Added a missing attribute: tokenGroupsGlobalAndUniversal. It exists

in Active Directory.

diff --git a/servers/slapd/schema/microsoft.schema b/servers/slapd/schema/microsoft.schema
index a2fe7a035b2f91953acf1232530cc9c67248d8bc..fcb3b12ef61b51b7381b63b85b3422c54ba5d520 100644 (file)
--- a/servers/slapd/schema/microsoft.schema
+++ b/servers/slapd/schema/microsoft.schema
@@ -254,7 +254,8 @@ objectclass ( 1.2.840.113556.1.5.6
        MUST (objectSid $ sAMAccountName )
        MAY (nTSecurityDescriptor $ securityIdentifier $ supplementalCredentials $
                rid $ sAMAccountType $ sIDHistory $ altSecurityIdentities $ tokenGroups $
-               tokenGroupsNoGCAcceptable $ accountNameHistory ) )
+               tokenGroupsNoGCAcceptable $ accountNameHistory  $
+               tokenGroupsGlobalAndUniversal) )
 
 objectclass ( 1.2.840.113556.1.5.162
        NAME 'mSMQConfiguration'
@@ -4106,6 +4107,10 @@ attributetype ( 1.2.840.113556.1.4.1303
        NAME 'tokenGroupsNoGCAcceptable'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
 
+attributetype ( 1.2.840.113556.1.4.1418
+       NAME 'tokenGroupsGlobalAndUniversal'
+       SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
+
 attributetype ( 1.2.840.113556.1.4.1190
        NAME 'msRASSavedFramedIPAddress'
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.27'