Extend LDAP schema
    
    The objectclass ipaIDobject can be used to reserve local UIDs, GIDs or
    SIDs for objects that are no neither users nor groups.
    
    The ipa*IDRange objectclasses will be used to store the used Posix ID
    ranges of the local domains (ipaDomainIDRange) or the ranges reserved
    for AD domains (ipaTrustedADDomainRange). To be able to map the Posix
    IDs to a RID and back the corresponding ranges can be saved here as
    well.