path: root/ldap/cm/v3confs/slapd.oc.conf

#
# BEGIN COPYRIGHT BLOCK
# This Program is free software; you can redistribute it and/or modify it under
# the terms of the GNU General Public License as published by the Free Software
# Foundation; version 2 of the License.
# 
# This Program is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License along with
# this Program; if not, write to the Free Software Foundation, Inc., 59 Temple
# Place, Suite 330, Boston, MA 02111-1307 USA.
# 
# In addition, as a special exception, Red Hat, Inc. gives You the additional
# right to link the code of this Program with code not covered under the GNU
# General Public License ("Non-GPL Code") and to distribute linked combinations
# including the two, subject to the limitations in this paragraph. Non-GPL Code
# permitted under this exception must only link to the code of this Program
# through those well defined interfaces identified in the file named EXCEPTION
# found in the source code files (the "Approved Interfaces"). The files of
# Non-GPL Code may instantiate templates or use macros or inline functions from
# the Approved Interfaces without causing the resulting work to be covered by
# the GNU General Public License. Only Red Hat, Inc. may make changes or
# additions to the list of Approved Interfaces. You must obey the GNU General
# Public License in all respects for all of the Program code and other code used
# in conjunction with the Program except the Non-GPL Code covered by this
# exception. If you modify this file, you may extend this exception to your
# version of the file, but you are not obligated to do so. If you do not wish to
# do so, delete this exception statement from your version. 
# 
# 
# Copyright (C) 2001 Sun Microsystems, Inc. Used by permission.
# Copyright (C) 2005 Red Hat, Inc.
# All rights reserved.
# END COPYRIGHT BLOCK
#
#  slapd.oc.conf for Netscape Directory Server 3.1
#
#  DO NOT MODIFY! 
#
#  The ObjectClasses in this file are Standard ObjectClasses and are expected
#  to be present in Directory Server 3.1 unchanged. Modifing this file may
#  cause interoperability problems.
#
#  User Defined ObjectClasses should be added by selecting 
#  Schema | Create ObjectClasses from the Admin Server. 
#
#  User Defined ObjectClasses are saved in slapd.user_oc.conf
#  
#  All ObjectClasses are viewable in the cn=schema entry under objectclasses.
#
# The format of this file is:
#
#  objectclass ObjectClassName
#       [ oid ObjectIdentifier ]
#       [ superior ParentObjectClass ]
#       [ requires <comma separated list of required attributes> ]
#       [ allows   <comma separated list of allowed attributes>  ]
#  

objectclass top
	oid 2.5.6.0
	requires
		objectClass
	allows
		aci

objectclass alias
	oid 2.5.6.1
	superior top
	requires
		aliasedObjectName

objectclass country
	oid 2.5.6.2
	superior top
	requires
		c
	allows
		searchGuide,
		description

objectclass locality
	oid 2.5.6.3
	superior top
	allows
		description,
		l,
		searchGuide,
		seeAlso,
		st,
		street

objectclass organization
	oid 2.5.6.4
	superior top
	requires
		o
	allows
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		street,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass organizationalUnit
	oid 2.5.6.5
	superior top
	requires
		ou
	allows
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		street,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass person
	oid 2.5.6.6
	superior top
	requires
		sn,
		cn
	allows
		description,
		seeAlso,
		telephoneNumber,
		userPassword

objectclass organizationalPerson
	oid 2.5.6.7
	superior person
	allows
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		ou,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		st,
		street,
		teletexTerminalIdentifier,
		telexNumber,
		title,
		x121Address

objectclass inetOrgPerson
    oid 2.16.840.1.113730.3.2.2
    superior organizationalPerson
	allows
		audio,
		businessCategory,
		carLicense,
		departmentNumber,
		employeeType,
		employeeNumber,
		givenName,
		homePhone,
		homePostalAddress,
		initials,
		jpegPhoto,
		labeledURI,
		manager,
		mobile,
		pager,
		photo,
		preferredLanguage,
		mail,
		roomNumber,
		secretary,
		uid,
		x500uniqueIdentifier,
		userCertificate,
		userCertificate;binary,
		userSMimeCertificate;binary
 
objectclass ntUser
	oid 2.16.840.1.113730.3.2.8
	superior top
	requires
		ntUserDomainId
	allows
		description,
		l,
		ou,
		seeAlso,
		ntUserPriv,
		ntUserHomeDir,
		ntUserComment,
		ntUserFlags,
		ntUserScriptPath,
		ntUserAuthFlags,
		ntUserUsrComment,
		ntUserParms,
		ntUserWorkstations,
		ntUserLastLogon,
		ntUserLastLogoff,
		ntUserAcctExpires,
		ntUserMaxStorage,
		ntUserUnitsPerWeek,
		ntUserLogonHours,
		ntUserBadPwCount,
		ntUserNumLogons,
		ntUserLogonServer,
		ntUserCountryCode,
		ntUserCodePage,
		ntUserUniqueId,
		ntUserPrimaryGroupId,
		ntUserProfile,
		ntUserHomeDirDrive,
		ntUserPasswordExpired,
		ntUserCreateNewAccount,
		ntUserDeleteAccount

objectclass ntGroup
	oid 2.16.840.1.113730.3.2.9
	superior top
	requires
		ntGroupDomainId
	allows
		description,
		l,
		ou,
		seeAlso,
		ntGroupId,
		ntGroupAttributes,
		ntGroupCreateNewGroup,
		ntGroupDeleteGroup,
		ntGroupType

objectclass organizationalRole
   oid 2.5.6.8
   superior top  
	requires
		cn
	allows
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		ou,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		roleOccupant,
		seeAlso,
		st,
		street,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		x121Address

objectclass groupOfNames
   oid 2.5.6.9
   superior top  
	requires
		cn
	allows
		member,
		businessCategory,
		description,
		o,
		ou,
		owner,
		seeAlso

objectclass groupOfUniqueNames
    oid 2.5.6.17
    superior top  
	requires
		cn
	allows
		uniqueMember,
		businessCategory,
		description,
		o,
		ou,
		owner,
		seeAlso

objectclass groupOfCertificates
    oid 2.16.840.1.113730.3.2.31
    superior top  
	requires
		cn
	allows
		memberCertificateDescription,
		businessCategory,
		description,
		o,
		ou,
		owner,
		seeAlso

objectclass groupOfURLs
    oid  2.16.840.1.113730.3.2.33
    superior top  
	requires
		cn
	allows
		memberURL,
		businessCategory,
		description,
		o,
		ou,
		owner,
		seeAlso

objectclass residentialPerson
   oid 2.5.6.10
   superior person  
	requires
		l
	allows
		businessCategory,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		st,
		street,
		teletexTerminalIdentifier,
		telexNumber,
		x121Address

objectclass applicationProcess
    oid 2.5.6.11
    superior top  
	requires
		cn
	allows
		description,
		l,
		ou,
		seeAlso

objectclass LDAPServer
	oid 2.16.840.1.113730.3.2.35
	superior top
	requires
		cn
	allows
		description,
		l,
		ou,
		seeAlso,
		generation,
		changeLogMaximumAge,
		changeLogMaximumSize

objectclass LDAPReplica
	oid 2.16.840.1.113730.3.2.36
	superior top
	requires
		cn
	allows
		description,
		l,
		ou,
		seeAlso,
		replicaRoot,
		replicaHost,
		replicaPort,
		replicaBindDn,
		replicaCredentials,
		replicaBindMethod,
		replicaUseSSL,
		replicaUpdateSchedule,
		replicaUpdateReplayed,
		replicaUpdateFailedAt,
		replicaBeginORC,
		replicaNickname,
		replicaEntryFilter,
		replicatedAttributeList,
		replicaCFUpdated,
		replicaAbandonedChanges

objectclass applicationEntity
    oid 2.5.6.12
    superior top  
	requires
		presentationAddress,
		cn
	allows
		description,
		l,
		o,
		ou,
		seeAlso,
		supportedApplicationContext

objectclass dSA
   oid 2.5.6.13
   superior applicationEntity  
	allows
		knowledgeInformation

objectclass device
    oid 2.5.6.14
    superior top  
	requires
		cn
	allows
		description,
		l,
		o,
		ou,
		owner,
		seeAlso,
		serialNumber

objectclass strongAuthenticationUser
    oid 2.5.6.15
    superior top 
	requires
		userCertificate,
		userCertificate;binary

objectclass certificationAuthority
    oid 2.5.6.16
    superior top 
	requires
		cACertificate;binary
	allows
		authorityRevocationList;binary,
		certificateRevocationList;binary,
		crossCertificatePair;binary

objectclass pilotObject
    oid 0.9.2342.19200300.100.4.3
    superior top  
	allows
		audio,
		dITRedirect,
		info,
		jpegPhoto,
		lastModifiedBy,
		lastModifiedTime,
		manager,
		photo,
		uniqueIdentifier

objectclass newPilotPerson
    oid 0.9.2342.19200300.100.4.4
    superior person 
	allows
		businessCategory,
		drink,
		homePhone,
		homePostalAddress,
		janetMailbox,
		mail,
		mailPreferenceOption,
		mobile,
		organizationalStatus,
		otherMailbox,
		pager,
		personalSignature,
		personalTitle,
		preferredDeliveryMethod,
		roomNumber,
		secretary,
		textEncodedORAddress,
		uid,
		userClass

objectclass account
    oid 0.9.2342.19200300.100.4.5
    superior top  
    requires
		uid
	allows
		description,
		host,
		l,
		o,
		ou,
		seeAlso

objectclass document
    oid 0.9.2342.19200300.100.4.6
    superior pilotObject 
	requires
		documentIdentifier
	allows
		abstract,
		authorCN,
		authorSN,
		cn,
		description,
		documentAuthor,
		documentLocation,
		documentPublisher,
		documentStore,
		documentTitle,
		documentVersion,
		keywords,
		l,
		o,
		obsoletedByDocument,
		obsoletesDocument,
		ou,
		seeAlso,
		subject,
		updatedByDocument,
		updatesDocument

objectclass room
    oid 0.9.2342.19200300.100.4.7
    superior top  
	requires
		cn
	allows
		description,
		roomNumber,
		seeAlso,
		telephoneNumber

objectclass documentSeries
    oid 0.9.2342.19200300.100.4.9
    superior top  
	requires
		cn
	allows
		description,
		l,
		o,
		ou,
		seeAlso,
		telephoneNumber

objectclass domain
    oid 0.9.2342.19200300.100.4.13
    superior top  
	requires
		dc
	allows
		associatedName,
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		manager,
		o,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		street,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass RFC822localPart
    oid 0.9.2342.19200300.100.4.14
    superior domain 
	allows
		cn,
		sn

objectclass DNSDomain
    oid 0.9.2342.19200300.100.4.15
    superior domain  
	allows
		dNSRecord

objectclass domainRelatedObject
    oid 0.9.2342.19200300.100.4.17
    superior top 
	requires
		associatedDomain

objectclass friendlyCountry
    oid 0.9.2342.19200300.100.4.18
    superior country 
	requires
		co

objectclass simpleSecurityObject
	oid 0.9.2342.19200300.100.4.19
	superior top 
	requires
		userPassword

objectclass pilotOrganization
	oid pilotOrganization-OID
	superior top
	requires
		ou,
		o
	allows
		buildingName,
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		street,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address


objectclass labeledURIObject
	oid 1.3.6.1.4.1.250.3.15 
	superior top
	allows
		labeledURI

objectclass cacheObject
	oid 1.3.6.1.4.1.250.3.18 
	superior top
	allows
		ttl

# objectclasses below added since Netscape Directory Server 1.01

objectclass netscapeServer 
	oid 2.16.840.1.113730.3.2.10
	superior top
	requires 
		cn 
	allows 
		description,
		serverRoot,
		serverProductName,
		serverVersionNumber,
		installationTimeStamp,
		administratorContactInfo,
		userpassword,
		adminURL,
		serverHostName

objectclass nsLicenseUser
	oid 2.16.840.1.113730.3.2.7
	superior top
	allows
		nsLicensedFor,
		nsLicenseStartTime,
		nsLicenseEndTime

objectclass changeLogEntry
	oid 2.16.840.1.113730.3.2.1
	superior top
	requires
		targetdn,
		changeTime,
		changenumber,
		changeType
	allows
		changes,
		newrdn,
		deleteoldrdn,
		newsuperior,
		filterinfo

objectclass cirReplicaSource
	oid 2.16.840.1.113730.3.2.11
	requires 
		cn
	allows
		cirReplicaRoot,
                cirHost,
                cirPort,
                cirBindDN,
                cirUsePersistentSearch,
                cirUseSSL,
                cirBindCredentials,
                cirLastUpdateApplied,
                cirUpdateSchedule,
                cirSyncInterval,
                cirUpdateFailedAt,
                cirBeginORC,
                replicaNickname,
		replicaEntryFilter,
		replicatedAttributeList

objectclass referral
	oid 2.16.840.1.113730.3.2.6
	allows
		ref

objectclass passwordObject
		oid  2.16.840.1.113730.3.2.12
        requires
                objectClass
        allows
                passwordExpirationTime,
                passwordExpWarned,
                passwordRetryCount,
                retryCountResetTime,
                accountUnlockTime,
                passwordHistory

objectclass passwordPolicy
		oid  2.16.840.1.113730.3.2.13
        requires
                objectClass
        allows
		passwordMaxAge,		
		passwordExp,
		passwordMinLength,
		passwordKeepHistory,
		passwordInHistory,
		passwordChange,
		passwordWarning,
		passwordLockout,
		passwordMaxFailure,
		passwordResetDuration,
		passwordUnlock,
		passwordLockoutDuration,
		passwordCheckSyntax

objectclass glue
		oid  2.16.840.1.113730.3.2.30
		superior top

objectclass netscapeMachineData
		oid  2.16.840.1.113730.3.2.32
		superior top

objectclass dcObject
	oid 1.3.6.1.4.1.1466.344
	superior top
	requires 
		dc

objectclass subschema
	oid 2.5.20.1
	superior top
	allows 
		cn,
		dITStructureRules,
		nameForms,
		dITContentRules,
		objectClasses,
		attributeTypes,
		matchingRules,
		matchingRuleUse