Skip to content
Snippets Groups Projects
Commit 1cf42c0c authored by Kurt Zeilenga's avatar Kurt Zeilenga
Browse files

trim schema

parent ec714e82
No related branches found
No related tags found
No related merge requests found
......@@ -3,18 +3,12 @@ with slapd(8).
File Description
---- -----------
collective.schema Collective attributes
corba.schema Corba Object (RFC 2714)
core.schema OpenLDAP "core"
cosine.schema COSINE Pilot
inetorgperson.schema InetOrgPerson
java.schema Java Object (RFC 2713)
krb5-kdc.schema Kerberos V KDC (experimental)
microsoft.ext.schema Microsoft (FYI)
microsoft.schema Microsoft (FYI)
microsoft.std.schema Microsoft (FYI)
misc.schema misc (experimental)
nadf.schema North American Directory Forum (obsolete)
nis.schema Network Information Service
openldap.schema OpenLDAP Project (FYI)
......
#INTERNET-DRAFT Editor: Kurt D. Zeilenga
#Intended Category: Standard Track OpenLDAP Foundation
#Expires: 20 June 2002 20 December 2001
#
#
# Collective Attributes in LDAP
# <draft-zeilenga-ldap-collective-04.txt>
# [ portions trimmed ]
#Abstract
#
# X.500 collective attributes allow common characteristics to be shared
# between collections of entries. This document summarizes the X.500
# information model for collective attributes and describes use of
# collective attributes in LDAP (Lightweight Directory Access Protocol).
# This document provides schema definitions for collective attributes
# for use in LDAP.
#3. Collective Attribute Types
#
# A userApplications attribute type can be defined to be COLLECTIVE
# [RFC2252]. This indicates that the same attribute values will appear
# in the entries of an entry collection subject to the use of the
# collectiveExclusions attribute and other administrative controls.
#
# Collective attribute types are commonly defined as subtypes of non-
# collective attribute types. By convention, collective attributes are
# named by prefixing the name of their non-collective supertype with
# "c-". For example, the collective telephone attribute is named
# c-TelephoneNumber after its non-collective supertype telephoneNumber.
#
# Non-collective attributes types SHALL NOT subtype collective
# attributes.
#
# Collective attributes SHALL NOT be SINGLE-VALUED. Collective
# attribute types SHALL NOT appear in the attribute types of an object
# class definition.
#
# Operational attributes SHALL NOT be defined to be collective.
#
# The remainder of section provides a summary of collective attributes
# derived from those defined in [X.520]. Implementations of this
# specification SHOULD support the following collective attributes and
# MAY support additional collective attributes.
#
#
#3.1. Collective Locality Name
#
# The c-l attribute type specifies a locality name for a collection of
# entries.
#
attributeType ( 2.5.4.7.1 NAME 'c-l'
SUP l COLLECTIVE )
#
#
#3.2. Collective State or Province Name
#
# The c-st attribute type specifies a state or province name for a
# collection of entries.
#
attributeType ( 2.5.4.8.1 NAME 'c-st'
SUP st COLLECTIVE )
#
#
#3.3. Collective Street Address
#
# The c-street attribute type specifies a street address for a
# collection of entries.
#
attributeType ( 2.5.4.9.1 NAME 'c-street'
SUP street COLLECTIVE )
#
#
#3.4. Collective Organization Name
#
# The c-o attribute type specifies an organization name for a collection
# of entries.
#
attributeType ( 2.5.4.10.1 NAME 'c-o'
SUP o COLLECTIVE )
#
#
#3.5. Collective Organizational Unit Name
#
# The c-ou attribute type specifies an organizational unit name for a
# collection of entries.
#
attributeType ( 2.5.4.11.1 NAME 'c-ou'
SUP ou COLLECTIVE )
#
#
#3.6. Collective Postal Address
#
# The c-PostalAddress attribute type specifies a postal address for a
# collection of entries.
#
attributeType ( 2.5.4.16.1 NAME 'c-PostalAddress'
SUP postalAddress COLLECTIVE )
#
#
#3.7. Collective Postal Code
#
# The c-PostalCode attribute type specifies a postal code for a
# collection of entries.
#
attributeType ( 2.5.4.17.1 NAME 'c-PostalCode'
SUP postalCode COLLECTIVE )
#
#
#3.8. Collective Post Office Box
#
# The c-PostOfficeBox attribute type specifies a post office box for a
# collection of entries.
#
attributeType ( 2.5.4.18.1 NAME 'c-PostOfficeBox'
SUP postOfficeBox COLLECTIVE )
#
#
#3.9. Collective Physical Delivery Office Name
#
# The c-PhysicalDeliveryOfficeName attribute type specifies a physical
# delivery office name for a collection of entries.
#
attributeType ( 2.5.4.19.1 NAME 'c-PhysicalDeliveryOfficeName'
SUP physicalDeliveryOfficeName COLLECTIVE )
#
#
#3.10. Collective Telephone Number
#
# The c-TelephoneNumber attribute type specifies a telephone number for
# a collection of entries.
#
attributeType ( 2.5.4.20.1 NAME 'c-TelephoneNumber'
SUP telephoneNumber COLLECTIVE )
#
#
#3.11. Collective Telex Number
#
# The c-TelexNumber attribute type specifies a telex number for a
# collection of entries.
#
attributeType ( 2.5.4.21.1 NAME 'c-TelexNumber'
SUP telexNumber COLLECTIVE )
#
#
#3.13. Collective Facsimile Telephone Number
#
# The c-FacsimileTelephoneNumber attribute type specifies a facsimile
# telephone number for a collection of entries.
#
attributeType ( 2.5.4.23.1 NAME 'c-FacsimileTelephoneNumber'
SUP facsimileTelephoneNumber COLLECTIVE )
#
#
#3.14. Collective International ISDN Number
#
# The c-InternationalISDNNumber attribute type specifies an
# international ISDN number for a collection of entries.
#
attributeType ( 2.5.4.25.1 NAME 'c-InternationalISDNNumber'
SUP internationalISDNNumber COLLECTIVE )
# $OpenLDAP$
# $Id: hdb.schema,v 1.3 2000/02/22 21:51:53 lukeh Exp $
# Definitions for a Kerberos V KDC schema
#
# This schema is not usable as it contains invalid constructs.
# It is provided for informational purposes only.
#
# OID Base is iso(1) org(3) dod(6) internet(1) private(4) enterprise(1) padl(5322) kdcSchema(10)
#
# Syntaxes are under 1.3.6.1.4.1.5322.10.0
# Attributes types are under 1.3.6.1.4.1.5322.10.1
# Object classes are under 1.3.6.1.4.1.5322.10.2
# Syntax definitions
#krb5KDCFlagsSyntax SYNTAX ::= {
# WITH SYNTAX INTEGER
#-- initial(0), -- require as-req
#-- forwardable(1), -- may issue forwardable
#-- proxiable(2), -- may issue proxiable
#-- renewable(3), -- may issue renewable
#-- postdate(4), -- may issue postdatable
#-- server(5), -- may be server
#-- client(6), -- may be client
#-- invalid(7), -- entry is invalid
#-- require-preauth(8), -- must use preauth
#-- change-pw(9), -- change password service
#-- require-hwauth(10), -- must use hwauth
#-- ok-as-delegate(11), -- as in TicketFlags
#-- user-to-user(12), -- may use user-to-user auth
#-- immutable(13) -- may not be deleted
# ID { 1.3.6.1.4.1.5322.10.0.1 }
#}
#krb5PrincipalNameSyntax SYNTAX ::= {
# WITH SYNTAX OCTET STRING
#-- String representations of distinguished names as per RFC1510
# ID { 1.3.6.1.4.1.5322.10.0.2 }
#}
# Attribute type definitions
attributetype ( 1.3.6.1.4.1.5322.10.1.1
NAME 'krb5PrincipalName'
DESC 'The unparsed Kerberos principal name'
EQUALITY caseExactIA5Match
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.5322.10.1.2
NAME 'krb5KeyVersionNumber'
EQUALITY integerMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributetype ( 1.3.6.1.4.1.5322.10.1.3
NAME 'krb5MaxLife'
EQUALITY integerMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributetype ( 1.3.6.1.4.1.5322.10.1.4
NAME 'krb5MaxRenew'
EQUALITY integerMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributetype ( 1.3.6.1.4.1.5322.10.1.5
NAME 'krb5KDCFlags'
EQUALITY integerMatch
SINGLE-VALUE
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributetype ( 1.3.6.1.4.1.5322.10.1.6
NAME 'krb5EncryptionType'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributetype ( 1.3.6.1.4.1.5322.10.1.7
NAME 'krb5ValidStart'
ORDERING generalizedTimeOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.5322.10.1.8
NAME 'krb5ValidEnd'
ORDERING generalizedTimeOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.5322.10.1.9
NAME 'krb5PasswordEnd'
ORDERING generalizedTimeOrderingMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
SINGLE-VALUE )
# this is temporary; keys will eventually
# be child entries or compound attributes.
attributetype ( 1.3.6.1.4.1.5322.10.1.10
NAME 'krb5Key'
DESC 'Encoded ASN1 Key as an octet string'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
attributetype ( 1.3.6.1.4.1.5322.10.1.11
NAME 'krb5PrincipalRealm'
DESC 'Distinguished name of krb5Realm entry'
SUP distinguishedName )
attributetype ( 1.3.6.1.4.1.5322.10.1.12
NAME 'krb5RealmName'
EQUALITY octetStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )
# Object class definitions
objectclass ( 1.3.6.1.4.1.5322.10.2.1
NAME 'krb5Principal'
SUP top
AUXILIARY
MUST ( krb5PrincipalName )
MAY ( cn $ krb5PrincipalRealm ) )
objectclass ( 1.3.6.1.4.1.5322.10.2.2
NAME 'krb5KDCEntry'
SUP krb5Principal
AUXILIARY
MUST ( krb5KeyVersionNumber )
MAY ( krb5ValidStart $ krb5ValidEnd $ krb5PasswordEnd $
krb5MaxLife $ krb5MaxRenew $ krb5KDCFlags $
krb5EncryptionType $ krb5Key ) )
objectclass ( 1.3.6.1.4.1.5322.10.2.3
NAME 'krb5Realm'
SUP top
AUXILIARY
MUST ( krb5RealmName ) )
This diff is collapsed.
This diff is collapsed.
# $OpenLDAP$
# This file is for informational purposes only
# These definitions are from Microsoft's Active Directory.
# They were gathered using the subschemaSubentry object of
# Windows 2000 Advanced Server Release Candidate 2.
# These object classes and attributes are from the standard
# OID arc 2.5.6 and from the directory pilot project RFC-1274.
# Many of them have been modified in Active Directory. To
# adhere to the standard, DO NOT USE THIS FILE. Instead, use
# core.schema.
objectclass ( 2.5.6.0
NAME 'top'
ABSTRACT
MUST (objectClass $ instanceType $ nTSecurityDescriptor $
objectCategory )
MAY (cn $ description $ distinguishedName $ whenCreated $
whenChanged $ subRefs $ displayName $ uSNCreated $ isDeleted $
dSASignature $ objectVersion $ repsTo $ repsFrom $ memberOf $
uSNChanged $ uSNLastObjRem $ showInAdvancedViewOnly $
adminDisplayName $ proxyAddresses $ adminDescription $
extensionName $ uSNDSALastObjRemoved $ displayNamePrintable $
directReports $ wWWHomePage $ USNIntersite $ name $ objectGUID $
replPropertyMetaData $ replUpToDateVector $ flags $ revision $
wbemPath $ fSMORoleOwner $ systemFlags $ siteObjectBL $
serverReferenceBL $ nonSecurityMemberBL $ queryPolicyBL $
wellKnownObjects $ isPrivilegeHolder $ partialAttributeSet $
managedObjects $ partialAttributeDeletionList $ url $
lastKnownParent $ bridgeheadServerListBL $ netbootSCPBL $
isCriticalSystemObject $ frsComputerReferenceBL $
fRSMemberReferenceBL $ uSNSource $ fromEntry $
allowedChildClasses $ allowedChildClassesEffective $
allowedAttributes $ allowedAttributesEffective $
possibleInferiors $ canonicalName $ proxiedObjectName $
sDRightsEffective $ dSCorePropagationData $
otherWellKnownObjects $ mS-DS-ConsistencyGuid $
mS-DS-ConsistencyChildCount $ masteredBy $ createTimeStamp $
modifyTimeStamp $ subSchemaSubEntry ) )
objectclass ( 2.5.6.2
NAME 'country'
SUP top
ABSTRACT
MUST (c )
MAY (searchGuide $ co ) )
objectclass ( 2.5.6.3
NAME 'locality'
SUP top
STRUCTURAL
MUST (l )
MAY (st $ street $ searchGuide $ seeAlso ) )
objectclass ( 2.5.6.4
NAME 'organization'
SUP top
STRUCTURAL
MUST (o )
MAY (l $ st $ street $ searchGuide $ businessCategory $ postalAddress $
postalCode $ postOfficeBox $ physicalDeliveryOfficeName $
telephoneNumber $ telexNumber $ teletexTerminalIdentifier $
facsimileTelephoneNumber $ x121Address $ internationalISDNNumber $
registeredAddress $ destinationIndicator $ preferredDeliveryMethod $
seeAlso $ userPassword ) )
objectclass ( 2.5.6.5
NAME 'organizationalUnit'
SUP top
STRUCTURAL
MUST (ou )
MAY (c $ l $ st $ street $ searchGuide $ businessCategory $
postalAddress $ postalCode $ postOfficeBox $
physicalDeliveryOfficeName $ telephoneNumber $ telexNumber $
teletexTerminalIdentifier $ facsimileTelephoneNumber $ x121Address $
internationalISDNNumber $ registeredAddress $ destinationIndicator $
preferredDeliveryMethod $ seeAlso $ userPassword $ co $ countryCode $
desktopProfile $ defaultGroup $ managedBy $ uPNSuffixes $ gPLink $
gPOptions $ thumbnailLogo ) )
objectclass ( 2.5.6.6
NAME 'person'
SUP top
ABSTRACT
MUST (cn )
MAY (sn $ telephoneNumber $ seeAlso $ userPassword ) )
objectclass ( 2.5.6.7
NAME 'organizationalPerson'
SUP person
ABSTRACT
MAY (c $ l $ st $ street $ o $ ou $ title $ postalAddress $ postalCode $
postOfficeBox $ physicalDeliveryOfficeName $ telexNumber $
teletexTerminalIdentifier $ facsimileTelephoneNumber $ x121Address $
internationalISDNNumber $ registeredAddress $ destinationIndicator $
preferredDeliveryMethod $ givenName $ initials $ generationQualifier $
otherTelephone $ otherPager $ co $ department $ company $
streetAddress $ otherHomePhone $ personalTitle $ homePostalAddress $
countryCode $ employeeID $ comment $ division $
otherFacsimileTelephoneNumber $ otherMobile $ primaryTelexNumber $
primaryInternationalISDNNumber $ mhsORAddress $ otherMailbox $
assistant $ ipPhone $ otherIpPhone $ mail $ manager $ homePhone $
mobile $ pager $ middleName $ thumbnailPhoto $ thumbnailLogo ) )
objectclass ( 2.5.6.8
NAME 'organizationalRole'
SUP top
STRUCTURAL
MUST (cn )
MAY (l $ st $ street $ ou $ postalAddress $ postalCode $ postOfficeBox $
physicalDeliveryOfficeName $ telephoneNumber $ telexNumber $
teletexTerminalIdentifier $ facsimileTelephoneNumber $ x121Address $
internationalISDNNumber $ registeredAddress $ destinationIndicator $
preferredDeliveryMethod $ roleOccupant $ seeAlso ) )
objectclass ( 2.5.6.9
NAME 'groupOfNames'
SUP top
ABSTRACT
MUST (cn $ member )
MAY (o $ ou $ businessCategory $ owner $ seeAlso ) )
objectclass ( 2.5.6.10
NAME 'residentialPerson'
SUP person
STRUCTURAL
MAY (l $ st $ street $ ou $ title $ businessCategory $ postalAddress $
postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ telexNumber $
teletexTerminalIdentifier $ facsimileTelephoneNumber $ x121Address $
internationalISDNNumber $ registeredAddress $ destinationIndicator $
preferredDeliveryMethod ) )
objectclass ( 2.5.6.11
NAME 'applicationProcess'
SUP top
STRUCTURAL
MUST (cn )
MAY (l $ ou $ seeAlso ) )
objectclass ( 2.5.6.12
NAME 'applicationEntity'
SUP top
STRUCTURAL
MUST (cn $ presentationAddress )
MAY (l $ o $ ou $ supportedApplicationContext $ seeAlso ) )
objectclass ( 2.5.6.13
NAME 'dSA'
SUP applicationEntity
STRUCTURAL
MAY (knowledgeInformation ) )
objectclass ( 2.5.6.14
NAME 'device'
SUP top
ABSTRACT
MUST (cn )
MAY (serialNumber $ l $ o $ ou $ owner $ seeAlso ) )
objectclass ( 2.5.6.16
NAME 'certificationAuthority'
SUP top
STRUCTURAL
MUST (cn $ cACertificate $ authorityRevocationList $
certificateRevocationList )
MAY (searchGuide $ teletexTerminalIdentifier $ supportedApplicationContext $
crossCertificatePair $ deltaRevocationList $ domainPolicyObject $
parentCA $ dNSHostName $ parentCACertificateChain $ domainID $
cAConnect $ cAWEBURL $ cRLObject $ cAUsages $ previousCACertificates $
pendingCACertificates $ previousParentCA $ pendingParentCA $
currentParentCA $ cACertificateDN $ certificateTemplates $
signatureAlgorithms $ enrollmentProviders ) )
objectclass ( 2.5.6.19
NAME 'cRLDistributionPoint'
SUP top
STRUCTURAL
MUST (cn )
MAY (authorityRevocationList $ certificateRevocationList $
deltaRevocationList $ cRLPartitionedRevocationList $
certificateAuthorityObject ) )
objectclass ( 2.5.20.1
NAME 'subSchema'
SUP top
STRUCTURAL
MAY (extendedClassInfo $ extendedAttributeInfo $ dITContentRules $
attributeTypes $ objectClasses $ modifyTimeStamp ) )
#####################################################
attributetype ( 2.5.4.0
NAME 'objectClass'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.38'
NO-USER-MODIFICATION )
attributetype ( 2.5.4.2
NAME 'knowledgeInformation'
SYNTAX '1.2.840.113556.1.4.905' )
attributetype ( 2.5.4.3
NAME 'cn'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.4
NAME 'sn'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.5
NAME 'serialNumber'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.44' )
attributetype ( 2.5.4.6
NAME 'c'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.7
NAME 'l'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.8
NAME 'st'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.9
NAME 'street'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.10
NAME 'o'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )
attributetype ( 2.5.4.11
NAME 'ou'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )
attributetype ( 2.5.4.12
NAME 'title'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.13
NAME 'description'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )
attributetype ( 2.5.4.14
NAME 'searchGuide'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.15
NAME 'businessCategory'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )
attributetype ( 2.5.4.16
NAME 'postalAddress'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )
attributetype ( 2.5.4.17
NAME 'postalCode'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.18
NAME 'postOfficeBox'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )
attributetype ( 2.5.4.19
NAME 'physicalDeliveryOfficeName'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.20
NAME 'telephoneNumber'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.21
NAME 'telexNumber'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.22
NAME 'teletexTerminalIdentifier'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.23
NAME 'facsimileTelephoneNumber'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.24
NAME 'x121Address'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.36' )
attributetype ( 2.5.4.25
NAME 'internationalISDNNumber'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.36' )
attributetype ( 2.5.4.26
NAME 'registeredAddress'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.27
NAME 'destinationIndicator'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.44' )
attributetype ( 2.5.4.28
NAME 'preferredDeliveryMethod'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.27' )
attributetype ( 2.5.4.29
NAME 'presentationAddress'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.43'
SINGLE-VALUE )
attributetype ( 2.5.4.30
NAME 'supportedApplicationContext'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.31
NAME 'member'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )
attributetype ( 2.5.4.32
NAME 'owner'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
SINGLE-VALUE )
attributetype ( 2.5.4.33
NAME 'roleOccupant'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )
attributetype ( 2.5.4.34
NAME 'seeAlso'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )
attributetype ( 2.5.4.35
NAME 'userPassword'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.36
NAME 'userCertificate'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.37
NAME 'cACertificate'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.38
NAME 'authorityRevocationList'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.39
NAME 'certificateRevocationList'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40'
SINGLE-VALUE )
attributetype ( 2.5.4.40
NAME 'crossCertificatePair'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.4.42
NAME 'givenName'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.43
NAME 'initials'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.44
NAME 'generationQualifier'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.5.4.49
NAME 'distinguishedName'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
SINGLE-VALUE
NO-USER-MODIFICATION )
attributetype ( 2.5.4.53
NAME 'deltaRevocationList'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
attributetype ( 2.5.18.1
NAME 'createTimeStamp'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.24'
SINGLE-VALUE
NO-USER-MODIFICATION )
attributetype ( 2.5.18.2
NAME 'modifyTimeStamp'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.24'
SINGLE-VALUE
NO-USER-MODIFICATION )
attributetype ( 2.5.18.10
NAME 'subSchemaSubEntry'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
NO-USER-MODIFICATION )
attributetype ( 2.5.21.2
NAME 'dITContentRules'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
NO-USER-MODIFICATION )
attributetype ( 2.5.21.5
NAME 'attributeTypes'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
NO-USER-MODIFICATION )
attributetype ( 2.5.21.6
NAME 'objectClasses'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
NO-USER-MODIFICATION )
attributetype ( 2.16.840.1.113730.3.1.34
NAME 'middleName'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 2.16.840.1.113730.3.1.35
NAME 'thumbnailPhoto'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40'
SINGLE-VALUE )
attributetype ( 2.16.840.1.113730.3.1.36
NAME 'thumbnailLogo'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40'
SINGLE-VALUE )
attributetype ( 2.16.840.1.113730.3.140
NAME 'userSMIMECertificate'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.40' )
#####################################################
attributetype ( 0.9.2342.19200300.100.1.2
NAME 'textEncodedORAddress'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 0.9.2342.19200300.100.1.3
NAME 'mail'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 0.9.2342.19200300.100.1.10
NAME 'manager'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.12'
SINGLE-VALUE )
attributetype ( 0.9.2342.19200300.100.1.20
NAME 'homePhone'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 0.9.2342.19200300.100.1.25
NAME 'dc'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 0.9.2342.19200300.100.1.41
NAME 'mobile'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
attributetype ( 0.9.2342.19200300.100.1.42
NAME 'pager'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
SINGLE-VALUE )
# $OpenLDAP$
# These are definitions from the North American Directory Forum
# They are intended to be used with QUIPU/X.500 not LDAPv3.
# Your mileage may vary.
# They were acquired from ftp://ftp.gte.com/pub/nadf/nadf-docs/sd-04.ps
# Our thanks to Harald T. Alvestrand that provided the pointer.
# This is a preliminary version and is likely to be incorrect in
# a number of areas. Use with exterme caution.
# The root for OIDs is joint-iso-ccitt mhs-motis(6) group(6) grimstad(5)
# nadf(2). In othor words, barring any error, 2.6.6.5.2. Then,
# nadfOink ::= 2.6.6.5.2.0
# nadfModule ::= 2.6.6.5.2.1
# nadfAttributeType ::= 2.6.6.5.2.4
# nadfObjectClass ::= 2.6.6.5.2.6
# Attribute Type Definition
attributetype ( 2.6.6.5.2.4.1 NAME 'fipsStateNumericCode'
EQUALITY numericStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{2} )
# It is probably inconvenient to give this attribute that syntax
# (Printable String) instead of Directory String.
attributetype ( 2.6.6.5.2.4.2 NAME 'fipsStateAlphaCode'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{2} )
attributetype ( 2.6.6.5.2.4.3 NAME 'fipsCountyNumericCode'
EQUALITY numericStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{5} )
# It seems that fips55 is fipsPlaceNumericCode, is this so?
attributetype ( 2.6.6.5.2.4.4 NAME ( 'fipsPlaceNumericCode' 'fips55' )
EQUALITY numericStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{5} )
attributetype ( 2.6.6.5.2.4.5 NAME 'ansiOrgNumericCode'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
# Apparently, 'ad' is an alias for 'addmdName'
attributetype ( 2.6.6.5.2.4.6 NAME ( 'addmdName' 'ad' )
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
# I don't know what syntax to give this. I will use binary for the
# time being.
attributetype ( 2.6.6.5.2.4.7 NAME 'nadfSearchGuide'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
attributetype ( 2.6.6.5.2.4.8 NAME 'supplementaryInformation'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{76} )
attributetype ( 2.6.6.5.2.4.9 NAME 'namingLink'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributetype ( 2.6.6.5.2.4.10 NAME 'reciprocalNamingLink'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
SINGLE-VALUE )
# Numbers 11 to 14 are obsolete
# Next one is unused. BTW, this attribute is supposed to be
# case-exact match, but we cannot make that match unless we
# define the string with IA5 syntax and we don't have a
# clear base for this.
attributetype ( 2.6.6.5.2.4.15 NAME 'logicalDSAReference'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 2.6.6.5.2.4.16 NAME 'multiMediaInformation'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
# Number 17, 18 and 19 are EDI-related attributes for the nadfEDIUser
# class that we did not have and has been left out below.
# Object classes
# According to the intended use described in section 3.3.1 in the spec,
# this can only be ABSTRACT.
# We had lastModifiedTime as 'allows', but sd-04 has it as MUST.
# We did not have multiMediaInformation neither on this class nor
# on any of its derived classes.
objectclass ( 2.6.6.5.2.6.7 NAME 'nadfObject' SUP top ABSTRACT
MUST lastModifiedTime
MAY ( multiMediaInformation $ nadfSearchGuide $
supplementaryInformation ) )
# I think all classes derived from locality should be considered
# STRUCTURAL, since locality is.
objectclass ( 2.6.6.5.2.6.1 NAME 'usStateOrEquivalent'
SUP ( locality $ nadfObject ) STRUCTURAL
MUST ( l $ fipsStateNumericCode $ fipsStateAlphaCode $ st ) )
objectclass ( 2.6.6.5.2.6.2 NAME 'usPlace'
SUP ( locality $ nadfObject ) STRUCTURAL
MUST ( l $ fipsPlaceNumericCode ) )
objectclass ( 2.6.6.5.2.6.3 NAME 'usCountyOrEquivalent' SUP usPlace STRUCTURAL
MUST fipsCountyNumericCode )
# applicationEntity is STRUCTURAL, so we will declare this one the same
objectclass ( 2.6.6.5.2.6.5 NAME 'nadfApplicationEntity'
SUP applicationEntity STRUCTURAL
MUST supportedApplicationContext )
# Following our heuristic, this one will be STRUCTURAL since organization
# is too. We did not have 'o' as 'requires', but if this is really a
# subclass of organization, then 'o' becomes MUST by inheritance
objectclass ( 2.6.6.5.2.6.6 NAME 'nadfADDMD'
SUP ( organization $ nadfObject ) STRUCTURAL
MUST addmdName )
# Number 7 is nadfObject described above.
# This one quacks like an AUXILIARY object class
objectclass ( 2.6.6.5.2.6.8 NAME 'publicObject' SUP top AUXILIARY
MUST namingLink )
# And so does this one
objectclass ( 2.6.6.5.2.6.9 NAME 'providerObject' SUP top AUXILIARY
MUST reciprocalNamingLink )
# The spec says number 10 is obsolete
# This one also strongly smells like AUXILIARY
objectclass ( 2.6.6.5.2.6.11 NAME 'fips55Object' SUP top AUXILIARY
MUST fipsPlaceNumericCode
MAY st )
# The spec says numbers 12 to 18 are obsolete
# Another obviously AUXILIARY class
objectclass ( 2.6.6.5.2.6.19 NAME 'nationalObject' SUP top AUXILIARY
MUST c )
# So is this one
objectclass ( 2.6.6.5.2.6.20 NAME 'ansiOrgObject' SUP top AUXILIARY
MUST ansiOrgNumericCode )
# We did not have the next one, but it is innocuous
objectclass ( 2.6.6.5.2.6.21 NAME 'caProvinceOrTerritory'
SUP ( locality $ nadfObject ) STRUCTURAL
MUST st )
# According to the spec, numbers 22, 23 and 24 are obsolete
# Number 25 was nadfEDIuser as a subclass of edi-user. Sorry we cannot
# deal with this one and we did not have it anyway.
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment