diff options
author | Andrew Bartlett <abartlet@samba.org> | 2017-12-11 14:50:39 +1300 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2017-12-14 08:20:16 +0100 |
commit | d6e0f43ab98fff300ffdc7a888bbc84f74e580f0 (patch) | |
tree | 8574ffbbf68b33a56edb21b3211e9dba12baca24 /source4/setup | |
parent | e8b200fad365298e57ca4b8fa7451e06451e7b0c (diff) | |
download | samba-d6e0f43ab98fff300ffdc7a888bbc84f74e580f0.tar.gz |
provision: Make clarifying header an LDIF comment in extended-rights.ldif
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Diffstat (limited to 'source4/setup')
-rw-r--r-- | source4/setup/extended-rights.ldif | 28 |
1 files changed, 21 insertions, 7 deletions
diff --git a/source4/setup/extended-rights.ldif b/source4/setup/extended-rights.ldif index dd28413201c..ef4c3049601 100644 --- a/source4/setup/extended-rights.ldif +++ b/source4/setup/extended-rights.ldif @@ -109,13 +109,27 @@ # SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. # -6.1.1.2.7.1 controlAccessRight objects -All controlAccessRight objects have: -objectClass: controlAccessRight -rightsGuid: This value is the identifier of the control access right used for security descriptors and SDDL. -appliesTo: Each value in this attribute is a GUID, with each GUID equaling an attribute schemaIDGUID on a schema object defining a class in the schema NC. This class defines the objects in which the control access right can be a security descriptor for. The appliesTo values on the controlAccessRight are not enforced by the directory server; that is, the controlAccessRight can be included in security descriptors of objects of classes not specified in the appliesTo attribute. -localizationDisplayId: This is implementation-specific information for the administrative application. -validAccesses: This is implementation-specific information for the administrative application. +# 6.1.1.2.7.1 controlAccessRight objects +# All controlAccessRight objects have: +# objectClass: controlAccessRight +# rightsGuid: This value is the identifier of the control access right +# used for security descriptors and SDDL. +# appliesTo: Each value in this attribute is a GUID, with each GUID +# equaling an attribute schemaIDGUID on a schema object +# defining a class in the schema NC. This class defines the +# objects in which the control access right can be a +# security descriptor for. The appliesTo values on the +# controlAccessRight are not enforced by the directory +# server; that is, the controlAccessRight can be included +# in security descriptors of objects of classes not +# specified in the appliesTo attribute. +# localizationDisplayId: This is implementation-specific information +# for the administrative application. +# validAccesses: This is implementation-specific information for the +# administrative application. +# +# NOTE: while it is claimed that validAccesses is implementation-specfic +# it can be determined by careful reading of other parts of MS-ADTS dn: CN=Change-Rid-Master,CN=Extended-Rights,${CONFIGDN} objectClass: top |