Here is a list of needed LDAP schema files for the different LAM modules. For OpenLDAP we also provide a source where you can get the files.
Table A.1. LDAP schema files
Account type | Object class(es) | Schema name | Source | Notes | |
---|---|---|---|---|---|
![]() | Unix accounts | posixAccount, shadowAccount, hostObject, posixGroup | nis.schema, rfc2307bis.schema, ldapns.schema (hostObject) | Part of OpenLDAP installation, part of libpam-ldap (ldapns.schema) | The rfc2307bis.schema is only supported by LAM Pro. Use the nis.schema if you do not want to upgrade to LAM Pro. |
![]() | Address book entries | inetOrgPerson | inetorgperson.schema | Part of OpenLDAP installation | |
![]() | Samba 3 accounts | sambaSamAccount, sambaGroupMapping, sambaDomain | samba.schema | Part of Samba tarball (examples/LDAP/samba.schema) | |
![]() | Windows AD (Samba 4) | user, group, computer | Samba 4 built-in | ||
![]() | AD LDS | user, group | AD LDS built-in | ||
![]() | Kolab 2/3 users | kolabUser | kolab2/3.schema, rfc2739.schema | Part of Kolab 2/3 installation | |
![]() | Asterisk (extension) | AsteriskSIPUser, AsteriskExtension | asterisk.schema | Part of Asterisk installation | |
![]() | PyKota users, groups, printers and billing codes | pykotaObject, pykotaAccount, pykotaAccountBalance, pykotaGroup, pykotaPrinter, pykotaBilling | pykota.schema | Part of PyKota installation | |
![]() | Mail routing | inetLocalMailRecipient | misc.schema | Part of OpenLDAP installation | |
![]() | Hosts | hostObject, device | ldapns.schema | Part of libpam-ldap installation | The device object class is only available in LAM Pro. |
![]() | Authorized services | authorizedServiceObject | ldapns.schema | Part of libpam-ldap installation | |
![]() | Mail aliases | nisMailAlias | misc.schema | Part of OpenLDAP installation | |
![]() | Qmail user | qmailUser | qmail.schema | Part of qmail_ldap | LAM Pro only |
![]() | MAC addresses | ieee802device | nis.schema | Part of OpenLDAP installation | |
![]() | IP addresses | ipHost | nis.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | Puppet | puppetClient | puppet.schema | Puppet on GitHub | |
![]() | EDU person | eduPerson | eduperson.schema | http://middleware.internet2.edu | |
![]() | Simple Accounts | account | cosine.schema | Part of OpenLDAP installation | |
![]() | SSH public keys | ldapPublicKey | openssh-lpk.schema | Included in patch from http://code.google.com/p/openssh-lpk/ | |
![]() | SSH public keys (AD) | - | built-in | AD/Samba 4 built-in | |
![]() | Filesystem quotas | systemQuotas | quota.schema | Linux DiskQuota | |
![]() | Group of (unique) names | groupOfNames, groupOfUniqueNames, groupOfMembers | core.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | Groups | organizationalRole | core.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | DHCP | dhcpOptions, dhcpSubnet, dhcpServer | dhcp.schema | docs/schema/dhcp.schema | The LDAP suffix should be set to your dhcpServer entry. |
![]() | Bind DLZ DNS | dlzZone, dlzHost, dlzSOARecord, dlzNSRecord, dlzARecord, dlzMXRecord, dlzCNameRecord, dlzPTRRecord | dlz.schema | part of Bind DLZ patch | LAM Pro only |
![]() | Aliases | alias, uidObject | core.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | NIS netgroups | nisNetgroup | nis.schema | Part of OpenLDAP installation | |
![]() | NIS objects | nisObject | nis.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | Automount objects | automount | autofs.schema, rfc2307bis.schema | Autofs LDAP | LAM Pro only |
![]() | Oracle databases | orclNetService | oidbase.schema, oidnet.schema, oidrdbms.schema, alias.schema | Preinstalled on Oracle directory server, OpenLDAP schemas can be downloaded e.g. here | LAM Pro only |
![]() | Password policies | pwdPolicy, device | ppolicy.schema, core.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | PowerDNS | dNSDomain2, domainRelatedObject | dnsdomain2.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | FreeRadius users | radiusprofile | openldap.schema | Part of FreeRadius installation | |
![]() | Heimdal Kerberos | krb5KDCEntry | hdb.schema | Part of Heimdal Kerberos installation | LAM Pro only |
![]() | MIT Kerberos | krbPrincipal, krbPrincipalAux, krbTicketPolicyAux | kerberos.schema | Part of MIT Kerberos installation | LAM Pro only |
![]() | Simple Security Object | simpleSecurityObject | core.schema | Part of OpenLDAP installation | LAM Pro only |
![]() | Sudo roles | sudoRole | sudo.schema | Part of sudo-ldap installation | LAM Pro only |
![]() | Kopano | kopano-user, kopano-contact, kopano-group, kopano-dynamicgroup, kopano-addresslist, kopano-server | kopano.ldif | Part of Kopano installation | LAM Pro only |
![]() | IMAP mailboxes | - | - | - | Does not require any schema. |
![]() | LDAP views | nsview, organizationalunit | built-in | Part of LDAP server installation (e.g. 389 server) | LAM Pro only |
![]() | Apache Guacamole | guacConfigGroup | guacConfigGroup.ldif | Part of Guacamole Auth LDAP installation | LAM Pro only |
![]() | All | dynamicObject | built-in with DDS module | Part of LDAP server installation | LAM Pro only, requires DDS extension on LDAP server side |