| [507] | 1 | # |
|---|
| 2 | # This schema is a RFC draft and replaces the nis.schema |
|---|
| 3 | # |
|---|
| 4 | # You can NOT install it together with the nis.schema! |
|---|
| 5 | # |
|---|
| 6 | # The purpose of it is, to use posixGroup together with groupOfNames |
|---|
| 7 | # |
|---|
| 8 | # uidNumber and gidNumber might be buildin, in that case you |
|---|
| 9 | # need to comment out both (putting a # infront the whole entry) |
|---|
| 10 | # |
|---|
| 11 | # $Id$ |
|---|
| 12 | # |
|---|
| 13 | #attributetype ( 1.3.6.1.1.1.1.0 NAME 'uidNumber' |
|---|
| 14 | # DESC 'An integer uniquely identifying a user in an administrative domain' |
|---|
| 15 | # EQUALITY integerMatch |
|---|
| 16 | # SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 17 | # SINGLE-VALUE ) |
|---|
| 18 | |
|---|
| 19 | #attributetype ( 1.3.6.1.1.1.1.1 NAME 'gidNumber' |
|---|
| 20 | # DESC 'An integer uniquely identifying a group in an |
|---|
| 21 | # administrative domain' |
|---|
| 22 | # EQUALITY integerMatch |
|---|
| 23 | # SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 24 | # SINGLE-VALUE ) |
|---|
| 25 | |
|---|
| 26 | attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos' |
|---|
| 27 | DESC 'The GECOS field; the common name' |
|---|
| 28 | EQUALITY caseIgnoreIA5Match |
|---|
| 29 | SUBSTR caseIgnoreIA5SubstringsMatch |
|---|
| 30 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|---|
| 31 | SINGLE-VALUE ) |
|---|
| 32 | |
|---|
| 33 | attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' |
|---|
| 34 | DESC 'The absolute path to the home directory' |
|---|
| 35 | EQUALITY caseExactIA5Match |
|---|
| 36 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|---|
| 37 | SINGLE-VALUE ) |
|---|
| 38 | |
|---|
| 39 | attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell' |
|---|
| 40 | DESC 'The path to the login shell' |
|---|
| 41 | EQUALITY caseExactIA5Match |
|---|
| 42 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|---|
| 43 | SINGLE-VALUE ) |
|---|
| 44 | |
|---|
| 45 | attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' |
|---|
| 46 | EQUALITY integerMatch |
|---|
| 47 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 48 | SINGLE-VALUE ) |
|---|
| 49 | |
|---|
| 50 | attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin' |
|---|
| 51 | EQUALITY integerMatch |
|---|
| 52 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 53 | SINGLE-VALUE ) |
|---|
| 54 | |
|---|
| 55 | attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax' |
|---|
| 56 | EQUALITY integerMatch |
|---|
| 57 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 58 | SINGLE-VALUE ) |
|---|
| 59 | |
|---|
| 60 | attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' |
|---|
| 61 | EQUALITY integerMatch |
|---|
| 62 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 63 | SINGLE-VALUE ) |
|---|
| 64 | |
|---|
| 65 | attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' |
|---|
| 66 | EQUALITY integerMatch |
|---|
| 67 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 68 | SINGLE-VALUE ) |
|---|
| 69 | |
|---|
| 70 | attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' |
|---|
| 71 | EQUALITY integerMatch |
|---|
| 72 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 73 | SINGLE-VALUE ) |
|---|
| 74 | |
|---|
| 75 | attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' |
|---|
| 76 | EQUALITY integerMatch |
|---|
| 77 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 78 | SINGLE-VALUE ) |
|---|
| 79 | |
|---|
| 80 | attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid' |
|---|
| 81 | EQUALITY caseExactIA5Match |
|---|
| 82 | SUBSTR caseExactIA5SubstringsMatch |
|---|
| 83 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
|---|
| 84 | |
|---|
| 85 | attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' |
|---|
| 86 | EQUALITY caseExactIA5Match |
|---|
| 87 | SUBSTR caseExactIA5SubstringsMatch |
|---|
| 88 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
|---|
| 89 | |
|---|
| 90 | attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' |
|---|
| 91 | DESC 'Netgroup triple' |
|---|
| 92 | EQUALITY caseIgnoreIA5Match |
|---|
| 93 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
|---|
| 94 | |
|---|
| 95 | attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' |
|---|
| 96 | DESC 'Service port number' |
|---|
| 97 | EQUALITY integerMatch |
|---|
| 98 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 99 | SINGLE-VALUE ) |
|---|
| 100 | |
|---|
| 101 | attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' |
|---|
| 102 | DESC 'Service protocol name' |
|---|
| 103 | SUP name ) |
|---|
| 104 | |
|---|
| 105 | attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' |
|---|
| 106 | DESC 'IP protocol number' |
|---|
| 107 | EQUALITY integerMatch |
|---|
| 108 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 109 | SINGLE-VALUE ) |
|---|
| 110 | |
|---|
| 111 | attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' |
|---|
| 112 | DESC 'ONC RPC number' |
|---|
| 113 | EQUALITY integerMatch |
|---|
| 114 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 |
|---|
| 115 | SINGLE-VALUE ) |
|---|
| 116 | attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' |
|---|
| 117 | DESC 'IPv4 addresses as a dotted decimal omitting leading |
|---|
| 118 | zeros or IPv6 addresses as defined in RFC2373' |
|---|
| 119 | SUP name ) |
|---|
| 120 | |
|---|
| 121 | attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' |
|---|
| 122 | DESC 'IP network as a dotted decimal, eg. 192.168, |
|---|
| 123 | omitting leading zeros' |
|---|
| 124 | SUP name |
|---|
| 125 | SINGLE-VALUE ) |
|---|
| 126 | |
|---|
| 127 | attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' |
|---|
| 128 | DESC 'IP netmask as a dotted decimal, eg. 255.255.255.0, |
|---|
| 129 | omitting leading zeros' |
|---|
| 130 | EQUALITY caseIgnoreIA5Match |
|---|
| 131 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|---|
| 132 | SINGLE-VALUE ) |
|---|
| 133 | |
|---|
| 134 | attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress' |
|---|
| 135 | DESC 'MAC address in maximal, colon separated hex |
|---|
| 136 | notation, eg. 00:00:92:90:ee:e2' |
|---|
| 137 | EQUALITY caseIgnoreIA5Match |
|---|
| 138 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
|---|
| 139 | |
|---|
| 140 | attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter' |
|---|
| 141 | DESC 'rpc.bootparamd parameter' |
|---|
| 142 | EQUALITY caseExactIA5Match |
|---|
| 143 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
|---|
| 144 | |
|---|
| 145 | attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile' |
|---|
| 146 | DESC 'Boot image name' |
|---|
| 147 | EQUALITY caseExactIA5Match |
|---|
| 148 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) |
|---|
| 149 | |
|---|
| 150 | attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName' |
|---|
| 151 | DESC 'Name of a A generic NIS map' |
|---|
| 152 | SUP name ) |
|---|
| 153 | |
|---|
| 154 | attributetype ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' |
|---|
| 155 | DESC 'A generic NIS entry' |
|---|
| 156 | EQUALITY caseExactIA5Match |
|---|
| 157 | SUBSTR caseExactIA5SubstringsMatch |
|---|
| 158 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 |
|---|
| 159 | SINGLE-VALUE ) |
|---|
| 160 | |
|---|
| 161 | attributetype ( 1.3.6.1.1.1.1.28 NAME 'nisPublicKey' |
|---|
| 162 | DESC 'NIS public key' |
|---|
| 163 | EQUALITY octetStringMatch |
|---|
| 164 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE ) |
|---|
| 165 | |
|---|
| 166 | attributetype ( 1.3.6.1.1.1.1.29 NAME 'nisSecretKey' |
|---|
| 167 | DESC 'NIS secret key' |
|---|
| 168 | EQUALITY octetStringMatch |
|---|
| 169 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE ) |
|---|
| 170 | |
|---|
| 171 | attributetype ( 1.3.6.1.1.1.1.30 NAME 'nisDomain' |
|---|
| 172 | DESC 'NIS domain' |
|---|
| 173 | EQUALITY caseIgnoreIA5Match |
|---|
| 174 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26) |
|---|
| 175 | |
|---|
| 176 | attributetype ( 1.3.6.1.1.1.1.31 NAME 'automountMapName' |
|---|
| 177 | DESC 'automount Map Name' |
|---|
| 178 | EQUALITY caseExactIA5Match |
|---|
| 179 | SUBSTR caseExactIA5SubstringsMatch |
|---|
| 180 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
|---|
| 181 | |
|---|
| 182 | attributetype ( 1.3.6.1.1.1.1.32 NAME 'automountKey' |
|---|
| 183 | DESC 'Automount Key value' |
|---|
| 184 | EQUALITY caseExactIA5Match |
|---|
| 185 | SUBSTR caseExactIA5SubstringsMatch |
|---|
| 186 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
|---|
| 187 | |
|---|
| 188 | attributetype ( 1.3.6.1.1.1.1.33 NAME 'automountInformation' |
|---|
| 189 | DESC 'Automount information' |
|---|
| 190 | EQUALITY caseExactIA5Match |
|---|
| 191 | SUBSTR caseExactIA5SubstringsMatch |
|---|
| 192 | SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ) |
|---|
| 193 | |
|---|
| 194 | objectclass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' SUP top AUXILIARY |
|---|
| 195 | DESC 'Abstraction of an account with POSIX attributes' |
|---|
| 196 | MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory ) |
|---|
| 197 | MAY ( userPassword $ loginShell $ gecos $ |
|---|
| 198 | description ) ) |
|---|
| 199 | |
|---|
| 200 | objectclass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' SUP top AUXILIARY |
|---|
| 201 | DESC 'Additional attributes for shadow passwords' |
|---|
| 202 | MUST uid |
|---|
| 203 | MAY ( userPassword $ description $ |
|---|
| 204 | shadowLastChange $ shadowMin $ shadowMax $ |
|---|
| 205 | shadowWarning $ shadowInactive $ |
|---|
| 206 | shadowExpire $ shadowFlag ) ) |
|---|
| 207 | |
|---|
| 208 | objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' SUP top AUXILIARY |
|---|
| 209 | DESC 'Abstraction of a group of accounts' |
|---|
| 210 | MUST gidNumber |
|---|
| 211 | MAY ( userPassword $ memberUid $ |
|---|
| 212 | description ) ) |
|---|
| 213 | |
|---|
| 214 | objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService' SUP top STRUCTURAL |
|---|
| 215 | DESC 'Abstraction an Internet Protocol service. |
|---|
| 216 | Maps an IP port and protocol (such as tcp or udp) |
|---|
| 217 | to one or more names; the distinguished value of |
|---|
| 218 | the cn attribute denotes the services canonical |
|---|
| 219 | name' |
|---|
| 220 | MUST ( cn $ ipServicePort $ ipServiceProtocol ) |
|---|
| 221 | MAY description ) |
|---|
| 222 | |
|---|
| 223 | objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' SUP top STRUCTURAL |
|---|
| 224 | DESC 'Abstraction of an IP protocol. Maps a protocol number |
|---|
| 225 | to one or more names. The distinguished value of the cn |
|---|
| 226 | attribute denotes the protocols canonical name' |
|---|
| 227 | MUST ( cn $ ipProtocolNumber ) |
|---|
| 228 | MAY description ) |
|---|
| 229 | |
|---|
| 230 | objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' SUP top STRUCTURAL |
|---|
| 231 | DESC 'Abstraction of an Open Network Computing (ONC) |
|---|
| 232 | [RFC1057] Remote Procedure Call (RPC) binding. |
|---|
| 233 | This class maps an ONC RPC number to a name. |
|---|
| 234 | The distinguished value of the cn attribute denotes |
|---|
| 235 | the RPC services canonical name' |
|---|
| 236 | MUST ( cn $ oncRpcNumber ) |
|---|
| 237 | MAY description ) |
|---|
| 238 | |
|---|
| 239 | objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' SUP top AUXILIARY |
|---|
| 240 | DESC 'Abstraction of a host, an IP device. The distinguished |
|---|
| 241 | value of the cn attribute denotes the hosts canonical |
|---|
| 242 | name. Device SHOULD be used as a structural class' |
|---|
| 243 | MUST ( cn $ ipHostNumber ) |
|---|
| 244 | MAY ( userPassword $ l $ description $ manager ) ) |
|---|
| 245 | |
|---|
| 246 | objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' SUP top STRUCTURAL |
|---|
| 247 | DESC 'Abstraction of a network. The distinguished value of |
|---|
| 248 | the cn attribute denotes the networks canonical name' |
|---|
| 249 | MUST ipNetworkNumber |
|---|
| 250 | MAY ( cn $ ipNetmaskNumber $ l $ description $ manager ) ) |
|---|
| 251 | |
|---|
| 252 | objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL |
|---|
| 253 | DESC 'Abstraction of a netgroup. May refer to other netgroups' |
|---|
| 254 | MUST cn |
|---|
| 255 | MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) ) |
|---|
| 256 | |
|---|
| 257 | objectclass ( 1.3.6.1.1.1.2.9 NAME 'nisMap' SUP top STRUCTURAL |
|---|
| 258 | DESC 'A generic abstraction of a NIS map' |
|---|
| 259 | MUST nisMapName |
|---|
| 260 | MAY description ) |
|---|
| 261 | |
|---|
| 262 | objectclass ( 1.3.6.1.1.1.2.10 NAME 'nisObject' SUP top STRUCTURAL |
|---|
| 263 | DESC 'An entry in a NIS map' |
|---|
| 264 | MUST ( cn $ nisMapEntry $ nisMapName ) |
|---|
| 265 | MAY description ) |
|---|
| 266 | |
|---|
| 267 | objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' SUP top AUXILIARY |
|---|
| 268 | DESC 'A device with a MAC address; device SHOULD be |
|---|
| 269 | used as a structural class' |
|---|
| 270 | MAY macAddress ) |
|---|
| 271 | |
|---|
| 272 | objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' SUP top AUXILIARY |
|---|
| 273 | DESC 'A device with boot parameters; device SHOULD be |
|---|
| 274 | used as a structural class' |
|---|
| 275 | MAY ( bootFile $ bootParameter ) ) |
|---|
| 276 | |
|---|
| 277 | objectclass ( 1.3.6.1.1.1.2.14 NAME 'nisKeyObject' SUP top AUXILIARY |
|---|
| 278 | DESC 'An object with a public and secret key' |
|---|
| 279 | MUST ( cn $ nisPublicKey $ nisSecretKey ) |
|---|
| 280 | MAY ( uidNumber $ description ) ) |
|---|
| 281 | |
|---|
| 282 | objectclass ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top AUXILIARY |
|---|
| 283 | DESC 'Associates a NIS domain with a naming context' |
|---|
| 284 | MUST nisDomain ) |
|---|
| 285 | |
|---|
| 286 | objectclass ( 1.3.6.1.1.1.2.16 NAME 'automountMap' SUP top STRUCTURAL |
|---|
| 287 | MUST ( automountMapName ) |
|---|
| 288 | MAY description ) |
|---|
| 289 | |
|---|
| 290 | objectclass ( 1.3.6.1.1.1.2.17 NAME 'automount' SUP top STRUCTURAL |
|---|
| 291 | DESC 'Automount information' |
|---|
| 292 | MUST ( automountKey $ automountInformation ) |
|---|
| 293 | MAY description ) |
|---|
| 294 | ## namedObject is needed for groups without members |
|---|
| 295 | objectclass ( 1.3.6.1.4.1.5322.13.1.1 NAME 'namedObject' SUP top |
|---|
| 296 | STRUCTURAL MAY cn ) |
|---|
| 297 | |
|---|
