From f07d8e7110eeb62a4d697759b1c0046eeb46b7b0 Mon Sep 17 00:00:00 2001
From: Lars Gebhardt-Kusche <lars@kusche.berlin>
Date: Mon, 15 Jun 2026 21:55:13 +0200
Subject: [PATCH] dsfdf

---
 src/App/LdapProvisioner.php         | 3 ++-
 src/App/RegistrationLdifBuilder.php | 7 ++++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/App/LdapProvisioner.php b/src/App/LdapProvisioner.php
index 99b92fdd..8432b31e 100644
--- a/src/App/LdapProvisioner.php
+++ b/src/App/LdapProvisioner.php
@@ -329,6 +329,7 @@ final class LdapProvisioner
                 'organizationalPerson',
                 'person',
                 'posixAccount',
+                'sambaIdmapEntry',
                 'sambaSamAccount',
                 'shadowAccount',
                 'top',
@@ -345,7 +346,6 @@ final class LdapProvisioner
             'givenName' => $givenName,
             'loginShell' => $loginShell,
             'mail' => $mail,
-            'pwdLastSet' => '0',
             'sambaAcctFlags' => '[U          ]',
             'sambaLMPassword' => 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX',
             'sambaNTPassword' => $ntHash,
@@ -366,6 +366,7 @@ final class LdapProvisioner
             array_unshift($entry['objectClass'], 'apple-user');
             $entry['apple-generateduid'] = $appleGeneratedUid;
             $entry['authAuthority'] = ';basic;';
+            $entry['pwdLastSet'] = '0';
         }
 
         return $entry;
diff --git a/src/App/RegistrationLdifBuilder.php b/src/App/RegistrationLdifBuilder.php
index 8adf6ba1..cc9aff7c 100644
--- a/src/App/RegistrationLdifBuilder.php
+++ b/src/App/RegistrationLdifBuilder.php
@@ -82,6 +82,7 @@ final class RegistrationLdifBuilder
         $lines[] = 'objectClass: organizationalPerson';
         $lines[] = 'objectClass: person';
         $lines[] = 'objectClass: posixAccount';
+        $lines[] = 'objectClass: sambaIdmapEntry';
         $lines[] = 'objectClass: sambaSamAccount';
         $lines[] = 'objectClass: shadowAccount';
         $lines[] = 'objectClass: top';
@@ -132,11 +133,15 @@ final class RegistrationLdifBuilder
             $lines[] = 'memberOf: ' . $groupDn;
         }
 
-        $lines[] = 'pwdLastSet: 0';
         $lines[] = 'sambaAcctFlags: [U          ]';
         $lines[] = 'sambaLMPassword: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX';
         $lines[] = 'sambaPasswordHistory: 0000000000000000000000000000000000000000000000000000000000000000';
         $lines[] = 'sambaPwdLastSet: 0';
+
+        if ($appleSchemaEnabled) {
+            $lines[] = 'pwdLastSet: 0';
+        }
+
         $lines[] = 'shadowExpire: ' . $shadowExpire;
         $lines[] = 'shadowFlag: ' . $shadowFlag;
         $lines[] = 'shadowInactive: ' . $shadowInactive;