Human-readable, hyperlinked view of the default directory schema.

About This Reference

This reference describes the default directory schema. Each schema definition has its own section, with links to related sections. Reference pages for the most commonly used elements may include additional descriptions and examples that are not present in the directory schema definitions.

This reference does not include directory configuration attributes and object classes, collation matching rules.

LDAP directory schema defines how data can be stored in the directory. When a directory server receives a request to update directory data, it can check the data changes against the directory schema, refusing any request that would result in a violation of the directory schema and directory data corruption.

Schema checking prevents errors such as the following:

  • Adding inappropriate attributes to an entry

  • Removing required attributes from an entry

  • Using an attribute value that has the wrong syntax

  • Adding the wrong type of subordinate object

LDAP directory schema consists of definitions for the following:

Attribute types

Define attributes of directory entries, including their syntaxes and matching rules

Directory Information Tree (DIT) content rules

Define the content of entries with a given structural object class

DIT structure rules

Define the names entries may have, and how entries may be related to each other

Matching rules

Define how values of attributes are matched and compared

Matching rule uses

List attributes that can be used with an extensibleMatch search filter

Name forms

Define naming relations for structural object classes

Object classes

Define the types of objects that an entry represents, and the required and optional attributes for entries of those types

Syntaxes

Define the encodings used in LDAP

For a technical description of LDAP directory schema, read Directory Schema in Lightweight Directory Access Protocol (LDAP): Directory Information Models (RFC 4512).

LDAP directory servers allow client applications to access directory schema while the server is running. This enables applications to validate their changes against the schema before sending an update request to the server. As a result, LDAP schema definitions are optimized for applications, not humans. The reader must resolve relationships between schema definitions, and must find most documentation elsewhere.

Chapter 1. Attribute Types

1.1. abandonRequests

OID 1.3.6.1.4.1.36733.2.1.1.74
Names abandonRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.2. aci

Values are Access Control Instructions (ACI). See the directory documentation for details.

OID 2.16.840.1.113730.3.1.55
Names aci
Description Sun-defined access control information attribute type
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax SunDefinedAccessControlInformation
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin Sun Java System Directory Server
Schema File 00-core.ldif

1.3. aclRights

Shows effective access rights. See the directory documentation for details.

OID 1.3.6.1.4.1.42.2.27.9.1.39
Names aclRights
Description Sun-defined access control effective rights attribute type
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin Sun Java System Directory Server
Schema File 00-core.ldif

1.4. aclRightsInfo

Shows how the server calculates effective access rights. See the directory documentation for details.

OID 1.3.6.1.4.1.42.2.27.9.1.40
Names aclRightsInfo
Description Sun-defined access control effective rights information attribute type
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin Sun Java System Directory Server
Schema File 00-core.ldif

1.5. addRequests

OID 1.3.6.1.4.1.36733.2.1.1.75
Names addRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.6. addResponses

OID 1.3.6.1.4.1.36733.2.1.1.76
Names addResponses
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.7. administratorsAddress

An address for contacting the administrator who manages the server. For example, mailto:helpdesk@example.com.

OID 1.3.6.1.4.1.1466.101.120.1
Names administratorsAddress
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin draft-wahl-ldap-adminaddr
Schema File 00-core.ldif

1.8. aliasedObjectName

Holds the name of the entry that an alias points to.

An alias name is an alternative name for an entry. Alias objects are leaf entries (no subordinates).

ForgeRock servers do not support alias dereferencing.

OID 2.5.4.1
Names aliasedObjectName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4512
Schema File 00-core.ldif

1.9. altServer

This operational attribute lists URIs of alternate servers to contact when this server is not available.

OID 1.3.6.1.4.1.1466.101.120.6
Names altServer
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage dSAOperation
Origin RFC 4512
Schema File 00-core.ldif

1.10. aRecord

A type A (address) DNS resource record.

OID 0.9.2342.19200300.100.1.26
Names aRecord
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.11. associatedDomain

An attribute for specifying DNS host names associated with an object. For example, the entry with DN dc=example,dc=com could have an associated domain of example.com.

Values of this attribute conform to the following ABNF:

domain = root / label *( DOT label )
root   = SPACE
label  = LETDIG [ *61( LETDIG / HYPHEN ) LETDIG ]
LETDIG = %x30-39 / %x41-5A / %x61-7A ; "0" - "9" / "A"-"Z" / "a"-"z"
SPACE  = %x20                        ; space (" ")
HYPHEN = %x2D                        ; hyphen ("-")
DOT    = %x2E                        ; period (".")
    
OID 0.9.2342.19200300.100.1.37
Names associatedDomain
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreIA5SubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.12. associatedName

DNs of entries associated with a DNS domain.

OID 0.9.2342.19200300.100.1.38
Names associatedName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.13. attributeMap

OID 1.3.6.1.4.1.11.1.3.1.1.9
Names attributeMap
Description Attribute mappings used, required, or supported by an agent or service
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.14. attributeTypes

This operational attribute used in LDAP schema defines attribute types, which specify attributes of directory entries, including their syntaxes and matching rules.

OID 2.5.21.5
Names attributeTypes
Equality Matching Rule objectIdentifierFirstComponentMatch
Syntax AttributeTypeDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.15. audio

Attribute for storing sounds encoded according to the algorithm.

OID 0.9.2342.19200300.100.1.55
Names audio
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.16. authenticationMethod

OID 1.3.6.1.4.1.11.1.3.1.1.6
Names authenticationMethod
Description Identifies the types of authentication methods either used, required, or provided by a service or peer
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.17. authorityRevocationList

X.509 certificate lists, as described in X.509 clause 11.2.5.

Request and transfer values using the binary option for the attribute description, authorityRevocationList;binary.

OID 2.5.4.38
Names authorityRevocationList
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax CertificateList
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4523
Schema File 00-core.ldif

1.18. authPassword

Encoded or hashed passwords, prefixed with a scheme and authentication info.

OID 1.3.6.1.4.1.4203.1.3.4
Names authPassword
Description password authentication information
Equality Matching Rule authPasswordExactMatch
Syntax AuthenticationPasswordSyntax
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3112
Schema File 03-rfc3112.ldif

1.19. automountInformation

OID 1.3.6.1.1.1.1.33
Names automountInformation
Description Automount information
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseExactIA5SubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.20. automountKey

OID 1.3.6.1.1.1.1.32
Names automountKey
Description Automount Key value
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseExactIA5SubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.21. automountMapName

OID 1.3.6.1.1.1.1.31
Names automountMapName
Description automount Map Name
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseExactIA5SubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.22. bindRequests

OID 1.3.6.1.4.1.36733.2.1.1.77
Names bindRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.23. bindResponses

OID 1.3.6.1.4.1.36733.2.1.1.78
Names bindResponses
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.24. bindTimeLimit

OID 1.3.6.1.4.1.11.1.3.1.1.4
Names bindTimeLimit
Description Maximum time an agent or service allows for a bind operation to complete
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.25. blockInheritance

OID 1.3.6.1.4.1.7628.5.4.2
Names blockInheritance
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed false
Usage dSAOperation
Origin draft-ietf-ldup-subentry
Schema File 00-core.ldif

1.26. bootFile

OID 1.3.6.1.1.1.1.24
Names bootFile
Description Boot image name
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.27. bootParameter

OID 1.3.6.1.1.1.1.23
Names bootParameter
Description rpc.bootparamd parameter
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.28. buildingName

Names of buildings where an organization or organizational unit is based.

OID 0.9.2342.19200300.100.1.48
Names buildingName
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.29. businessCategory

The kind of business performed by an organization. Each kind corresponds to a different attribute value.

OID 2.5.4.15
Names businessCategory
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.30. bytesRead

OID 1.3.6.1.4.1.36733.2.1.1.67
Names bytesRead
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.31. bytesWritten

OID 1.3.6.1.4.1.36733.2.1.1.68
Names bytesWritten
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.32. c-FacsimileTelephoneNumber

Fax phone number for a collection of entries.

OID 2.5.4.23.1
Names c-FacsimileTelephoneNumber
Superior Type facsimileTelephoneNumber
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax FacsimileTelephoneNumber
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.33. c-InternationalISDNNumber

ISDN address for a collection of entries.

OID 2.5.4.25.1
Names c-InternationalISDNNumber
Superior Type internationaliSDNNumber
Equality Matching Rule numericStringMatch
Ordering Matching Rule numericStringOrderingMatch
Substring Matching Rule numericStringSubstringsMatch
Syntax NumericString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.34. c-l

Name of a locality or place for a collection of entries.

OID 2.5.4.7.1
Names c-l
Superior Type l
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.35. c-o

Organization name for a collection of entries.

OID 2.5.4.10.1
Names c-o
Superior Type o
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.36. c-ou

Organizational unit name for a collection of entries.

OID 2.5.4.11.1
Names c-ou
Superior Type ou
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.37. c-PhysicalDeliveryOfficeName

Post office for a collection of entries.

OID 2.5.4.19.1
Names c-PhysicalDeliveryOfficeName
Superior Type physicalDeliveryOfficeName
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.38. c-PostalAddress

Postal address for a collection of entries.

OID 2.5.4.16.1
Names c-PostalAddress
Superior Type postalAddress
Equality Matching Rule caseIgnoreListMatch
Substring Matching Rule caseIgnoreListSubstringsMatch
Syntax PostalAddress
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.39. c-PostalCode

Postal code for a collection of entries.

OID 2.5.4.17.1
Names c-PostalCode
Superior Type postalCode
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.40. c-PostOfficeBox

Postal box identifier for a collection of entries.

OID 2.5.4.18.1
Names c-PostOfficeBox
Superior Type postOfficeBox
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.41. c-st

Full name of a state or province for a collection of entries.

OID 2.5.4.8.1
Names c-st
Superior Type st
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.42. c-street

Street address for a collection of entries.

OID 2.5.4.9.1
Names c-street
Superior Type street
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.43. c-TelephoneNumber

Phone number for a collection of entries.

OID 2.5.4.20.1
Names c-TelephoneNumber
Superior Type telephoneNumber
Equality Matching Rule telephoneNumberMatch
Substring Matching Rule telephoneNumberSubstringsMatch
Syntax TelephoneNumber
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.44. c-TelexNumber

Telex terminal number for a collection of entries.

OID 2.5.4.21.1
Names c-TelexNumber
Superior Type telexNumber
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax TelexNumber
Single Value false: multiple values allowed
Collective true
User Modification Allowed true
Usage userApplications
Origin RFC 3671
Schema File 00-core.ldif

1.45. c

Two-letter ISO 3166 country code.

OID 2.5.4.6
Names c, countryName
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax CountryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.46. cACertificate

X.509 certificate issued to the Certificate Authority (CA), as described in X.509 clause 11.2.2.

Request and transfer values using the binary option for the attribute description, cACertificate;binary.

OID 2.5.4.37
Names cACertificate
Equality Matching Rule certificateExactMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax Certificate
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4523
Schema File 00-core.ldif

1.47. calCalAdrURI

Protocol-independent location for a calendaring and scheduling client to send an event request to a user.

OID 1.2.840.113556.1.4.481
Names calCalAdrURI
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.48. calCalURI

Protocol-independent location for a calendaring and scheduling client to retrieve an entire snapshot copy of a user's calendar as one or more iCalendar objects.

OID 1.2.840.113556.1.4.478
Names calCalURI
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.49. calCAPURI

Protocol-independent location for a calendaring and scheduling client can communicate with a user's entire calendar.

OID 1.2.840.113556.1.4.480
Names calCAPURI
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.50. calFBURL

Protocol-independent location for a calendaring and scheduling client to retrieve information about when a user is busy as an iCalendar object with one or more "VFREEBUSY" calendar components.

OID 1.2.840.113556.1.4.479
Names calFBURL
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.51. calOtherCalAdrURIs

Protocol-independent additional locations for a calendaring and scheduling client to send event requests to a user.

OID 1.2.840.113556.1.4.485
Names calOtherCalAdrURIs
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.52. calOtherCalURIs

Protocol-independent location for a calendaring and scheduling client to retrieve snapshots of other calendars a user has as iCalendar objects.

OID 1.2.840.113556.1.4.482
Names calOtherCalURIs
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.53. calOtherCAPURIs

Protocol-independent location for a calendaring and scheduling client can communicate with a user's other calendars.

OID 1.2.840.113556.1.4.484
Names calOtherCAPURIs
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.54. calOtherFBURLs

Protocol-independent location for a calendaring and scheduling client to retrieve other information about when a user is busy as iCalendar objects with one or more "VFREEBUSY" calendar components.

OID 1.2.840.113556.1.4.483
Names calOtherFBURLs
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2739
Schema File 03-rfc2739.ldif

1.55. carLicense

Car license or registration plate number for a person's vehicle.

OID 2.16.840.1.113730.3.1.1
Names carLicense
Description vehicle license or registration plate
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.56. certificateRevocationList

X.509 certificate lists, as described in X.509 clause 11.2.4.

Request and transfer values using the binary option for the attribute description, certificateRevocationList;binary.

OID 2.5.4.39
Names certificateRevocationList
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax CertificateList
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4523
Schema File 00-core.ldif

1.57. changeInitiatorsName

Points to the entry that initiated the modification.

OID 1.3.6.1.4.1.26027.1.1.604
Names changeInitiatorsName
Description The initiator user of the change
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 03-changelog.ldif

1.58. changelog

OID 2.16.840.1.113730.3.1.35
Names changelog
Description the distinguished name of the entry which contains the set of entries comprising this servers changelog
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin draft-good-ldap-changelog
Schema File 00-core.ldif

1.59. changeLogCookie

Opaque unique identifier for a change in distributed replication changelog.

OID 1.3.6.1.4.1.26027.1.1.591
Names changeLogCookie
Description The OpenDS opaque cookie for the External Changelog
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 03-changelog.ldif

1.60. changeNumber

The set of changes made to a directory server is given by the set of all entries in the changelog, ordered by changeNumber, which strictly increases for a given server.

Note The changeNumber is unique to a server, and not necessarily shared or synchronized across servers. The change numbers for ForgeRock servers can be synchronized using the dsreplication reset-change-number command. ForgeRock servers also provide an alternative changeLogCookie attribute, which can be used reliably across a replicated topology.

A client application may synchronize its local copy of directory data by reading the server's changelog for entries where the changeNumber is greater than or equal to the last change that the client read from the server. A server can, however, trim its changelog. If the last change read from the changelog is not returned in search results, the client application must fall back to rebuilding its entire copy of directory data.

OID 2.16.840.1.113730.3.1.5
Names changeNumber
Description a number which uniquely identifies a change made to a directory entry
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-good-ldap-changelog
Schema File 03-changelog.ldif

1.61. changes

OID 2.16.840.1.113730.3.1.8
Names changes
Description a set of changes to apply to an entry
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-good-ldap-changelog
Schema File 03-changelog.ldif

1.62. changeTime

Indicates when an entry was changed for replication.

OID 2.16.840.1.113730.3.1.77
Names changeTime
Description the time when the change was processed
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin Sun Directory Server
Schema File 03-changelog.ldif

1.63. changeType

The type of change made to the entry specified by the targetDN attribute of the changelog entry. One of:

  • add

  • delete

  • modify

  • modrdn

OID 2.16.840.1.113730.3.1.7
Names changeType
Description the type of change made to an entry
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-good-ldap-changelog
Schema File 03-changelog.ldif

1.64. cn

X.500 commonName attribute that contains the name of an object.

When used for a person, this attribute contains the full name.

OID 2.5.4.3
Names cn, commonName
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.65. cNAMERecord

A type CNAME (canonical name) DNS resource record.

OID 0.9.2342.19200300.100.1.31
Names cNAMERecord
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.66. co

Friendly country name in human readable format. This attribute is commonly used with c country name, whose values are two-letter codes defined in the ISO 3166 standard.

OID 0.9.2342.19200300.100.1.43
Names co, friendlyCountryName
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.67. collectiveAttributeSubentries

This operational attribute identifies the collective attribute subentries that apply to the entry.

OID 2.5.18.12
Names collectiveAttributeSubentries
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed false
Usage directoryOperation
Origin RFC 3671
Schema File 00-core.ldif

1.68. collectiveConflictBehavior

Indicates how to handle conflicts between real (stored) and virtual (computed) attribute values.

OID 1.3.6.1.4.1.26027.1.1.606
Names collectiveConflictBehavior
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule 1.3.6.1.4.1.26027.1.4.8.1.3.6.1.4.1.26027.1.3.6
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax CollectiveConflictBehavior
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.69. collectiveExclusions

This operational attribute identifies the collective attributes to exclude from the entry. The value excludeAllCollectiveAttributes causes all collective attributes to be excluded.

OID 2.5.18.7
Names collectiveExclusions
Equality Matching Rule objectIdentifierMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax OID
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 3671
Schema File 00-core.ldif

1.70. compareRequests

OID 1.3.6.1.4.1.36733.2.1.1.79
Names compareRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.71. compareResponses

OID 1.3.6.1.4.1.36733.2.1.1.80
Names compareResponses
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.72. connectionsClosed

OID 1.3.6.1.4.1.36733.2.1.1.66
Names connectionsClosed
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.73. connectionsEstablished

OID 1.3.6.1.4.1.36733.2.1.1.65
Names connectionsEstablished
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.74. corbaIor

String representation of an interoperable object reference (IOR) for a CORBA object. The value holds all the information necessary to locate the object even if it is in another ORB.

OID 1.3.6.1.4.1.42.2.27.4.1.14
Names corbaIor
Description Stringified interoperable object reference of a CORBA object
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2714
Schema File 03-rfc2714.ldif

1.75. corbaRepositoryId

Unique repository ID, also known as type ID, for a CORBA interface. Multiple values reflect multiple interfaces, but the list is not necessarily complete.

Although the value string can be of any syntax, the following ID styles are specified:

IDL style: IDL:Prefix/ModuleName/InterfaceName:VersionNumber

Format used for standard interface definition language (IDL) IDs.

RMI style: RMI:ClassName:HashCode[:SUID]

Format used by RMI-IIOP remote objects.

  • ClassName is the fully qualified name of the class.

  • HashCode is the result of the object's hashCode() method.

  • SUID is the 64-bit stream unique identifier for the serialization version of the class.

DCE style: DCE:UUID

Format used for DCE/CORBA interoperability, where the UUID represents a DCE UUID.

Local

The format is defined by the local Object Request Broker (ORB).

OID 1.3.6.1.4.1.42.2.27.4.1.15
Names corbaRepositoryId
Description Repository ids of interfaces implemented by a CORBA object
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2714
Schema File 03-rfc2714.ldif

1.76. createTimestamp

For entries added over protocol (by an LDAP add request), this operational attribute reflects the time the entry was first added.

OID 2.5.18.1
Names createTimestamp
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.77. creatorsName

For entries added over protocol (by an LDAP add request), this operational attribute indicates the DN of the creator's entry.

OID 2.5.18.3
Names creatorsName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.78. credentialLevel

OID 1.3.6.1.4.1.11.1.3.1.1.10
Names credentialLevel
Description Identifies type of credentials either used, required, or supported by an agent or service
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.79. crossCertificatePair

X.509 certificate pair, as described in X.509 clause 11.2.3.

Request and transfer values using the binary option for the attribute description, crossCertificatePair;binary.

OID 2.5.4.40
Names crossCertificatePair
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax CertificatePair
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4523
Schema File 00-core.ldif

1.80. dc

Domain component as described in RFC 1274, where each attribute value holds one component, or label, of a DNS domain name. A value of this attribute is a string of ASCII characters following this ABNF:

label = (ALPHA / DIGIT) [*61(ALPHA / DIGIT / HYPHEN) (ALPHA / DIGIT)]
ALPHA   = %x41-5A / %x61-7A     ; "A"-"Z" / "a"-"z"
DIGIT   = %x30-39               ; "0"-"9"
HYPHEN  = %x2D                  ; hyphen ("-")
    

Examples: example, com (but not example.com)

OID 0.9.2342.19200300.100.1.25
Names dc, domainComponent
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreIA5SubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.81. defaultSearchBase

OID 1.3.6.1.4.1.11.1.3.1.1.1
Names defaultSearchBase
Description Default base for searches
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.82. defaultSearchScope

OID 1.3.6.1.4.1.11.1.3.1.1.12
Names defaultSearchScope
Description Default scope used when performing a search
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.83. defaultServerList

OID 1.3.6.1.4.1.11.1.3.1.1.0
Names defaultServerList
Description List of default servers
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.84. deleteOldRDN

OID 2.16.840.1.113730.3.1.10
Names deleteOldRDN
Description a flag which indicates if the old RDN should be retained as an attribute of the entry
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-good-ldap-changelog
Schema File 03-changelog.ldif

1.85. deleteRequests

OID 1.3.6.1.4.1.36733.2.1.1.81
Names deleteRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.86. deleteResponses

OID 1.3.6.1.4.1.36733.2.1.1.82
Names deleteResponses
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.87. deltaRevocationList

X.509 certificate lists, as described in X.509 clause 11.2.6.

Request and transfer values using the binary option for the attribute description, deltaRevocationList;binary.

OID 2.5.4.53
Names deltaRevocationList
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax CertificateList
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4523
Schema File 00-core.ldif

1.88. departmentNumber

Code for the department that a person belongs to.

Examples: 1234, ABC/123.

OID 2.16.840.1.113730.3.1.2
Names departmentNumber
Description identifies a department within an organization
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.89. dereferenceAliases

OID 1.3.6.1.4.1.11.1.3.1.1.16
Names dereferenceAliases
Description Specifies if a service or agent either requires, supports, or uses dereferencing of aliases.
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.90. description

Human-readable descriptive phrase about the entry.

OID 2.5.4.13
Names description
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.91. destinationIndicator

Country and city strings used by the Public Telegram Service.

The strings depend on CCITT Recommendations F.1 and F.31.

Examples: AASD (Sydney, Australia), GBLD (London, United Kingdom)

OID 2.5.4.27
Names destinationIndicator
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax PrintableString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.92. displayName

Name to be used for displaying an entry, especially in a one-line summary list.

OID 2.16.840.1.113730.3.1.241
Names displayName
Description preferred name of a person to be used when displaying entries
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.93. distinguishedName

Base type for user attribute types with DN syntax.

OID 2.5.4.49
Names distinguishedName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.94. dITContentRules

This operational attribute used in LDAP schema defines DIT content rules, which specify the content of entries with a given structural object class.

OID 2.5.21.2
Names dITContentRules
Equality Matching Rule objectIdentifierFirstComponentMatch
Syntax DITContentRuleDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.95. dITRedirect

DN indicating a newer entry for this entry. This entry should expire after a suitable grace period, for example, after the person changes organizations.

OID 0.9.2342.19200300.100.1.54
Names dITRedirect
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.96. dITStructureRules

This operational attribute used in LDAP schema defines DIT structure rules, which specify the names entries may have, and how entries may be related to each other.

OID 2.5.21.1
Names dITStructureRules
Equality Matching Rule integerFirstComponentMatch
Syntax DITStructureRuleDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.97. dmdName

A Directory Management Domain (DMD) name. The DMD is the administrative authority for this directory server.

OID 2.5.4.54
Names dmdName
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2256
Schema File 00-core.ldif

1.98. dnQualifier

Disambiguating information for the RDN of an entry. The information can be used to avoid conflicts when merging data from multiple sources.

All values for this attribute from a particular source should be the same.

OID 2.5.4.46
Names dnQualifier
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax PrintableString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.99. documentAuthor

DNs of the entries for authors and editors of a document.

OID 0.9.2342.19200300.100.1.14
Names documentAuthor
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.100. documentIdentifier

Unique identifier(s) of a document.

OID 0.9.2342.19200300.100.1.11
Names documentIdentifier
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.101. documentLocation

Location(s) of the document original.

OID 0.9.2342.19200300.100.1.15
Names documentLocation
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.102. documentPublisher

DNs of the person or organization who published the document. Joint publications have one value per publisher.

OID 0.9.2342.19200300.100.1.56
Names documentPublisher
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.103. documentTitle

Titles of a document, where multiple values can specify different forms, such as long and short versions.

OID 0.9.2342.19200300.100.1.12
Names documentTitle
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.104. documentVersion

OID 0.9.2342.19200300.100.1.13
Names documentVersion
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.105. drink

OID 0.9.2342.19200300.100.1.5
Names drink, favouriteDrink
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.106. ds-certificate-fingerprint

Holds a digital certificate fingerprint value for mapping an incoming certificate to a user entry.

OID 1.3.6.1.4.1.26027.1.1.268
Names ds-certificate-fingerprint
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.107. ds-certificate-subject-dn

Holds a digital certificate subject DN value for mapping an incoming certificate to a user entry.

OID 1.3.6.1.4.1.26027.1.1.266
Names ds-certificate-subject-dn
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.108. ds-private-naming-contexts

Holds the DNs that constitute the set of private naming contexts registered with the server, not for external use by applications.

OID 1.3.6.1.4.1.26027.1.1.246
Names ds-private-naming-contexts
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.109. ds-privilege-name

Holds an administrative privilege. See the directory server documentation for details.

OID 1.3.6.1.4.1.26027.1.1.260
Names ds-privilege-name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.110. ds-pwp-account-disabled

TRUE if the user's account has been disabled by an administrator.

OID 1.3.6.1.4.1.26027.1.1.166
Names ds-pwp-account-disabled
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.111. ds-pwp-account-expiration-time

Indicates when a temporary account expires, after which it can no longer be used to authenticate.

OID 1.3.6.1.4.1.26027.1.1.237
Names ds-pwp-account-expiration-time
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.112. ds-pwp-last-login-time

Holds a timestamp of the last successful bind.

OID 1.3.6.1.4.1.26027.1.1.162
Names ds-pwp-last-login-time
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.113. ds-pwp-password-changed-by-required-time

Indicates whether the user's password was changed as required by the password policy.

OID 1.3.6.1.4.1.26027.1.1.163
Names ds-pwp-password-changed-by-required-time
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.114. ds-pwp-password-expiration-time

Indicates when the password for the current entry expires.

OID 1.3.6.1.4.1.36733.2.1.1.60
Names ds-pwp-password-expiration-time, pwdExpirationTime
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.115. ds-pwp-password-policy-dn

Pointer to the entry holding the password policy for the current entry.

OID 1.3.6.1.4.1.26027.1.1.244
Names ds-pwp-password-policy-dn
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.116. ds-pwp-reset-time

Indicates when the user's password was reset.

OID 1.3.6.1.4.1.26027.1.1.164
Names ds-pwp-reset-time
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.117. ds-pwp-warned-time

Indicates when the user was first warned about an expiring password.

OID 1.3.6.1.4.1.26027.1.1.165
Names ds-pwp-warned-time
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.118. ds-rlim-idle-time-limit

Sets the maximum time the server allows the user to hold an idle connection open.

OID 1.3.6.1.4.1.26027.1.1.394
Names ds-rlim-idle-time-limit
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.119. ds-rlim-lookthrough-limit

Sets the maximum number of entries the server considers when processing a search by the user.

OID 1.3.6.1.4.1.26027.1.1.241
Names ds-rlim-lookthrough-limit
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.120. ds-rlim-size-limit

Sets the maximum number of entries returned for a search by the user.

OID 1.3.6.1.4.1.26027.1.1.116
Names ds-rlim-size-limit
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.121. ds-rlim-time-limit

Sets the maximum server processing time for a search by the user.

OID 1.3.6.1.4.1.26027.1.1.117
Names ds-rlim-time-limit
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.122. ds-sync-conflict

For an entry resulting from a replication conflict, holds the DN that the entry would have had without the conflict.

OID 1.3.6.1.4.1.26027.1.1.317
Names ds-sync-conflict
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.123. ds-sync-fractional-exclude

Indicates which attributes to exclude in fractional replication.

OID 1.3.6.1.4.1.26027.1.1.589
Names ds-sync-fractional-exclude
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.124. ds-sync-fractional-include

Indicates which attributes to include in fractional replication.

OID 1.3.6.1.4.1.26027.1.1.588
Names ds-sync-fractional-include
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.125. ds-sync-generation-id

Holds the replication generation ID for a backend.

OID 1.3.6.1.4.1.26027.1.1.405
Names ds-sync-generation-id
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.126. ds-sync-hist

Holds historical information for replication.

OID 1.3.6.1.4.1.26027.1.1.119
Names ds-sync-hist
Equality Matching Rule octetStringMatch
Ordering Matching Rule historicalCsnOrderingMatch
Syntax OctetString
Single Value false: multiple values allowed
User Modification Allowed false
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.127. ds-sync-state

Holds replication state information for a backend.

OID 1.3.6.1.4.1.26027.1.1.185
Names ds-sync-state
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.128. ds-target-group-dn

Pointer to a group to be shown as a virtual static group.

OID 1.3.6.1.4.1.26027.1.1.292
Names ds-target-group-dn
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 02-config.ldif

1.129. dSAQuality

Directory administrators can use this attribute to indicate the quality (availability) of this Directory System Agent (DSA).

OID 0.9.2342.19200300.100.1.49
Names dSAQuality
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.130. emailAddress

OID 1.2.840.113549.1.9.1
Names emailAddress
Description represents the email address part of an X.509 certificate
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2985
Schema File 00-core.ldif

1.131. employeeNumber

Identifier that depends on the organization. It often reflects the order of hire or association with the organization.

OID 2.16.840.1.113730.3.1.3
Names employeeNumber
Description numerically identifies an employee within an organization
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.132. employeeType

Identifier for the employee to employer relationship, such as Employee, Contractor, or Temp. The values used depend on the classification of employees.

OID 2.16.840.1.113730.3.1.4
Names employeeType
Description type of employment for a person
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.133. enhancedSearchGuide

Sets of information used by directory clients when constructing search filters.

Examples: person#(sn$APPROX)#wholeSubtree, organizationalUnit#(ou$SUBSTR)#oneLevel

OID 2.5.4.47
Names enhancedSearchGuide
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax EnhancedGuide
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.134. entryDN

An entry's distinguished name is not an attribute of the entry.

This operational attribute makes it possible to perform attribute value assertions against the DN of the entry, enabling operations such as LDAP compare and LDAP search.

OID 1.3.6.1.1.20
Names entryDN
Description DN of the entry
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin RFC 5020
Schema File 00-core.ldif

1.135. entryUUID

Holds a Universally Unique Identifier (UUID) assigned to the entry.

The server generates the value of this operational attribute when adding the entry to the directory.

A UUID is a 16-octet (128-bit) string, constrained to the namespace specified in , and encoded using the ASCII representation.

Example: 597ae2f6-16a6-1027-98f4-d28b5365dc14.

OID 1.3.6.1.1.16.4
Names entryUUID
Description UUID of the entry
Equality Matching Rule uuidMatch
Ordering Matching Rule uuidOrderingMatch
Syntax UUID
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin RFC 4530
Schema File 00-core.ldif

1.136. etag

Specifies an entity tag suitable for external use when comparing two versions of an entry.

OID 1.3.6.1.4.1.36733.2.1.1.59
Names etag
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax PrintableString
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin OpenDJ Directory Server
Schema File 00-core.ldif

1.137. extendedRequests

OID 1.3.6.1.4.1.36733.2.1.1.83
Names extendedRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.138. extendedResponses

OID 1.3.6.1.4.1.36733.2.1.1.84
Names extendedResponses
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.139. facsimileTelephoneNumber

Fax phone number, such as +1 415 555 1212 or +1 415 555 1212$fineResolution.

OID 2.5.4.23
Names facsimileTelephoneNumber
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax FacsimileTelephoneNumber
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.140. firstChangeNumber

Holds the oldest change number in the changelog.

OID 1.3.6.1.4.1.26027.1.1.593
Names firstChangeNumber
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.141. followReferrals

OID 1.3.6.1.4.1.11.1.3.1.1.5
Names followReferrals
Description An agent or service does or should follow referrals
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.142. fullVendorVersion

Holds the vendor version including the build number.

OID 1.3.6.1.4.1.36733.2.1.1.141
Names fullVendorVersion
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed false
Usage dSAOperation
Origin OpenDJ Directory Server
Schema File 00-core.ldif

1.143. gecos

OID 1.3.6.1.1.1.1.2
Names gecos
Description The GECOS field; the common name
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreIA5SubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.144. generationQualifier

Name strings typically forming the suffix part of a person's name.

Examples: Jr., 3rd

OID 2.5.4.44
Names generationQualifier
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.145. gidNumber

OID 1.3.6.1.1.1.1.1
Names gidNumber
Description An integer uniquely identifying a group in an administrative domain
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.146. givenName

Part of a person's name that is neither their surname nor their middle name.

OID 2.5.4.42
Names givenName
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.147. governingStructureRule

Indicates the structure rule governing the entry. The structure rule defines the names entries may have, and how entries may be related to each other.

OID 2.5.21.10
Names governingStructureRule
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.148. hasSubordinates

Indicates whether the entry has any subordinate entries.

OID 2.5.18.9
Names hasSubordinates
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin X.501
Schema File 00-core.ldif

1.149. homeDirectory

OID 1.3.6.1.1.1.1.3
Names homeDirectory
Description The absolute path to the home directory
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.150. homePhone

Home phone number, such as +1 415 555 1212.

OID 0.9.2342.19200300.100.1.20
Names homePhone, homeTelephoneNumber
Equality Matching Rule telephoneNumberMatch
Substring Matching Rule telephoneNumberSubstringsMatch
Syntax TelephoneNumber
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.151. homePostalAddress

Home postal address for an object, such as 1234 Main St.$Anytown, CA 12345$USA. Values are expected to be no longer than 6 directory strings of 30 characters each, although servers are not expected to enforce these limits.

OID 0.9.2342.19200300.100.1.39
Names homePostalAddress
Equality Matching Rule caseIgnoreListMatch
Substring Matching Rule caseIgnoreListSubstringsMatch
Syntax PostalAddress
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.152. host

Hostname of a computer, generally as a fully qualified domain name such as server.example.com.

OID 0.9.2342.19200300.100.1.9
Names host
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.153. houseIdentifier

OID 2.5.4.51
Names houseIdentifier
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.154. includedAttributes

In a changelog entry, holds the attributes on the entry prior to the change.

OID 1.3.6.1.4.1.36733.2.1.1.6
Names includedAttributes
Description A set of attributes which were part of the entry before the changes were applied
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDJ Directory Server
Schema File 03-changelog.ldif

1.155. info

General information associated with the object represented by the directory entry. Applications should not ascribe specific semantics to the value of this attribute.

OID 0.9.2342.19200300.100.1.4
Names info
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.156. inheritable

OID 1.3.6.1.4.1.7628.5.4.1
Names inheritable
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed false
Usage dSAOperation
Origin draft-ietf-ldup-subentry
Schema File 00-core.ldif

1.157. inheritAttribute

Holds the name of a collective attribute to inherit.

OID 1.3.6.1.4.1.26027.1.1.625
Names inheritAttribute
Equality Matching Rule objectIdentifierMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax OID
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.158. inheritFromBaseRDN

Holds the RDN of the base entry under which the entries are found from which to inherit collective attributes.

OID 1.3.6.1.4.1.26027.1.1.622
Names inheritFromBaseRDN
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.159. inheritFromDNAttribute

Holds the DN-syntax attribute specifying the entry from which to inherit collective attributes.

OID 1.3.6.1.4.1.26027.1.1.621
Names inheritFromDNAttribute
Equality Matching Rule objectIdentifierMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax OID
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.160. inheritFromRDNAttribute

Holds the RDN attribute of the entry from which to inherit collective attributes.

OID 1.3.6.1.4.1.26027.1.1.624
Names inheritFromRDNAttribute
Equality Matching Rule objectIdentifierMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax OID
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.161. inheritFromRDNType

Holds the RDN attribute type of the entry from which to inherit collective attributes.

OID 1.3.6.1.4.1.26027.1.1.623
Names inheritFromRDNType
Equality Matching Rule objectIdentifierMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax OID
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.162. initials

Strings of initials of some or all of a person's names, excluding the surname(s). Each string is one value of the attribute.

OID 2.5.4.43
Names initials
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.163. internationaliSDNNumber

Integrated Services Digital Network (ISDN) addresses, as specified by the International Telecommunication Union (ITU) Recommendation E.164.

OID 2.5.4.25
Names internationaliSDNNumber
Equality Matching Rule numericStringMatch
Ordering Matching Rule numericStringOrderingMatch
Substring Matching Rule numericStringSubstringsMatch
Syntax NumericString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.164. ipHostNumber

OID 1.3.6.1.1.1.1.19
Names ipHostNumber
Description IPv4 addresses as a dotted decimal omitting leading zeros or IPv6 addresses as defined in RFC2373
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.165. ipNetmaskNumber

OID 1.3.6.1.1.1.1.21
Names ipNetmaskNumber
Description IP netmask as a dotted decimal, eg. 255.255.255.0, omitting leading zeros
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.166. ipNetworkNumber

OID 1.3.6.1.1.1.1.20
Names ipNetworkNumber
Description IP network as a dotted decimal, eg. 192.168, omitting leading zeros
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.167. ipProtocolNumber

OID 1.3.6.1.1.1.1.17
Names ipProtocolNumber
Description IP protocol number
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.168. ipServicePort

OID 1.3.6.1.1.1.1.15
Names ipServicePort
Description Service port number
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.169. ipServiceProtocol

OID 1.3.6.1.1.1.1.16
Names ipServiceProtocol
Description Service protocol name
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.170. ipTnetNumber

OID 1.3.6.1.4.1.42.2.27.5.1.68
Names ipTnetNumber
Description Trusted Solaris network template ip_address
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.171. ipTnetTemplateName

OID 1.3.6.1.4.1.42.2.27.5.1.67
Names ipTnetTemplateName
Description Trusted Solaris network template template_name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.172. isMemberOf

Shows group DNs of which this entry is a member.

OID 1.3.6.1.4.1.42.2.27.9.1.792
Names isMemberOf
Description Sun-defined attribute type
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed false
Usage directoryOperation
Origin Sun Java System Directory Server
Schema File 00-core.ldif

1.173. janetMailbox

Electronic mailbox attribute using the syntax specified in the Grey Book of the Coloured Book protocols. See, for example, the Wikipedia article on .

Example: janetMail: user@UK.CO.EXAMPLE.

Entries using this attribute must also include an rfc822Mailbox attribute, such as mail: user@example.co.uk.

OID 0.9.2342.19200300.100.1.46
Names janetMailbox
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.174. javaClassName

Case-sensitive fully qualified name of a Java class or interface.

OID 1.3.6.1.4.1.42.2.27.4.1.6
Names javaClassName
Description Fully qualified name of distinguished Java class or interface
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2713
Schema File 03-rfc2713.ldif

1.175. javaClassNames

Case-sensitive fully qualified names of a Java class or interface. Multiple values represent a class or interface name of this object, or of an ancestor class or interface of this object.

OID 1.3.6.1.4.1.42.2.27.4.1.13
Names javaClassNames
Description Fully qualified Java class or interface name
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2713
Schema File 03-rfc2713.ldif

1.176. javaCodebase

Location from which to load the class specified by the javaClassName attribute.

If multiple values are present, each value is an independent code base, meaning each is an alternative location from which to load the class definition.

OID 1.3.6.1.4.1.42.2.27.4.1.7
Names javaCodebase
Description URL(s) specifying the location of class definition
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2713
Schema File 03-rfc2713.ldif

1.177. javaDoc

URL to the Javadoc for the object.

OID 1.3.6.1.4.1.42.2.27.4.1.12
Names javaDoc
Description The Java documentation for the class
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2713
Schema File 03-rfc2713.ldif

1.178. javaFactory

Case-sensitive fully qualified name of a Java class that can be used to create an instance of the class specified by the javaClassName attribute.

OID 1.3.6.1.4.1.42.2.27.4.1.10
Names javaFactory
Description Fully qualified Java class name of a JNDI object factory
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2713
Schema File 03-rfc2713.ldif

1.179. javaReferenceAddress

Sequence of addresses of a JNDI reference. Each value represents and object of type javax.naming.RefAddr, and has the following form, where # is the delimiter:

#sequence-number#address-type#(address-value|#string-content)

sequence-number

The address's position in the JNDI reference starting at 0.

address-type

Type of JNDI address, which is a non-empty string.

address-value

Value of the address contents if the reference is of type javax.naming.StringRefAddr.

string-content

Base64-encoded string representation of the entire serialized address if the reference is not of type javax.naming.StringRefAddr.

OID 1.3.6.1.4.1.42.2.27.4.1.11
Names javaReferenceAddress
Description Addresses associated with a JNDI Reference
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2713
Schema File 03-rfc2713.ldif

1.180. javaSerializedData

A serialized Java object. For details, see the .

OID 1.3.6.1.4.1.42.2.27.4.1.8
Names javaSerializedData
Description Serialized form of a Java object
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2713
Schema File 03-rfc2713.ldif

1.181. jpegPhoto

An image of a person in the JPEG File Interchange Format (JFIF).

OID 0.9.2342.19200300.100.1.60
Names jpegPhoto
Description a JPEG image
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax JPEG
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.182. knowledgeInformation

According to the specification, "This attribute is no longer used."

OID 2.5.4.2
Names knowledgeInformation
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2256
Schema File 00-core.ldif

1.183. l

Name of a locality or place, such as a city, country or geographic region.

OID 2.5.4.7
Names l, localityName
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.184. labeledURI

A URI with an optional label, as described in .

Example: https://forgerock.com ForgeRock Home Page

OID 1.3.6.1.4.1.250.1.57
Names labeledURI
Description Uniform Resource Identifier with optional label
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2079
Schema File 00-core.ldif

1.185. labeledURL

OID 1.3.6.1.4.1.250.1.41
Names labeledURL
Description Uniform Resource Locator with optional label
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2079
Schema File 00-core.ldif

1.186. lastChangeNumber

Holds the newest change number in the changelog.

OID 1.3.6.1.4.1.26027.1.1.594
Names lastChangeNumber
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.187. lastExternalChangelogCookie

Holds the most recent cookie (cross domain state) available.

OID 1.3.6.1.4.1.26027.1.1.585
Names lastExternalChangelogCookie
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 00-core.ldif

1.188. lastModifiedBy

DN of the last user to modify the entry.

Although not described in the RFC as an operational attribute, this attribute should be maintained by the server.

OID 0.9.2342.19200300.100.1.24
Names lastModifiedBy
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.189. lastModifiedTime

UTC time when the entry was last modified.

Although not described in the RFC as an operational attribute, this attribute should be maintained by the server.

OID 0.9.2342.19200300.100.1.23
Names lastModifiedTime
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.190. ldapMessagesRead

OID 1.3.6.1.4.1.36733.2.1.1.69
Names ldapMessagesRead
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.191. ldapMessagesWritten

OID 1.3.6.1.4.1.36733.2.1.1.70
Names ldapMessagesWritten
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.192. ldapSyntaxes

This operational attribute used in LDAP schema defines syntaxes, which specify encodings used in LDAP.

OID 1.3.6.1.4.1.1466.101.120.16
Names ldapSyntaxes
Equality Matching Rule objectIdentifierFirstComponentMatch
Syntax LDAPSyntaxDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.193. loginShell

OID 1.3.6.1.1.1.1.4
Names loginShell
Description The path to the login shell
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.194. macAddress

OID 1.3.6.1.1.1.1.22
Names macAddress
Description MAC address in maximal, colon separated hex notation, eg. 00:00:92:90:ee:e2
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.195. mail

Internet mail addresses in Mailbox form, as described in . The server does not ensure that mail addresses conform to RFC 2821, however.

Be aware that matching is case-insensitive: (mail=bjensen@example.com) matches BJENSEN@example.com

Applications supporting internationalized domain names must use the ToASCII method described in to produce subdomain components of the Mailbox form.

OID 0.9.2342.19200300.100.1.3
Names mail, rfc822Mailbox
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreIA5SubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.196. mailPreferenceOption

Indication of user's preference for having their names included in mailing lists.

Values are from the following list:

no-list-inclusion (Default)

Do not add name in mailing lists.

any-list-inclusion

May add name in mailing lists.

professional-list-inclusion

May add name in mailing lists related to user's professional interests, optionally as evaluated from the business organization or keywords in the entry.

OID 0.9.2342.19200300.100.1.47
Names mailPreferenceOption
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.197. manager

DNs of manager entries for the entry of a person or entity.

OID 0.9.2342.19200300.100.1.10
Names manager
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.198. matchingRules

This operational attribute used in LDAP schema defines matching rules, which specify how values of attributes are matched and compared.

OID 2.5.21.4
Names matchingRules
Equality Matching Rule objectIdentifierFirstComponentMatch
Syntax MatchingRuleDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.199. matchingRuleUse

This operational attribute used in LDAP schema defines matching rule uses, which list attributes that can be used with an extensibleMatch search filter.

OID 2.5.21.8
Names matchingRuleUse
Equality Matching Rule objectIdentifierFirstComponentMatch
Syntax MatchingRuleUseDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.200. mDRecord

A type MD (mail destination) DNS resource record.

OID 0.9.2342.19200300.100.1.27
Names mDRecord
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.201. member

Distinguished names of objects that are part of a group.

OID 2.5.4.31
Names member
Superior Type distinguishedName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.202. memberGid

OID 1.3.6.1.4.1.42.2.27.5.1.30
Names memberGid
Description Posix Group Name
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.203. memberNisNetgroup

OID 1.3.6.1.1.1.1.13
Names memberNisNetgroup
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseExactIA5SubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.204. memberUid

OID 1.3.6.1.1.1.1.12
Names memberUid
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.205. memberURL

Holds LDAP URLs specifying dynamic group membership.

OID 2.16.840.1.113730.3.1.198
Names memberURL
Description Sun-defined attribute type
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Sun Java System Directory Server
Schema File 00-core.ldif

1.206. mgrpRFC822MailMember

OID 2.16.840.1.113730.3.1.30
Names mgrpRFC822MailMember
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.207. mobile

Mobile phone number, such as +1 415 555 1212.

OID 0.9.2342.19200300.100.1.41
Names mobile, mobileTelephoneNumber
Equality Matching Rule telephoneNumberMatch
Substring Matching Rule telephoneNumberSubstringsMatch
Syntax TelephoneNumber
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.208. modifiersName

For entries updated over protocol (by an LDAP modify request, for example), this operational attribute indicates the DN of the creator's entry.

OID 2.5.18.4
Names modifiersName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.209. modifyDNRequests

OID 1.3.6.1.4.1.36733.2.1.1.87
Names modifyDNRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.210. modifyDNResponses

OID 1.3.6.1.4.1.36733.2.1.1.88
Names modifyDNResponses
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.211. modifyRequests

OID 1.3.6.1.4.1.36733.2.1.1.85
Names modifyRequests
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.212. modifyResponses

OID 1.3.6.1.4.1.36733.2.1.1.86
Names modifyResponses
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.213. modifyTimestamp

For entries updated over protocol (by an LDAP modify request, for example), this operational attribute reflects the time the entry was last modified.

OID 2.5.18.2
Names modifyTimestamp
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.214. mxRecord

A type MX (mail exchange) DNS resource record.

OID 0.9.2342.19200300.100.1.28
Names mxRecord
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.215. name

Base type for user attribute types with name syntax.

OID 2.5.4.41
Names name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.216. nameForms

This operational attribute used in LDAP schema defines name forms, which specify naming relations for structural object classes.

OID 2.5.21.7
Names nameForms
Equality Matching Rule objectIdentifierFirstComponentMatch
Syntax NameFormDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.217. namingContexts

This operational attribute indicates the base DNs mastered or shadowed by this server.

OID 1.3.6.1.4.1.1466.101.120.5
Names namingContexts
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage dSAOperation
Origin RFC 4512
Schema File 00-core.ldif

1.218. newRDN

OID 2.16.840.1.113730.3.1.9
Names newRDN
Description the new RDN of an entry which is the target of a modrdn operation
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-good-ldap-changelog
Schema File 03-changelog.ldif

1.219. newSuperior

OID 2.16.840.1.113730.3.1.11
Names newSuperior
Description the new parent of an entry which is the target of a moddn operation
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-good-ldap-changelog
Schema File 03-changelog.ldif

1.220. nisDomain

OID 1.3.6.1.1.1.1.30
Names nisDomain
Description NIS domain
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.221. nisMapEntry

OID 1.3.6.1.1.1.1.27
Names nisMapEntry
Description A generic NIS entry
Equality Matching Rule caseExactIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseExactIA5SubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.222. nisMapName

OID 1.3.6.1.1.1.1.26
Names nisMapName
Description Name of a A generic NIS map
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.223. nisNetgroupTriple

OID 1.3.6.1.1.1.1.14
Names nisNetgroupTriple
Description Netgroup triple
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.224. nisNetIdGroup

OID 1.3.6.1.4.1.42.2.27.1.1.13
Names nisNetIdGroup
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.225. nisNetIdHost

OID 1.3.6.1.4.1.42.2.27.1.1.14
Names nisNetIdHost
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.226. nisNetIdUser

OID 1.3.6.1.4.1.42.2.27.1.1.12
Names nisNetIdUser
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.227. nisplusTimeZone

OID 1.3.6.1.4.1.42.2.27.5.1.57
Names nisplusTimeZone
Description tzone column from NIS+ timezone table
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.228. nisPublicKey

OID 1.3.6.1.1.1.1.28
Names nisPublicKey
Description NIS public key
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.229. nisSecretKey

OID 1.3.6.1.1.1.1.29
Names nisSecretKey
Description NIS secret key
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.230. nsds50ruv

DSEE attribute holding the internal state of the replica from the replication update vector.

OID 2.16.840.1.113730.3.1.587
Names nsds50ruv
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Sun Directory Server
Schema File 06-compat.ldif

1.231. nSRecord

A type NS (name server) DNS resource record.

OID 0.9.2342.19200300.100.1.29
Names nSRecord
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.232. nsUniqueId

DSEE attribute holding an entry UUID.

OID 2.16.840.1.113730.3.1.542
Names nsUniqueId
Description Sun-defined unique identifier
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin Sun Java System Directory Server
Schema File 00-core.ldif

1.233. numSubordinates

This operational attribute holds a count of immediate subordinates of the current entry. (The count therefore does not include entries below immediate subordinates.)

As numSubordinates is an operational attribute client applications must request it explicitly in search results.

Support for the numSubordinates attribute is per entry. If it is present then its value is correct. Its absence does not, however, imply that there are no subordinates.

OID 1.3.6.1.4.1.453.16.2.103
Names numSubordinates
Description Count of immediate subordinates
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin draft-ietf-boreham-numsubordinates
Schema File 00-core.ldif

1.234. o

X.500 organizationName attribute for the name of an organization.

Example: ForgeRock, Inc.

OID 2.5.4.10
Names o, organizationName
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.235. objectClass

Describes the type of object represented by the entry, controlling which attributes must and may be present on the entry.

Each entry has at least two values, one of which is top or alias.

When an object class value is added to an entry, all superclasses of the object class are implicitly added. For example, if inetOrgPerson is added, person and organizationalPerson are also added.

OID 2.5.4.0
Names objectClass
Equality Matching Rule objectIdentifierMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax OID
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4512
Schema File 00-core.ldif

1.236. objectClasses

This operational attribute used in LDAP schema defines object classes, which specify the types of objects that an entry represents, and the required and optional attributes for entries of those types.

OID 2.5.21.6
Names objectClasses
Equality Matching Rule objectIdentifierFirstComponentMatch
Syntax ObjectClassDescription
Single Value false: multiple values allowed
User Modification Allowed true
Usage directoryOperation
Origin RFC 4512
Schema File 00-core.ldif

1.237. objectclassMap

OID 1.3.6.1.4.1.11.1.3.1.1.11
Names objectclassMap
Description Object class mappings used, required, or supported by an agent or service
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.238. oncRpcNumber

OID 1.3.6.1.1.1.1.18
Names oncRpcNumber
Description ONC RPC number
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-howard-rfc2307bis
Schema File 04-rfc2307bis.ldif

1.239. operationsAbandoned

OID 1.3.6.1.4.1.36733.2.1.1.71
Names operationsAbandoned
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.240. operationsCompleted

OID 1.3.6.1.4.1.36733.2.1.1.73
Names operationsCompleted
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.241. operationsInitiated

OID 1.3.6.1.4.1.36733.2.1.1.72
Names operationsInitiated
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin OpenDJ Directory Server
Schema File 02-config.ldif

1.242. organizationalStatus

Categories to refer to a person in an organization, such as professor or staff.

Similar attributes include title and userClass.

OID 0.9.2342.19200300.100.1.45
Names organizationalStatus
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.243. otherMailbox

An electronic mailbox address of a type other than X.400 or RFC 822.

OID 0.9.2342.19200300.100.1.22
Names otherMailbox
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.244. ou

X.500 organizationalUnitName attribute for the name of an organizational unit.

Example: Product Development

OID 2.5.4.11
Names organizationalUnitName, ou
Superior Type name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.245. owner

Distinguished names of objects with an ownership relationship to the current object.

OID 2.5.4.32
Names owner
Superior Type distinguishedName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.246. pager

Pager phone number, such as +1 415 555 1212.

OID 0.9.2342.19200300.100.1.42
Names pager, pagerTelephoneNumber
Equality Matching Rule telephoneNumberMatch
Substring Matching Rule telephoneNumberSubstringsMatch
Syntax TelephoneNumber
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.247. personalSignature

Representation of a person's signature. According to RFC 1274, the value is,

Encoded in G3 fax as explained in recommendation T.4, with an ASN.1 wrapper to make it compatible with an X.400 BodyPart as defined in X.420.

OID 0.9.2342.19200300.100.1.53
Names personalSignature
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax Binary
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 1274
Schema File 00-core.ldif

1.248. personalTitle

Personal title for a person, such as Dr. or Professor.

OID 0.9.2342.19200300.100.1.40
Names personalTitle
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.249. photo

A photograph in G3 fax as described in recommendation T.4, with an ASN.1 wrapper to make it compatible with an X.400 BodyPart, as defined in X.420.

OID 0.9.2342.19200300.100.1.7
Names photo
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.250. physicalDeliveryOfficeName

A name used by the postal service to identify a post office.

OID 2.5.4.19
Names physicalDeliveryOfficeName
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.251. postalAddress

An address used by the postal service to perform services for the entity.

Use dollar signs ($) to separate lines in the address, and see the PostalAddress syntax description for details.

Example: 1234 Main St.$Anytown, CA 12345$USA.

OID 2.5.4.16
Names postalAddress
Equality Matching Rule caseIgnoreListMatch
Substring Matching Rule caseIgnoreListSubstringsMatch
Syntax PostalAddress
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.252. postalCode

A code used by the postal service to identify postal service zones.

OID 2.5.4.17
Names postalCode
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.253. postOfficeBox

A postal box identifier that the postal service uses when the customer receives mail at a box on the premises of the postal service.

OID 2.5.4.18
Names postOfficeBox
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.254. preferredDeliveryMethod

Indicates the preferred method for getting a message to the entity, where the methods can be specified in order of decreasing priority.

Example: mhs $ physical.

OID 2.5.4.28
Names preferredDeliveryMethod
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DeliveryMethod
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.255. preferredLanguage

Indicates a person's preferred language or languages, which is useful for international correspondence and computer interaction. describes an Accept-Language field. That field's content, without Accept-Language:, matches the content of this attribute.

Example: en, ko;q=0.8.

OID 2.16.840.1.113730.3.1.39
Names preferredLanguage
Description preferred written or spoken language for a person
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2798
Schema File 00-core.ldif

1.256. preferredServerList

OID 1.3.6.1.4.1.11.1.3.1.1.2
Names preferredServerList
Description List of preferred servers
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.257. presentationAddress

An OSI presentation address.

OID 2.5.4.29
Names presentationAddress
Equality Matching Rule presentationAddressMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax PresentationAddress
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 2256
Schema File 00-core.ldif

1.258. printer-aliases

OID 1.3.18.0.2.4.1108
Names printer-aliases
Description List of site-specific administrative names of this printer in addition to the value specified for printer-name.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.259. printer-charset-configured

OID 1.3.18.0.2.4.1109
Names printer-charset-configured
Description The configured charset in which error and status messages will be generated (by default) by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.260. printer-charset-supported

OID 1.3.18.0.2.4.1131
Names printer-charset-supported
Description Set of charsets supported for the attribute values of syntax DirectoryString for this directory entry.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.261. printer-color-supported

OID 1.3.18.0.2.4.1129
Names printer-color-supported
Description Indicates whether this printer is capable of any type of color printing at all, including highlight color.
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.262. printer-compression-supported

OID 1.3.18.0.2.4.1128
Names printer-compression-supported
Description Compression algorithms supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.263. printer-copies-supported

OID 1.3.18.0.2.4.1118
Names printer-copies-supported
Description The maximum number of copies of a document that may be printed as a single job on this printer.
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.264. printer-current-operator

OID 1.3.18.0.2.4.1112
Names printer-current-operator
Description The identity of the current human operator responsible for operating this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.265. printer-delivery-orientation-supported

OID 1.3.18.0.2.4.1114
Names printer-delivery-orientation-supported
Description The possible delivery orientations of pages as they are printed and ejected from this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.266. printer-document-format-supported

OID 1.3.18.0.2.4.1130
Names printer-document-format-supported
Description The possible source document formats which may be interpreted and printed by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.267. printer-finishings-supported

OID 1.3.18.0.2.4.1125
Names printer-finishings-supported
Description The possible finishing operations supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.268. printer-generated-natural-language-supported

OID 1.3.18.0.2.4.1137
Names printer-generated-natural-language-supported
Description Natural language(s) supported for this directory entry.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.269. printer-info

OID 1.3.18.0.2.4.1139
Names printer-info
Description Descriptive information about this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.270. printer-ipp-versions-supported

OID 1.3.18.0.2.4.1133
Names printer-ipp-versions-supported
Description IPP protocol version(s) that this printer supports.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.271. printer-job-k-octets-supported

OID 1.3.18.0.2.4.1111
Names printer-job-k-octets-supported
Description The maximum size in kilobytes (1,024 octets actually) incoming print job that this printer will accept.
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.272. printer-job-priority-supported

OID 1.3.18.0.2.4.1110
Names printer-job-priority-supported
Description Indicates the number of job priority levels supported by this printer.
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.273. printer-location

OID 1.3.18.0.2.4.1136
Names printer-location
Description The physical location of this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.274. printer-make-and-model

OID 1.3.18.0.2.4.1138
Names printer-make-and-model
Description Make and model of this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.275. printer-media-local-supported

OID 1.3.18.0.2.4.1117
Names printer-media-local-supported
Description Site-specific names of media supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.276. printer-media-supported

OID 1.3.18.0.2.4.1122
Names printer-media-supported
Description The standard names/types/sizes (and optional color suffixes) of the media supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.277. printer-more-info

OID 1.3.18.0.2.4.1134
Names printer-more-info
Description A URI for more information about this specific printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.278. printer-multiple-document-jobs-supported

OID 1.3.18.0.2.4.1132
Names printer-multiple-document-jobs-supported
Description Indicates whether this printer supports more than one document per job.
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.279. printer-name

OID 1.3.18.0.2.4.1135
Names printer-name
Description The site-specific administrative name of this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.280. printer-natural-language-configured

OID 1.3.18.0.2.4.1119
Names printer-natural-language-configured
Description The configured natural language in which error and status messages will be generated (by default) by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.281. printer-number-up-supported

OID 1.3.18.0.2.4.1124
Names printer-number-up-supported
Description The possible numbers of print-stream pages to impose upon a single side of an instance of a selected medium.
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.282. printer-output-features-supported

OID 1.3.18.0.2.4.1116
Names printer-output-features-supported
Description The possible output features supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.283. printer-pages-per-minute-color

OID 1.3.18.0.2.4.1126
Names printer-pages-per-minute-color
Description The nominal number of color pages per minute which may be output by this printer.
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.284. printer-pages-per-minute

OID 1.3.18.0.2.4.1127
Names printer-pages-per-minute
Description The nominal number of pages per minute which may be output by this printer.
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.285. printer-print-quality-supported

OID 1.3.18.0.2.4.1120
Names printer-print-quality-supported
Description List of print qualities supported for printing documents on this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.286. printer-resolution-supported

OID 1.3.18.0.2.4.1121
Names printer-resolution-supported
Description List of resolutions supported for printing documents by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.287. printer-service-person

OID 1.3.18.0.2.4.1113
Names printer-service-person
Description The identity of the current human service person responsible for servicing this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.288. printer-sides-supported

OID 1.3.18.0.2.4.1123
Names printer-sides-supported
Description The number of impression sides (one or two) and the two-sided impression rotations supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.289. printer-stacking-order-supported

OID 1.3.18.0.2.4.1115
Names printer-stacking-order-supported
Description The possible stacking order of pages as they are printed and ejected from this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.290. printer-uri

OID 1.3.18.0.2.4.1140
Names printer-uri
Description A URI supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.291. printer-xri-supported

OID 1.3.18.0.2.4.1107
Names printer-xri-supported
Description The unordered list of XRI (extended resource identifiers) supported by this printer.
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 3712
Schema File 03-rfc3712.ldif

1.292. profileTTL

OID 1.3.6.1.4.1.11.1.3.1.1.7
Names profileTTL
Description Time to live, in seconds, before a profile is considered stale
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin RFC 4876
Schema File 05-rfc4876.ldif

1.293. protocolInformation

Used with a presentationAddress attribute to provide additional information to the OSI network service.

OID 2.5.4.48
Names protocolInformation
Equality Matching Rule protocolInformationMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax ProtocolInformation
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 2256
Schema File 00-core.ldif

1.294. pwdAccountLockedTime

Timestamp when the account was last locked, where 000001010000Z means the account has been locked permanently.

OID 1.3.6.1.4.1.42.2.27.8.1.17
Names pwdAccountLockedTime
Description The time an user account was locked
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.295. pwdAllowUserChange

Whether users can change their own passwords.

OID 1.3.6.1.4.1.42.2.27.8.1.14
Names pwdAllowUserChange
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.296. pwdAttribute

Name of the attribute to which the password policy applies.

OID 1.3.6.1.4.1.42.2.27.8.1.1
Names pwdAttribute
Equality Matching Rule objectIdentifierMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax OID
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.297. pwdChangedTime

Timestamp of last password change.

OID 1.3.6.1.4.1.42.2.27.8.1.16
Names pwdChangedTime
Description The time the password was last changed
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.298. pwdCheckQuality

How to verify quality when a password is added or modified. 0: do not check; 1: check, but accept if validation passes or if unable to check; 2: check, and return an error if verification does not pass or cannot be completed.

OID 1.3.6.1.4.1.42.2.27.8.1.5
Names pwdCheckQuality
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.299. pwdExpireWarning

Maximum number of seconds before expiry to begin returning errors to the user binding to the directory.

OID 1.3.6.1.4.1.42.2.27.8.1.7
Names pwdExpireWarning
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.300. pwdFailureCountInterval

Number of seconds after which failures are purged from the failure counter.

OID 1.3.6.1.4.1.42.2.27.8.1.12
Names pwdFailureCountInterval
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.301. pwdFailureTime

Timestamp of the last consecutive authentication failure.

OID 1.3.6.1.4.1.42.2.27.8.1.19
Names pwdFailureTime
Description The timestamps of the last consecutive authentication failures
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value false: multiple values allowed
User Modification Allowed false
Usage directoryOperation
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.302. pwdGraceAuthNLimit

Number of times an expired password can be used to authenticate.

OID 1.3.6.1.4.1.42.2.27.8.1.8
Names pwdGraceAuthNLimit
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.303. pwdGraceUseTime

Timestamps of grace authentications after a password expired.

OID 1.3.6.1.4.1.42.2.27.8.1.21
Names pwdGraceUseTime
Description The timestamps of the grace authentication after the password has expired
Equality Matching Rule generalizedTimeMatch
Ordering Matching Rule generalizedTimeOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax GeneralizedTime
Single Value false: multiple values allowed
User Modification Allowed false
Usage directoryOperation
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.304. pwdHistory

History of previously used passwords.

OID 1.3.6.1.4.1.42.2.27.8.1.20
Names pwdHistory
Description The history of user s passwords
Equality Matching Rule octetStringMatch
Ordering Matching Rule octetStringOrderingMatch
Syntax OctetString
Single Value false: multiple values allowed
User Modification Allowed false
Usage directoryOperation
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.305. pwdInHistory

Maximum number of passwords stored in the pwdHistory attribute.

OID 1.3.6.1.4.1.42.2.27.8.1.4
Names pwdInHistory
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.306. pwdLockout

Whether the password can no longer used to authenticate when pwdMaxFailure has been reached.

OID 1.3.6.1.4.1.42.2.27.8.1.9
Names pwdLockout
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.307. pwdLockoutDuration

Number of seconds when the password can not be used to authenticate after pwdMaxFailure has been reached.

OID 1.3.6.1.4.1.42.2.27.8.1.10
Names pwdLockoutDuration
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.308. pwdMaxAge

Number of seconds after which a password expires.

OID 1.3.6.1.4.1.42.2.27.8.1.3
Names pwdMaxAge
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.309. pwdMaxFailure

Maximum number of consecutive failed bind attempts allowed before the account is locked.

OID 1.3.6.1.4.1.42.2.27.8.1.11
Names pwdMaxFailure
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.310. pwdMinAge

Minimum number of seconds between modifications to the password.

OID 1.3.6.1.4.1.42.2.27.8.1.2
Names pwdMinAge
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.311. pwdMinLength

Minimum number of characters in a password.

OID 1.3.6.1.4.1.42.2.27.8.1.6
Names pwdMinLength
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.312. pwdMustChange

Whether users much change their passwords when first binding or after a password reset.

OID 1.3.6.1.4.1.42.2.27.8.1.13
Names pwdMustChange
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.313. pwdPolicySubentry

Pointer to the password policy subentry for the current entry.

OID 1.3.6.1.4.1.42.2.27.8.1.23
Names pwdPolicySubentry
Description The pwdPolicy subentry in effect for this object
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value true
User Modification Allowed false
Usage directoryOperation
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.314. pwdReset

Whether the password has been reset by an administrator, and must be changed by the user.

OID 1.3.6.1.4.1.42.2.27.8.1.22
Names pwdReset
Description The indication that the password has been reset
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.315. pwdSafeModify

Whether the existing password must be supplied when changing passwords.

OID 1.3.6.1.4.1.42.2.27.8.1.15
Names pwdSafeModify
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Origin draft-behera-ldap-password-policy
Schema File 01-pwpolicy.ldif

1.316. ref

This attribute holds labeledURI values referring to another LDAP server. The URI should be an LDAP URL. The URI should not specify scope, filter, or an attribute description list, and it should contain a non-empty DN.

Example: ldap://referral.example.com:1389/ou=Subscribers,dc=example,dc=com

OID 2.16.840.1.113730.3.1.34
Names ref
Description named reference - a labeledURI
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage distributedOperation
Origin RFC 3296
Schema File 00-core.ldif

1.317. registeredAddress

A postal address suitable for reception of telegrams and expedited documents, where the recipient must accept delivery.

Example: Receptionist$Widget, Inc.$1234 Main St.$Anytown, CA 12345$USA.

OID 2.5.4.26
Names registeredAddress
Superior Type postalAddress
Equality Matching Rule caseIgnoreListMatch
Substring Matching Rule caseIgnoreListSubstringsMatch
Syntax PostalAddress
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.318. replicaIdentifier

Uniquely identifies a replica in a topology.

OID 1.3.6.1.4.1.42.2.27.9.1.724
Names replicaIdentifier
Description the OpenDS replication domain server identifier for the change
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 03-changelog.ldif

1.319. replicationCSN

Holds a replication change sequence number.

OID 1.3.6.1.4.1.42.2.27.9.1.725
Names replicationCSN
Description The OpenDS replication change number for the change
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage directoryOperation
Origin OpenDS Directory Server
Schema File 03-changelog.ldif

1.320. rfc822mailMember

OID 1.3.6.1.4.1.42.2.27.2.1.15
Names rfc822mailMember
Description rfc822 mail addresss of group member
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin Solaris Specific
Schema File 05-solaris.ldif

1.321. roleOccupant

Distinguished names of objects that fulfill the responsibilities of the current role object.

For example, if the role object is for Director of Engineering, this role could be fulfilled by multiple users.

OID 2.5.4.33
Names roleOccupant
Superior Type distinguishedName
Equality Matching Rule distinguishedNameMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DN
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4519
Schema File 00-core.ldif

1.322. roomNumber

Room number for an object, which might be multiple when rooms are being renumbered, for example. Use the cn attribute when naming rooms, as room numbers can change.

OID 0.9.2342.19200300.100.1.6
Names roomNumber
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Origin RFC 4524
Schema File 00-core.ldif

1.323. sambaAcctFlags

OID 1.3.6.1.4.1.7165.2.1.26
Names sambaAcctFlags
Description Account Flags
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.324. sambaAlgorithmicRidBase

OID 1.3.6.1.4.1.7165.2.1.40
Names sambaAlgorithmicRidBase
Description Base at which the samba RID generation algorithm should operate
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.325. sambaBadPasswordCount

OID 1.3.6.1.4.1.7165.2.1.48
Names sambaBadPasswordCount
Description Bad password attempt count
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.326. sambaBadPasswordTime

OID 1.3.6.1.4.1.7165.2.1.49
Names sambaBadPasswordTime
Description Time of the last bad password attempt
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.327. sambaBoolOption

OID 1.3.6.1.4.1.7165.2.1.43
Names sambaBoolOption
Description A boolean option
Equality Matching Rule booleanMatch
Syntax Boolean
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.328. sambaDomainName

OID 1.3.6.1.4.1.7165.2.1.38
Names sambaDomainName
Description Windows NT domain to which the user belongs
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.329. sambaForceLogoff

OID 1.3.6.1.4.1.7165.2.1.66
Names sambaForceLogoff
Description Disconnect Users outside logon hours (default: -1 => off, 0 => on)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.330. sambaGroupType

OID 1.3.6.1.4.1.7165.2.1.19
Names sambaGroupType
Description NT Group Type
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.331. sambaHomeDrive

OID 1.3.6.1.4.1.7165.2.1.33
Names sambaHomeDrive
Description Driver letter of home directory mapping
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.332. sambaHomePath

OID 1.3.6.1.4.1.7165.2.1.37
Names sambaHomePath
Description Home directory UNC path
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.333. sambaIntegerOption

OID 1.3.6.1.4.1.7165.2.1.44
Names sambaIntegerOption
Description An integer option
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.334. sambaKickoffTime

OID 1.3.6.1.4.1.7165.2.1.32
Names sambaKickoffTime
Description Timestamp of when the user will be logged off automatically
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.335. sambaLMPassword

OID 1.3.6.1.4.1.7165.2.1.24
Names sambaLMPassword
Description LanManager Password
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.336. sambaLockoutDuration

OID 1.3.6.1.4.1.7165.2.1.63
Names sambaLockoutDuration
Description Lockout duration in minutes (default: 30, -1 => forever)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.337. sambaLockoutObservationWindow

OID 1.3.6.1.4.1.7165.2.1.64
Names sambaLockoutObservationWindow
Description Reset time after lockout in minutes (default: 30)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.338. sambaLockoutThreshold

OID 1.3.6.1.4.1.7165.2.1.65
Names sambaLockoutThreshold
Description Lockout users after bad logon attempts (default: 0 => off)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.339. sambaLogoffTime

OID 1.3.6.1.4.1.7165.2.1.31
Names sambaLogoffTime
Description Timestamp of last logoff
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.340. sambaLogonHours

OID 1.3.6.1.4.1.7165.2.1.55
Names sambaLogonHours
Description Logon Hours
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.341. sambaLogonScript

OID 1.3.6.1.4.1.7165.2.1.34
Names sambaLogonScript
Description Logon script path
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.342. sambaLogonTime

OID 1.3.6.1.4.1.7165.2.1.30
Names sambaLogonTime
Description Timestamp of last logon
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.343. sambaLogonToChgPwd

OID 1.3.6.1.4.1.7165.2.1.60
Names sambaLogonToChgPwd
Description Force Users to logon for password change (default: 0 => off, 2 => on)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.344. sambaMaxPwdAge

OID 1.3.6.1.4.1.7165.2.1.61
Names sambaMaxPwdAge
Description Maximum password age, in seconds (default: -1 => never expire passwords)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.345. sambaMinPwdAge

OID 1.3.6.1.4.1.7165.2.1.62
Names sambaMinPwdAge
Description Minimum password age, in seconds (default: 0 => allow immediate password change)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.346. sambaMinPwdLength

OID 1.3.6.1.4.1.7165.2.1.58
Names sambaMinPwdLength
Description Minimal password length (default: 5)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.347. sambaMungedDial

OID 1.3.6.1.4.1.7165.2.1.47
Names sambaMungedDial
Description Base64 encoded user parameter string
Equality Matching Rule caseExactMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.348. sambaNextGroupRid

OID 1.3.6.1.4.1.7165.2.1.22
Names sambaNextGroupRid
Description Next NT rid to give out for groups
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.349. sambaNextRid

OID 1.3.6.1.4.1.7165.2.1.39
Names sambaNextRid
Description Next NT rid to give out for anything
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.350. sambaNextUserRid

OID 1.3.6.1.4.1.7165.2.1.21
Names sambaNextUserRid
Description Next NT rid to give our for users
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.351. sambaNTPassword

OID 1.3.6.1.4.1.7165.2.1.25
Names sambaNTPassword
Description MD4 hash of the unicode password
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.352. sambaOptionName

OID 1.3.6.1.4.1.7165.2.1.42
Names sambaOptionName
Description Option Name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.353. sambaPasswordHistory

OID 1.3.6.1.4.1.7165.2.1.54
Names sambaPasswordHistory
Description Concatenated MD4 hashes of the unicode passwords used on this account
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.354. sambaPrimaryGroupSID

OID 1.3.6.1.4.1.7165.2.1.23
Names sambaPrimaryGroupSID
Description Primary Group Security ID
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.355. sambaPrivilegeList

OID 1.3.6.1.4.1.7165.2.1.52
Names sambaPrivilegeList
Description Privileges List
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value false: multiple values allowed
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.356. sambaProfilePath

OID 1.3.6.1.4.1.7165.2.1.35
Names sambaProfilePath
Description Roaming profile path
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.357. sambaPwdCanChange

OID 1.3.6.1.4.1.7165.2.1.28
Names sambaPwdCanChange
Description Timestamp of when the user is allowed to update the password
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.358. sambaPwdHistoryLength

OID 1.3.6.1.4.1.7165.2.1.59
Names sambaPwdHistoryLength
Description Length of Password History Entries (default: 0 => off)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.359. sambaPwdLastSet

OID 1.3.6.1.4.1.7165.2.1.27
Names sambaPwdLastSet
Description Timestamp of the last password update
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.360. sambaPwdMustChange

OID 1.3.6.1.4.1.7165.2.1.29
Names sambaPwdMustChange
Description Timestamp of when the password will expire
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.361. sambaRefuseMachinePwdChange

OID 1.3.6.1.4.1.7165.2.1.67
Names sambaRefuseMachinePwdChange
Description Allow Machine Password changes (default: 0 => off)
Equality Matching Rule integerMatch
Ordering Matching Rule integerOrderingMatch
Substring Matching Rule caseExactSubstringsMatch
Syntax Integer
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.362. sambaShareName

OID 1.3.6.1.4.1.7165.2.1.41
Names sambaShareName
Description Share Name
Equality Matching Rule caseIgnoreMatch
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax DirectoryString
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.363. sambaSID

OID 1.3.6.1.4.1.7165.2.1.20
Names sambaSID
Description Security ID
Equality Matching Rule caseIgnoreIA5Match
Ordering Matching Rule caseIgnoreOrderingMatch
Substring Matching Rule caseIgnoreSubstringsMatch
Syntax IA5String
Single Value true
User Modification Allowed true
Usage userApplications
Schema File 05-samba.ldif

1.364. sambaSIDList