source4/setup/provision_basedn_modify.ldif

   1 ###############################
   2 # Domain Naming Context
   3 ###############################
   4 dn: ${DOMAINDN}
   5 changetype: modify
   6 -
   7 # This should be 0x0001, but the 0 byte is not allowed - therefore encoded
   8 replace: auditingPolicy
   9 auditingPolicy:: AAE=
  10 -
  11 replace: creationTime
  12 creationTime: ${CREATTIME}
  13 -
  14 # "dSCorePropagationDate" should contain the provision data
  15 replace: forceLogoff
  16 forceLogoff: -9223372036854775808
  17 -
  18 # "fSMORoleOwner" filled in later
  19 replace: gPLink
  20 gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};0]
  21 -
  22 replace: isCriticalSystemObject
  23 isCriticalSystemObject: TRUE
  24 -
  25 replace: lockoutDuration
  26 lockoutDuration: -18000000000
  27 -
  28 replace: lockOutObservationWindow
  29 lockOutObservationWindow: -18000000000
  30 -
  31 replace: lockoutThreshold
  32 lockoutThreshold: 0
  33 -
  34 # "masteredBy" filled in later
  35 replace: maxPwdAge
  36 maxPwdAge: -36288000000000
  37 -
  38 # "minPwdAge" is "0" in order to let the password change tests pass
  39 replace: minPwdAge
  40 minPwdAge: 0
  41 -
  42 replace: minPwdLength
  43 minPwdLength: 7
  44 -
  45 replace: modifiedCount
  46 modifiedCount: 1
  47 -
  48 replace: modifiedCountAtLastProm
  49 modifiedCountAtLastProm: 0
  50 -
  51 replace: msDS-AllUsersTrustQuota
  52 msDS-AllUsersTrustQuota: 1000
  53 -
  54 replace: msDS-Behavior-Version
  55 msDS-Behavior-Version: ${DOMAIN_FUNCTIONALITY}
  56 -
  57 replace: ms-DS-MachineAccountQuota
  58 ms-DS-MachineAccountQuota: 10
  59 -
  60 # "msDs-masteredBy" filled in later
  61 replace: msDS-NcType
  62 msDS-NcType: 0
  63 -
  64 replace: msDS-PerUserTrustQuota
  65 msDS-PerUserTrustQuota: 1
  66 -
  67 replace: msDS-PerUserTrustTombstonesQuota
  68 msDS-PerUserTrustTombstonesQuota: 10
  69 -
  70 replace: nextRid
  71 nextRid: 1000
  72 -
  73 replace: nTMixedDomain
  74 nTMixedDomain: 0
  75 -
  76 replace: objectSid
  77 objectSid: ${DOMAINSID}
  78 -
  79 # This does only exist in SAMBA
  80 replace: oEMInformation
  81 oEMInformation: Provisioned by SAMBA ${SAMBA_VERSION_STRING}
  82 -
  83 replace: pwdProperties
  84 pwdProperties: 1
  85 -
  86 replace: pwdHistoryLength
  87 pwdHistoryLength: 24
  88 -
  89 replace: rIDManagerReference
  90 rIDManagerReference: CN=RID Manager$,CN=System,${DOMAINDN}
  91 -
  92 replace: serverState
  93 serverState: 1
  94 -
  95 replace: subRefs
  96 subRefs: ${CONFIGDN}
  97 -
  98 replace: systemFlags
  99 systemFlags: -1946157056
 100 -
 101 replace: uASCompat
 102 uASCompat: 1
 103 -
 104