# CDDL HEADER START
|
#
|
# The contents of this file are subject to the terms of the
|
# Common Development and Distribution License, Version 1.0 only
|
# (the "License"). You may not use this file except in compliance
|
# with the License.
|
#
|
# You can obtain a copy of the license at legal-notices/CDDLv1_0.txt
|
# or http://forgerock.org/license/CDDLv1.0.html.
|
# See the License for the specific language governing permissions
|
# and limitations under the License.
|
#
|
# When distributing Covered Code, include this CDDL HEADER in each
|
# file and include the License file at legal-notices/CDDLv1_0.txt.
|
# If applicable, add the following below this CDDL HEADER, with the
|
# fields enclosed by brackets "[]" replaced with your own identifying
|
# information:
|
# Portions Copyright [yyyy] [name of copyright owner]
|
#
|
# CDDL HEADER END
|
#
|
#
|
# Copyright 2008 Sun Microsystems, Inc.
|
#
|
#
|
# This file contains schema definitions from RFC 4876, which defines a schema # for storing Directory User Agent (DUA) profiles and preferences in the
|
# Directory Server.
|
#
|
# Example profile
|
# dn: ou=profile,dc=example,dc=com
|
# objectClass: top
|
# objectClass: organizationalUnit
|
# ou: profile
|
#
|
# dn: cn=Solaris,ou=profile,dc=example,dc=com
|
# objectClass: top
|
# objectClass: DUAConfigProfile
|
# cn: Solaris
|
# defaultServerList: ldap1.example.com ldap2.example.com
|
# defaultSearchBase: dc=example,dc=com
|
# defaultSearchScope: one
|
# searchTimeLimit: 30
|
# bindTimeLimit: 2
|
# credentialLevel: anonymous
|
# authenticationMethod: simple
|
# followReferrals: TRUE
|
# profileTTL: 43200
|
#
|
dn: cn=schema
|
objectClass: top
|
objectClass: ldapSubentry
|
objectClass: subschema
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.0 NAME 'defaultServerList'
|
DESC 'List of default servers' EQUALITY caseIgnoreMatch
|
SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.1 NAME 'defaultSearchBase'
|
DESC 'Default base for searches' EQUALITY distinguishedNameMatch
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.2 NAME 'preferredServerList'
|
DESC 'List of preferred servers' EQUALITY caseIgnoreMatch
|
SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.3 NAME 'searchTimeLimit'
|
DESC 'Maximum time an agent or service allows for a search to complete'
|
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
|
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.4 NAME 'bindTimeLimit'
|
DESC 'Maximum time an agent or service allows for a bind operation to
|
complete' EQUALITY integerMatch ORDERING integerOrderingMatch
|
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.5 NAME 'followReferrals'
|
DESC 'An agent or service does or should follow referrals' EQUALITY
|
booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN
|
'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.6 NAME 'authenticationMethod'
|
DESC 'Identifies the types of authentication methods either used,
|
required, or provided by a service or peer' EQUALITY caseIgnoreMatch
|
SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
|
SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.7 NAME 'profileTTL'
|
DESC 'Time to live, in seconds, before a profile is considered stale'
|
EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
|
1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.9 NAME 'attributeMap'
|
DESC 'Attribute mappings used, required, or supported by an agent or
|
service' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.10 NAME 'credentialLevel'
|
DESC 'Identifies type of credentials either used, required, or supported
|
by an agent or service' EQUALITY caseIgnoreIA5Match SYNTAX
|
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.11 NAME 'objectclassMap'
|
DESC 'Object class mappings used, required, or supported by an agent or
|
service' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
|
X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.12 NAME 'defaultSearchScope'
|
DESC 'Default scope used when performing a search' EQUALITY
|
caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
|
X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.13 NAME 'serviceCredentialLevel'
|
DESC 'Specifies the type of credentials either used, required, or
|
supported by a specific service' EQUALITY caseIgnoreIA5Match SYNTAX
|
1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.14 NAME 'serviceSearchDescriptor'
|
DESC 'Specifies search descriptors required, used, or supported by a
|
particular service or agent' EQUALITY caseExactMatch SUBSTR
|
caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN
|
'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod'
|
DESC 'Specifies types authentication methods either used, required, or
|
supported by a particular service' EQUALITY caseIgnoreMatch SUBSTR
|
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN
|
'RFC 4876' )
|
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.16 NAME 'dereferenceAliases'
|
DESC 'Specifies if a service or agent either requires, supports, or uses
|
dereferencing of aliases.' EQUALITY booleanMatch SYNTAX
|
1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'RFC 4876' )
|
objectClasses: ( 1.3.6.1.4.1.11.1.3.1.2.5 NAME 'DUAConfigProfile'
|
SUP top STRUCTURAL DESC 'Abstraction of a base configuration for a DUA'
|
MUST ( cn ) MAY ( defaultServerList $ preferredServerList $
|
defaultSearchBase $ defaultSearchScope $ searchTimeLimit $ bindTimeLimit $
|
credentialLevel $ authenticationMethod $ followReferrals $
|
dereferenceAliases $ serviceSearchDescriptor $ serviceCredentialLevel $
|
serviceAuthenticationMethod $ objectclassMap $ attributeMap $ profileTTL )
|
X-ORIGIN 'RFC 4876' )
|
