Dieser Inhalt ist in der von Ihnen ausgewählten Sprache nicht verfügbar.

Chapter 9. Entry object class reference


The entry object classes in Red Hat Directory Server define the schema rules that dictate which attributes are required or allowed for specific types of directory entries. Understanding these object classes helps you to consistently categorize directory data.

Review an alphabetical list of the object classes accepted by the default schema. It gives a definition of each object class and lists its required and allowed attributes. The listed object classes are available to support entry information.

The required attributes listed for an object class must be present in the entry when that object class is added to the directory’s ldif file. If an object class has a superior object class, both of these object classes with all required attributes must be present in the entry. If required attributes are not listed in the ldif file, than the server will not restart.

Note

The LDAP RFCs and X.500 standards allow for an object class to have more than one superior object class. Currently, this behavior is not supported by Directory Server.

9.1. account

The account object class defines entries for computer accounts. This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.5

Expand
Table 9.1. Required attributes
AttributeDefinition

objectClasses

Gives the object classes for the entry.

uid (UserID)

Gives the defined account’s user ID.

Expand
Table 9.2. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

host

Gives the host name for the machine on which the account resides.

l (locality)

Gives the city or geographical location of the entry.

o (organization)

Gives the organization to which the account belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the account belongs.

seeAlso

Contains a URL to another entry or site with related information.

9.2. accountpolicy

The accountpolicy object class defines entries for account inactivation or expiration policies. This is used for a user directory configuration entry, which works in conjunction with the Account Policy Plug-in configuration.

Superior Class

top

OID

1.3.6.1.4.1.11.1.3.2.2.1

Expand
Table 9.3. Allowed attributes
AttributeDefinition

accountInactivityLimit

Sets the period, in seconds, from the last login time of an account before that account is locked for inactivity.

9.3. alias

The alias object class points to other directory entries. This object class is defined in RFC 2256.

Note

Aliasing entries is not supported in Red Hat Directory Server.

Superior Class

top

OID

2.5.6.1

Expand
Table 9.4. Required attributes
AttributeDefinition

objectclasses

Defines the object classes for the entry.

aliasedObjectName

Gives the distinguished name of the entry for which this entry is an alias.

9.4. bootableDevice

The bootableDevice object class points to a device with boot parameters. This object class is defined in RFC 2307.

Note

This object class is defined in 10rfc2307.ldif in the Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-instance/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.12

Expand
Table 9.5. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the device.

Expand
Table 9.6. Allowed attributes
AttributeDefinition

bootFile

Gives the boot image file.

bootParameter

Gives the parameters used by the boot process for the device.

description

Gives a text description of the entry.

l (locality)

Gives the city or geographical location of the entry.

o (organization)

Gives the organization to which the device belongs.

ou (rganizationalUnit)

Gives the organizational unit or division to which the device belongs.

owner

Gives the DN (Distinguished Name) of the person responsible for the device.

seeAlso

Contains a URL to another entry or site with related information.

serialNumber

Contains the serial number of the device.

9.5. cacheObject

The cacheObject is an object that contains the time to live (ttl) attribute type.

This object class is defined in the LDAP Caching Internet Draft.

Superior Class

top

OID

1.3.6.1.4.1.250.3.18

Expand
Table 9.7. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

Expand
Table 9.8. Allowed attributes
AttributeDefinition

ttl (timeToLive)

The time that the object remains (lives) in the cache.

9.6. cosClassicDefinition

The cosClassicDefinition object class defines a class of service template entry by using the entry’s distinguished name (DN) set in the cosTemplateDn attribute, and the value of one of the target attributes specified in the cosSpecifier attribute.

This object class is defined in RFC 1274.

Superior Class

cosSuperDefinition

OID

2.16.840.1.113730.3.2.100

Expand
Table 9.9. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cosAttribute

Provides the name of the attribute for which the CoS generates a value. There can be more than one cosAttribute value specified.

Expand
Table 9.10. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

cosSpecifier

Specifies the attribute value used by a classic CoS, which, along with the template entry’s DN, identifies the template entry.

cosTemplateDn

Provides the DN of the template entry which is associated with the CoS definition.

description

Gives a text description of the entry.

9.7. cosDefinition

The cosDefinition object class defines which class of service is used. This object class provides compatibility with the DS4.1 CoS plugin.

This object class is defined in RFC 1274.

Superior Class

top

OID

2.16.840.1.113730.3.2.84

Expand
Table 9.11. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.12. Allowed attributes
AttributeDefinition

aci

Evaluates what rights are granted or denied when Directory Server receives an LDAP request from a client.

cn (commonName)

Gives the common name of the entry.

cosAttribute

Provides the name of the attribute for which the CoS generates a value. There can be more than one cosAttribute value specified.

cosSpecifier

Specifies the attribute value used by a classic CoS, which, along with the template entry’s DN, identifies the template entry.

cosTargetTree

Defines the subtrees in the directory to which the CoS schema applies.

cosTemplateDn

Provides the DN of the template entry which is associated with the CoS definition.

uid (userID)

Gives the user ID for the entry.

9.8. cosIndirectDefinition

The cosIndirectDefinition defines the template entry by using the value of one of the target entry’s attributes. The attribute of the target entry is specified in the cosIndirectSpecifier attribute.

This object class is defined by Red Hat Directory Server.

Superior Class

cosSuperDefinition

OID

2.16.840.1.113730.3.2.102

Expand
Table 9.13. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cosAttribute

Provides the name of the attribute for which the CoS generates a value. There can be more than one cosAttribute value specified.

Expand
Table 9.14. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

cosIndirectSpecifier

Specifies the attribute value used by an indirect CoS to identify the template entry.

description

Gives a text description of the entry.

9.9. cosPointerDefinition

The cosPointerDefinition object class identifies the template entry associated with the CoS definition by using the template entry’s DN value. The DN of the template entry is specified in the cosIndirectSpecifier attribute.

This object class is defined by Red Hat Directory Server.

Superior Class

cosSuperDefinition

OID

2.16.840.1.113730.3.2.101

Expand
Table 9.15. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cosAttribute

Provides the name of the attribute for which the CoS generates a value. There can be more than one cosAttribute value specified.

Expand
Table 9.16. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

cosTemplateDn

Provides the DN of the template entry which is associated with the CoS definition.

description

Gives a text description of the entry.

9.10. cosSuperDefinition

All CoS definition object classes are inherited from the cosSuperDefinition object class.

This object class is defined by Red Hat Directory Server.

Superior Class

LDAPsubentry

OID

2.16.840.1.113730.3.2.99

Expand
Table 9.17. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cosAttribute

Provides the name of the attribute for which the CoS generates a value. There can be more than one cosAttribute value specified.

Expand
Table 9.18. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

description

Gives a text description of the entry.

9.11. cosTemplate

The cosTemplate object class contains a list of the shared attribute values for the CoS.

This object class is defined by Red Hat Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.128

Expand
Table 9.19. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.20. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

cosPriority

Specifies which template provides the attribute value when CoS templates compete to provide an attribute value.

9.12. country

The country object class defines entries which represent countries.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.2

Expand
Table 9.21. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

co (countryName)

Contains the two-character code representing country names, as defined by ISO, in the directory.

Expand
Table 9.22. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

9.13. dcObject

The dcObject object class allows domain components to be defined for an entry. This object class is defined as auxiliary because it is commonly used in combination with another object class, such as o (organization), ou (organizationalUnit), or l (locality).

For example:

dn: dc=example,dc=com
objectClass: top
objectClass: organizationalUnit
objectClass: dcObject
dc: example
ou: Example Corporation

This object class is defined in RFC 2247.

Superior Class

top

OID

1.3.6.1.4.1.1466.344

Expand
Table 9.23. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

dc (domainComponent)

Contains one component of a domain name.

9.14. device

The device object class stores information about network devices, such as printers, in the directory. This object class is defined in RFC 2247.

Superior Class

top

OID

2.5.6.14

Expand
Table 9.24. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the device.

cn (commonName)

Gives the common name of the device.

Expand
Table 9.25. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

l (locality)

Gives the city or geographical location of the entry.

o (organization)

Gives the organization to which the device belongs.

ou (organizationUnit)

Gives the organizational unit or division to which the device belongs.

owner

Gives the DN (distinguished name) of the person responsible for the device.

seeAlso

Contains a URL to another entry or site with related information.

serialNumber

Contains the serial number of the device.

9.15. document

The document object class defines directory entries that represent documents.

This object class is defined in RFC 1247.

Superior Class

top

OID

0.9.2342.19200300.100.4.6

Expand
Table 9.26. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

documentIdentifier

Gives the unique ID for the document.

Expand
Table 9.27. Allowed attributes
AttributeDefinition

abstract

Contains the abstract for the document.

audio

Stores a sound file in binary format.

authorCn

Gives the author’s common name or given name.

authorSn

Gives the author’s surname.

cn (commonName)

Gives the common name of the entry.

description

Gives a text description of the entry.

dITRedirect

Contains the DN (distinguished name) of the entry to use as a redirect for the document entry.

documentAuthor

Contains the DN (distinguished name) of the author.

documentLocation

Gives the location of the original document.

documentPublisher

Identifies the person or organization that published the document.

documentStore

Contains information on where the document is stored

documentTitle

Contains the title of the document.

documentVersion

Gives the version number of the document.

info

Contains information about the document.

jpegPhoto

Stores a JPG image.

keyWords

Contains keywords related to the document.

l (locality)

Gives the city or geographical location of the entry.

lastModifiedBy

Gives the DN (distinguished name) of the last user which modified the document entry.

lastModifiedTime

Gives the time of the last modification.

manager

Gives the DN (distinguished name) of the entry’s manager.

o (organization)

Gives the organization to which the document belongs.

obsoletedbydocument

Gives the DN (distinguished name) of another document entry which obsoletes this document.

obsoletesDocument

Gives the DN (distinguished name) of another document entry which is obsoleted by this document.

ou (organizationalUnit)

Gives the organizational unit or division to which the document belongs.

photo

Stores a photo of the document in binary format.

seeAlso

Contains a URL to another entry or site with related information.

subject

Describes the subject of the document.

uniqueIdentifier

Distinguishes between two entries when a distinguished name has been reused.

updatedByDocument

Gives the DN (distinguished name) of another document entry which updates this document.

updatesDocument

Gives the DN (distinguished name) of another document entry which is updated by this document.

9.16. documentSeries

The documentSeries object class defines an entry that represents a series of documents.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.9

Expand
Table 9.28. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.29. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

l (locality)

Gives the place where the document series is physically located.

o (organization)

Gives the organization to which the document series belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the series belongs.

seeAlso

Contains a URL to another entry or site with related information.

telephoneNumber

Gives the telephone number of the person responsible for the document series.

9.17. domain

The domain object class defines directory entries that represent DNS domains. Use the dc attribute to name entries of this object class.

In addition, use this object class for Internet domain names, such as example.com.

The domain object class can only be used for a directory entry which does not correspond to an organization, organizational unit, or any other object which has an object class defined for it. object for which an object class has been defined.

This object class is defined in RFC 2252.

Superior Class

top

OID

0.9.2342.19200300.100.4.13

Expand
Table 9.30. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

dc (domainComponent)

Contains one component of a domain name.

Expand
Table 9.31. Allowed attributes
AttributeDefinition

associatedName

Gives the name of an entry within the organizational directory tree which is associated with a DNS domain.

businessCategory

Gives the type of business in which this domain is engaged.

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax (facsimileTelephoneNumber)

Gives the fax number for the domain.

internationalISDNNumber

Gives the ISDN number for the domain.

l (locality)

Gives the city or geographical location of the entry.

o (organization)

Gives the organization to which the entry belongs.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postOfficeBox

Gives the post office box number for the domain.

postalAddress

Contains the mailing address for the domain.

postalCode

Gives the postal code for the domain, such as the zip code in the United States.

preferredDeliveryMethod

Shows the person’s preferred method of contact or message delivery.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the domain is located.

street

Gives the street name and address number for the domain’s physical location.

telephoneNumber

Gives the phone number for the domain.

teletexTerminalIdentifier

Gives the ID for a domain’s teletex terminal.

telexNumber

Gives the telex number for the domain.

userPassword

Stores the password with which the entry can bind to the directory.

x121Address

Gives the X.121 address for the domain.

9.18. domainRelatedObject

The domainRelatedObject object class defines entries that represent DNS or NRS domains which are equivalent to an X.500 domain, such as an organization or organizational unit.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.17

Expand
Table 9.32. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

associatedDomain

Specifies a DNS domain associated with an object in the directory tree.

9.19. dSA

The dSA object class defines entries that represent DSAs.

This object class is defined in RFC 1274.

Superior Class

top

OID

2.5.6.13

Expand
Table 9.33. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

presentationAddress

Contains the entry’s OSI presentation address.

Expand
Table 9.34. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

knowledgeinformation

No longer used.

l (locality)

Gives the city or geographical location of the entry.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

seeAlso

Contains a URL to another entry or site with related information.

supportedApplicationContext

Contains the identifiers of OSI application contexts.

9.20. extensibleObject

When present in an entry, extensibleObject permits the entry to hold optionally any attribute. The allowed attribute list of this class is implicitly the set of all attributes known to the server.

This object class is defined in RFC 2252.

Superior Class

top

OID

1.3.6.1.4.1.1466.101.120.111

Expand
Table 9.35. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Allowed attributes All attributes known to the server are allowed.

9.21. friendlyCountry

The friendlyCountry object class defines country entries within the directory. This object class allows more friendly names than the country object class.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.18

Expand
Table 9.36. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

co (friendlyCountryName)

Stores the human-readable country name.

c (countryName}

Contains the two-character code representing country names, as defined by ISO, in the directory.

Expand
Table 9.37. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

9.22. groupOfCertificates

The groupOfCertificates object class describes a set of X.509 certificates. Any certificate that matches one of the memberCertificateDescription values is considered a member of the group.

Superior Class

top

OID

2.16.840.1.113730.3.2.31

Expand
Table 9.38. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.39. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the group is engaged.

description

Gives a text description of the entry.

memberCertificateDescription

Contains the values used to determine if a particular certificate is a member of this group.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

owner

Contains the DN (distinguished name) of the person responsible for the group.

seeAlso

Contains a URL to another entry or site with related information.

9.23. groupOfMailEnhancedUniqueNames

The groupOfMailEnhancedUniqueNames object class is used for a mail group which must have unique members.

This object class is defined for Netscape Messaging Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.5

Expand
Table 9.40. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.41. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the group is engaged.

description

Gives a text description of the entry.

mailEnhancedUniqueMember

Contains a unique DN value to identify a member of the mail group.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

owner

Contains the DN (Distinguished Name) of the person responsible for the group.

seeAlso

Contains a URL to another entry or site with related information.

9.24. groupOfNames

The groupOfNames object class contains entries for a group of names.

This object class is defined in RFC 2256.

Note

The definition for this object class in Directory Server differs from the standard definition. In the standard definition, member is a required attribute, while in Directory Server it is an allowed attribute. Directory Server, therefore, allows a group to have no members.

Superior Class

top

OID

2.5.6.9

Expand
Table 9.42. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.43. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the entry is engaged.

description

Gives a text description of the entry.

member

Contains the DN (Distinguished Name) of a group member.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

owner

Contains the DN (Distinguished Name) of the person responsible for the group.

seeAlso

Contains a URL to another entry or site with related information.

9.25. groupOfUniqueNames

The groupOfUniqueNames object class defines a group which contains unique names.

Note

The definition for this object class in Red Hat Directory Server (RHDS) differs from the standard definition. In the standard definition, uniqueMember is a required attribute, while in RHDS it is an allowed attribute. RHDS allows a group to have no members.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.17

Expand
Table 9.44. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.45. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the entry is engaged.

description

Gives a text description of the entry.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

owner

Contains the DN (Distinguished Name) of the person responsible for the group.

seeAlso

Contains a URL to another entry or site with related information.

uniqueMember

Contains the DN (Distinguished Name) of a member of the group; this DN must be unique.

9.26. groupOfURLs

The groupOfURLs object class is an auxiliary object class for the groupOfUniqueNames and groupOfNames object classes. This group consists of a list of labeled URLs.

Superior Class

top

OID

2.16.840.1.113730.3.2.33

Expand
Table 9.46. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.47. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the group is engaged.

description

Gives a text description of the entry.

memberURL

Contains a URL associated with each member of the group.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

owner

Contains the DN (distinguished name) of the person responsible for the group.

seeAlso

Contains a URL to another entry or site with related information.

9.27. ieee802Device

The ieee802Device object class points to a device with a MAC address.

This object class is defined in RFC 2307.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-instance/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.11

Expand
Table 9.48. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the device.

Expand
Table 9.49. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

l (locality)

Gives the city or geographical location of the entry.

macAddress

Gives the MAC address of the device.

o (organization)

Gives the organization to which the device belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the device belongs.

owner

Gives the DN (Distinguished Name) of the person responsible for the device.

seeAlso

Contains a URL to another entry or site with related information.

serialNumber

Contains the serial number of the device.

9.28. inetAdmin

The inetAdmin object class is a marker for an administrative group or user. This object class is defined for the Netscape Delegated Administrator.

Superior Class

top

OID

2.16.840.1.113730.3.2.112

Expand
Table 9.50. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.51. Allowed attributes
AttributeDefinition

adminRole

Identifies a role to which the administrative user belongs.

memberOf

Contains a group name to which the administrative user belongs. This is dynamically managed by the MemberOf Plug-in.

9.29. inetDomain

The inetDomain object class is a auxiliary class for virtual domain nodes.

This object class is defined for the Netscape Delegated Administrator.

Superior Class

top

OID

2.16.840.1.113730.3.2.129

Expand
Table 9.52. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.53. Allowed attributes
AttributeDefinition

inetDomainBaseDN

Defines the base DN of the user subtree for a DNS domain.

inetDomainStatus

Gives the status of the domain. The status can be active, inactive, or deleted.

9.30. inetOrgPerson

The inetOrgPerson object class defines entries representing people in an organization’s enterprise network. This object class inherits the commonName and surname attributes from the person object class.

This object class is defined in RFC 2798.

Superior Class

person

OID

2.16.840.1.113730.3.2.2

Expand
Table 9.54. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

sn (surname)

Gives the person’s family name or last name.

Expand
Table 9.55. Allowed attributes
AttributeDefinition

audio

Stores a sound file in binary format.

businessCategory

Gives the type of business in which the entry is engaged.

carLicense

Gives the license plate number of the person’s vehicle.

departmentNumber

Gives the department for which the person works.

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

displayName

Shows the preferred name of a person to use when displaying entries.

employeeNumber

GiContains the person’s employee number.

employeeType

Shows the person’s type of employment (for example, full time).

fax (facsimileTelephoneNumber)

Contains the person’s fax number.

givenName

Contains the person’s first name.

homePostalAddress

Gives the person’s home mailing address.

initials

Gives the person’s initials.

internationalISDNNumber

Contains the ISDN number for the entry.

jpegPhoto

Stores a JPG image.

l (locality)

Gives the city or geographical location of the entry.

labeledURI

Contains a URL which is relevant to the entry.

mail

Contains the person’s email address.

manager

Contains the DN (Distinguished Name) of the direct supervisor of the person entry.

mobile

Gives the person’s mobile phone number.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

pager

Gives the person’s pager number.

photo

Stores a photo of a person, in binary format.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postOfficeBox

Gives the post office box number for the entry.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

preferredDeliveryMethod

Shows the person’s preferred method of contact or message delivery.

preferredLanguage

Gives the person’s preferred written or spoken language.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

roomNumber

Gives the room number where the person is located.

secretary

Contains the DN (Distinguished Name) of the person’s secretary or administrative assistant.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the entry is located.

street

Gives the street name and number for the person’s physical location.

telephoneNumber

Gives the telephone number for the entry.

teletexTerminalIdentifier

Gives the identifier for the person’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

title

Shows the person’s job title.

uis (userID)

Contains the person’s user ID (usually his logon ID).

userCertificate

Stores a user’s certificate in cleartext (not used).

userPassword

Stores the password with which the entry can bind to the directory.

userSMIMECertificate

Stores the person’s certificate in binary form so it can be used by S/MIME clients.

x121Address

Gives the X.121 address for the person.

x500UniqueIdentifier

Reserved for future use.

9.31. inetSubscriber

The inetSubscriber object class is used for general user account management.

This object class is defined for the Netscape subscriber interoperability.

Superior Class

top

OID

2.16.840.1.113730.3.2.134

Expand
Table 9.56. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.57. Allowed attributes
AttributeDefinition

inetSubscriberAccountId

Contains a unique attribute linking the subscriber to a billing system.

inetSubscriberChallenge

Contains some kind of question or prompt, the challenge phrase, which is used to confirm the identity of the user.

inetSubscriberResponse

Contains the answer to the challenge question.

9.32. inetUser

The inetUser object class is an auxiliary class which must be present in an entry in order to deliver subscriber services. This object class is defined for the Netscape subscriber interoperability.

Superior Class

top

OID

2.16.840.1.113730.3.2.130

Expand
Table 9.58. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.59. Allowed attributes
AttributeDefinition

inetUserHttpURL

Contains web addresses associated with the user.

inetUserStatus

Gives the status of the user. The status can be active, inactive, or deleted.

memberOf

Contains a group name to which the user belongs. This is dynamically managed by the MemberOf Plug-in.

uid (userID)

Contains the person’s user ID (usually his logon ID).

userPassword

Stores the password with which the user can use to access the user account.

9.33. ipHost

The ipHost object class stores IP information about a host.

This object class is defined in RFC 2307.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.6

Expand
Table 9.60. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the device.

ipHostNumber

Contains the IP address of the device or host.

Expand
Table 9.61. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

l (locality)

Gives the city or geographical location of the entry.

manager

Contains the DN (Distinguished Name) of the maintainer or supervisor of the entry.

o (organization)

Gives the organization to which the device belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the device belongs.

owner

Gives the DN (Distinguished Name) of the person responsible for the device.

seeAlso

Contains a URL to another entry or site with related information.

serialNumber

Contains the serial number of the device.

9.34. ipNetwork

The ipNetwork object class stores IP information about a network.

This object class is defined in RFC 2307.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.7

Expand
Table 9.62. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the device.

ipNetworkNumber

Contains the IP number for the network.

Expand
Table 9.63. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

l (locality)

Gives the city or geographical location of the entry.

manager

Contains the DN (Distinguished Name) of the maintainer or supervisor of the entry.

ipNetmaskNumber

Contains the IP netmask for the network.

9.35. ipProtocol

The ipProtocol object class shows the IP protocol version.

This object class is defined in RFC 2307.

Note

This object class is defined in 10rfc2307.ldif in the Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.4

Expand
Table 9.64. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the device.

ipProtocolNumber

Contains the IP protocol number for the network.

Expand
Table 9.65. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

9.36. ipService

The ipService object class stores information about the IP service.

This object class is defined in RFC 2307.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-instance/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.3

Expand
Table 9.66. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the device.

ipServicePort

Gives the port number used by the IP service.

ipServiceProtocol

Contains the IP protocol number for the service.

Expand
Table 9.67. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

9.37. labeledURIObject

When added to existing directory entries, the labeledURIObject object class allows URI values to be included. Using this object class does not preclude including the labeledURI attribute type directly in other object classes as appropriate.

This object class is defined in RFC 2079.

Superior Class

top

OID

1.3.6.1.4.1.250.3.15

Expand
Table 9.68. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.69. Allowed attributes
AttributeDefinition

labeledURI

Gives a URI which is relevant to the entry’s object.

9.38. locality

The locality object class defines entries that represent localities or geographic areas.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.3

Expand
Table 9.70. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.71. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

l (locality)

Gives the city or geographical location of the entry.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province associated with the locality.

street

Gives a street and number associated with the locality.

9.39. mailGroup

The mailGroup object class defines the mail attributes for a group.

This object is defined in the schema for the Netscape Messaging Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.4

Expand
Table 9.72. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.73. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

mail

Stores email addresses for the group.

mailAlternateAddress

Contains secondary email addresses for the group.

mailHost

Contains the host name of the mail server.

owner

Contains the DN (distinguished name) of the person responsible for the group.

9.40. mailRecipient

The mailRecipient object class defines a mail account for a user.

This object is defined in the schema for the Netscape Messaging Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.3

Expand
Table 9.74. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.75. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

mail

Stores email addresses for the group.

mailAccessDomain

Contains the domain from which the user can access the messaging server.

mailAlternateAddress

Contains secondary email addresses for the group.

mailAutoReplyMode

Specifies whether autoreply mode for the account is enabled.

mailAutoReplyText

Contains the text use for automatic reply emails.

mailDeliveryOption

Specifies the mail delivery mechanism to be used for the mail user.

mailForwardingAddress

Specifies the mail delivery mechanism to use for the mail user.

mailHost

Contains the host name of the mail server.

mailMessageStore

Specifies the location of the user’s mail box.

mailProgramDeliveryInfo

Specifies the commands used for programmed mail delivery.

mailQuota

Specifies the disk space allowed for the user’s mail box.

mailRoutingAddress

Contains a routing address to use when forwarding the mail from this entry’s account to another messaging server.

multiLineDescription

Contains a text description of the entry which spans more than one line.

uid (UserId)

Gives the defined account’s user ID.

userPassword

Stores the password with which the entry can access the account.

9.41. mepManagedEntry

The mepManagedEntry object class identifies an entry which was generated by an instance of the Managed Entries plugin. This object class is defined in Red Hat Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.319

Expand
Table 9.76. Allowed attributes
AttributeDefinition

mepManagedBy

Gives the DN of the originating entry which corresponds to the managed entry.

9.42. mepOriginEntry

The mepOriginEntry object class identifies an entry which is within a subtree that is monitored by an instance of the Managed Entries plugin and which has had a managed entry created by the plugin, for which this is the originating entry.

This object class is defined in Red Hat Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.320

Expand
Table 9.77. Allowed attributes
AttributeDefinition

mepManagedEntry

Gives the DN of the managed entry entry which was created by the Managed Entries Plug-in instance and which corresponds to this originating entry.

9.43. mepTemplateEntry

The mepTemplateEntry object class identifies an entry that the Managed Entries plugin instance uses as a template to create the managed entries.

This object class is defined in Red Hat Directory Server.

Superior Class

top

OID

2.16.840.1.113730.3.2.321

Expand
Table 9.78. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

mepMappedAttr

Contains an attribute-token pair that the plug-in uses to create an attribute in the managed entry with a value taken from the originating entry.

mepRDNAttr

Specifies which attribute to use as the naming attribute in the managed entry.

mepStaticAttr

Contains an attribute-value pair that will be used, with that specified value, in the managed entry.

9.44. newPilotPerson

The newPilotPerson object class is a subclass of the person to allow additional attributes to be assigned to entries of the person object class. This object class inherits the commonName and surname attributes from the person object class.

This object class is defined in Internet White Pages Pilot.

Superior Class

person

OID

0.9.2342.19200300.100.4.4

Expand
Table 9.79. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

sn (surname)

Gives the person’s family name or last name.

Expand
Table 9.80. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the entry is engaged.

description

Gives a text description of the entry.

drink (favoriteDrink)

Gives the person’s favorite drink.

homePostalAddress

Gives the person’s home mailing address.

janetMailbox

Gives the person’s email address; this is primarily for use in Great Britain or organizations which do no use RFC 822 mail addresses.

mail

Contains the person’s email address.

mailPreferenceOption

Indicates the user’s preference for including his name on mailing lists (electronic or physical).

mobile

Gives the person’s mobile phone number.

organizationalStatus

Gives the common job category for a person’s function.

otherMailbox

Contains values for electronic mailbox types other than X.400 and RFC 822.

pager (pagerTelephoneNumber)

Gives the person’s pager number.

personalSignature

Contains the person’s signature file.

personalTitle

Gives the person’s honorific.

preferredDeliveryMethod

Shows the person’s preferred method of contact or message delivery.

roomNumber

Gives the room number where the person is located.

secretary

Contains the DN (Distinguished Name) of the person’s secretary or administrative assistant.

seeAlso

Contains a URL to another entry or site with related information.

telephoneNumber

Gives the telephone number for the entry.

uid (UserID)

Contains the person’s user ID (usually his logon ID).

userClass

Describes the type of computer user this entry is.

userPassword

Stores the password with which the entry can bind to the directory.

9.45. nisMap

The nisMap object class points to a NIS map.

This object class is defined in RFC 2307, which defines object classes and attributes to use LDAP as a network information service.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.13

Expand
Table 9.81. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

nisMapName

Contains the NIS map name.

Expand
Table 9.82. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

9.46. nisNetgroup

The nisNetgroup object class contains a netgroup used within a NIS domain. Adding this object class allows administrators to use netgroups to control login and service authentication in NIS.

This object class is defined in RFC 2307, which defines object classes and attributes to use LDAP as a network information service.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.8

Expand
Table 9.83. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.84. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

memberNisNetgroup

Merges the attribute values of another netgroup into the current one by listing the name of the merging netgroup.

nisNetgroupTriple

Contains a user name (,bobby,example.com) or a machine name (shellserver1,,example.com).

9.47. nisObject

The nisObject object class contains information about an object in a NIS domain.

This object class is defined in RFC 2307, which defines object classes and attributes to use LDAP as a network information service.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.10

Expand
Table 9.85. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

NisMapEntry

Identifies the NIS map entry.

nisMapName

Contains the name of the NIS map.

Expand
Table 9.86. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

9.48. nsComplexRoleDefinition

The nsComplexRoleDefinition object class defines a complex role. Any role that is not a simple role is, by definition, a complex role.

This object class is defined by Red Hat Directory Server.

For more information about the object class that denies a simple role, see Section 9.54, “nsSimpleRoleDefinition”.

Superior Class

nsRoleDefinition

OID

2.16.840.1.113730.3.2.95

Expand
Table 9.87. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.88. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

description

Gives a text description of the entry.

9.49. nsContainer

The nsContainer object class defines container entries that do not define any specific entity, but create a defined space within the directory tree as a parent entry for similar or related child entries.

Superior Class

top

OID

2.16.840.1.113730.3.2.104

Expand
Table 9.89. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the entry.

9.50. nsManagedRoleDefinition

The nsManagedRoleDefinition object class specifies the member assignments of a role to an explicit, enumerated list of members.

This object class is defined in Red Hat Directory Server.

Superior Class

nsComplexRoleDefinition

OID

2.16.840.1.113730.3.2.96

Expand
Table 9.90. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.91. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

description

Gives a text description of the entry.

9.51. nsMessagingServerUser

The nsICQpresence auxiliary object class describes a messaging server user.

This object class is defined for Netscape Messaging Server.

Superior Class

top

OID

2.16.840.113730.3.2.37

Expand
Table 9.92. Required attributes
AttributeDefinition

objectClasses

Gives the object classes for the entry.

Expand
Table 9.93. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

mailAccessDomain

Contains the domain from which the user can access the messaging server.

mailAlternateAddress

Contains secondary email addresses for the group.

mailAutoReplyMode

Specifies whether autoreply mode for the account is enabled.

mailAutoReplyText

Contains the text use for automatic reply emails.

mailDeliveryOption

Specifies the mail delivery mechanism to be used for the mail user.

mailForwardingAddress

Specifies the mail delivery mechanism to use for the mail user.

mailMessageStore

Specifies the location of the user’s mail box.

mailProgramDeliveryInfo

Specifies the commands used for programmed mail delivery.

mailQuota

Specifies the disk space allowed for the user’s mail box.

vacationEndDate

Contains the end date for a vacation period.

vacationStartDate

Contains the start date for a vacation period.

9.52. nsResourceRef

The nsNestedRoleDefinition object class configures a resource reference.

This object class is defined in the Administration Services.

Superior Class

top

OID

nsResourceRef-oid

Expand
Table 9.94. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.95. Allowed attributes
AttributeDefinition

seeAlso

Contains a URL to another entry or site with related information.

9.53. nsRoleDefinition

All role definition object classes are inherited from the nsRoleDefinition object class.

This object class is defined by Red Hat Directory Server.

Superior Class

LDAPsubentry

OID

2.16.840.1.113730.3.2.93

Expand
Table 9.96. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.97. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

description

Gives a text description of the entry.

9.54. nsSimpleRoleDefinition

The nsSimpleRoleDefinition object class defines a simple role.

Roles containing this object class are called simple roles because they have a deliberately limited flexibility, which makes it easy to:

  • Enumerate the members of a role.
  • Determine whether a given entry possesses a particular role.
  • Enumerate all the roles possessed by a given entry.
  • Assign a particular role to a given entry.
  • Remove a particular role from a given entry.

This object class is defined by Red Hat Directory Server.

Superior Class

nsRoleDefinition

OID

2.16.840.1.113730.3.2.94

Expand
Table 9.98. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.99. Allowed attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

description

Gives a text description of the entry.

9.55. nsTopologyPlugin

The nsTopologyPlugin object class configures the topology plugin used to set views in the web console.

This object class is defined for the Administrative Services.

Superior Class

nsAdminObject

OID

nsTopologyPlugin-oid

9.56. oncRpc

The oncRpc object class defines an abstraction of an Open Network Computing Remote Procedure Call (ONC RPC). This object class is defined in RFC 2307.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.5

Expand
Table 9.100. Required attributes
AttributeDefinition

objectClasses

Defines the object classes for the entry.

cn (commonName)

Gives the common name of the entry.

oncRpcNumber

Contains part of the RPC map and stores the RPC number for UNIX RPCs.

Expand
Table 9.101. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

9.57. organization

The organization attributes defines entries that represent organizations. An organization is generally assumed to be a large, relatively static grouping within a larger corporation or enterprise.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.4

Expand
Table 9.102. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

o (organization)

Gives the organization to which the entry belongs.

Expand
Table 9.103. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the entry is engaged.

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax (facsimileTelephoneNumber)

Contains the fax number for the entry.

internationalISDNNumber

Contains the ISDN number for the entry.

l (locality)

Gives the city or geographical location of the entry.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

postOfficeBox

Gives the post office box number for the entry.

preferredDeliveryMethod

Shows the preferred method of contact or message delivery for the entry.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the person is located.

street

Gives the street name and number for the person’s physical location.

telephoneNumber

Gives the telephone number of the person responsible for the organization.

teletexTerminalIdentifier

Gives the ID for an entry’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

userPassword

Gives the password with which the entry can bind to the directory.

x121Address

Gives the X.121 address for the entry.

9.58. organizationalPerson

The organizationalPerson object class defines entries for people employed or affiliated with the organization. This object class inherits the commonName and surname attributes from the person object class.

This object class is defined in RFC 2256.

Superior Class

person

OID

2.5.6.7

Expand
Table 9.104. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

sn (surname)

Gives the person’s family name or last name.

Expand
Table 9.105. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax

Contains the fax number for the entry.

internationalISDNNumber

Contains the ISDN number for the entry.

l (locality)

Gives the city or geographical location of the entry.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

postOfficeBox

Gives the post office box number for the entry.

preferredDeliveryMethod

Shows the person’s preferred method of contact or message delivery.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the person is located.

street

Gives the street name and number for the person’s physical location.

telephoneNumber

Gives the telephone number for the entry.

teletexTerminalIdentifier

Gives the ID for an entry’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

title

Shows the person’s job title.

userPassword

Stores the password with which the entry can bind to the directory.

lx121Address

Gives the X.121 address for the entry.

9.59. organizationalRole

The organizationalRole object class is used to define entries for roles held by people within an organization.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.8

Expand
Table 9.106. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.107. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax (facsimileTelephoneNumber)

Contains the fax number for the entry.

internationalISDNNumber

Contains the ISDN number for the entry.

l (locality)

Gives the city or geographical location of the entry.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

postOfficeBox

Gives the post office box number for the entry.

preferredDeliveryMethod

Shows the role’s preferred method of contact or message delivery.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

xref:

Contains the DN (Distinguished Name) of the person in the role.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the entry is located.

street

Gives the street name and number for the role’s physical location.

telephoneNumber

Gives the telephone number for the entry.

teletexTerminalIdentifier

Gives the ID for an entry’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

x121Address

Gives the X.121 address for the entry.

9.60. organizationalUnit

The organizationalUnit object class defines entries that represent organizational units, generally understood to be a relatively static grouping within a larger organization.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.5

Expand
Table 9.108. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

Expand
Table 9.109. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the entry is engaged.

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax (facsimileTelephoneNumber)

Contains the fax number for the entry.

internationalISDNNumber

Contains the ISDN number for the entry.

l (locality)

Gives the city or geographical location of the entry.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

postOfficeBox

Gives the post office box number for the entry.

preferredDeliveryMethod

Gives the preferred method of being contacted.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the person is located.

street

Gives the street name and number for the role’s physical location.

telephoneNumber

Gives the telephone number for the entry.

teletexTerminalIdentifier

Gives the ID for an entry’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

userPassword

Stores the password with which the entry can bind to the directory.

x121Address

Gives the X.121 address for the entry.

9.61. person

The person object class represents entries for generic people. This is the base object class for the organizationalPerson object class.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.6

Expand
Table 9.110. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

sn (surname)

Gives the person’s family name or last name.

Expand
Table 9.111. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

seeAlso

Contains a URL to another entry or site with related information.

telephoneNumber

Gives the telephone number for the entry.

userPassword

Stores the password with which the entry can bind to the directory.

9.62. pilotObject

The pilotObject is a subclass to allow additional attributes to be assigned to entries of all other object classes.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.3

Expand
Table 9.112. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.113. Allowed attributes
AttributeDefinition

audio

Stores a sound file in a binary format.

dITRedirect

Contains the DN (Distinguished Name) of the entry to use as a redirect for the entry.

info

Contains information about the entry.

jpegPhoto

Stores a JPG image.

lastModifiedBy

Gives the DN (Distinguished Name) of the last user which modified the document entry.

lastModifiedTime

Gives the time the object was most recently modified.

manager

Gives the DN (Distinguished Name) of the entry’s manager.

photo

Stores a photo of the document in binary format.

uniqueIdentifier

Distinguishes between two entries when a distinguished name has been reused.

9.63. pilotOrganization

The pilotOrganization object class is a subclass used to add attributes to organization and organizationalUnit object class entries.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.20

Expand
Table 9.114. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

o (organization)

Gives the organization to which the entry belongs.

ou (organizationalUnit)

Gives the organizational unit or division to which the entry belongs.

Expand
Table 9.115. Allowed attributes
AttributeDefinition

xref:

Gives the name of the building where the entry is located.

businessCategory

Gives the type of business in which the entry is engaged.

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax (facsimileTelephoneNumber)

Contains the fax number for the entry.

internationalISDNNumber

Contains the ISDN number for the entry.

l (locality)

Gives the city or geographical location of the entry.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

postOfficeBox

Gives the post office box number for the entry.

preferredDeliveryMethod

Gives the preferred method of being contacted.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the person is located.

street

Gives the street name and address number for the person’s physical location.

telephoneNumber

Gives the telephone number for the entry.

teletexTerminalIdentifier

Gives the ID for an entry’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

userPassword

Stores the password with which the entry can bind to the directory.

x121Address

Gives the X.121 address for the entry.

9.64. pkiCA

The pkiCA auxiliary object class contains required or available certificates that are configured for a certificate authority.

This object class is defined in RFC 4523, which defines object classes and attributes for LDAP to use to manage X.509 certificates and related certificate services.

Superior Class

top

OID

2.5.6.22

Expand
Table 9.116. Allowed attributes
AttributeDefinition

authorityRevocationList

Contains a list of revoked CA certificates.

cACertificate

Contains a CA certificate.

certificateRevocationList

Contains a list of certificates that have been revoked.

crossCertificatePair

Contains a pair of certificates that are used to cross-certify a pair of CAs in a FBCA-style bridge CA configuration.

9.65. pkiUser

The pkiUser auxiliary object class contains required certificates for a user or client that connects to a certificate authority or element in the public key infrastructure.

This object class is defined in RFC 4523, which defines object classes and attributes for LDAP to use to manage X.509 certificates and related certificate services.

Superior Class

top

OID

2.5.6.21

Expand
Table 9.117. Allowed attributes
AttributeDefinition

userCertificate

Stores a user’s certificate, usually in binary form.

9.66. posixAccount

The posixAccount object class defines network accounts which use POSIX attributes.

This object class is defined in RFC 2307, which defines object classes and attributes to use LDAP as a network information service.

Note

This object class is defined in 10rfc2307.ldif in Red Hat Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-<instance_name>/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.0

Expand
Table 9.118. Required attributes
AttributeDefinition

cn (commonName)

Gives the common name of the entry.

gidNumber

Contains a unique numeric identifier for a group entry or to identify the group for a user entry, analogous to the group number in Unix.

homeDirectory

Contains the path to the user’s home directory.

objectClasses

Gives the object classes assigned to the entry.

uid (UserId)

Gives the defined account’s user ID.

uidNumber

Contains a unique numeric identifier for a user entry, analogous to the user number in Unix.

Expand
Table 9.119. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

gecos

Used to determine the GECOS field for the user; this is based on a common name, with additional information embedded.

loginShell

Contains the path to a script that is launched automatically when a user logs into the domain.

userPassword

Stores the password with which the entry can bind to the directory.

9.67. posixGroup

The posixGroup object class defines a group of network accounts which use POSIX attributes.

This object class is defined in RFC 2307, which defines object classes and attributes to use LDAP as a network information service.

Superior Class

top

OID

1.3.6.1.1.1.2.2

Expand
Table 9.120. Required attributes
AttributeDefinition

gidNumber

Contains the path to a script that is launched automatically when a user logs into the domain.

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.121. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

memberUID

Gives the login name of the group member; this possibly may not be the same as the member’s DN.

userPassword

Contains the login name of the member of a group.

9.68. referral

The referral object class defines an object which supports LDAPv3 smart referrals.

This object class is defined in LDAPv3 referrals Internet Draft.

Superior Class

top

OID

2.16.840.1.113730.3.2.6

Expand
Table 9.122. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

Expand
Table 9.123. Allowed attributes
AttributeDefinition

ref

Contains information for an LDAPv3 smart referral.

9.69. residentialPerson

The residentialPerson object class manages a person’s residential information.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.10

Expand
Table 9.124. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

l (locality)

Gives the city or geographical location of the entry.

sn (surname)

Gives the person’s family name or last name.

Expand
Table 9.125. Allowed attributes
AttributeDefinition

businessCategory

Gives the type of business in which the entry is engaged.

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax (facsimileTelephoneNumbe)

Contains the fax number for the entry.

internationalISDNNumber

Contains the ISDN number for the entry.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

postOfficeBox

Gives the post office box number for the entry.

preferredDeliveryMethod

Shows the person’s preferred method of contact or message delivery.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

seeAlso

Contains a URL to another entry or site with related information.

st (stateOrProvinceName)

Gives the state or province where the person is located.

street

Gives the street name and address number for the person’s physical location.

telephoneNumber

Gives the telephone number for the entry.

teletexTerminalIdentifier

Gives the ID for an entry’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

userPassword

Stores the password with which the entry can bind to the directory.

x121Address

Gives the X.121 address for the entry.

9.70. RFC822LocalPart

The RFC822LocalPart object class defines entries that represent the local part of RFC 822 mail addresses. The directory treats this part of an RFC822 address as a domain.

This object class is defined by the Internet Directory Pilot.

Superior Class

domain

OID

0.9.2342.19200300.100.4.14

Expand
Table 9.126. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

dc (domainComponent)

Contains one component of a domain name.

Expand
Table 9.127. Allowed attributes
AttributeDefinition

associatedName

Gives the name of an entry within the organizational directory tree which is associated with a DNS domain.

businessCategory

Gives the type of business in which the entry is engaged.

cn (commonName)

Gives the common name of the entry.

description

Gives a text description of the entry.

destinationIndicator

Gives the country and city associated with the entry; this was once required to provide public telegram service.

fax (facsimileTelephoneNumber)

Contains the fax number for the entry.

internationalISDNNumber

Contains the ISDN number for the entry.

l (locality)

Gives the city or geographical location of the entry.

o (organization)

Gives the organization to which the account belongs.

physicalDeliveryOfficeName

Gives a location where physical deliveries can be made.

postalAddress

Contains the mailing address for the entry.

postalCode

Gives the postal code for the entry, such as the zip code in the United States.

postOfficeBox

Gives the post office box number for the entry.

preferredDeliveryMethod

Shows the person’s preferred method of contact or message delivery.

registeredAddress

Gives a postal address suitable to receive expedited documents when the recipient must verify delivery.

searchGuide

Specifies information for suggested search criteria when using the entry as the base object in the directory tree for a search.

seeAlso

Contains a URL to another entry or site with related information.

sn (surname)

Gives the person’s family name or last name.

st (stateOrProvinceName)

Gives the state or province where the person is located.

street

Gives the street name and address number for the person’s physical location.

telephoneNumber

Gives the telephone number for the entry.

teletexTerminalIdentifier

Gives the identifier for the person’s teletex terminal.

telexNumber

Gives the telex number associated with the entry.

userPassword

Stores the password with which the entry can bind to the directory.

x121Address

Gives the X.121 address for the entry.

9.71. room

The room object class stores information in the directory about rooms.

Superior Class

top

OID

0.9.2342.19200300.100.4.7

Expand
Table 9.128. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

cn (commonName)

Gives the common name of the entry.

Expand
Table 9.129. Allowed attributes
AttributeDefinition

description

Gives a text description of the room.

roomNumber

Contains the room’s number.

seeAlso

Contains a URL to another entry or site with related information.

telephoneNumber

Gives the telephone number for the entry.

9.72. shadowAccount

The shadowAccount object class allows the LDAP directory to be used as a shadow password service. Shadow password services relocate the password files on a host to a shadow file with tightly restricted access.

This object class is defined in RFC 2307, which defines object classes and attributes to use LDAP as a network information service.

Note

This object class is defined in 10rfc2307.ldif in Directory Server. To use the updated RFC 2307 schema, remove the 10rfc2307.ldif file and copy the 10rfc2307bis.ldif file from the /usr/share/dirsrv/data directory to the /etc/dirsrv/slapd-instance/schema directory.

Superior Class

top

OID

1.3.6.1.1.1.2.1

Expand
Table 9.130. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

uid (UserId)

Gives the defined account’s user ID.

Expand
Table 9.131. Allowed attributes
AttributeDefinition

description

Gives a text description of the entry.

shadowExpire

Contains the date that the shadow account expires.

shadowFlag

Identifies what area in the shadow map stores the flag values.

shadowInactive

Sets how long the shadow account can be inactive.

shadowLastChange

Contains the time and date of the last modification to the shadow account.

shadowMax

Sets the maximum number of days that a shadow password is valid.

shadowMin

Sets the minimum number of days that must pass between changing the shadow password.

shadowWarning

Sets how may days in advance of password expiration to send a warning to the user.

userPassword

Stores the password with which the entry can bind to the directory.

9.73. simpleSecurityObject

The simpleSecurityObject object class allows an entry to contain the userPassword attribute when an entry’s principal object classes do not allow a password attribute. This attribute is reserved for future use.

This object class is defined in RFC 1274.

Superior Class

top

OID

0.9.2342.19200300.100.4.19

Expand
Table 9.132. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

userPassword

Stores the password with which the entry can bind to the directory.

9.74. strongAuthenticationUser

The strongAuthenticationUser object class stores a user’s certificate in the directory.

This object class is defined in RFC 2256.

Superior Class

top

OID

2.5.6.15

Expand
Table 9.133. Required attributes
AttributeDefinition

objectClasses

Gives the object classes assigned to the entry.

userCertificate

Stores a user’s certificate, usually in binary form.

Red Hat logoGithubredditYoutubeTwitter

Lernen

Testen, kaufen und verkaufen

Communitys

Über Red Hat

Wir liefern gehärtete Lösungen, die es Unternehmen leichter machen, plattform- und umgebungsübergreifend zu arbeiten, vom zentralen Rechenzentrum bis zum Netzwerkrand.

Mehr Inklusion in Open Source

Red Hat hat sich verpflichtet, problematische Sprache in unserem Code, unserer Dokumentation und unseren Web-Eigenschaften zu ersetzen. Weitere Einzelheiten finden Sie in Red Hat Blog.

Über Red Hat Dokumentation

Legal Notice

Theme

© 2026 Red Hat
Nach oben