#
#********************************************************************
#
dn: cn=schema
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.24
  NAME 'sambaLMPassword'
  DESC 'LanManager Password'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.25
  NAME 'sambaNTPassword'
  DESC 'MD4 hash of the unicode password'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.26
  NAME 'sambaAcctFlags'
  DESC 'Account Flags'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.27
  NAME 'sambaPwdLastSet'
  DESC 'Timestamp of the last password update'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.28
  NAME 'sambaPwdCanChange'
  DESC 'Timestamp of when the user is allowed to update the password'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.29
  NAME 'sambaPwdMustChange'
  DESC 'Timestamp of when the password will expire'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.30
  NAME 'sambaLogonTime'
  DESC 'Timestamp of last logon'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.31
  NAME 'sambaLogoffTime'
  DESC 'Timestamp of last logoff'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.32
  NAME 'sambaKickoffTime'
  DESC 'Timestamp of when the user will be logged off automatically'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.48
  NAME 'sambaBadPasswordCount'
  DESC 'Bad password attempt count'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.49
  NAME 'sambaBadPasswordTime'
  DESC 'Time of the last bad password attempt'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.55
  NAME 'sambaLogonHours'
  DESC 'Logon Hours'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{42}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.33
  NAME 'sambaHomeDrive'
  DESC 'Driver letter of home directory mapping'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{4}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.34
  NAME 'sambaLogonScript'
  DESC 'Logon script path'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.35
  NAME 'sambaProfilePath'
  DESC 'Roaming profile path'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.36
  NAME 'sambaUserWorkstations'
  DESC 'List of user workstations the user is allowed to logon to'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.37
  NAME 'sambaHomePath'
  DESC 'Home directory UNC path'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.38
  NAME 'sambaDomainName'
  DESC 'Windows NT domain to which the user belongs'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128}
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.47
  NAME 'sambaMungedDial'
  DESC ''
  EQUALITY caseExactMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050}
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.54
  NAME 'sambaPasswordHistory'
  DESC 'Concatenated MD4 hashes of the unicode passwords used on this account'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32}
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.20
  NAME 'sambaSID'
  DESC 'Security ID'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.23
  NAME 'sambaPrimaryGroupSID'
  DESC 'Primary Group Security ID'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.51
  NAME 'sambaSIDList'
  DESC 'Security ID List'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64}
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.19
  NAME 'sambaGroupType'
  DESC 'NT Group Type'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.21
  NAME 'sambaNextUserRid'
  DESC 'Next NT rid to give our for users'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.22
  NAME 'sambaNextGroupRid'
  DESC 'Next NT rid to give out for groups'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.39
  NAME 'sambaNextRid'
  DESC 'Next NT rid to give out for anything'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.40
  NAME 'sambaAlgorithmicRidBase'
  DESC 'Base at which the samba RID generation algorithm should operate'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.41
  NAME 'sambaShareName'
  DESC 'Share Name'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.42
  NAME 'sambaOptionName'
  DESC 'Option Name'
  EQUALITY caseIgnoreMatch
  SUBSTR caseIgnoreSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256}
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.43
  NAME 'sambaBoolOption'
  DESC 'A boolean option'
  EQUALITY booleanMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.44
  NAME 'sambaIntegerOption'
  DESC 'An integer option'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.45
  NAME 'sambaStringOption'
  DESC 'A string option'
  EQUALITY caseExactIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.46
  NAME 'sambaStringListOption'
  DESC 'A string list option'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.53
  NAME 'sambaTrustFlags'
  DESC 'Trust Password Flags'
  EQUALITY caseIgnoreIA5Match
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.56
  NAME 'sambaAccountPolicyName'
  DESC 'Account Policy Name'
  EQUALITY caseIgnoreMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255}
  SINGLE-VALUE
  )
#
#********************************************************************
#
attributeTypes: (
  1.3.6.1.4.1.7165.2.1.57
  NAME 'sambaAccountPolicyValue'
  DESC 'Account Policy Value'
  EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.6
  NAME 'sambaSamAccount'
  SUP top
  AUXILIARY
  DESC 'Samba 3.0 Auxilary SAM Account'
  MUST ( uid $ sambaSID )
  MAY ( cn $ sambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $  sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $  sambaPwdCanChange $ sambaPwdMustChange $ sambaAcctFlags $ displayName $ sambaHomePath $ sambaHomeDrive $ sambaLogonScript $  sambaProfilePath $ description $ sambaUserWorkstations $  sambaPrimaryGroupSID $ sambaDomainName $ sambaMungedDial $  sambaBadPasswordCount $ sambaBadPasswordTime $  sambaPasswordHistory $ sambaLogonHours)
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.4
  NAME 'sambaGroupMapping'
  SUP top
  AUXILIARY
  DESC 'Samba Group Mapping'
  MUST ( gidNumber $ sambaSID $ sambaGroupType )
  MAY ( displayName $ description $ sambaSIDList )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.14
  NAME 'sambaTrustPassword'
  SUP top
  STRUCTURAL
  DESC 'Samba Trust Password'
  MUST ( sambaDomainName $ sambaNTPassword $ sambaTrustFlags )
  MAY ( sambaSID $ sambaPwdLastSet )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.5
  NAME 'sambaDomain'
  SUP top
  STRUCTURAL
  DESC 'Samba Domain Information'
  MUST ( sambaDomainName $   sambaSID ) 
  MAY ( sambaNextRid $ sambaNextGroupRid $ sambaNextUserRid $  sambaAlgorithmicRidBase )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.7
  NAME 'sambaUnixIdPool'
  SUP top
  AUXILIARY
  DESC 'Pool for allocating UNIX uids/gids'
  MUST ( uidNumber $ gidNumber )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.8
  NAME 'sambaIdmapEntry'
  SUP top
  AUXILIARY
  DESC 'Mapping from a SID to an ID'
  MUST ( sambaSID )
  MAY ( uidNumber $ gidNumber )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.9
  NAME 'sambaSidEntry'
  SUP top
  STRUCTURAL
  DESC 'Structural Class for a SID'
  MUST ( sambaSID )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.10
  NAME 'sambaConfig'
  SUP top
  AUXILIARY
  DESC 'Samba Configuration Section'
  MAY ( description )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.11
  NAME 'sambaShare'
  SUP top
  STRUCTURAL
  DESC 'Samba Share Section'
  MUST ( sambaShareName )
  MAY ( description )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.12
  NAME 'sambaConfigOption'
  SUP top
  STRUCTURAL
  DESC 'Samba Configuration Option'
  MUST ( sambaOptionName )
  MAY ( sambaBoolOption $ sambaIntegerOption $ sambaStringOption $   sambaStringListoption $ description )
  )
#
#********************************************************************
#
objectClasses: (
  1.3.6.1.4.1.7165.2.2.15
  NAME 'sambaAccountPolicy'
  SUP top
  STRUCTURAL
  DESC 'Samba Account Policy'
  MUST ( sambaAccountPolicyName $ sambaAccountPolicyValue )
  MAY ( description )
  )
#
#********************************************************************
#