OpenLDAP now initializes, but login is not possible and kadmin does not work yet

5 files changed, 251 insertions, 4 deletions

diff --git a/confskel/openldap/ldif/ems-core.ldif b/confskel/openldap/ldif/ems-core.ldif
new file mode 100644
index 0000000..0d48fb0
--- /dev/null
+++ b/confskel/openldap/ldif/ems-core.ldif
@@ -0,0 +1,174 @@
+dn: cn={@@@LDIFSCHEMANUMBER@@@}ems-core
+objectClass: olcSchemaConfig
+cn: {@@@LDIFSCHEMANUMBER@@@}ems-core
+olcAttributeTypes: {0}( 1.3.6.1.4.1.31267.1.1.1 NAME 'emsdescription' DESC '
+ Description of the EMS Object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSu
+ bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} SINGLE-VALUE )
+olcAttributeTypes: {1}( 1.3.6.1.4.1.31267.1.1.2 NAME 'emspermission' DESC 'S
+ ingle security Entry' SUP name )
+olcAttributeTypes: {2}( 1.3.6.1.4.1.31267.1.1.3 NAME 'emscontainertype' DESC
+  'EMS Container Type' SUP emsdescription )
+olcAttributeTypes: {3}( 1.3.6.1.4.1.31267.1.1.4 NAME 'emsplugins' DESC 'Grou
+ p User Service Plugins' SUP name )
+olcAttributeTypes: {4}( 1.3.6.1.4.1.31267.1.1.5 NAME 'emsprimarygroupdn' DES
+ C 'EMS Primary Group DN' SUP emsdescription )
+olcAttributeTypes: {5}( 1.3.6.1.4.1.31267.1.1.6 NAME 'emscomputervendormodel
+ ' DESC 'EMS Computer Vendor Model' SUP emsdescription )
+olcAttributeTypes: {6}( 1.3.6.1.4.1.31267.1.1.7 NAME 'emscomputercpumhz' DES
+ C 'EMS Computer CPU MHz' SUP emsdescription )
+olcAttributeTypes: {7}( 1.3.6.1.4.1.31267.1.1.8 NAME 'emscomputerram' DES
+ C 'EMS Computer RAM' SUP emsdescription )
+olcAttributeTypes: {8}( 1.3.6.1.4.1.31267.1.1.9 NAME 'emscomputerswap' DES
+ C 'EMS Computer SWAP' SUP emsdescription )
+olcAttributeTypes: {9}( 1.3.6.1.4.1.31267.1.1.10 NAME 'emscomputersystem' DE
+ SC 'EMS Computer System (OS)' SUP emsdescription )
+olcAttributeTypes: {10}( 1.3.6.1.4.1.31267.1.1.11 NAME 'emscomputerdistro' D
+ ESC 'EMS Computer Distribution' SUP emsdescription )
+olcAttributeTypes: {11}( 1.3.6.1.4.1.31267.1.1.12 NAME 'emscomputerdistrorel
+ ease' DESC 'EMS Computer Distribution Release' SUP emsdescription )
+olcAttributeTypes: {12}( 1.3.6.1.4.1.31267.1.1.13 NAME 'emsmodelclass' DESC
+ 'EMS Model Class' SUP emsdescription )
+olcAttributeTypes: {13}( 1.3.6.1.4.1.31267.1.1.14 NAME 'emsservicemap' DESC
+ 'EMS Computer Map for Plugin' SUP emsplugins )
+olcAttributeTypes: {14}( 1.3.6.1.4.1.31267.1.1.15 NAME 'emsmastercomputerdn'
+  DESC 'EMS Generic Master Computer Dn' SUP emsdescription )
+olcAttributeTypes: {15}( 1.3.6.1.4.1.31267.1.1.16 NAME 'emscomputersdn' DESC
+  'EMS Generic Multivalued Computer Dn' SUP name )
+olcAttributeTypes: {16}( 1.3.6.1.4.1.31267.1.1.17 NAME 'emsmodules' DESC 'EM
+ S Service Module Name' SUP emsdescription )
+olcAttributeTypes: {17}( 1.3.6.1.4.1.31267.1.1.18 NAME 'emsntpserver' DESC '
+ NTP Servers' SUP name )
+olcAttributeTypes: {18}( 1.3.6.1.4.1.31267.1.1.19 NAME 'emssubnetbroadcast'
+ DESC 'Broadcast To Subnets' SUP name )
+olcAttributeTypes: {19}( 1.3.6.1.4.1.31267.1.1.20 NAME 'emsstatisticsenable'
+  DESC 'Enable NTP Statistics' SUP emsdescription )
+olcAttributeTypes: {20}( 1.3.6.1.4.1.31267.1.1.21 NAME 'emsstatistics' DESC
+ 'Statistics To Enable' SUP name )
+olcAttributeTypes: {21}( 1.3.6.1.4.1.31267.1.1.22 NAME 'emsldapserver' DESC
+ 'Ldap Servers' SUP name )
+olcAttributeTypes: {22}( 1.3.6.1.4.1.31267.1.1.23 NAME 'emskrbserver' DESC '
+ Kerberos Servers' SUP name )
+olcAttributeTypes: {23}( 1.3.6.1.4.1.31267.1.1.24 NAME 'emstype' DESC 'Objec
+ t type' SUP emsdescription )
+olcAttributeTypes: {24}( 1.3.6.1.4.1.31267.1.1.25 NAME 'emsdnsslavecomputerd
+ ns' DESC 'EMS Dns Slaves' SUP name )
+olcAttributeTypes: {25}( 1.3.6.1.4.1.31267.1.1.26 NAME 'emsdnsreplicationmod
+ e' DESC 'EMS Dns Replication Mode' SUP emsdescription )
+olcAttributeTypes: {26}( 1.3.6.1.4.1.31267.1.1.27 NAME 'emsdnsmastercomputer
+ dn' DESC 'EMS Dns Master Computer DN' SUP emsdescription )
+olcAttributeTypes: {27}( 1.3.6.1.4.1.31267.1.1.28 NAME 'emsdnsrootzone' DESC
+  'ems dns root Zone ' SUP emsdescription )
+olcAttributeTypes: {28}( 1.3.6.1.4.1.31267.1.1.29 NAME 'emsmodulename' DESC
+ 'ems module name' SUP emsdescription )
+olcAttributeTypes: {29}( 1.3.6.1.4.1.31267.1.1.30 NAME 'emscaserver' DESC 'C
+ A Server' SUP name )
+olcAttributeTypes: {30}( 1.3.6.1.4.1.31267.1.1.31 NAME 'emscomputerarch' DES
+ C 'Computer Arch type' SUP name)
+olcAttributeTypes: {31}( 1.3.6.1.4.1.31267.1.1.32 NAME 'emsdnszonetype' DESC
+  'Ems DNS Zone Type' SUP emsdescription)
+olcAttributeTypes: {32}( 1.3.6.1.4.1.31267.1.1.33 NAME 'emsdistrodesc' DESC
+ 'Ems Distribution Description' SUP emsdescription)
+olcAttributeTypes: {33}( 1.3.6.1.4.1.31267.1.1.34 NAME 'emsdistrocodename'
+ DESC 'Ems Computer Distribution Codename' SUP emsdescription)
+olcAttributeTypes: {34}( 1.3.6.1.4.1.31267.1.1.35 NAME 'emssubchannels' DES
+ C 'Ems Subscribed Channels' SUP name)
+olcAttributeTypes: {35}( 1.3.6.1.4.1.31267.1.1.36 NAME 'emscomputercpucount' DES
+ C 'EMS Computer CPU count' SUP name)
+olcAttributeTypes: {36}( 1.3.6.1.4.1.31267.1.1.37 NAME 'emsdependson' DESC 'EMS
+ Dependency'SUP name)
+olcAttributeTypes: {37}( 1.3.6.1.4.1.31267.1.1.38 NAME 'emsaccountlockout' DESC
+ 'EMS Global Account Lockout' SUP name)
+olcObjectClasses: {0}( 1.3.6.1.4.1.31267.1.2.1 NAME 'ZvLdapObject' DESC 'EMS
+  Ldap Object' SUP top AUXILIARY MAY (emspermission $ emsdependson ))
+olcObjectClasses: {1}( 1.3.6.1.4.1.31267.1.2.2 NAME 'ZvCacheObject' DESC 'EM
+ S Cacheable Object' SUP ZvLdapObject AUXILIARY )
+olcObjectClasses: {2}( 1.3.6.1.4.1.31267.1.2.3 NAME 'emsSecurityObject' DESC
+  'EMS Security Object' SUP zvCacheObject AUXILIARY MAY emspermission )
+olcObjectClasses: {3}( 1.3.6.1.4.1.31267.1.2.4 NAME 'emsObject' DESC 'EMS Ob
+ ject' SUP zvCacheObject AUXILIARY MUST ( emsdescription $ cn ) MAY ( emsmod
+ elclass $ emstype $ emsmodulename ) )
+olcObjectClasses: {4}( 1.3.6.1.4.1.31267.1.2.5 NAME 'emsOrganizationalUnit'
+ DESC 'EMS Organizational Unit' SUP emsObject AUXILIARY MUST ( emsdescriptio
+ n $ emstype $ ou $ cn $ emscontainertype ) )
+olcObjectClasses: {5}( 1.3.6.1.4.1.31267.1.2.6 NAME 'emsGroup' DESC 'EMS Gro
+ up' SUP emsObject AUXILIARY MUST ( emsdescription $ emstype $ cn ) MAY ( em
+ splugins $ emsservicemap $ emsmodules ) )
+olcObjectClasses: {6}( 1.3.6.1.4.1.31267.1.2.7 NAME 'emsUser' DESC 'EMS User
+ ' SUP emsObject AUXILIARY MUST ( emsdescription $ emstype $ cn $ emsprimary
+ groupdn ) MAY ( emsplugins $ emsmodules $ emsaccountlockout ) )
+olcObjectClasses: {7}( 1.3.6.1.4.1.31267.1.2.8 NAME 'emsComputer' DESC 'EMS
+ Computer' SUP emsObject AUXILIARY MUST ( emsdescription $ emstype $ cn ) MA
+ Y ( emsmodules $ emsservicemap $ emsplugins $ emscomputervendormodel $ emscomp
+ utercpumhz $ emscomputercpucount $ emscomputersystem $ emscomputerram $ emscom
+ puterswap $ emscomputerdistro $ emscomputerdistrorelease $ sn $ uid $ emscompu
+ terarch $ emsdistrodesc $ emsdistrocodename $ emssubchannels) )
+olcObjectClasses: {8}( 1.3.6.1.4.1.31267.1.2.9 NAME 'emsKerberos' DESC 'EMS
+ Kerberos' SUP emsObject AUXILIARY MUST ( emsdescription $ emstype $ cn ) )
+olcObjectClasses: {9}( 1.3.6.1.4.1.31267.1.2.10 NAME 'emsHost' DESC 'EMS DNS
+  Host Entry' SUP emsObject AUXILIARY MUST ( emsdescription $ emstype $ cn )
+  )
+olcObjectClasses: {10}( 1.3.6.1.4.1.31267.1.2.11 NAME 'emsLocality' DESC 'EM
+ S Locality Entry' SUP emsObject AUXILIARY )
+olcObjectClasses: {11}( 1.3.6.1.4.1.31267.1.2.12 NAME 'emsUserContainer' DES
+ C 'EMS User Container' SUP emsOrganizationalUnit AUXILIARY MUST ( emsdescri
+ ption $ emstype $ cn ) )
+olcObjectClasses: {12}( 1.3.6.1.4.1.31267.1.2.13 NAME 'emsGroupContainer' DE
+ SC 'EMS Group' SUP emsOrganizationalUnit AUXILIARY MUST ( emsdescription $
+ emstype $ cn ) )
+olcObjectClasses: {13}( 1.3.6.1.4.1.31267.1.2.14 NAME 'emsComputerContainer'
+  DESC 'EMS Group' SUP emsOrganizationalUnit AUXILIARY MUST ( emsdescription
+  $ emstype $ cn ) )
+olcObjectClasses: {14}( 1.3.6.1.4.1.31267.1.2.15 NAME 'emsKrbContainer' DESC
+  'EMS Group' SUP emsObject AUXILIARY MUST ( emsdescription $ emstype $ cn )
+  )
+olcObjectClasses: {15}( 1.3.6.1.4.1.31267.1.2.16 NAME 'emsDNSContainer' DESC
+  'EMS Group' SUP emsObject AUXILIARY MUST ( emsdescription $ emstype $ cn )
+  )
+olcObjectClasses: {16}( 1.3.6.1.4.1.31267.1.2.17 NAME 'emsIgnore' DESC 'EMS
+ Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {17}( 1.3.6.1.4.1.31267.1.2.18 NAME 'emsDnsZone' DESC 'EMS
+  Ignore Object' SUP emsObject AUXILIARY MUST (emsdnszonetype) )
+olcObjectClasses: {18}( 1.3.6.1.4.1.31267.1.2.19 NAME 'emsDnsHostName' DESC
+ 'EMS Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {19}( 1.3.6.1.4.1.31267.1.2.20 NAME 'emsDnsRecord' DESC 'E
+ MS Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {20}( 1.3.6.1.4.1.31267.1.2.21 NAME 'emsDhcpServer' DESC '
+ EMS Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {21}( 1.3.6.1.4.1.31267.1.2.22 NAME 'emsDhcpService' DESC
+ 'EMS Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {22}( 1.3.6.1.4.1.31267.1.2.23 NAME 'emsDhcpSharedNetwork'
+  DESC 'EMS Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {23}( 1.3.6.1.4.1.31267.1.2.24 NAME 'emsDhcpSubnet' DESC '
+ EMS Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {24}( 1.3.6.1.4.1.31267.1.2.25 NAME 'emsDhcpPool' DESC 'EM
+ S Ignore Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {25}( 1.3.6.1.4.1.31267.1.2.26 NAME 'emsDhcpContainer' DES
+ C 'EMS Dhcp Container' SUP emsOrganizationalUnit AUXILIARY )
+olcObjectClasses: {26}( 1.3.6.1.4.1.31267.1.2.27 NAME 'emsOlcDatabase' DESC
+ 'EMS Exten Entry Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {27}( 1.3.6.1.4.1.31267.1.2.28 NAME 'emsCnConfig' DESC 'EM
+ S Cn Config Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {28}( 1.3.6.1.4.1.31267.1.2.29 NAME 'emsOlcSchema' DESC 'E
+ MS Schema Entry Object' SUP emsObject AUXILIARY )
+olcObjectClasses: {29}( 1.3.6.1.4.1.31267.1.2.30 NAME 'emsOlcSchemaConfig' D
+ ESC 'EMS Schema Collection Entry' SUP emsObject AUXILIARY )
+olcObjectClasses: {30}( 1.3.6.1.4.1.31267.1.2.31 NAME 'emsservice' DESC 'EMS
+  Service' SUP emsObject AUXILIARY MUST emsmodulename MAY ( emsmastercompute
+ rdn $ emscomputersdn ) )
+olcObjectClasses: {31}( 1.3.6.1.4.1.31267.1.2.32 NAME 'emsdnsservice' DESC '
+ EMS DNS Service' SUP emsservice AUXILIARY MUST ( emsdnsmastercomputerdn $ e
+ msdnsreplicationmode $ emsdnsrootzone ) MAY emsdnsslavecomputerdns )
+olcObjectClasses: {32}( 1.3.6.1.4.1.31267.1.2.33 NAME 'emsntpservice' DESC '
+ EMS NTP Service' SUP emsservice AUXILIARY MUST emsntpserver MAY ( emssubnet
+ broadcast $ emsstatisticsenable $ emsstatistics ) )
+olcObjectClasses: {33}( 1.3.6.1.4.1.31267.1.2.34 NAME 'emsldapservice' DESC
+ 'EMS LDAP Service' SUP emsservice AUXILIARY MUST emsldapserver )
+olcObjectClasses: {34}( 1.3.6.1.4.1.31267.1.2.35 NAME 'emskerberosservice' D
+ ESC 'EMS Kerberos Service' SUP emsservice AUXILIARY MUST emskrbserver )
+olcObjectClasses: {35}( 1.3.6.1.4.1.31267.1.2.36 NAME 'emsplugin' DESC 'EMS
+ Plugin' SUP ZvCacheObject AUXILIARY )
+olcObjectClasses: {36}( 1.3.6.1.4.1.31267.1.2.37 NAME 'emscaservice' DESC 'E
+ MS CA Service' SUP emsservice AUXILIARY MUST emscaserver )
+olcObjectClasses: {37}( 1.3.6.1.4.1.31267.1.2.38 NAME 'emscomputergroup' DES
+ C 'EMS Computer Group' SUP emsobject AUXILIARY MAY (member $ emssubchannels
+  $ emsmodules $ emsplugins))
diff --git a/confskel/openldap/ldif/hdb.ldif b/confskel/openldap/ldif/hdb.ldif
new file mode 100644
index 0000000..10f2651
--- /dev/null
+++ b/confskel/openldap/ldif/hdb.ldif
@@ -0,0 +1,39 @@
+dn: cn={@@@LDIFSCHEMANUMBER@@@}hdb
+objectClass: olcSchemaConfig
+cn: {@@@LDIFSCHEMANUMBER@@@}hdb
+olcAttributeTypes: {0}( 1.3.6.1.4.1.5322.10.1.1 NAME 'krb5PrincipalName' DESC 
+ 'The unparsed Kerberos principal name' EQUALITY caseExactIA5Match SYNTAX 1.3.
+ 6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
+olcAttributeTypes: {1}( 1.3.6.1.4.1.5322.10.1.2 NAME 'krb5KeyVersionNumber' EQ
+ UALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
+olcAttributeTypes: {2}( 1.3.6.1.4.1.5322.10.1.3 NAME 'krb5MaxLife' EQUALITY in
+ tegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
+olcAttributeTypes: {3}( 1.3.6.1.4.1.5322.10.1.4 NAME 'krb5MaxRenew' EQUALITY i
+ ntegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
+olcAttributeTypes: {4}( 1.3.6.1.4.1.5322.10.1.5 NAME 'krb5KDCFlags' EQUALITY i
+ ntegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
+olcAttributeTypes: {5}( 1.3.6.1.4.1.5322.10.1.6 NAME 'krb5EncryptionType' EQUA
+ LITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
+olcAttributeTypes: {6}( 1.3.6.1.4.1.5322.10.1.7 NAME 'krb5ValidStart' EQUALITY
+  generalizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.
+ 1.1466.115.121.1.24 SINGLE-VALUE )
+olcAttributeTypes: {7}( 1.3.6.1.4.1.5322.10.1.8 NAME 'krb5ValidEnd' EQUALITY g
+ eneralizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.
+ 1466.115.121.1.24 SINGLE-VALUE )
+olcAttributeTypes: {8}( 1.3.6.1.4.1.5322.10.1.9 NAME 'krb5PasswordEnd' EQUALIT
+ Y generalizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4
+ .1.1466.115.121.1.24 SINGLE-VALUE )
+olcAttributeTypes: {9}( 1.3.6.1.4.1.5322.10.1.10 NAME 'krb5Key' DESC 'Encoded 
+ ASN1 Key as an octet string' SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
+olcAttributeTypes: {10}( 1.3.6.1.4.1.5322.10.1.11 NAME 'krb5PrincipalRealm' DE
+ SC 'Distinguished name of krb5Realm entry' SUP distinguishedName )
+olcAttributeTypes: {11}( 1.3.6.1.4.1.5322.10.1.12 NAME 'krb5RealmName' EQUALIT
+ Y octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )
+olcObjectClasses: {0}( 1.3.6.1.4.1.5322.10.2.1 NAME 'krb5Principal' SUP top AU
+ XILIARY MUST krb5PrincipalName MAY ( cn $ krb5PrincipalRealm ) )
+olcObjectClasses: {1}( 1.3.6.1.4.1.5322.10.2.2 NAME 'krb5KDCEntry' SUP krb5Pri
+ ncipal AUXILIARY MUST krb5KeyVersionNumber MAY ( krb5ValidStart $ krb5ValidEn
+ d $ krb5PasswordEnd $ krb5MaxLife $ krb5MaxRenew $ krb5KDCFlags $ krb5Encrypt
+ ionType $ krb5Key ) )
+olcObjectClasses: {2}( 1.3.6.1.4.1.5322.10.2.3 NAME 'krb5Realm' SUP top AUXILI
+ ARY MUST krb5RealmName )
diff --git a/confskel/openldap/ldif/olcDatabase.ldif b/confskel/openldap/ldif/olcDatabase.ldif
new file mode 100644
index 0000000..303a756
--- /dev/null
+++ b/confskel/openldap/ldif/olcDatabase.ldif
@@ -0,0 +1,26 @@
+dn: olcDatabase={@@@LDIFSCHEMANUMBER@@@}hdb
+objectClass: olcDatabaseConfig
+objectClass: olcHdbConfig
+olcDatabase: {@@@LDIFSCHEMANUMBER@@@}hdb
+olcDbDirectory: /var/lib/ldap
+olcSuffix: @@@REALM_DCNAME@@@
+olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymou
+ s auth by dn="cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@" write by * none
+olcAccess: {1}to dn.base="" by * read
+olcAccess: {2}to * by self write by dn="cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@" write by 
+ * read
+olcLastMod: TRUE
+olcRootDN: cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@
+olcRootPW: {SHA}@@@ROOTPW_SHA@@@
+olcDbCheckpoint: 512 30
+olcDbConfig: {0}set_cachesize 0 2097152 0
+olcDbConfig: {1}set_lk_max_objects 1500
+olcDbConfig: {2}set_lk_max_locks 1500
+olcDbConfig: {3}set_lk_max_lockers 1500
+olcDbIndex: objectClass eq
+structuralObjectClass: olcHdbConfig
+creatorsName: cn=config
+createTimestamp: @@@TIMESTAMP@@@Z
+entryCSN: @@@TIMESTAMP@@@.000000Z#000000#000#000000
+modifiersName: cn=config
+modifyTimestamp: @@@TIMESTAMP@@@Z
diff --git a/confskel/openldap/ldif/tde-core.ldif b/confskel/openldap/ldif/tde-core.ldif
new file mode 100644
index 0000000..8670379
--- /dev/null
+++ b/confskel/openldap/ldif/tde-core.ldif
@@ -0,0 +1,10 @@
+dn: cn={@@@LDIFSCHEMANUMBER@@@}tde-core
+objectClass: olcSchemaConfig
+cn: {@@@LDIFSCHEMANUMBER@@@}tde-core
+olcAttributeTypes: {0}( 1.3.6.1.4.1.99999.1.1.1 NAME 'websiteURL' DESC 'Website URL' SUP name )
+olcAttributeTypes: {1}( 1.3.6.1.4.1.99999.1.1.2 NAME 'managerName' DESC 'Manager name' SUP name )
+olcAttributeTypes: {2}( 1.3.6.1.4.1.99999.1.1.3 NAME 'secretaryName' DESC 'Secretary name' SUP name )
+olcAttributeTypes: {3}( 1.3.6.1.4.1.99999.1.1.4 NAME 'teletexId' DESC 'Teletex ID' SUP name )
+olcAttributeTypes: {4}( 1.3.6.1.4.1.99999.1.1.5 NAME 'preferredDelivery' DESC 'Preferred delivery location' SUP name )
+olcAttributeTypes: {5}( 1.3.6.1.4.1.99999.1.1.6 NAME 'locallyUniqueID' DESC 'Locally unique identifier' SUP name )
+olcAttributeTypes: {6}( 1.3.6.1.4.1.99999.1.1.7 NAME 'notes' DESC 'Account notes' SUP name )
\ No newline at end of file
diff --git a/confskel/openldap/skel.ldif b/confskel/openldap/skel.ldif
index 8cb69c5..0320c2d 100644
--- a/confskel/openldap/skel.ldif
+++ b/confskel/openldap/skel.ldif
@@ -77,15 +77,13 @@ emsplugins: PosixGroup
 emsplugins: KerberosGroup
 emstype: GroupEntry
 gidNumber: 999
-objectClass: groupOfNames
 objectClass: emsGroup
 objectClass: posixGroup
 emsmodules: kerberos
 emsmodules: posix
-member: cn=placeholder,@@@REALM_DCNAME@@@
-member: uid=@@@ADMINUSER@@@,ou=users,ou=core,ou=realm,@@@REALM_DCNAME@@@
+memberUid: @@@ADMINUSER@@@
 emsmodelclass: EMSGroup
-structuralObjectClass: groupOfNames
+structuralObjectClass: posixGroup
 creatorsName: cn=@@@ROOTUSER@@@,@@@REALM_DCNAME@@@
 createTimestamp: @@@TIMESTAMP@@@Z
 entryCSN: @@@TIMESTAMP@@@.000000Z#000000#000#000000