Chapter 2

Object Class Reference

---

This chapter contains an alphabetical list of the object classes accepted by the default schema. It gives a definition of each object class and lists its required and allowed attributes. The object classes listed in this chapter are available for you to use to support your own information in the Red Hat Directory Server (Directory Server). Object classes that are used by the Directory Server for internal operations are not documented here. For information about these object classes, please refer to the Red Hat Directory Server Configuration, Command, and File Reference. Replication and synchronization object classes are listed in Chapter 4, "Operational Attributes, Special Attributes, and Special Object Classes."

The required attributes listed for an object class must be present in the entry when that object class is added to the ldif file. If an object class has a superior object class, both of these object classes with all required attributes must be present in the entry. If required attributes are not listed in the ldif file, than the server will not restart.

Note	The LDAP RFCs and X.500 standards allow for an object class to have more than one superior. This behavior is not currently supported by Directory Server.

account

Definition

Used to define entries representing computer accounts.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.5

Required Attributes

objectClass	Defines the object classes for the entry.
uid (userID)	Identifies the account's user ID.

Allowed Attributes

description	Text description of the entry.
host	Hostname of the computer on which the account resides.
l (localityName)	Place where the account is located.
o (organizationName)	Organization to which the account belongs.
ou (organizationalUnit)	Organizational unit to which the account belongs.
seeAlso	URL to information relevant to the account.

alias

Definition

Used to point to other entries in the directory tree.

Note: Aliasing is not supported in Directory Server.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.1

Required Attributes

objectClass	Defines the object classes for the entry.
aliasedObjectName	Distinguished name of the entry for which this entry is an alias.

cosClassicDefinition

Definition

Identifies the template entry using both the template entry's DN (as specified in the cosTemplateDn attribute) and the value of one of the target entry's attributes (as specified in the cosSpecifier attribute).

This object class is defined in Directory Server.

Superior Class

cosSuperDefinition

OID

2.16.840.1.113730.3.2.100

Required Attributes

objectClass	Defines the object classes for the entry.
cosAttribute	Provides the name of the attribute for which you want to generate a value. You can specify more than one cosAttribute value.

Allowed Attributes

cn (commonName)	Common name of the entry.
cosSpecifier	Specifies the attribute value used by a classic CoS, which, along with the template entry's DN, identifies the template entry.
cosTemplateDn	Provides the DN of the template entry associated with the CoS definition.
description	Text description of the entry.

cosDefinition

Definition

Defines the Class of Services you are using. This object class is supported in order to provide compatibility with the DS4.1 CoS Plug-in.

This object class is defined in Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.84

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

aci	Evaluates what rights are granted or denied when the Directory Server receives an LDAP request from a client.
cn (commonName)	Common name of the entry.
cosAttribute	Provides the name of the attribute for which you want to generate a value. You can specify more than one cosAttribute value.
cosSpecifier	Specifies the attribute value used by a classic CoS, which, along with the template entry's DN, identifies the template entry.
cosTargetTree	Determines the subtrees of the DIT to which the CoS schema applies.
cosTemplateDn	Provides the DN of the template entry associated with the CoS definition.
uid (userID)	Identifies the user ID.

cosIndirectDefinition

Definition

Identifies the template entry using the value of one of the target entry's attributes. The attribute of the target entry is specified in the cosIndirectSpecifier attribute.

This object class is defined in Directory Server.

Superior Class

cosSuperDefinition

OID

2.16.840.1.113730.3.2.102

Required Attributes

objectClass	Defines the object classes for the entry.
cosAttribute	Provides the name of the attribute for which you want to generate a value. You can specify more than one cosAttribute value.

Allowed Attributes

cn (commonName)	Common name of the entry.
cosIndirectSpecifier	Specifies the attribute value used by an indirect CoS to identify the template entry.
description	Text description of the entry.

cosPointerDefinition

Definition

Identifies the template entry associated with the CoS definition using the template entry's DN value. The DN of the template entry is specified in the cosTemplateDn attribute.

This object class is defined in Directory Server.

Superior Class

cosSuperDefinition

OID

2.16.840.1.113730.3.2.101

Required Attributes

objectClass	Defines the object classes for the entry.
cosAttribute	Provides the name of the attribute for which you want to generate a value. You can specify more than one cosAttribute value.

Allowed Attributes

cn (commonName)	Common name of the entry.
cosTemplateDn	Provides the DN of the template entry associated with the CoS definition.
description	Text description of the entry.

cosSuperDefinition

Definition

All CoS definition object classes inherit from the cosSuperDefinition object class.

This object class is defined in Directory Server.

Superior Class

ldapSubEntry

OID

2.16.840.1.113730.3.2.99

Required Attributes

objectClass	Defines the object classes for the entry.
cosAttribute	Provides the name of the attribute for which you want to generate a value. You can specify more than one cosAttribute value.

Allowed Attributes

cn (commonName)	Common name of the entry.
description	Text description of the entry.

cosTemplate

Definition

Contains a list of the shared attribute values.

This object class is defined in Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.128

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

cn (commonName)	Common name of the entry.
cosPriority	Specifies which template provides the attribute value when CoS templates compete to provide an attribute value.

country

Definition

Used to define entries that represent countries.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.2

Required Attributes

objectClass	Defines the object classes for the entry.
c (countryName)	Contains the two-character code representing country names, as defined by ISO, in the directory.

Allowed Attributes

description	Text description of the country.
searchGuide	Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search operation.

dcObject

Definition

Allows domain components to be defined for an entry. This object class is defined as auxiliary because it is commonly used in combination with another object class, such as o (organizationName), ou (organizationalUnitName), or l (localityName). For example:

dn: dc=example,dc=com

objectClass: top

objectClass: organization

objectClass: dcObject

dc: example

o: Example Corporation
 

This object class is defined in RFC 2247.

Superior Class

top

OID

1.3.6.1.4.1.1466.344

Required Attributes

objectClass	Defines the object classes for the entry.
dc (domainComponent)	One component of a domain name.

device

Definition

Used to store information about network devices, such as printers, in the directory.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.14

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	Common name of the device.

Allowed Attributes

description	Text description of the device.
l (localityName)	Place where the device is located.
o (organizationName)	Organization to which the device belongs.
ou (organizationalUnit)	Organizational unit to which the device belongs.
owner	Distinguished name of the person responsible for the device.
seeAlso	URL to information relevant to the device.
serialNumber	Serial number of the device.

document

Definition

Used to define entries which represent documents in the directory.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.6

Required Attributes

objectClass	Defines the object classes for the entry.
documentIdentifier	Unique identifier for a document.

Allowed Attributes

abstract	Abstract of the document.
audio	Stores a sound file in binary format.
authorCn	Author's common or given name.
authorSn	Author's surname.
cn (commonName)	Common name of the document.
description	Text description of the document.
dITRedirect	Distinguished name to use as a redirect for the entry.
documentAuthor	Distinguished name of the document author.
documentLocation	Location of the original document.
documentPublisher	Person or organization that published the document.
documentStore	Not defined.
documentTitle	The document's title.
documentVersion	The document's version number.
info	Information about the object.
jpegPhoto	Photo in jpeg format.
keyWords	Keywords that describe the document.
l (localityName)	Place where the document is located.
lastModifiedBy	Distinguished name of the last user to modify the document.
lastModifiedTime	Last time the document was modified.
manager	Distinguished name of the object's manager.
o (organizationName)	Organization to which the document belongs.
obsoletedByDocument	Distinguished name of a document that obsoletes this document.
obsoletesDocument	Distinguished name of a document that is obsoleted by this document.
ou (organizationalUnit)	Organizational unit to which the document belongs.
photo	Photo of the document, in binary form.
seeAlso	URL to information relevant to the document.
subject	Subject of the document.
uniqueIdentifier	Specific item used to distinguish between two entries when a distinguished name has been reused.
updatedByDocument	Distinguished name of a document that is an updated version of this document.
updatesDocument	Distinguished name of a document for which this document is an updated version.

documentSeries

Definition

Used to define an entry that represents a series of documents.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.9

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The common name of the series.

Allowed Attributes

description	Text description of the series.
l (localityName)	Place where the series is located.
o (organizationName)	Organization to which the series belongs.
ou (organizationalUnit)	Organizational unit to which the series belongs.
seeAlso	URL to information relevant to the series.
telephoneNumber	Telephone number of the person responsible for the series.

domain

Definition

Used to define entries that represent DNS domains in the directory. The dc (domainComponent) attribute should be used for naming entries of this object class.

Used to represent Internet domain names (e.g., example.com).

The domain object class can only be used with an entry that does not correspond to an organization, organizational unit or other type of object for which an object class has been defined. The domain object class requires that the dc (domainComponent) attribute be present and permits several other attributes to be present in the entry.

This object class is defined in RFC 2247.

Superior Class

top

OID

0.9.2342.19200300.100.4.13

Required Attributes

objectClass	Defines the object classes for the entry.
dc (domainComponent)	One component of a domain name.

Allowed Attributes

associatedName	Entry in the organizational directory tree associated with a DNS domain.
businessCategory	Type of business in which this domain is engaged.
description	Text description of the domain.
destinationIndicator	Country and city associated with the entry; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	Domain's fax number.
internationalISDNNumber	Domain's ISDN number.
l (localityName)	Place where the domain is located.
o (organizationName)	Organization to which the domain belongs.
physicalDeliveryOfficeName	Location where physical deliveries can be made.
postOfficeBox	Domain's post office box.
postalAddress	Domain's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
preferredDeliveryMethod	Domain's preferred method of contact or delivery.
registeredAddress	Postal address suitable for reception of expedited documents when the recipient must verify delivery.
searchGuide	Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search operation.
seeAlso	URL to information relevant to the domain.
st (stateOrProvinceName)	State or province where the domain is located.
street	Street address where the domain is located.
telephoneNumber	Domain's telephone number.
teletexTerminalIdentifier	Identifier for a domain's teletex terminal.
telexNumber	Domain's telex number.
userPassword	Password with which the entry can bind to the directory.
x121Address	X.121 address of the domain.

domainRelatedObject

Definition

Used to define entries which represent DNS/NRS domains which are "equivalent" to an X.500 domain; for example, an organization or organizational unit.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.17

Required Attributes

objectClass	Defines the object classes for the entry.
associatedDomain	Specifies a DNS domain associated with an object in the directory tree.

dSA

Definition

Used to define entries representing DSAs in the directory.

This object class is defined in RFC 1274.

Superior Class

top

OID

2.5.6.13

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The common name of the series.
presentationAddress	Contains an OSI presentation address for the entry.

Allowed Attributes

description	Text description of the series.
knowledgeInformation	This attribute is no longer used.
l (localityName)	Place where the series is located.
o (organizationName)	Organization to which the series belongs.
ou (organizationalUnit)	Organizational unit to which the series belongs.
seeAlso	URL to information relevant to the series.
supportedApplicationContext	This attribute contains the identifiers of OSI application contexts.

extensibleObject

Definition

When present in an entry, extensibleObject permits the entry to hold optionally any attribute. The allowed attribute list of this class is implicitly the set of all attributes known to the server.

This object class is defined in RFC 2252.

Superior Class

top

OID

1.3.6.1.4.1.1466.101.120.111

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

All attributes known to the server.

friendlyCountry

Definition

Used to define country entries in the directory tree. This object class is used to allow more user-friendly country names than those allowed by the country object class.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.18

Required Attributes

objectClass	Defines the object classes for the entry.
co (friendlyCountryName)	Stores the name of a country.
c (countryName)	Contains the two-character code representing country names, as defined by ISO, in the directory.

Allowed Attributes

description	Text description of the country.
searchGuide	Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search operation.

groupOfCertificates

Definition

Used to describe a set of X.509 certificates. Any certificate that matches one of the memberCertificateDescription values is considered a member of the group.

This object class is defined in Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.31

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The group's common name.

Allowed Attributes

businessCategory	Type of business in which the group is engaged.
description	Text description of the group's purpose.
memberCertificateDescription	Values used to determine if a particular certificate is a member of this group.
o (organizationName)	Organization to which the group of certificates belongs.
ou (organizationalUnit)	Organizational unit to which the group belongs.
owner	Distinguished name of the person responsible for the group.
seeAlso	URL to information relevant to the group.

groupOfNames

Definition

Used to define entries for a group of names.

Note: The definition in Directory Server differs from the standard definition. In the standard definition, member is a required attribute. In Directory Server, member is an allowed attribute. Directory Server therefore allows a group to have no member.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.9

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The group's common name.

Allowed Attributes

businessCategory	Type of business in which the group is engaged.
description	Text description of the group's purpose.
member	Distinguished name of a group member.
o (organizationName)	Organization to which the group belongs.
ou (organizationalUnit)	Organizational unit to which the group belongs.
owner	Distinguished name of the person responsible for the group.
seeAlso	URL to information relevant to the group.

groupOfUniqueNames

Definition

Used to define entries for a group of unique names.

Note: The definition in Directory Server differs from the standard definition. In the standard definition, uniquemember is a required attribute. In Directory Server, uniquemember is an allowed attribute. Directory Server therefore allows a group to have no member.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.17

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The group's common name.

Allowed Attributes

businessCategory	Type of business in which the group is engaged.
description	Text description of the group's purpose.
o (organizationName)	Organization to which the group belongs.
ou (organizationalUnit)	Organizational unit to which the group belongs.
owner	Distinguished name of the person responsible for the group.
seeAlso	URL to information relevant to the group.
uniqueMember	Distinguished name of a unique group member.

groupOfURLs

Definition

An auxiliary object class of groupOfUniqueNames or groupOfNames. The group consists of a list of labeled URLs.

This object class is defined in Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.33

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The group's common name.

Allowed Attributes

businessCategory	Type of business in which the group is engaged.
description	Text description of the group's purpose.
memberURL	URL associated with each member of the group.
o (organizationName)	Organization to which the group belongs.
ou (organizationalUnit)	Organizational unit to which the group belongs.
owner	Distinguished name of the person responsible for the group.
seeAlso	URL to information relevant to the group.

inetOrgPerson

Definition

Used to define entries representing people in an organization's enterprise network. Inherits cn (commonName) and sn (surname) from the person object class.

This object class is defined in RFC 2798.

Superior Class

person

OID

2.16.840.1.113730.3.2.2

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The person's common name.
sn (surname)	The person's surname or last name.

Allowed Attributes

audio	Stores a sound file in binary format.
businessCategory	Type of business in which the person is engaged.
carLicense	The license plate number of the person's vehicle.
departmentNumber	Department for which the person works.
description	Text description of the person.
destinationIndicator	Country and city associated with the entry; needed to provide Public Telegram Service.
displayName	Preferred name of a person to be used when displaying entries.
employeeNumber	The person's employee number.
employeeType	The person's type of employment (for example, full time).
fax (facsimileTelephoneNumber)	The person's fax number.
givenName	The person's given or first name.
homePhone	The person's home phone number.
homePostalAddress	The person's home mailing adress.
initials	The person's initials.
internationalISDNNumber	The person's ISDN number.
jpegPhoto	Photo in JPEG format.
l (localityName)	Place where the person is located.
labeledURI	URL that is relevant to the person.
mail	The person's email address.
manager	Distinguished name of the object's manager.
mobile	The person's mobile phone number.
o (organizationName)	Organization to which the person belongs.
ou (organizationalUnit)	Organizational unit to which the person belongs.
pager	The person's pager number.
photo	Photo of the person, in binary form.
physicalDeliveryOfficeName	Location where physical deliveries can be made to the person.
postOfficeBox	The person's post office box.
postalAddress	The person's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
preferredDeliveryMethod	The person's preferred method of contact or delivery.
preferredLanguage	The person's preferred written or spoken language.
registeredAddress	Postal address suitable for reception of expediated documents, where the recipient must verify delivery.
roomNumber	The room number where the person is located.
secretary	Distinguished name of the person's secretary or administrative assistant.
seeAlso	URL to information relevant to the person.
st (stateOrProvinceName)	State or province where the person is located.
street	Street address where the person is located.
telephoneNumber	The person's telephone number.
teletexTerminalIdentifier	Identifier for the person's teletex terminal.
telexNumber	The person's telex number.
title	The person's job title.
uid (userID)	Identifies the person's user ID (usually the logon ID).
userCertificate	Stores a user's certificate in cleartext (not used).
userPassword	Password with which the entry can bind to the directory.
userSMIMECertificate	Stores a user's certificate in binary form. Used by Netscape Communicator for S/MIME.
x121Address	X.121 address of the person.
x500UniqueIdentifier	Reserved.

labeledURIObject

Definition

This object class can be added to existing directory objects to allow for inclusion of URI values. This approach does not preclude including the labeledURI attribute type directly in other object classes as appropriate.

This object class is defined in RFC 2079.

Superior Class

top

OID

1.3.6.1.4.1.250.3.1

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

labeledURI

Universal Resource Locator that is relevant to the entry.

locality

Definition

Used to define entries that represent localities or geographic areas.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.3

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

description	Text description of the locality.
l (localityName)	Place where the entry is located.
searchGuide	Specifies information for a suggested search criteria when using the entry as the base object in the directory tree for a search operation.
seeAlso	URL to information relevant to the locality.
st (stateOrProvinceName)	State or province to which the locality belongs.
street	Street address associated with the locality.

mailGroup

Definition

Defines the mail attributes for a group.

This object class is defined in Netscape Messaging Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.4

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

cn (commonName)	The common name of the group.
mail	The email address of the group.
mailAlternateAddress	Identifies alternate email addresses used by a person.
mailHost	Name of the server which sends and receives email for the mail group.
owner	The DN of the person responsible for the entry.

newPilotPerson

Definition

Used as a subclass of person to allow the use of a number of additional attributes to be assigned to entries of the person object class. Inherits cn (commonName) and sn (surname) from the person object class.

This object class is defined in Internet White Pages Pilot.

Superior Class

person

OID

0.9.2342.19200300.100.4.4

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The person's common name.
sn (surname)	The person's surname or last name.

Allowed Attributes

businessCategory	Type of business in which this person is engaged.
description	Text description of the person.
drink (favoriteDrink)	The person's favorite drink.
homePhone	The person's home phone number.
homePostalAddress	The person's home mailing address.
janetMailbox	The person's email address.
mail	The person's email address.
mailPreferenceOption	Indicates a preference for inclusion of the person's name on mailing lists (electronic or physical).
mobile	The person's mobile phone number.
organizationalStatus	The person's type of employment (for example, full time).
otherMailbox	Values for electronic mailbox types other than X.400 and rfc822.
pager	The person's pager number.
personalSignature	The person's signature file.
personalTitle	The person's personal title.
preferredDeliveryMethod	The person's preferred method of contact or delivery.
roomNumber	The person's room number.
secretary	Distinguished name of the person's secretary or administrative assistant.
seeAlso	URL to information relevant to the person.
telephoneNumber	The person's telephone number.
textEncodedORAddress	The person's text-encoded Originator/Recipient (X.400) address.
uid (userID)	Identifies the person's user ID (usually the logon ID).
userClass	Category of user.
userPassword	Password with which the entry can bind to the directory.

nsComplexRoleDefinition

Definition

Any role that is not a simple role is, by definition, a complex role.

This object class is defined in Directory Server.

Superior Class

nsRoleDefinition

OID

2.16.840.1.113730.3.2.95

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

cn (commonName)	The entry's common name.
description	Text description of the entry.

nsFilteredRoleDefinition

Definition

Specifies assignment of entries to the role, depending upon the attributes contained by each entry.

This object class is defined in Directory Server.

Superior Class

nsComplexRoleDefinition

OID

2.16.840.1.113730.3.2.97

Required Attributes

objectClass	Defines the object classes for the entry.
nsRoleFilter	Specifies the filter assigned to an entry.

Allowed Attributes

cn (commonName)	The entry's common name.
description	Text description of the entry.

nsLicenseUser

Definition

Used to track licenses for servers that are licensed on a per-client basis. nsLicenseUser is intended to be used with the inetOrgPerson object class. You can manage the contents of this object class through the Users and Groups area of the Red Hat Administration Server.

This object class is defined in Red Hat Administration Services.

Superior Class

top

OID

2.16.840.1.113730.3.2.7

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

nsLicensedFor	Server that the user is licensed to use.
nsLicenseEndTime	Reserved for future use.
nsLicenseStartTime	Reserved for future use.

nsManagedRoleDefinition

Definition

Specifies assignment of a role to an explicit, enumerated list of members.

This object class is defined in Directory Server.

Superior Class

nsSimpleRoleDefinition

OID

2.16.840.1.113730.3.2.96

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

cn (commonName)	The entry's common name.
description	Text description of the entry.

nsNestedRoleDefinition

Definition

Specifies containment of one or more roles of any type within the role.

This object class is defined in Directory Server.

Superior Class

nsComplexRoleDefinition

OID

2.16.840.1.113730.3.2.98

Required Attributes

objectClass	Defines the object classes for the entry.
nsRoleDn	Specifies the roles assigned to an entry.

Allowed Attributes

cn (commonName)	The entry's common name.
description	Text description of the entry.

nsRoleDefinition

Definition

All role definition object classes inherit from the nsRoleDefinition object class.

This object class is defined in Directory Server.

Superior Class

ldapSubEntry

OID

2.16.840.1.113730.3.2.93

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

cn (commonName)	The entry's common name.
description	Text description of the entry.

nsSimpleRoleDefinition

Definition

Roles containing this object class are called simple roles because they have a deliberately limited flexibility, which makes it easy to:

• Enumerate the members of a role.
• Determine whether a given entry possesses a particular role.
• Enumerate all the roles possessed by a given entry.
• Assign a particular role to a given entry.
• Remove a particular role from a given entry.

This object class is defined in Directory Server.

Superior Class

nsRoleDefinition

OID

2.16.840.1.113730.3.2.94

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

cn (commonName)	The entry's common name.
description	Text description of the entry.

ntGroup

Definition

Holds data for a group entry stored in a Windows Active Directory or NT server. Several Directory Server attributes correspond directly to or are mapped to match Windows group attributes. When you create a new group in the Directory Server that is to be synchronized with a Windows server group, Directory Server attributes will be assigned to the Windows entry as shown in the attribute table below. These attributes may then be added, modified, or deleted in the entry through either directory service.

Superior Class

top

OID

2.16.840.1.113730.3.2.9

Required Attributes

cn (commonName)	The entry's common name; corresponds to the Windows name field.
mailGroup	Allows the mail attribute to be synchronized between Windows and Directory Server groups.
ntGroupType	Specifies the type of group.
objectClass	Defines the object classes for the entry.
ntUserDomainId	Windows domain login ID.

Allowed Attributes

description	Text description of the group; corresponds to the Windows comment field.
l (localityName)	Place where the group is located.
member	Specifies the members of the group.
ntGroupAttributes	Pointer to a binary file containing information about the group.
ntGroupCreateNewGroup	Specifies whether a Windows account should be created when this entry is created in the Directory Server.
ntGroupDeleteGroup	Specifies whether the user's Windows account should be deleted when this entry is deleted from the Directory Server.
ntGroupDomainId	Specifies the domain ID string for the group.
ntUniqueId	Generated ID number used by the server for operations and identification.
ou (organizationalUnit)	Organizational unit to which the group belongs.
seeAlso	URL to information relevant to the group.

ntUser

Definition

Holds data for a user entry stored in a Windows Active Directory or NT server. Several Directory Server attributes correspond directly to or are mapped to match Windows user account fields. When you create a new person entry in the Directory Server that is to be synchronized with a Windows server, Directory Server attributes will be assigned to Windows user account fields as shown in the attribute table below. These attributes may then be added, modified, or deleted in the entry through either directory service.

Superior Class

top

OID

2.16.840.1.113730.3.2.8

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The entry's common name; corresponds to the Windows name field.
ntUserDomainId	Windows domain login ID.

Allowed Attributes

description	Text description of the user; corresponds to the Windows comment field.
destinationIndicator	Country and city associated with the entry; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	The person's fax number.
givenName	The person's given or first name.
homePhone	The person's home phone number.
homePostalAddress	The person's home mailing adress.
initials	The person's initials.
l (localityName)	Place where the user is located.
mail	The person's email address.
manager	The manager of the person.
mobile	The person's mobile phone number.
ntUserAcctExpires	Identifies when the user's Windows account will expire.
ntUserCodePage	The user's code page.
ntUserCreateNewAccount	Specifies whether a Windows account should be created when this entry is created in the Directory Server.
ntUserDeleteAccount	Specifies whether the user's Windows account should be deleted when this entry is deleted from the Directory Server.
ntUserHomeDir	Path to the user's home directory.
ntUserLastLogoff	Time of the user's last logoff from the Windows server.
ntUserLastLogon	Time of the user's last logon to the Windows server.
ntUserLogonHours	Identifies the times during which the user may log on.
ntUserMaxStorage	Maximum disk space available to the user in the Windows server.
ntUserParms	Unicode string reserved for use by applications.
ntUserProfile	Path to the user's Windows profile.
ntUserScriptPath	Path to the user's Windows login script.
ntUserWorkstations	Windows workstations from which the user is allowed to log into the Windows domain.
o (organizationName)	Organization to which the person belongs.
ou (organizationalUnit)	Organizational unit to which the person belongs.
pager	The person's pager number.
postalAddress	The user's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
postOfficeBox	The user's post office box.
registeredAddress	Postal address suitable for reception of expediated documents, where the recipient must verify delivery.
seeAlso	URL to information relevant to the user.
sn (surname)	The entry's surname or last name.
st (stateOrProvinceName)	State or province where the user is located.
street	Street address where the user is located.
telephoneNumber	Telephone number associated with the person.
teletexTerminalIdentifier	Identifier for a telex terminal associated with the user.
telexNumber	Telex number associated with the user.
title	The person's job title.
userCertificate	Stores a user's certificate in cleartext (not used).
x121Address	X.121 address associated with the entry.

organization

Definition

Used to define entries that represent organizations. An organization is generally assumed to be a large, relatively static grouping within a larger corporation or enterprise.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.4

Required Attributes

objectClass	Defines the object classes for the entry.
o (organizationName)	The name of the organization.

Allowed Attributes

businessCategory	Type of business in which the organization is engaged.
description	Text description of the organization.
destinationIndicator	Country and city associated with the entry; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	The organization's fax number.
internationalISDNNumber	The organization's ISDN number.
l (localityName)	Place where the organization is located.
physicalDeliveryOfficeName	Location where physical deliveries can be made to the organization.
postalAddress	The organization's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
postOfficeBox	The organization's post office box.
preferredDeliveryMethod	The organization's preferred method of contact or delivery.
registeredAddress	Postal address suitable for reception of expedited documents, when the recipient must verify delivery.
searchGuide	Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search operation.
seeAlso	URL to information relevant to the organization.
st (stateOrProvinceName)	State or province where the organization is located.
street	Street address where the organization is located.
telephoneNumber	The organization's telephone number.
teletexTerminalIdentifier	Identifier for the organization's teletex terminal.
telexNumber	The organization's telex number.
userPassword	Password with which the entry can bind to the directory.
x121Address	X.121 address of the organization.

organizationalPerson

Definition

Used to define entries for people employed by or associated with an organization. cn (commonName) and sn (surname) are inherited from the person object class.

This object class is defined in RFC 2256.

Superior Class

person

OID

2.5.6.7

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The person's common name.
sn (surname)	The person's surname or last name.

Allowed Attributes

description	Text description of the person.
destinationIndicator	Country and city associated with the person; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	The person's fax number.
internationalISDNNumber	The person's ISDN number.
l (localityName)	Place where the person is located.
ou (organizationalUnit)	Organizational unit to which the person belongs.
physicalDeliveryOfficeName	Location where physical deliveries can be made to this person.
postalAddress	The person's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
postOfficeBox	The person's post office box.
preferredDeliveryMethod	The person's preferred method of contact or delivery.
registeredAddress	Postal address suitable for reception of expedited documents when the recipient must verify delivery.
seeAlso	URL to information relevant to the person.
st (stateOrProvinceName)	State or province where the person is located.
street	Street address where the person is located.
telephoneNumber	The person's telephone number.
teletexTerminalIdentifier	Identifier for the person's teletex terminal.
telexNumber	The person's telex number.
title	The person's job title.
userPassword	Password with which the entry can bind to the directory.
x121Address	X.121 address of the person.

organizationalRole

Definition

Used to define entries that represent roles held by people within an organization.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.8

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The role's common name.

Allowed Attributes

description	Text description of the role.
destinationIndicator	Country and city associated with the entry; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	Fax number of the person in the role.
internationalISDNNumber	ISDN number of the person in the role.
l (localityName)	Place where the person in the role is located.
ou (organizationalUnit)	Organizational unit to which the person in the role belongs.
physicalDeliveryOfficeName	Location where physical deliveries can be made to the person in the role.
postalAddress	The mailing address for the person in the role.
postalCode	The postal code for this address (such as a United States zip code).
postOfficeBox	The post office box for the person in the role.
preferredDeliveryMethod	Preferred method of contact or delivery of the person in the role.
registeredAddress	Postal address suitable for reception of expedited documents when the recipient must verify delivery.
roleOccupant	Distinguished name of the person in the role.
seeAlso	URL to information relevant to the person in the role.
st (stateOrProvinceName)	State or province where the person in the role is located.
street	Street address where the person in the role is located.
telephoneNumber	The person's telephone number.
teletexTerminalIdentifier	Identifier for the teletex terminal of the person in the role.
telexNumber	Telex number of the person in the role.
x121Address	X.121 address of the person in the role.

organizationalUnit

Definition

Used to define entries that represent organizational units. An organizational unit is generally assumed to be a relatively static grouping within a larger organization.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.5

Required Attributes

objectClass	Defines the object classes for the entry.
ou (organizationalUnit)	The name of the organizational unit.

Allowed Attributes

businessCategory	Type of business in which the organizational unit is engaged.
description	Text description of the organizational unit.
destinationIndicator	Country and city associated with the organizational unit; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	The organizational unit's fax number.
internationalISDNNumber	The organizational unit's ISDN number.
l (localityName)	Place where the organizational unit is located.
physicalDeliveryOfficeName	Location where physical deliveries can be made to the organizational unit.
postalAddress	The organizational unit's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
postOfficeBox	The organizational unit's post office box.
preferredDeliveryMethod	The organizational unit's preferred method of contact or delivery.
registeredAddress	Postal address suitable for reception of expedited documents when the recipient must verify delivery.
searchGuide	Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search operation.
seeAlso	URL to information relevant to the organizational unit.
st (stateOrProvinceName)	State or province where the organizational unit is located.
street	Street address where the organizational unit is located.
telephoneNumber	The organizational unit's telephone number.
teletexTerminalIdentifier	Identifier for the organizational unit's teletex terminal.
telexNumber	The organization's telex number.
userPassword	Password with which the entry can bind to the directory.
x121Address	X.121 address of the organizational unit.

person

Definition

Used to define entries that generically represent people. This object class is the base class for the organizationalPerson object class.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.6

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The person's common name.
sn (surname)	The person's surname or last name.

Allowed Attributes

description	Text description of the person.
seeAlso	URL to information relevant to the person.
telephoneNumber	The person's telephone number.
userPassword	Password with which the entry can bind to the directory.

pilotObject

Definition

Used as a subclass to allow additional attributes to be assigned to entries of all other object classes.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.3

Required Attributes

objectClass

Defines the object classes for the entry.

Allowed Attributes

audio	Stores a sound file in binary format.
dITRedirect	Distinguished name to use as a redirect for the entry.
info	Information about the object.
jpegPhoto	Photo in jpeg format.
lastModifiedBy	Distinguished name of the last user to modify the object.
lastModifiedTime	Last time the object was modified.
manager	Distinguished name of the object's manager.
photo	Photo of the object.
uniqueIdentifier	Specific item used to distinguish between two entries when a distinguished name has been reused.

pilotOrganization

Definition

Used as a subclass to allow additional attributes to be assigned to organization and organizationalUnit object class entries.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.20

Required Attributes

objectClass	Defines the object classes for the entry.
o (organizationName)	Organization to which the entry belongs.
ou (organizationalUnit)	Organizational unit to which the entry belongs.

Allowed Attributes

buildingName	Name of the building where the entry is located.
businessCategory	Type of business in which the entry is engaged.
description	Text description of the entry.
destinationIndicator	Country and city associated with the pilot organization; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	The pilot organization's fax number.
internationalISDNNumber	The pilot organization's ISDN number.
l (localityName)	Place where the pilot organization is located.
physicalDeliveryOfficeName	Location where physical deliveries can be made to the pilot organization.
postalAddress	The pilot organization's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
postOfficeBox	The pilot organization's post office box.
preferredDeliveryMethod	The pilot organization's preferred method of contact or delivery.
registeredAddress	Postal address suitable for reception of expedited documents when the recipient must verify delivery.
searchGuide	Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search operation.
seeAlso	URL to information relevant to the pilot organization.
st (stateOrProvinceName)	State or province where the pilot organization is located.
street	Street address where the pilot organization is located.
telephoneNumber	The pilot organization's telephone number.
teletexTerminalIdentifier	Identifier for the pilot organization's teletex terminal.
telexNumber	The pilot organization's telex number.
userPassword	Password with which the entry can bind to the directory.
x121Address	X.121 address of the pilot organization.

residentialPerson

Definition

Used by the Directory Server to contain a person's residential information.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.10

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	The person's common name.
l (localityName)	Place in which the person resides.
sn (surname)	The person's surname or last name.

Allowed Attributes

businessCategory	Type of business in which the person is engaged.
description	Text description of the person.
destinationIndicator	Country and city associated with the entry; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	The person's fax number.
internationalISDNNumber	The person's ISDN number.
physicalDeliveryOfficeName	Location where physical deliveries can be made to the person.
postalAddress	The person's business mailing address.
postalCode	The postal code for this address (such as a United States zip code).
postOfficeBox	The person's business post office box.
preferredDeliveryMethod	The person's preferred method of contact or delivery.
registeredAddress	Postal address suitable for reception of expedited documents when the recipient must verify delivery.
seeAlso	URL to information relevant to the person.
st (stateOrProvinceName)	State or province where the person resides.
street	Street address where the person is located.
telephoneNumber	The person's telephone number.
teletexTerminalIdentifier	Identifier for the person's teletex terminal.
telexNumber	The person's telex number.
userPassword	Password with which the entry can bind to the directory.
x121Address	X.121 address of the entry.

RFC822LocalPart

Definition

Used to define entries that represent the local part of RFC822 mail addresses. The directory treats this part of an RFC822 address as a domain.

This object class is defined in Internet directory pilot.

Superior Class

domain

OID

0.9.2342.19200300.100.4.14

Required Attributes

objectClass	Defines the object classes for the entry.
dc (domainComponent)	Domain component of the entry.

Allowed Attributes

associatedName	Entry in the organizational directory tree associated with a DNS domain.
businessCategory	Type of business in which this local part is engaged.
cn (commonName)	The local part's common name.
description	Text description of the local part.
destinationIndicator	Country and city associated with the entry; needed to provide Public Telegram Service.
fax (facsimileTelephoneNumber)	The local part's fax number.
internationalISDNNumber	The local part's ISDN number.
l (localityName)	Place where the local part is located.
o (organizationName)	Organization to which the local part belongs.
physicalDeliveryOfficeName	Location where physical deliveries can be made to the local part.
postOfficeBox	The local part's post office box.
postalAddress	The local part's mailing address.
postalCode	The postal code for this address (such as a United States zip code).
preferredDeliveryMethod	Local part's preferred method of contact or delivery.
registeredAddress	Postal address suitable for reception of expediated documents, where the recipient must verify delivery.
searchGuide	Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search operation.
seeAlso	URL to information relevant to the local part.
sn (surname)	The entry's surname or last name.
st (stateOrProvinceName)	State or province where the local part is located.
street	Street address where the local part is located.
telephoneNumber	Telephone number associated with the local part.
teletexTerminalIdentifier	Identifier for a telex terminal associated with the local part.
telexNumber	Telex number associated with the local part.
userPassword	Password with which the entry can bind to the directory.
x121Address	X.121 address associated with the entry.

room

Definition

Used to store information in the directory about a room.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.7

Required Attributes

objectClass	Defines the object classes for the entry.
cn (commonName)	Common name of the room.

Allowed Attributes

description	Text description of the room.
roomNumber	The room's number.
seeAlso	URL to information relevant to the room.
telephoneNumber	The room's telephone number.

strongAuthenticationUser

Definition

Used to store a user's certificate entry in the directory.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.15

Required Attributes

objectClass	Defines the object classes for the entry.
userCertificate	Stores a user's certificate, usually in binary form.

simpleSecurityObject

Definition

Used to allow an entry to contain the userPassword attribute when an entry's principal object classes do not allow userPassword as an attribute type. Reserved for future use.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.19

Required Attributes

objectClass	Defines the object classes for the entry.
userPassword	Password with which the entry can bind to the directory.