--- update.log 2013-10-23 17:42:02.690928836 +0200 +++ installation.log 2013-10-23 17:40:37.618932721 +0200 @@ -9,18 +9,18 @@ ### Special SIDs in AD, not present in Samba 4.1 ### -# World Authority, groups, -dn: cn=World Authority,cn=groups, +# World Authority, Builtin, +dn: cn=World Authority,cn=Builtin, sambaGroupType: 5 univentionGroupType: -2147483643 -# Null Authority, groups, -dn: cn=Null Authority,cn=groups, +# Null Authority, Builtin, +dn: cn=Null Authority,cn=Builtin, sambaGroupType: 5 univentionGroupType: -2147483643 -# Nobody, groups, -dn: cn=Nobody,cn=groups, +# Nobody, Builtin, +dn: cn=Nobody,cn=Builtin, sambaGroupType: 5 univentionGroupType: -2147483643 @@ -28,13 +28,13 @@ ### foreignSecurityPrincipal in Samba 4.1 / Pseudo-Groups ### -# Authenticated Users, groups, -dn: cn=Authenticated Users,cn=groups, +# Authenticated Users, Builtin, +dn: cn=Authenticated Users,cn=Builtin, sambaGroupType: 5 univentionGroupType: -2147483643 -# Everyone, groups, -dn: cn=Everyone,cn=groups, +# Everyone, Builtin, +dn: cn=Everyone,cn=Builtin, sambaGroupType: 5 univentionGroupType: -2147483643 @@ -61,7 +61,7 @@ # Terminal Server User, Builtin, dn: cn=Terminal Server User,cn=Builtin, sambaGroupType: 5 -univentionGroupType: -2147483643 +univentionGroupType: -2147483644 ## maybe changed in Samba 4.1 ? # NTLM Authentication, Builtin, dn: cn=NTLM Authentication,cn=Builtin, @@ -162,72 +162,105 @@ ### Samba4 groups, container CN=Builtin ### -# Users, groups, -dn: cn=Users,cn=groups, -sambaGroupType: 5 +# Users, Builtin, +dn: cn=Users,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 -# Guests, groups, -dn: cn=Guests,cn=groups, -sambaGroupType: 5 +# Guests, Builtin, +dn: cn=Guests,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # IIS_IUSRS, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=IIS_IUSRS,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 -# Replicators, groups, -dn: cn=Replicators,cn=groups, -sambaGroupType: 5 +# Replicator, Builtin, +dn: cn=Replicator,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 -# Administrators, groups, -dn: cn=Administrators,cn=groups, -sambaGroupType: 5 +# Administrators, Builtin, +dn: cn=Administrators,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 -# System Operators, groups, -dn: cn=System Operators,cn=groups, -sambaGroupType: 5 +# Server Operators, Builtin, +dn: cn=Server Operators,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 -# Backup Operators, groups, -dn: cn=Backup Operators,cn=groups, -sambaGroupType: 5 +# Backup Operators, Builtin, +dn: cn=Backup Operators,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 -# Account Operators, groups, -dn: cn=Account Operators,cn=groups, -sambaGroupType: 5 +# Account Operators, Builtin, +dn: cn=Account Operators,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Event Log Readers, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Event Log Readers,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Remote Desktop Users, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Remote Desktop Users,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Performance Log Users, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Performance Log Users,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Distributed COM Users, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Distributed COM Users,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Cryptographic Operators, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Cryptographic Operators,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Performance Monitor Users, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Performance Monitor Users,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Incoming Forest Trust Builders, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Incoming Forest Trust Builders,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Certificate Service DCOM Access, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Certificate Service DCOM Access,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Network Configuration Operators, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Network Configuration Operators,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Terminal Server License Servers, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Terminal Server License Servers,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Pre-Windows 2000 Compatible Access, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Pre-Windows 2000 Compatible Access,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 # Windows Authorization Access Group, Builtin, -# Missing in domains updated from UCS 3.1-1 +dn: cn=Windows Authorization Access Group,cn=Builtin, +sambaGroupType: 2 +univentionGroupType: -2147483643 ### ### Samba4 groups, container CN=groups @@ -236,54 +269,65 @@ # DnsAdmins, groups, dn: cn=DnsAdmins,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483644 # DnsUpdateProxy, groups, dn: cn=DnsUpdateProxy,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Schema Admins, groups, dn: cn=Schema Admins,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483640 # Cert Publishers, groups, dn: cn=Cert Publishers,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483644 # Domain Computers, groups, dn: cn=Domain Computers,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Enterprise Admins, groups, dn: cn=Enterprise Admins,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483640 # RAS and IAS Servers, groups, dn: cn=RAS and IAS Servers,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483644 # Group Policy Creator Owners, groups, dn: cn=Group Policy Creator Owners,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 -# Read-only Domain Controllers, groups, -dn: cn=Read-only Domain Controllers,cn=groups, +# Read-Only Domain Controllers, groups, +dn: cn=Read-Only Domain Controllers,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Denied RODC Password Replication Group, groups, dn: cn=Denied RODC Password Replication Group,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483644 -# Enterprise Read-only Domain Controllers, groups, -dn: cn=Enterprise Read-only Domain Controllers,cn=groups, +# Enterprise Read-Only Domain Controllers, groups, +dn: cn=Enterprise Read-Only Domain Controllers,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483640 # Allowed RODC Password Replication Group, groups, dn: cn=Allowed RODC Password Replication Group,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483644 # Power Users, groups, -dn: cn=Power Users,cn=groups, -sambaGroupType: 5 +# Missing in domains installed with UCS 3.2-0 ### ### UCS groups mapped to different Samba4 group name @@ -292,6 +336,7 @@ # Printer-Admins, groups, ## mapped to CN=Print Operators,CN=Builtin, dn: cn=Printer-Admins,cn=groups, sambaGroupType: 5 +univentionGroupType: -2147483643 ### ### UCS groups @@ -300,42 +345,52 @@ # Computers, groups, dn: cn=Computers,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Slave Join, groups, dn: cn=Slave Join,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Backup Join, groups, dn: cn=Backup Join,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Domain Users, groups, dn: cn=Domain Users,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Domain Admins, groups, dn: cn=Domain Admins,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Domain Guests, groups, dn: cn=Domain Guests,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # DC Slave Hosts, groups, dn: cn=DC Slave Hosts,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # DC Backup Hosts, groups, dn: cn=DC Backup Hosts,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Domain Controllers, groups, dn: cn=Domain Controllers,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 # Nagios Admins, groups, dn: cn=Nagios Admins,cn=groups, sambaGroupType: 2 +univentionGroupType: -2147483646 ### ### UCS groups in ignorefilter