forked from mystiq/dex
238 lines
7.5 KiB
Text
238 lines
7.5 KiB
Text
|
# $OpenLDAP$
|
||
|
|
## This work is part of OpenLDAP Software <http://www.openldap.org/>.
|
||
|
|
##
|
||
|
|
## Copyright 1998-2016 The OpenLDAP Foundation.
|
||
|
|
## All rights reserved.
|
||
|
|
##
|
||
|
|
## Redistribution and use in source and binary forms, with or without
|
||
|
|
## modification, are permitted only as authorized by the OpenLDAP
|
||
|
|
## Public License.
|
||
|
|
##
|
||
|
|
## A copy of this license is available in the file LICENSE in the
|
||
|
|
## top-level directory of the distribution or, alternatively, at
|
||
|
|
## <http://www.OpenLDAP.org/license.html>.
|
||
|
|
|
||
|
|
# Definitions from RFC2307 (Experimental)
|
||
|
|
# An Approach for Using LDAP as a Network Information Service
|
||
|
|
|
||
|
|
# Depends upon core.schema and cosine.schema
|
||
|
|
|
||
|
|
# Note: The definitions in RFC2307 are given in syntaxes closely related
|
||
|
|
# to those in RFC2252, however, some liberties are taken that are not
|
||
|
|
# supported by RFC2252. This file has been written following RFC2252
|
||
|
|
# strictly.
|
||
|
|
|
||
|
|
# OID Base is iso(1) org(3) dod(6) internet(1) directory(1) nisSchema(1).
|
||
|
|
# i.e. nisSchema in RFC2307 is 1.3.6.1.1.1
|
||
|
|
#
|
||
|
|
# Syntaxes are under 1.3.6.1.1.1.0 (two new syntaxes are defined)
|
||
|
|
# validaters for these syntaxes are incomplete, they only
|
||
|
|
# implement printable string validation (which is good as the
|
||
|
|
# common use of these syntaxes violates the specification).
|
||
|
|
# Attribute types are under 1.3.6.1.1.1.1
|
||
|
|
# Object classes are under 1.3.6.1.1.1.2
|
||
|
|
|
||
|
|
# Attribute Type Definitions
|
||
|
|
|
||
|
|
# builtin
|
||
|
|
#attributetype ( 1.3.6.1.1.1.1.0 NAME 'uidNumber'
|
||
|
|
# DESC 'An integer uniquely identifying a user in an administrative domain'
|
||
|
|
# EQUALITY integerMatch
|
||
|
|
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
# builtin
|
||
|
|
#attributetype ( 1.3.6.1.1.1.1.1 NAME 'gidNumber'
|
||
|
|
# DESC 'An integer uniquely identifying a group in an administrative domain'
|
||
|
|
# EQUALITY integerMatch
|
||
|
|
# SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos'
|
||
|
|
DESC 'The GECOS field; the common name'
|
||
|
|
EQUALITY caseIgnoreIA5Match
|
||
|
|
SUBSTR caseIgnoreIA5SubstringsMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory'
|
||
|
|
DESC 'The absolute path to the home directory'
|
||
|
|
EQUALITY caseExactIA5Match
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell'
|
||
|
|
DESC 'The path to the login shell'
|
||
|
|
EQUALITY caseExactIA5Match
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid'
|
||
|
|
EQUALITY caseExactIA5Match
|
||
|
|
SUBSTR caseExactIA5SubstringsMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
|
||
|
|
EQUALITY caseExactIA5Match
|
||
|
|
SUBSTR caseExactIA5SubstringsMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
|
||
|
|
DESC 'Netgroup triple'
|
||
|
|
SYNTAX 1.3.6.1.1.1.0.0 )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol'
|
||
|
|
SUP name )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber'
|
||
|
|
EQUALITY integerMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber'
|
||
|
|
DESC 'IP address'
|
||
|
|
EQUALITY caseIgnoreIA5Match
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber'
|
||
|
|
DESC 'IP network'
|
||
|
|
EQUALITY caseIgnoreIA5Match
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber'
|
||
|
|
DESC 'IP netmask'
|
||
|
|
EQUALITY caseIgnoreIA5Match
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress'
|
||
|
|
DESC 'MAC address'
|
||
|
|
EQUALITY caseIgnoreIA5Match
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter'
|
||
|
|
DESC 'rpc.bootparamd parameter'
|
||
|
|
SYNTAX 1.3.6.1.1.1.0.1 )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile'
|
||
|
|
DESC 'Boot image name'
|
||
|
|
EQUALITY caseExactIA5Match
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName'
|
||
|
|
SUP name )
|
||
|
|
|
||
|
|
attributetype ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry'
|
||
|
|
EQUALITY caseExactIA5Match
|
||
|
|
SUBSTR caseExactIA5SubstringsMatch
|
||
|
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} SINGLE-VALUE )
|
||
|
|
|
||
|
|
# Object Class Definitions
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount'
|
||
|
|
DESC 'Abstraction of an account with POSIX attributes'
|
||
|
|
SUP top AUXILIARY
|
||
|
|
MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory )
|
||
|
|
MAY ( userPassword $ loginShell $ gecos $ description ) )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount'
|
||
|
|
DESC 'Additional attributes for shadow passwords'
|
||
|
|
SUP top AUXILIARY
|
||
|
|
MUST uid
|
||
|
|
MAY ( userPassword $ shadowLastChange $ shadowMin $
|
||
|
|
shadowMax $ shadowWarning $ shadowInactive $
|
||
|
|
shadowExpire $ shadowFlag $ description ) )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup'
|
||
|
|
DESC 'Abstraction of a group of accounts'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST ( cn $ gidNumber )
|
||
|
|
MAY ( userPassword $ memberUid $ description ) )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService'
|
||
|
|
DESC 'Abstraction an Internet Protocol service'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST ( cn $ ipServicePort $ ipServiceProtocol )
|
||
|
|
MAY ( description ) )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol'
|
||
|
|
DESC 'Abstraction of an IP protocol'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST ( cn $ ipProtocolNumber $ description )
|
||
|
|
MAY description )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc'
|
||
|
|
DESC 'Abstraction of an ONC/RPC binding'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST ( cn $ oncRpcNumber $ description )
|
||
|
|
MAY description )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost'
|
||
|
|
DESC 'Abstraction of a host, an IP device'
|
||
|
|
SUP top AUXILIARY
|
||
|
|
MUST ( cn $ ipHostNumber )
|
||
|
|
MAY ( l $ description $ manager ) )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork'
|
||
|
|
DESC 'Abstraction of an IP network'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST ( cn $ ipNetworkNumber )
|
||
|
|
MAY ( ipNetmaskNumber $ l $ description $ manager ) )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup'
|
||
|
|
DESC 'Abstraction of a netgroup'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST cn
|
||
|
|
MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.9 NAME 'nisMap'
|
||
|
|
DESC 'A generic abstraction of a NIS map'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST nisMapName
|
||
|
|
MAY description )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.10 NAME 'nisObject'
|
||
|
|
DESC 'An entry in a NIS map'
|
||
|
|
SUP top STRUCTURAL
|
||
|
|
MUST ( cn $ nisMapEntry $ nisMapName )
|
||
|
|
MAY description )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device'
|
||
|
|
DESC 'A device with a MAC address'
|
||
|
|
SUP top AUXILIARY
|
||
|
|
MAY macAddress )
|
||
|
|
|
||
|
|
objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice'
|
||
|
|
DESC 'A device with boot parameters'
|
||
|
|
SUP top AUXILIARY
|
||
|
|
MAY ( bootFile $ bootParameter ) )
|