Standards
This section provides an overview of the most frequently used object classes and attribute types. The notation is the one used in the RFCs and in the OpenLDAP schema definitions. Different server implementations use other syntaxes for the definition of the schema elements; you will find more about different syntaxes in Chapter 3. For more in-depth information about object classes, attribute type definitions, and syntaxes, you can use the LDAP Schema Viewer available at http://ldap.akbkhome.com. The site’s excellent design (maintained by Alan Knowles) makes it an invaluable tool for anyone needing to better understand the schema elements of LDAP.
objectclass ( 2.5.6.1 NAME ‘alias’ DESC ‘RFC2256: an alias’ SUP top STRUCTURAL MUST aliasedObjectName )
objectclass ( 2.5.6.2 NAME ‘country’ DESC ‘RFC2256: a country’ SUP top STRUCTURAL MUST c MAY ( searchGuide $ description ) )
objectclass ( 2.5.6.3 NAME ‘locality’ DESC ‘RFC2256: a locality’ SUP top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ 1 $ description ) )
objectclass ( 2.5.6.4 NAME ‘organization’ DESC ‘RFC2256: an organization’ SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121 Address $ registeredAddress $ destinationlndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalldentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ 1 $ description ) )
objectclass ( 2.5.65 NAME ‘organizationalUnit’ DESC ‘RFC2256: an organizational unit’ SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ xl 21 Address $ registeredAddress $ destinationlndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalldentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ 1 $ description ) )
objectclass ( 2.5.6.6 NAME ‘person’ DESC ‘RFC2256: a person’ SUP top STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) )
objectclass ( 2.5.6.7 NAME ‘organizationalPerson’ DESC ‘RFC2256: an organizational person’ SUP person STRUCTURAL MAY ( title $ x121 Address $ registeredAddress $ destinationlndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalldentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ 1 ) )
objectclass ( 2.5.6.9 NAME ‘groupOfNames’ DESC ‘RFC2256: a group of names (DNs)’ SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )
objectclass ( 2.5.6.10 NAME ‘residentialPerson’ DESC ‘RFC2256: an residential person’ SUP person STRUCTURAL MUST 1 MAY ( businessCategory $ xl21Address $ registeredAddress $ destinationlndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalldentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ 1 ) )
objectclass ( 2.5.6.13 NAME ‘dSA’ DESC ‘RFC2256: a directory system agent (a server)’ SUP applicationEntity STRUCTURAL MAY knowledgelnformation )
objectclass ( 2.5.6.14 NAME ‘device’ DESC ‘RFC2256: a device’ SUP top STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ 1 $ description ) )
objectclass ( 2.5.6.17 NAME ‘groupOfUniqueNames’ DESC ‘RFC2256: a group of unique names (DN and Unique Identifier)’ SUP top STRUCTURAL MUST ( uniqueMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )
objectclass ( 1.3.6.1.4.1.250.3.15 NAME ‘labeledURIObject’ DESC ‘RFC2079: object that contains the URI attribute type’ MAY ( labeledURI ) SUP top AUXILIARY )
objectclass ( 1.3.6.1.4.1.1466.344 NAME ‘dcObject’ DESC ‘RFC2247: domain component object’ SUP top AUXILIARY MUST dc )
objectclass ( 1.3.6.1.1.3.1 NAME ‘uidObject’ DESC ‘RFC2377: uid object’ SUP top AUXILIARY MUST uid )
objectclass( 2.16.840.1.113730.3.2.2 NAME ‘inetOrgPerson’ DESC ‘RFC2798: Internet Organizational Person’ SUP organizationalPerson STRUCTURAL MAY ( audio $ businessCategory $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ givenName $ homePhone $ homePostalAddress $ initials $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $ photo $ roomNumber $ secretary $ uid $ userCertificate $ x500uniqueldentifier $ preferredLanguage $ userSMIMECertificate $ userPKCS12 ) )
attributetype ( 2.5.4.0 NAME ‘objectClass’ DESC ‘RFC2256: object classes of the entity’ EQUALITY objectldentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 )
attributetype ( 2.5.4.1 NAME ( ‘aliasedObjectName’ ‘aliasedEntryName’ ) DESC ‘RFC2256: name of aliased object’ EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributetype ( 2.5.4.2 NAME ‘knowledgelnformation’ DESC ‘RFC2256: knowledge information’ EQUALITY caselgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(32768} )
attributetype ( 2.5.4.3 NAME ( ‘cn’ ‘commonName’ ) DESC ‘RFC2256: common name(s) for which the entity is known by’ SUP name )
attributetype ( 2.5 A A NAME ( ‘sn’ ‘surname’ ) DESC ‘RFC2256: last (family) name(s) for which the entity is known by’ SUP name )
attributetype ( 2.5.4.5 NAME ‘serialNumber’ DESC ‘RFC2256: serial number of the entity’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44(64} )
attributetype ( 2.5.4.6 NAME ( ‘c’ ‘countryName’ ) DESC ‘RFC2256: ISO-3166 country 2-letter code’ SUP name SINGLE-VALUE )
attributetype ( 2.5.4.7 NAME ( ‘1’ ‘localityName’ ) DESC ‘RFC2256: locality which this object resides in’ SUP name )
attributetype ( 2.5.4.8 NAME ( ‘st’ ‘stateOrProvinceName’ ) DESC ‘RFC2256: state or province which this object resides in’ SUP name )
attributetype ( 2.5.4.9 NAME ( ‘street’ ‘streetAddress’ ) DESC ‘RFC2256: street address of this object’ EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(128} )
attributetype ( 2.5.4.10 NAME ( ‘o’ ‘organizationName’ ) DESC ‘RFC2256: organization this object belongs to’ SUP name )
attributetype ( 2.5.4.11 NAME ( ‘ou’ ‘organizationalUnitName’ ) DESC ‘RFC2256: organizational unit this object belongs to’ SUP name )
attributetype ( 2.5.4.12 NAME ‘title’ DESC ‘RFC2256: title associated with the entity’ SUP name )
attributetype ( 2.5.4.13 NAME ‘description’ DESC ‘RFC2256: descriptive information’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(1024} )
attributetype ( 2.5.4.14 NAME ‘searchGuide’ DESC ‘RFC2256: search guide, obsoleted by enhancedSearch-Guide’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 )
attributetype ( 2.5.4.15 NAME ‘businessCategory’ DESC ‘RFC2256: business category’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(128} )
attributetype ( 2.5.4.16 NAME ‘postalAddress’ DESC ‘RFC2256: postal address’ EQUALITY caselgnoreListMatch SUBSTR caselgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributetype ( 2.5.4.17 NAME ‘postalCode’ DESC ‘RFC2256: postal code’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(40} )
attributetype (2.5.4.18 NAME ‘postOfficeBox’ DESC ‘RFC2256: Post Office Box’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(40} )
attributetype ( 2.5.4.19 NAME ‘physicalDeliveryOfficeName’ DESC ‘RFC2256: Physical Delivery Office Name’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(128} )
attributetype ( 2.5.4.20 NAME ‘telephoneNumber’ DESC ‘RFC2256: Telephone Number’ EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50(32} )
attributetype ( 2.5.4.21 NAME ‘telexNumber’ DESC ‘RFC2256: Telex Number’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 )
attributetype ( 2.5.4.22 NAME ‘teletexTerminalIdentifier’ DESC ‘RFC2256: Teletex Terminal Identifier’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )
attributetype ( 2.5.4.23 NAME ( ‘facsimileTelephoneNumber’ ‘fax’ ) DESC ‘RFC2256: Facsimile (Fax) Telephone Number’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 )
attributetype ( 2.5.4.24 NAME ‘xl21Address’ DESC ‘RFC2256: X.121 Address’ EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36(15} )
attributetype ( 2.5.4.25 NAME ‘internationaliSDNNumber’ DESC ‘RFC2256: international ISDN number’ EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36(16} )
attributetype ( 2.5.4.26 NAME ‘registeredAddress’ DESC ‘RFC2256: registered postal address’ SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributetype ( 2.5.4.27 NAME ‘destinationlndicator’ DESC ‘RFC2256: destination indicator’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44(128} )
attributetype ( 2.5.4.28 NAME ‘preferredDeliveryMethod’ DESC ‘RFC2256: preferred delivery method’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE )
attributetype ( 2.5.4.31 NAME ‘member’ DESC ‘RFC2256: member of a group’ SUP distinguishedName )
attributetype ( 2.5.4.32 NAME ‘owner’ DESC ‘RFC2256: owner (of the object)’ SUP distinguishedName )
attributetype ( 2.5.4.34 NAME ‘seeAlso’ DESC ‘RFC2256: DN of related object’ SUP distinguishedName )
attributetype ( 2.5.4.35 NAME ‘userPassword’ DESC ‘RFC2256/2307: password of user’ EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )
attributetype ( 2.5.4.36 NAME ‘userCertificate’ DESC ‘RFC2256: X.509 user certificate, use ;binary’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 )
attributetype ( 2.5.4.42 NAME ( ‘givenName’ ‘gn’ ) DESC ‘RFC2256: first name(s) for which the entity is known by’ SUP name )
attributetype ( 2.5.4.43 NAME ‘initials’ DESC ‘RFC2256: initials of some or all of names, but not the surname(s).’ SUP name )
attributetype ( 2.5.4.45 NAME ‘x500UniqueIdentifier’ DESC ‘RFC2256: X.500 unique identifier’ EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 )
attributetype ( 2.5.4.49 NAME ‘distinguishedName’ EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributetype ( 2.5.4.50 NAME ‘uniqueMember’ DESC ‘RFC2256: unique member of a group’ EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 )
attributetype ( 1.3.6.1.4.1.250.1.57 NAME ‘labeledURI’ DESC ‘RFC2079: Uniform Resource Identifier with optional label’ EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 0.9.2342.19200300.100.1.1 NAME ( ‘uid’ ‘userid’ ) DESC ‘RFC1274: user identifier’ EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributetype ( 0.9.2342.19200300.100.1.3 NAME ( ‘mail’ ‘rfc822Mailbox’ ) DESC ‘RFC1274: RFC822 Mailbox’ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26(256} )
attributetype ( 0.9.2342.19200300.100.1.25 NAME ( ‘dc’ ‘domainComponent’ ) DESC ‘RFC1274/2247: domain component’ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)
attributetype ( 2.16.840.1.113730.3.1.1 NAME ‘carLicense’ DESC ‘RFC2798: vehicle license or registration plate’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 2.16.840.1.113730.3.1.2 NAME ‘departmentNumber’ DESC ‘RFC2798: identifies a department within an organization’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 2.16.840.1.113730.3.1.241 NAME ‘displayName’ DESC ‘RFC2798: preferred name to be used when displaying entries’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributetype ( 2.16.840.1.113730.3.1.3 NAME ‘employeeNumber’ DESC ‘RFC2798: numerically identifies an employee within an organization’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributetype ( 2.16.840.1.113730.3.1.4 NAME ‘employeeType’ DESC ‘RFC2798: type of employment for a person’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributetype ( 0.9.2342.19200300.100.1.60 NAME ‘jpegPhoto’ DESC ‘RFC2798: a JPEG image’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.28)
attributetype ( 2.16.840.1.113730.3.1.39 NAME ‘preferredLanguage’ DESC ‘RFC2798: preferred written or spoken language for a person1 EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributetype ( 2.16.840.1.113730.3.1.40 NAME ‘userSMIMECertificate’ DESC ‘RFC2798: PKCS#7 SignedData used to support S/MIME’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
attributetype ( 2.16.840.1.113730.3.1.216 NAME ‘userPKCS12’ DESC ‘RFC2798: personal identity information, a PKCS #12 PFX’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
attributetype ( 0.9.2342.19200300.100.1.55 NAME ‘audio’ DESC ‘RFC1274: audio (u-law)’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.4125000) )
attributetype ( 0.9.2342.19200300.100.1.20 DESC ‘RFC1274: home telephone number’ NAME ( ‘homePhone’ ‘homeTelephoneNumber’ ) EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributetype ( 0.9.2342.19200300.100.1.39 NAME ‘homePostal-Address’ DESC ‘RFC1274: home postal address’ EQUALITY caseIgnoreListMatch SUBSTR caselgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributetype ( 0.9.2342.19200300.100.1.10 NAME ‘manager’ DESC ‘RFC1274: DN of manager’ EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributetype ( 0.9.2342.19200300.100.1.41 NAME ( ‘mobile’ ‘mobileTelephoneNumber’ ) DESC ‘RFC1274: mobile telephone number’ EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributetype ( 0.9.2342.19200300.100.1.42 NAME ( ‘pager’ ‘pagerTelephoneNumber’ ) DESC ‘RFC1274: pager telephone number’ EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributetype ( 0.9.2342.19200300.100.1.7 NAME ‘photo’ DESC ‘RFC1274: photo (G3 fax)’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.23125000} )
attributetype ( 0.9.2342.19200300.100.1.21 NAME ‘secretary’ DESC ‘RFC1274: DN of secretary’ EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributetype ( 0.9.2342.19200300.100.1.6 NAME ‘roomNumber’ DESC ‘RFC1274: room number’ EQUALITY caselgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15(256} )