samba.git/source4/setup/provision.ldif, branch talloc-2.3.0

2008R2: Missing operation (77) for ActiveDirectoryUpdate version 5 (FL)

2017-12-20T22:13:11+00:00

Operation 77: {82112ba0-7e4c-4a44-89d9-d46c9612bf91}

 - Create the CN=PSPs,CN=System object

Referenced in the page 'Windows Server 2008R2: Domain-Wide Updates':
https://technet.microsoft.com/en-us/library/dd378973(v=ws.10).aspx

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett

2008R2: Missing operation (75, 76) for ActiveDirectoryUpdate version 5 (FL)

2017-12-20T22:13:11+00:00

Operation 75 {5e1574f6-55df-493e-a6-71-aa-ef-fc-a6-a1-00}

 - Create the CN=Managed Service Accounts object

Operation 76 {d262aae8-41f7-48ed-9f-35-56-bb-b6-77-57-3d}

 - Add otherWellKnownObject link for CN=Managed Service Accounts

Referenced in the page 'Windows Server 2008R2: Domain-Wide Updates':
https://technet.microsoft.com/en-us/library/dd378973(v=ws.10).aspx

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett

provision: fix nTSecurityDescriptor of CN={LostAndFound,System},${DOMAINDN} (bug #9481)

2013-01-27T09:14:21+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:provision: set the correct nTSecurityDescriptor on CN=Domain Controllers,... (bug #9481)

2012-12-11T06:05:39+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Michael Adam 

Autobuild-User(master): Michael Adam 
Autobuild-Date(master): Tue Dec 11 07:05:39 CET 2012 on sn-devel-104

s4:provision: set the correct nTSecurityDescriptor on CN=Builtin,... (bug #9481)

2012-12-11T04:04:44+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Michael Adam

s4:provision: set the correct nTSecurityDescriptor on CN=Infrastructure,... (bug #9481)

2012-12-11T04:02:03+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Michael Adam

s4:provision: move Samba4 specific DNS stuff to its own file

2010-06-26T07:50:56+00:00

metze

s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool'

2010-06-26T07:50:54+00:00

On Windows dcpromo imports nextRid from the local SAM,
which means it's not hardcoded to 1000.

The initlal rIDAvailablePool starts at nextRid + 100.

I also found that the RID Set of the local dc
should be created via provision and not at runtime,
when the first rid is needed.
(Tested with dcpromo on w2k8r2, while disabling the DNS
 check box).

After provision we should have this (assuming nextRid=1000):

rIDAllocationPool: 1100-1599
rIDPrevAllocationPool: 1100-1599
rIDUsedPool: 0
rIDNextRID: 1100

rIDAvailablePool: 1600-1073741823

Because provision sets rIDNextRid=1100, the first created account
(typically DNS related accounts) will get 1101 as rid!

metze

Revert "s4:provision.ldif - fix the number of available RIDs"

2010-06-24T13:13:40+00:00

This reverts commit 41cdcd54b7b7e3fb70fdb220e74a1daf30e1891a.

As per request of metze revert this (cause written on the mailing list).

s4:provision.ldif - fix the number of available RIDs

2010-06-24T08:04:53+00:00

There should be 4611686014132422209 and not 4611686014132422109.