I just noticed/discovered that it appears the Netscape 4.x ldap schema file is seriously(?) out of date. Having just completed the migration of a client's NT4 server (yes I know, don't ask) to WhiteBox EL4 the users have not been able to change their NT passwords. Long story short....finally, I lucked out and discovered the following LDAP attributes are not in samba-schema-netscapeds4.x. (not sure what others may also be missing) despite. sambaMungedDial sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory sambaLogonHours While this is probably a 'minor issue' can someone look in to and resolve it ASAP. Please!!! (The client must use the Netscape 4.x DS as it can not be upgraded until a suitable replacement for the Netscape 4.x Messaging server for linux becomes available - hopefully there will be a Fedora Messaging server) Thanks
Created attachment 1416 [details] Possible patch Here is a possible (ie, possibly correct) patch to update the NS4.x schema.
Comment on attachment 1416 [details] Possible patch >--- samba-schema-netscapeds4.x.conf.orig 2005-09-06 20:40:22.000000000 +1000 >+++ samba-schema-netscapeds4.x.conf 2005-09-06 20:42:35.000000000 +1000 >@@ -25,6 +25,11 @@ > attribute sambaNextGroupRid 1.3.6.1.4.1.7165.2.1.22 int single > attribute sambaNextRid 1.3.6.1.4.1.7165.2.1.39 int single > attribute sambaAlgorithmicRidBase 1.3.6.1.4.1.7165.2.1.40 int single >+attribute sambaBadPasswordCount 1.3.6.1.4.1.7165.2.1.48 int single >+attribute sambaBadPasswordTime 1.3.6.1.4.1.7165.2.1.49 int single >+attribute sambaLogonHours 1.3.6.1.4.1.7165.2.1.55 cis single >+attribute sambaMungedDial 1.3.6.1.4.1.7165.2.1.47 ces >+attribute sambaPasswordHistory 1.3.6.1.4.1.7165.2.1.54 cis > > objectclass sambaSamAccount > oid >@@ -54,7 +59,12 @@ > description, > sambaUserWorkstations, > sambaPrimaryGroupSID, >- sambaDomainName >+ sambaDomainName, >+ sambaMungedDial, >+ sambaBadPasswordCount, >+ sambaBadPasswordTime, >+ sambaPasswordHistory, >+ sambaLogonHours > > objectclass sambaGroupMapping > oid
This schema has been removed eons ago. Closing.