debian-edu-config 1.818+deb8u2 / etc / ldap / samba.ldif

# moved to root.ldif
#dn: ou=samba,dc=skole,dc=skolelinux,dc=no
#objectClass: top
#objectClass: organizationalUnit
#ou: samba

# will get created when issuing ,,net getlocalsid'' command
#dn: sambaDomainName=SKOLELINUX,ou=samba,dc=skole,dc=skolelinux,dc=no
#objectClass: sambaDomain
#sambaDomainName: SKOLELINUX
#sambaSID: $SAMBASID
#sambaAlgorithmicRidBase: 1000
#sambaNextRid: 1003

# deprecated in favour of uid=Administrator, cf. below
#dn: uid=root,ou=samba,dc=skole,dc=skolelinux,dc=no
#objectClass: account
#objectClass: sambaSamAccount
#uid: root
#sambaSID: $SAMBASID-1000

# moved to root.ldif
#dn: cn=smbadmin,ou=samba,dc=skole,dc=skolelinux,dc=no
#objectClass: top
#objectClass: organizationalRole
#objectClass: simpleSecurityObject
#cn: smbadmin
#description: Samba Administrator
#userPassword: $SAMBAPWDHASH

# used by /etc/samba/smbaddclient.pl, deprecated
#dn: cn=systems,ou=group,dc=skole,dc=skolelinux,dc=no
#objectClass: top
#objectClass: posixGroup
#cn: machines
#description: All computer that are allowed to join the skolelinux SMB domain
#gidNumber: 10006

##
## BUILTIN Samba users, hidden from GOsa², accessible via Samba utils
##

dn: ou=people,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: organizationalUnit
ou: people

dn: uid=Administrator,ou=people,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: account
objectClass: posixAccount
objectClass: sambaSamAccount
uid: Administrator
cn: Administrator
displayName: Administrator
uidNumber: 50500
gidNumber: 50512
loginShell: /bin/false
homeDirectory: /dev/null
sambaSID: $SAMBASID-500
sambaPrimaryGroupSID: $SAMBASID-512
sambaLMPassword: $SAMBA_ADMPWD_LMHASH
sambaNTPassword: $SAMBA_ADMPWD_NTHASH
sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000000000000
sambaPwdLastSet: 1314220464
sambaAcctFlags: [UD         ]

dn: uid=nobody,ou=people,ou=samba,dc=skole,dc=skolelinux,dc=no
cn: nobody
objectClass: account
objectClass: sambaSamAccount
objectClass: posixAccount
uid: nobody
uidNumber: 65534
gidNumber: 65534
loginShell: /bin/false
homeDirectory: /dev/null
sambaPwdLastSet: 0
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaPwdMustChange: 2147483647
sambaPrimaryGroupSID: $SAMBASID-514
sambaLMPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX
sambaAcctFlags: [NU         ]
sambaSID: $SAMBASID-501

##
## Samba ID mapping for smbldap-tools, intended for machine accounts only
##

dn: ou=idmap,ou=samba,dc=skole,dc=skolelinux,dc=no
ou: idmap
objectClass: organizationalUnit
objectClass: sambaUnixIdPool
uidNumber: 51000
gidNumber: 51000

##
## BUILTIN Samba groups, hidden from GOsa², accessible via Samba utils
##

dn: ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: organizationalUnit
ou: group

dn: cn=administrators,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaGroupType: 2
sambaSID: $SAMBASID-544
cn: administrators
memberUid: Administrator
description: BUILTIN/Administrators
displayName: BUILTIN/Administrators
gidNumber: 50544

dn: cn=users,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaGroupType: 2
sambaSID: $SAMBASID-545
cn: users
description: BUILTIN/Users
displayName: BUILTIN/Users
gidNumber: 50545

dn: cn=guests,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
memberUid: nobody
sambaGroupType: 2
sambaSID: $SAMBASID-546
cn: guests
description: BUILTIN/Guests
displayName: BUILTIN/Guests
gidNumber: 50546

dn: cn=power-users,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaGroupType: 2
sambaSID: $SAMBASID-547
cn: power-users
description: BUILTIN/Power Users
displayName: BUILTIN/Power Users
gidNumber: 50547

dn: cn=account-operators,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaGroupType: 2
sambaSID: $SAMBASID-548
cn: account-operators
description: BUILTIN/Account Operators
displayName: BUILTIN/Account Operators
gidNumber: 50548

dn: cn=server-operators,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
sambaGroupType: 2
cn: server-operators
description: SAMBA Domain Server Operators
sambaSID: $SAMBASID-549
objectClass: posixGroup
objectClass: top
objectClass: sambaGroupMapping
displayName: SAMBA Domain Server Operators
gidNumber: 50549

dn: cn=print-operators,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaGroupType: 2
sambaSID: $SAMBASID-550
cn: print-operators
description: BUILTIN/Print Operators
displayName: BUILTIN/Print Operators
gidNumber: 50550

dn: cn=backup-operators,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaGroupType: 2
sambaSID: $SAMBASID-551
cn: backup-operators
description: BUILTIN/Backup Operators
displayName: BUILTIN/Backup Operators
gidNumber: 50551

dn: cn=replicators,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
sambaSID: $SAMBASID-552
sambaGroupType: 5
cn: replicators
description: BUILTIN/Replicators
displayName: BUILTIN/Replicators
gidNumber: 50552

# Samba DOMAIN groups, visible to and editable by GOsa² -> created in root.ldif
#dn: ou=group,dc=skole,dc=skolelinux,dc=no
#objectClass: organizationalUnit
#ou: group

dn: cn=domain-admins,ou=group,dc=skole,dc=skolelinux,dc=no
description: SAMBA Domain Administrators
sambaSID: $SAMBASID-512
sambaGroupType: 2
cn: domain-admins
objectClass: posixGroup
objectClass: top
objectClass: sambaGroupMapping
displayName: SAMBA Domain Administrators
gidNumber: 50512

dn: cn=domain-users,ou=group,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
description: SAMBA Domain Users
sambaSID: $SAMBASID-513
sambaGroupType: 2
cn: domain-users
displayName: SAMBA Domain Users
gidNumber: 50513

dn: cn=domain-guests,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
objectClass: posixGroup
objectClass: sambaGroupMapping
description: SAMBA Domain Guest Users
sambaSID: $SAMBASID-514
sambaGroupType: 2
displayName: SAMBA Domain Guest Users
gidNumber: 65534
cn: domain-guests

dn: cn=domain-computers,ou=group,ou=samba,dc=skole,dc=skolelinux,dc=no
sambaSID: $SAMBASID-553
sambaGroupType: 2
displayName: SAMBA Domain Computers
cn: domain-computers
description: SAMBA Domain Computer Accounts
objectClass: posixGroup
objectClass: top
objectClass: sambaGroupMapping
gidNumber: 50553

#
# The SAMBA SID calculation for groups is Group RID = GID*2 + 1001
#
dn: cn=admins,ou=group,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: admins
description: All system administrators in the institution
gidNumber: 10001
sambaSID: $SAMBASID-21003
sambaGroupType: 2
displayName: Domain Admins

dn: cn=jradmins,ou=group,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: jradmins
description: All junior admins in the institution
gidNumber: 10002
sambaSID: $SAMBASID-21005
sambaGroupType: 2
displayName: jradmins

dn: cn=nonetblk,ou=group,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: nonetblk
description: Users that should be unaffected by network blocking
gidNumber: 10005
sambaSID: $SAMBASID-21006
sambaGroupType: 2
displayName: nonetblk

#
# For more information on Samba/Posix group mappings refer to
# http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html#WKURIDS
# for more information.
#

#
# Groups and user templates for teachers and students...
#

dn: cn=teachers,ou=group,ou=Teachers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: teachers
description: group of all teachers
gidNumber: 10003
memberUid: newteacher
memberUid: $FIRSTUSERNAME
sambaSID: $SAMBASID-21007
sambaGroupType: 2

## predefine template newteacher:
dn: uid=newteacher,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: gosaAccount
objectClass: gosaUserTemplate
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
sn: NewTeacher
givenName: NewTeacher
uid: newteacher
cn: NewTeacher NewTeacher
userPassword: {SSHA}N0T$3T4N0W
homeDirectory: /skole/tjener/home0/%uid
loginShell: /bin/bash
uidNumber: 1001
gidNumber: 1001
gecos: NewTeacher NewTeacher
shadowLastChange: 14818
sambaSID: $SAMBASID-3002
sambaAcctFlags: [UX          ]
sambaHomePath: \\tjener\%uid
sambaHomeDrive: H:
sambaProfilePath: \\tjener\%uid\.ntprofile
sambaLogonScript: logon-teachers.bat
sambaPrimaryGroupSID: $SAMBASID-3003
sambaDomainName: SKOLELINUX
sambaMungedDial: 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

dn: cn=newteacher,ou=group,ou=Teachers,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: newteacher
description: Group of user newteacher newteacher
gidNumber: 1001
sambaSID: $SAMBASID-3003
sambaGroupType: 2

dn: cn=students,ou=group,ou=Students,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: students
description: group of all students
gidNumber: 10004
memberUid: newstudent
memberUid: newteacher
sambaSID: $SAMBASID-21009
sambaGroupType: 2

## predefine template newstudent:
dn: uid=newstudent,ou=people,ou=Students,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: gosaAccount
objectClass: gosaUserTemplate
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
sn: NewStudent
givenName: NewStudent
uid: newstudent
cn: NewStudent NewStudent
userPassword: {SSHA}N0T$3T4N0W
homeDirectory: /skole/tjener/home0/%uid
loginShell: /bin/bash
uidNumber: 1002
gidNumber: 1002
gecos: NewStudent NewStudent
shadowLastChange: 14818
sambaSID: $SAMBASID-3004
sambaAcctFlags: [UX          ]
sambaHomePath: \\tjener\%uid
sambaHomeDrive: H:
sambaProfilePath: \\tjener\%uid\.ntprofile
sambaLogonScript: logon-students.bat
sambaPrimaryGroupSID: $SAMBASID-3003
sambaDomainName: SKOLELINUX
sambaMungedDial: IAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAUAAQABoACAABAEMAdAB4AEMAZgBnAFAAcgBlAHMAZQBuAHQANTUxZTBiYjAYAAgAAQBDAHQAeABDAGYAZwBGAGwAYQBnAHMAMQAwMGUwMDAxMBYAAAABAEMAdAB4AEMAYQBsAGwAYgBhAGMAawASAAgAAQBDAHQAeABTAGgAYQBkAG8AdwAwMTAwMDAwMCIAAAABAEMAdAB4AEsAZQB5AGIAbwBhAHIAZABMAGEAeQBvAHUAdAAqAAIAAQBDAHQAeABNAGkAbgBFAG4AYwByAHkAcAB0AGkAbwBuAEwAZQB2AGUAbAAwMCAAAgABAEMAdAB4AFcAbwByAGsARABpAHIAZQBjAHQAbwByAHkAMDAgAAIAAQBDAHQAeABOAFcATABvAGcAbwBuAFMAZQByAHYAZQByADAwGAACAAEAQwB0AHgAVwBGAEgAbwBtAGUARABpAHIAMDAiAAIAAQBDAHQAeABXAEYASABvAG0AZQBEAGkAcgBEAHIAaQB2AGUAMDAgAAIAAQBDAHQAeABXAEYAUAByAG8AZgBpAGwAZQBQAGEAdABoADAwIgACAAEAQwB0AHgASQBuAGkAdABpAGEAbABQAHIAbwBnAHIAYQBtADAwIgACAAEAQwB0AHgAQwBhAGwAbABiAGEAYwBrAE4AdQBtAGIAZQByADAwKAAIAAEAQwB0AHgATQBhAHgAQwBvAG4AbgBlAGMAdABpAG8AbgBUAGkAbQBlADAwMDAwMDAwLgAIAAEAQwB0AHgATQBhAHgARABpAHMAYwBvAG4AbgBlAGMAdABpAG8AbgBUAGkAbQBlADAwMDAwMDAwHAAIAAEAQwB0AHgATQBhAHgASQBkAGwAZQBUAGkAbQBlADAwMDAwMDAw

dn: cn=newstudent,ou=group,ou=Students,dc=skole,dc=skolelinux,dc=no
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: newstudent
description: Group of user newstudent newstudent
gidNumber: 1002
sambaSID: $SAMBASID-3005
sambaGroupType: 2