcpStatements $ dhcpComments $ dhcpOption )
- X-NDS_CONTAINMENT ('dhcpSubnet6' 'dhcpSharedNetwork') )
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/extra-schema/dlz.ldif new/extra-schema/dlz.ldif
--- old/extra-schema/dlz.ldif 2017-08-11 11:45:05.719802430 +0200
+++ new/extra-schema/dlz.ldif 1970-01-01 01:00:00.000000000 +0100
@@ -1,203 +0,0 @@
-# Text is transformed by Howard Guo <h...@suse.com> on 2017-08-10 for usage
with 389-ds.
-dn: cn=schema
-changetype: modify
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.10
- NAME 'dlzZoneName'
- DESC 'DNS zone name - domain name not including host name'
- SUP name
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.20
- NAME 'dlzHostName'
- DESC 'Host portion of a domain name'
- SUP name
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.30
- NAME 'dlzData'
- DESC 'Data for the resource record'
- SUP name
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.40
- NAME 'dlzType'
- DESC 'DNS record type - A, SOA, NS, MX, etc...'
- SUP name
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.50
- NAME 'dlzSerial'
- DESC 'SOA record serial number'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.60
- NAME 'dlzRefresh'
- DESC 'SOA record refresh time in seconds'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.70
- NAME 'dlzRetry'
- DESC 'SOA retry time in seconds'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.80
- NAME 'dlzExpire'
- DESC 'SOA expire time in seconds'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.90
- NAME 'dlzMinimum'
- DESC 'SOA minimum time in seconds'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.100
- NAME 'dlzAdminEmail'
- DESC 'E-mail address of person responsible for this zone - @ should be
replaced with . (period)'
- SUP name
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.110
- NAME 'dlzPrimaryNS'
- DESC 'Primary name server for this zone - should be host name not IP address'
- SUP name
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.120
- NAME 'dlzIPAddr'
- DESC 'IP address - IPV4 should be in dot notation xxx.xxx.xxx.xxx IPV6
should be in colon notation xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx'
- EQUALITY caseExactIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{40}
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.130
- NAME 'dlzCName'
- DESC 'DNS cname'
- SUP name
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.140
- NAME 'dlzPreference'
- DESC 'DNS MX record preference. Lower numbers have higher preference'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.150
- NAME 'dlzTTL'
- DESC 'DNS time to live - how long this record can be cached by caching DNS
servers'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
- SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.18420.1.1.160
- NAME 'dlzRecordID'
- DESC 'Unique ID for each DLZ resource record'
- SUP name
- SINGLE-VALUE )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.10
- NAME 'dlzZone'
- DESC 'Zone name portion of a domain name'
- SUP top STRUCTURAL
- MUST ( objectclass $ dlzZoneName ) )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.20
- NAME 'dlzHost'
- DESC 'Host name portion of a domain name'
- SUP top STRUCTURAL
- MUST ( objectclasses $ dlzHostName ) )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.30
- NAME 'dlzAbstractRecord'
- DESC 'Data common to all DNS record types'
- SUP top ABSTRACT
- MUST ( objectclasses $ dlzRecordID $ dlzHostName $ dlzType $ dlzTTL ) )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.40
- NAME 'dlzGenericRecord'
- DESC 'Generic DNS record - useful when a specific object class has not been
defined for a DNS record'
- SUP dlzAbstractRecord STRUCTURAL
- MUST ( dlzData ) )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.50
- NAME 'dlzARecord'
- DESC 'DNS A record'
- SUP dlzAbstractrecord STRUCTURAL
- MUST ( dlzIPAddr ) )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.60
- NAME 'dlzNSRecord'
- DESC 'DNS NS record'
- SUP dlzGenericRecord STRUCTURAL )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.70
- NAME 'dlzMXRecord'
- DESC 'DNS MX record'
- SUP dlzGenericRecord STRUCTURAL
- MUST ( dlzPreference ) )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.80
- NAME 'dlzSOARecord'
- DESC 'DNS SOA record'
- SUP dlzAbstractRecord STRUCTURAL
- MUST ( dlzSerial $ dlzRefresh $ dlzRetry
- $ dlzExpire $ dlzMinimum $ dlzAdminEmail $ dlzPrimaryNS ) )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.90
- NAME 'dlzTextRecord'
- DESC 'Text data with spaces should be wrapped in double quotes'
- SUP dlzGenericRecord STRUCTURAL )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.100
- NAME 'dlzPTRRecord'
- DESC 'DNS PTR record'
- SUP dlzGenericRecord STRUCTURAL )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.110
- NAME 'dlzCNameRecord'
- DESC 'DNS CName record'
- SUP dlzGenericRecord STRUCTURAL )
--
-add:objectclasses
-objectclasses: ( 1.3.6.1.4.1.18420.1.2.120
- NAME 'dlzXFR'
- DESC 'Host allowed to perform zone transfer'
- SUP top STRUCTURAL
- MUST ( objectclass $ dlzRecordID $ dlzIPAddr ) )
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/extra-schema/samba3.ldif new/extra-schema/samba3.ldif
--- old/extra-schema/samba3.ldif 2017-08-11 11:36:57.720843830 +0200
+++ new/extra-schema/samba3.ldif 1970-01-01 01:00:00.000000000 +0100
@@ -1,468 +0,0 @@
-##
-## schema file for OpenLDAP 2.x
-## Schema for storing Samba user accounts and group maps in LDAP
-## OIDs are owned by the Samba Team
-##
-## Prerequisite schemas - uid (cosine.schema)
-## - displayName (inetorgperson.schema)
-## - gidNumber (nis.schema)
-##
-## 1.3.6.1.4.1.7165.2.1.x - attributetypes
-## 1.3.6.1.4.1.7165.2.2.x - objectclasses
-##
-## Printer support
-## 1.3.6.1.4.1.7165.2.3.1.x - attributetypes
-## 1.3.6.1.4.1.7165.2.3.2.x - objectclasses
-##
-## Samba4
-## 1.3.6.1.4.1.7165.4.1.x - attributetypes
-## 1.3.6.1.4.1.7165.4.2.x - objectclasses
-## 1.3.6.1.4.1.7165.4.3.x - LDB/LDAP Controls
-## 1.3.6.1.4.1.7165.4.4.x - LDB/LDAP Extended Operations
-## 1.3.6.1.4.1.7165.4.255.x - mapped OIDs due to conflicts between AD and
standards-track
-##
-## External projects
-## 1.3.6.1.4.1.7165.655.x
-## 1.3.6.1.4.1.7165.655.1.x - GSS-NTLMSSP
-
-# Text is transformed by Howard Guo <h...@suse.com> on 2017-08-10 for usage
with 389-ds.
-
-dn: cn=schema
-changetype: modify
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.24 NAME 'sambaLMPassword'
- DESC 'LanManager Password'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.25 NAME 'sambaNTPassword'
- DESC 'MD4 hash of the unicode password'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.26 NAME 'sambaAcctFlags'
- DESC 'Account Flags'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.27 NAME 'sambaPwdLastSet'
- DESC 'Timestamp of the last password update'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.28 NAME 'sambaPwdCanChange'
- DESC 'Timestamp of when the user is allowed to update the password'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.29 NAME 'sambaPwdMustChange'
- DESC 'Timestamp of when the password will expire'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.30 NAME 'sambaLogonTime'
- DESC 'Timestamp of last logon'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.31 NAME 'sambaLogoffTime'
- DESC 'Timestamp of last logoff'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.32 NAME 'sambaKickoffTime'
- DESC 'Timestamp of when the user will be logged off automatically'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.48 NAME 'sambaBadPasswordCount'
- DESC 'Bad password attempt count'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.49 NAME 'sambaBadPasswordTime'
- DESC 'Time of the last bad password attempt'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.55 NAME 'sambaLogonHours'
- DESC 'Logon Hours'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{42} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.33 NAME 'sambaHomeDrive'
- DESC 'Driver letter of home directory mapping'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.34 NAME 'sambaLogonScript'
- DESC 'Logon script path'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.35 NAME 'sambaProfilePath'
- DESC 'Roaming profile path'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.36 NAME 'sambaUserWorkstations'
- DESC 'List of user workstations the user is allowed to logon to'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.37 NAME 'sambaHomePath'
- DESC 'Home directory UNC path'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.38 NAME 'sambaDomainName'
- DESC 'Windows NT domain to which the user belongs'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.47 NAME 'sambaMungedDial'
- DESC 'Base64 encoded user parameter string'
- EQUALITY caseExactMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.54 NAME 'sambaPasswordHistory'
- DESC 'Concatenated MD5 hashes of the salted NT passwords used on this
account'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID'
- DESC 'Security ID'
- EQUALITY caseIgnoreIA5Match
- SUBSTR caseExactIA5SubstringsMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.23 NAME 'sambaPrimaryGroupSID'
- DESC 'Primary Group Security ID'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.51 NAME 'sambaSIDList'
- DESC 'Security ID List'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.19 NAME 'sambaGroupType'
- DESC 'NT Group Type'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.21 NAME 'sambaNextUserRid'
- DESC 'Next NT rid to give our for users'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.22 NAME 'sambaNextGroupRid'
- DESC 'Next NT rid to give out for groups'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.39 NAME 'sambaNextRid'
- DESC 'Next NT rid to give out for anything'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.40 NAME 'sambaAlgorithmicRidBase'
- DESC 'Base at which the samba RID generation algorithm should operate'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.41 NAME 'sambaShareName'
- DESC 'Share Name'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.42 NAME 'sambaOptionName'
- DESC 'Option Name'
- EQUALITY caseIgnoreMatch
- SUBSTR caseIgnoreSubstringsMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.43 NAME 'sambaBoolOption'
- DESC 'A boolean option'
- EQUALITY booleanMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.44 NAME 'sambaIntegerOption'
- DESC 'An integer option'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.45 NAME 'sambaStringOption'
- DESC 'A string option'
- EQUALITY caseExactIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.46 NAME 'sambaStringListOption'
- DESC 'A string list option'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.53 NAME 'sambaTrustFlags'
- DESC 'Trust Password Flags'
- EQUALITY caseIgnoreIA5Match
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.58 NAME 'sambaMinPwdLength'
- DESC 'Minimal password length (default: 5)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.59 NAME 'sambaPwdHistoryLength'
- DESC 'Length of Password History Entries (default: 0 => off)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.60 NAME 'sambaLogonToChgPwd'
- DESC 'Force Users to logon for password change (default: 0 => off, 2 => on)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.61 NAME 'sambaMaxPwdAge'
- DESC 'Maximum password age, in seconds (default: -1 => never expire
passwords)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.62 NAME 'sambaMinPwdAge'
- DESC 'Minimum password age, in seconds (default: 0 => allow immediate
password change)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.63 NAME 'sambaLockoutDuration'
- DESC 'Lockout duration in minutes (default: 30, -1 => forever)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.64 NAME 'sambaLockoutObservationWindow'
- DESC 'Reset time after lockout in minutes (default: 30)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.65 NAME 'sambaLockoutThreshold'
- DESC 'Lockout users after bad logon attempts (default: 0 => off)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.66 NAME 'sambaForceLogoff'
- DESC 'Disconnect Users outside logon hours (default: -1 => off, 0 => on)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.67 NAME 'sambaRefuseMachinePwdChange'
- DESC 'Allow Machine Password changes (default: 0 => off)'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.68 NAME 'sambaClearTextPassword'
- DESC 'Clear text password (used for trusted domain passwords)'
- EQUALITY octetStringMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.69 NAME 'sambaPreviousClearTextPassword'
- DESC 'Previous clear text password (used for trusted domain passwords)'
- EQUALITY octetStringMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.70 NAME 'sambaTrustType'
- DESC 'Type of trust'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.71 NAME 'sambaTrustAttributes'
- DESC 'Trust attributes for a trusted domain'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.72 NAME 'sambaTrustDirection'
- DESC 'Direction of a trust'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.73 NAME 'sambaTrustPartner'
- DESC 'Fully qualified name of the domain with which a trust exists'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.74 NAME 'sambaFlatName'
- DESC 'NetBIOS name of a domain'
- EQUALITY caseIgnoreMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.75 NAME 'sambaTrustAuthOutgoing'
- DESC 'Authentication information for the outgoing portion of a trust'
- EQUALITY caseExactMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.76 NAME 'sambaTrustAuthIncoming'
- DESC 'Authentication information for the incoming portion of a trust'
- EQUALITY caseExactMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.77 NAME 'sambaSecurityIdentifier'
- DESC 'SID of a trusted domain'
- EQUALITY caseIgnoreIA5Match SUBSTR caseExactIA5SubstringsMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.78 NAME 'sambaTrustForestTrustInfo'
- DESC 'Forest trust information for a trusted domain object'
- EQUALITY caseExactMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.79 NAME 'sambaTrustPosixOffset'
- DESC 'POSIX offset of a trust'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: attributetypes
-attributetypes: ( 1.3.6.1.4.1.7165.2.1.80 NAME 'sambaSupportedEncryptionTypes'
- DESC 'Supported encryption types of a trust'
- EQUALITY integerMatch
- SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.6 NAME 'sambaSamAccount' SUP top
AUXILIARY
- DESC 'Samba 3.0 Auxilary SAM Account'
- MUST ( uid $ sambaSID )
- MAY ( cn $ sambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $
- sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $
- sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $
- displayName $ sambaHomePath $ sambaHomeDrive $ sambaLogonScript $
- sambaProfilePath $ description $ sambaUserWorkstations $
- sambaPrimaryGroupSID $ sambaDomainName $ sambaMungedDial $
- sambaBadPasswordCount $ sambaBadPasswordTime $
- sambaPasswordHistory $ sambaLogonHours))
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.4 NAME 'sambaGroupMapping' SUP top
AUXILIARY
- DESC 'Samba Group Mapping'
- MUST ( gidNumber $ sambaSID $ sambaGroupType )
- MAY ( displayName $ description $ sambaSIDList ))
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.14 NAME 'sambaTrustPassword' SUP top
STRUCTURAL
- DESC 'Samba Trust Password'
- MUST ( sambaDomainName $ sambaNTPassword $ sambaTrustFlags )
- MAY ( sambaSID $ sambaPwdLastSet ))
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.15 NAME 'sambaTrustedDomainPassword' SUP
top STRUCTURAL
- DESC 'Samba Trusted Domain Password'
- MUST ( sambaDomainName $ sambaSID $
- sambaClearTextPassword $ sambaPwdLastSet )
- MAY ( sambaPreviousClearTextPassword ))
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.5 NAME 'sambaDomain' SUP top STRUCTURAL
- DESC 'Samba Domain Information'
- MUST ( sambaDomainName $
- sambaSID )
- MAY ( sambaNextRid $ sambaNextGroupRid $ sambaNextUserRid $
- sambaAlgorithmicRidBase $
- sambaMinPwdLength $ sambaPwdHistoryLength $ sambaLogonToChgPwd $
- sambaMaxPwdAge $ sambaMinPwdAge $
- sambaLockoutDuration $ sambaLockoutObservationWindow $ sambaLockoutThreshold
$
- sambaForceLogoff $ sambaRefuseMachinePwdChange ))
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.7 NAME 'sambaUnixIdPool' SUP top
AUXILIARY
- DESC 'Pool for allocating UNIX uids/gids'
- MUST ( uidNumber $ gidNumber ) )
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.8 NAME 'sambaIdmapEntry' SUP top
AUXILIARY
- DESC 'Mapping from a SID to an ID'
- MUST ( sambaSID )
- MAY ( uidNumber $ gidNumber ) )
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.9 NAME 'sambaSidEntry' SUP top STRUCTURAL
- DESC 'Structural Class for a SID'
- MUST ( sambaSID ) )
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.10 NAME 'sambaConfig' SUP top AUXILIARY
- DESC 'Samba Configuration Section'
- MAY ( description ) )
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.11 NAME 'sambaShare' SUP top STRUCTURAL
- DESC 'Samba Share Section'
- MUST ( sambaShareName )
- MAY ( description ) )
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.12 NAME 'sambaConfigOption' SUP top
STRUCTURAL
- DESC 'Samba Configuration Option'
- MUST ( sambaOptionName )
- MAY ( sambaBoolOption $ sambaIntegerOption $ sambaStringOption $
- sambaStringListoption $ description ) )
--
-add: objectclasses
-objectclasses: ( 1.3.6.1.4.1.7165.2.2.16 NAME 'sambaTrustedDomain' SUP top
STRUCTURAL
- DESC 'Samba Trusted Domain Object'
- MUST ( cn )
- MAY ( sambaTrustType $ sambaTrustAttributes $ sambaTrustDirection $
- sambaTrustPartner $ sambaFlatName $ sambaTrustAuthOutgoing $
- sambaTrustAuthIncoming $ sambaSecurityIdentifier $
- sambaTrustForestTrustInfo $ sambaTrustPosixOffset $
- sambaSupportedEncryptionTypes) )
++++++ vendor.tar.xz ++++++
/work/SRC/openSUSE:Factory/389-ds/vendor.tar.xz
/work/SRC/openSUSE:Factory/.389-ds.new.1892/vendor.tar.xz differ: char 26, line
1
