#
# rfc2307bis.schema
#
# Extracted from http://tools.ietf.org/id/draft-howard-rfc2307bis-02.txt
# as of 2012/05/25, by Robin H. Johnson <[email protected]>
#
# Updated on 2014/05/23 by Jorge Manuel B. S. Vicetto <[email protected]>
# Remove extraneous "'" characters, replace SUBSTRINGS with SUBSTR, add missing
# MAY section to nisObject, drop authPassword as it's still not supported by
# openldap and add SUBSTR matching rule for memberUid.

# Attribute Type Definitions

#attributetype     ( 1.3.6.1.1.1.1.0 NAME 'uidNumber'
#         DESC 'An integer uniquely identifying a user in an
#               administrative domain'
#         EQUALITY integerMatch
#         ORDERING integerOrderingMatch
#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
#         SINGLE-VALUE )
#
#
#attributetype     ( 1.3.6.1.1.1.1.1 NAME 'gidNumber'
#         DESC 'An integer uniquely identifying a group in an
#               administrative domain'
#         EQUALITY integerMatch
#         ORDERING integerOrderingMatch
#         SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
#         SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.2 NAME 'gecos'
        DESC 'The GECOS field; the common name'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory'
        DESC 'The absolute path to the home directory'
        EQUALITY caseExactIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.4 NAME 'loginShell'
        DESC 'The path to the login shell'
        EQUALITY caseExactIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
        SINGLE-VALUE )


attributetype    ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.6 NAME 'shadowMin'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.7 NAME 'shadowMax'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.12 NAME 'memberUid'
        EQUALITY caseExactMatch
        SUBSTR caseExactSubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )


attributetype     ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )


attributetype     ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
        DESC 'Netgroup triple'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )


attributetype     ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort'
        DESC 'Service port number'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol'
        DESC 'Service protocol name'
        EQUALITY caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )


attributetype     ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber'
        DESC 'IP protocol number'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber'
        DESC 'ONC RPC number'
        EQUALITY integerMatch
        ORDERING integerOrderingMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber'
        DESC 'IPv4 addresses as a dotted decimal omitting leading
              zeros or IPv6 addresses as defined in RFC2373'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )


attributetype     ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber'
        DESC 'IP network omitting leading zeros, eg. 192.168'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber'
        DESC 'IP netmask omitting leading zeros, eg. 255.255.255.0'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.22 NAME 'macAddress'
        DESC 'MAC address in maximal, colon separated hex
              notation, eg. 00:00:92:90:ee:e2'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )


attributetype     ( 1.3.6.1.1.1.1.23 NAME 'bootParameter'
        DESC 'rpc.bootparamd parameter'
        EQUALITY caseExactIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )


attributetype     ( 1.3.6.1.1.1.1.24 NAME 'bootFile'
        DESC 'Boot image name'
        EQUALITY caseExactIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )


attributetype     ( 1.3.6.1.1.1.1.26 NAME 'nisMapName'
        DESC 'Name of a generic NIS map'
        EQUALITY caseIgnoreMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{64} )


attributetype     ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry'
        DESC 'A generic NIS entry'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024}
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.28 NAME 'nisPublicKey'
        DESC 'NIS public key'
        EQUALITY octetStringMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.29 NAME 'nisSecretKey'
        DESC 'NIS secret key'
        EQUALITY octetStringMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.30 NAME 'nisDomain'
        DESC 'NIS domain'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )


attributetype     ( 1.3.6.1.1.1.1.31 NAME 'automountMapName'
        DESC 'automount Map Name'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.32 NAME 'automountKey'
        DESC 'Automount Key value'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
        SINGLE-VALUE )


attributetype     ( 1.3.6.1.1.1.1.33 NAME 'automountInformation'
        DESC 'Automount information'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
        SINGLE-VALUE )


# Object Class Definitions

objectclass     ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' SUP top AUXILIARY
        DESC 'Abstraction of an account with POSIX attributes'
        MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory )
        MAY ( userPassword $ loginShell $ gecos $
              description ) )


objectclass     ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' SUP top AUXILIARY
        DESC 'Additional attributes for shadow passwords'
        MUST uid
        MAY ( userPassword $ description $
              shadowLastChange $ shadowMin $ shadowMax $
              shadowWarning $ shadowInactive $
              shadowExpire $ shadowFlag ) )


objectclass     ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' SUP top AUXILIARY
        DESC 'Abstraction of a group of accounts'
        MUST gidNumber
        MAY ( userPassword $ memberUid $
              description ) )


objectclass     ( 1.3.6.1.1.1.2.3 NAME 'ipService' SUP top STRUCTURAL
        DESC 'Abstraction an Internet Protocol service.
              Maps an IP port and protocol (such as tcp or udp)
              to one or more names; the distinguished value of
              the cn attribute denotes the canonical name of the
              service'
        MUST ( cn $ ipServicePort $ ipServiceProtocol )
        MAY description )


objectclass     ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' SUP top STRUCTURAL
        DESC 'Abstraction of an IP protocol. Maps a protocol number
              to one or more names. The distinguished value of the cn
              attribute denotes the protocol canonical name'
        MUST ( cn $ ipProtocolNumber )
        MAY description )


objectclass     ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' SUP top STRUCTURAL
        DESC 'Abstraction of an Open Network Computing (ONC)
             [RFC1057] Remote Procedure Call (RPC) binding.
             This class maps an ONC RPC number to a name.
             The distinguished value of the cn attribute denotes
             the canonical name of the RPC service'
        MUST ( cn $ oncRpcNumber )
        MAY description )


objectclass     ( 1.3.6.1.1.1.2.6 NAME 'ipHost' SUP top AUXILIARY
        DESC 'Abstraction of a host, an IP device. The distinguished
              value of the cn attribute denotes the canonical name of
              the host. Device SHOULD be used as a structural class'
        MUST ( cn $ ipHostNumber )
        MAY ( userPassword $ l $ description $
              manager ) )


objectclass     ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' SUP top STRUCTURAL
        DESC 'Abstraction of a network. The distinguished value of
              the cn attribute denotes the network canonical name'
        MUST ipNetworkNumber
        MAY ( cn $ ipNetmaskNumber $ l $ description $ manager ) )


objectclass     ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL
        DESC 'Abstraction of a netgroup. May refer to other
              netgroups'
        MUST cn
        MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) )


objectclass     ( 1.3.6.1.1.1.2.9 NAME 'nisMap' SUP top STRUCTURAL
        DESC 'A generic abstraction of a NIS map'
        MUST nisMapName
        MAY description )


objectclass     ( 1.3.6.1.1.1.2.10 NAME 'nisObject' SUP top STRUCTURAL
        DESC 'An entry in a NIS map'
        MUST ( cn $ nisMapEntry $ nisMapName )
        MAY description )


objectclass     ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' SUP top AUXILIARY
        DESC 'A device with a MAC address; device SHOULD be
              used as a structural class'
        MAY macAddress )


objectclass     ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' SUP top AUXILIARY
        DESC 'A device with boot parameters; device SHOULD be
              used as a structural class'
        MAY ( bootFile $ bootParameter ) )


objectclass     ( 1.3.6.1.1.1.2.14 NAME 'nisKeyObject' SUP top AUXILIARY
        DESC 'An object with a public and secret key'
        MUST ( cn $ nisPublicKey $ nisSecretKey )
        MAY ( uidNumber $ description ) )


objectclass     ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top AUXILIARY
        DESC 'Associates a NIS domain with a naming context'
        MUST nisDomain )


objectclass     ( 1.3.6.1.1.1.2.16 NAME 'automountMap' SUP top STRUCTURAL
        MUST ( automountMapName )
        MAY description )


objectclass     ( 1.3.6.1.1.1.2.17 NAME 'automount' SUP top STRUCTURAL
        DESC 'Automount information'
        MUST ( automountKey $ automountInformation )
        MAY description )


objectclass     ( 1.3.6.1.1.1.2.18 NAME 'groupOfMembers' SUP top STRUCTURAL
        DESC 'A group with members (DNs)'
        MUST cn
        MAY ( businessCategory $ seeAlso $ owner $ ou $ o $
              description $ member ) )

You are viewing proxied material from ftp.icm.edu.pl. The copyright of proxied material belongs to its original authors. Any comments or complaints in relation to proxied material should be directed to the original authors of the content concerned. Please see the disclaimer for more details.