Class Definitions

     

Out of the 100 classes defined for eDirectory 8.7.3, there are 72 effective classes that you can use to create NDS objects; Top is an effective class, but you cannot create any objects by using this class. Table C.1 list all 100 object class definitions shipped with eDirectory 8.7.3. The table shows the following information:

• Class name ” The name of the class.

• Class flags ” In addition to basic information such as mandatory and optional attributes and containment, class flags are used to further define a class object. The following are some examples:

  Flag	Description
  DS_CONTAINER_CLASS	This flag indicates that objects of the class can have subordinates .
  DS_EFFECTIVE_CLASS	This flag indicates an effective class.
  DS_AUXILIARY_CLASS	This flag indicates an auxiliary class (NDS 8 and higher).
  DS_NONREMOVABLE_CLASS	This flag indicates that the class cannot be removed from the schema.
  DS_OPERATIONAL_CLASS	This flag is for internal use by NDS 8 and higher to indicate whether this class must be present for NDS to function correctly; it also provides compatibility with LDAP.
  DS_AMBIGUOUS_NAMING	This flag indicates that the class cannot be used as a base class. It is set by eDirectory.
  DS_AMBIGUOUS_CONTAINMENT	This flag indicates that the class cannot be used as a base class. It is set by eDirectory.

  
  

  REAL WORLD: Ambiguous Class Flags

  The ambiguous containment and ambiguous naming class flags indicate whether the object class has clearly defined containment classes and naming attributes, respectively.

  Ambiguous containment occurs when an object inherits non-identical containment classes from different superclasses. For instance, the Alias class object is one example because it needs to inherit the containment classes of its reference object class. As a general rule, non-effective classes can be created with ambiguous containment, but effective classes must have non-ambiguous containment.

  Similar to ambiguous containment, ambiguous naming occurs when an object inherits non-identical naming attributes from different superclasses. Again, Alias class objects fall into this category because they need to inherit the naming attributes of their reference object class. As a general rule, non-effective classes can be created with ambiguous naming, but effective classes must have non-ambiguous naming.

  For most object classes in the base schema, the ambiguous containment and ambiguous naming flags are Off . The classes Top , Alias , and Partition are some examples of classes for which these two flags are On .

  
  

• Superclass ” The immediate class from which the current object class inherits.

• Containment ” The object classes under which the current object class can be created, as defined for the current class.

• Named by ” The naming attribute(s) for the class.

• Mandatory attributes ” Mandatory attributes defined for the current class.

• Optional attributes ” Optional attributes defined for the current class.

Using Table C.1, you can easily determine all the properties of a given class, such as a list of all its optional attributes. The following uses the Directory Map class as an example:

CLASS	CONTAINMENT	NAMED BY	MANDATORY ATTRIBUTES	OPTIONAL ATTRIBUTES
Directory Map	”	”	Host Server	Path
Resource (superclass to Directory Map )	Organization Organizational Unit Domain	CN	CN	Description Host Resource Name L OU O See Also Uses
Top (superclass to Resource )	”	”	Object Class	CA Public Key CA Private Key Certificate Validity Interval Authority Revocation Last Referenced Time Equivalent To Me ACL Back Link Bindery Property Obituary Reference Revision Cross Certificate Pair Certificate Revocation Used By GUID Other GUID DirXML-Associations creatorsName modifiersName objectVersion auxClassCompatibility Unknown Base Class Unknown Auxiliary Class masvProposedLabel masvDefaultRange masvAuthorizedRange Audit:File Link rbsAssignedRoles rbsOwnedCollections rbsAssignedRoles2 rbsOwnedCollections2

By combining the preceding information, taking into account all the attributes inherited from superclasses, the Directory Map class has the following properties:

• Containment ” Domain , Organization , Organizational Unit

• Class flags ” Effective ( DS_EFFECTIVE_CLASS ), nonremovable ( DS_NONREMOVABLE_CLASS )

• Named by (or naming attribute) ” CN

• Mandatory attributes ” CN , Host Server , Object Class

• Optional Attributes ” ACL , Audit:File Link , Authority Revocation , auxClassCompatibility , Back Link , Bindery Property , CA Public Key , CA Private Key , Certificate Revocation , Certificate Validity Interval , creatorsName , Cross Certificate Pair , DirXML-Associations , Equivalent To Me, GUID , Host Resource Name , L , Last Referenced Time , masvAuthorizedRange , masvDefaultRange , masvProposedLabel , modifiersName , O , Obituary , objectVersion , Other GUID , OU , Path , rbsAssignedRoles , rbsAssignedRoles2 , rbsOwnedCollections , rbsOwnedCollections2 , Reference , Revision , See Also , Unknown Auxiliary Class , Unknown Base Class , Used By , Uses

NOTE

Because every object class inherits from Top (directly or indirectly), the mandatory attribute Object Class (which indicates that the current definition is for an object class) exists for all class definitions within an NDS tree. In many cases, its presence is implied , and it is not explicitly mentioned in documentation or displayed by utilities.

Table C.1. eDirectory 8.7.3 Object Class Definitions

CLASS NAME	CLASS FLAGS	SUPERCLASS	CONTAINMENT	NAMED BY	MANDATORY ATTRIBUTES	OPTIONAL ATTRIBUTES
[Anything]	DS_CONTAINER_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT	Top	”	”	”	”
[Nothing]	DS_CONTAINER_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT	Top	”	”	”	”
AFP Server	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Server	”	”	”	Serial Number Supported Connections
Alias	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT	Top	”	”	Aliased Object Name	”
applicationEntity	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain	CN	presentation Address CN	supported ApplicationContext See Also OU O L Description
applicationProcess	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain	CN	CN	See Also OU L Description
Audit:File Object	DS_EFFECTIVE_CLASS	Top	Top Country Locality Organization domain Organizational Unit Tree Root	CN	CN Audit:Policy Audit: Contents	Description Audit:Path Audit:Link List Audit:Type Audit:Current Encryption Key Audit:A Encryption Key Audit:B Encryption Key
Bindery Object	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN Bindery Type	Bindery Object Restriction Bindery Type CN	”
Bindery Queue	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Queue	”	CN Bindery Type	Bindery Type	”
certification uthority	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	authority RevocationList certificate RevocationList cACertificate	crossCertificatePair Auxiliary Class Flag
certification uthorityVer2	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	authority RevocationList certificate RevocationList cACertificate	crossCertificatePair deltaRevocationList Auxiliary Class Flag
CommExec	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Server	”	”	”	Network Address Restriction
Computer	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Device	”	”	”	Operator Server Status
ContingentWorker	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	vendorName vendorAddress vendorPhoneNumber Auxiliary Class Flag
Country	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Top Tree Root [Nothing] domain	C	C	Description searchGuide
cRLDistribution Point	DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain SAS:Security	CN	CN	authorityRevocationList cACertificate certificateRevocation List crossCertificatePair deltaRevocationList
dcObject	DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	dc	dc	Auxiliary Class Flag
Device	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN	CN	Description L Network Address OU O Owner See Also Serial Number
Directory Map	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Resource	”	”	Host Server	Path
dmd	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	ndsLogin Properties Top	Top	”	dmdName	searchGuide See Also businessCategory x121Address registeredAddress destinationIndicator preferredDeliveryMethod telexNumber teletexTerminal Identifier Telephone Number internationaliSDNNumber Facsimile Telephone Number SA Postal Office Box Postal Code Postal Address Physical Delivery Office Name L Description Auxiliary Class Flag
domain	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top ndsLogin Properties ndsContainer LoginProperties	Top Tree Root Country Locality Organization domain Organizational Unit [Nothing]	dc	dc	searchGuide O See Also businessCategory x121Address registeredAddress destinationIndicator preferredDeliveryMethod telexNumber teletexTerminal Identifier Telephone Number internationaliSDNNumber Facsimile Telephone Number SA Postal Office Box Postal Code Postal Address Physical Delivery Office Name L associatedName Description
dSA	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	applicationEntity	Country Locality Organizational Unit Organization domain	”	”	knowledgeInformation
dynamicGroup	DS_EFFECTIVE_CLASS	Group ndsLoginProperties	”	”	”	memberQuery excludedMember dgIdentity dgAllowUnknown dgTimeOut dgAllowDuplicates
dynamicGroupAux	DS_AUXILIARY_CLASS	Group ndsLoginProperties Top	Top	”	”	memberQuery excludedMember dgIdentity dgAllowUnknown dgTimeOut dgAllowDuplicates Auxiliary Class Flag
edirSchemaVersion	DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT	Top	”	”	”	edirSchemaFlagVersion
External Entity	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN OU	CN	Description See Also Facsimile Telephone Number L EMail Address OU Physical Delivery Office Name Postal Address Postal Code Postal Office Box S SA Title External Name Mailbox Location Mailbox ID
federationBoundary	DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	federation BoundaryType	federationControl federationDNSName federationSearchPath Auxiliary Class Flag
Group	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN	CN	Description L Member OU O Owner See Also GID Full Name EMail Address Mailbox Location Mailbox ID Profile Profile Membership Login Script businessCategory nspmPasswordPolicyDN
homeInfo	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	homeCity homeEmailAddress homeFax homePhone homeState homePostalAddress homeZipCode personalMobile spouse children Auxiliary Class Flag
httpServer	DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain	CN	CN	httpHostServerDN httpThreadsPerCPU httpIOBufferSize httpRequestTimeout httpKeepAliveRequest Timeout httpSessionTimeout httpKeyMaterialObject httpTraceLevel httpAuthRequiresTLS httpDefaultClearPort httpDefaultTLSPort
immediateSuperior eference	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	ref Auxiliary Class Flag
LDAP Group	DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain	CN	CN	LDAP Referral LDAP Server List LDAP Allow Clear Text Password LDAP Anonymous Identity LDAP Suffix LDAP Attribute Map v11 LDAP Class Map v11 LDAP:searchReferralUsage LDAP:otherReferralUsage transitionGroupDN ldapAttributeList ldapClassList ldapConfigVersion version ldapDefaultReferral Behavior ldapTransitionBackLink referralIncludeFilter referralExcludeFilter
LDAP Server	DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain	CN	CN	LDAP Host Server LDAP Group LDAP Screen Level LDAP Server Bind Limit LDAP Server Idle Timeout LDAP UDP Port LDAP Search Size Limit LDAP Search Time Limit LDAP Log Level LDAP Log Filename LDAP Backup Log Filename LDAP Log Size Limit version searchSizeLimit searchTimeLimit LDAP Enable TCP LDAP TCP Port LDAP Enable SSL LDAP SSL Port LDAP:keyMaterialName filteredReplicaUsage extensionInfo nonStdClientSchema CompatMode sslEnableMutual Authentication ldapEnablePSearch ldapMaximumPSearch Operations ldapIgnorePSearchLimits ForEvents ldapTLSTrustedRoot Container ldapEnableMonitorEvents ldapMaximumMonitor EventsLoad ldapTLSRequired ldapTLSVerifyClient Certificate ldapConfigVersion ldapDerefAlias ldapNonStdAllUserAttrs Mode ldapBindRestrictions ldapDefaultReferral Behavior LDAP Referral LDAP:searchReferralUsage LDAP:otherReferralUsage
List	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN	CN	Description L Member OU O EMail Address Mailbox Location Mailbox ID Owner See Also Full Name
Locality	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Country Organizational Unit Locality Organization domain	L S	”	Description L See Also S SA searchGuide
MASV:Security Policy	DS_EFFECTIVE_CLASS	Top	SAS:Security	CN	CN	Description masvDomainPolicy masvPolicyUpdate masvClearanceNames masvLabelNames masvLabelSecrecyLevel Names masvLabelSecrecyCategoryNames masvLabelIntegrityLevel Names masvLabelIntegrity CategoryNames MasvNDSAttributeLabels
Message Routing Group	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Group	”	”	”	”
Messaging Server	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Server	”	”	”	Messaging Database Location Message Routing Group Postmaster Supported Services Messaging Server Type Supported Gateway
NCP Server	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Server	”	”	”	Operator Supported Services Messaging Server DS Revision Permanent Config Parms ndsPredicateStatsDN languageId indexDefinition LDAP Server httpServerDN emboxConfig SAS:Service DN cACertificate NDSPKI:Public Key NDSPKI:Private Key NDSPKI:Certificate Chain NDSPKI:Parent CA DN NDSPKI:SD Key ID NDSPKI:SD Key Struct snmpGroupDN slConfigObject WANMAN:WAN Policy WANMAN:LAN Area Membership WANMAN:Cost WANMAN:Default Cost
ndsContainer LoginProperties	DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT	Top	”	”	”	Login Intruder Limit Intruder Attempt Reset Interval Detect Intruder Lockout After Detection Intruder Lockout Reset Interval ndapPasswordMgmt nspmPasswordPolicyDN
ndsLoginProperties	DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT	Top	”	”	”	Group Membership Login Allowed Time Map Login Disabled Login Expiration Time Login Grace Limit Login Grace Remaining Login Intruder Address Login Intruder Attempts Login Intruder Reset Time Login Maximum Simultaneous Login Script Login Time Network Address Restriction Network Address Passwords Used Password Allow Change Password Expiration Interval Password Expiration Time Password Minimum Length Password Required Password Unique Required Private Key Profile Public Key Security Equals Account Balance Allow Unlimited Credit Minimum Account Balance Language Locked By Intruder Server Holds Last Login Time Higher Privileges Security Flags Profile Membership Timezone loginActivationTime SAS:NDS Password Window SAS:Login Secret SAS:Login Secret Key SAS:Encryption Type SAS:Login Configuration SAS:Login Configuration Key sasDefaultLoginSequence sasAuthorizedLogin Sequences sasAllowableSubjectNames ndapPasswordMgmt nspmPasswordKey nspmPassword nspmDistributionPassword nspmPasswordHistory nspmAdministratorChange Count NspmPasswordPolicyDN
NDSPKI:Certificate Authority	DS_EFFECTIVE_CLASS	Top	SAS:Security	CN	CN	Host Server NDSPKI:Public Key NDSPKI:Private Key NDSPKI:Public Key Certificate NDSPKI:Certificate Chain NDSPKI:Parent CA NDSPKI:Parent CA DN NDSPKI:Subject Name cACertificate
NDSPKI:Key Material	DS_EFFECTIVE_CLASS	Top	SAS:Security Organization domain Organizational Unit	CN	CN	Host Server NDSPKI:Key File NDSPKI:Private Key NDSPKI:Public Key NDSPKI:Public Key Certificate NDSPKI:CertificateChain NDSPKI:Subject Name NDSPKI:Given Name ndspkiAdditionalRoots
NDSPKI:SD Key Access Partition	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	SAS:Security	CN	CN	”
NDSPKI:SD Key List	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	NDSPKI:SD Key Access Partition	CN	CN	NDSPKI:SD Key Server DN NDSPKI:SD Key Struct NDSPKI:SD Key Cert
NDSPKI:Trusted Root	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	SAS:Security Organization domain Organizational Unit Country Locality	CN	CN	”
NDSPKI:Trusted Root Object	DS_EFFECTIVE_CLASS	Top	NDSPKI:Trusted Root	CN	CN NDSPKI: Trusted Root Certificate	NDSPKI:Subject Name NDSPKI:Not Before NDSPKI:Not After External Name Given Name Surname
ndsPredicateStats	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Country Locality Organization domain Organizational Unit	CN	CN ndsPredicate State ndsPredicate	ndsPredicate ndsPredicateTimeout ndsPredicateUseValues
				Flush
nspmPasswordPolicy	DS_EFFECTIVE_CLASS	Top	nspmPassword PolicyContainer Locality Organization domain Organizational Unit	CN	CN	Description nspmPolicyPrecedence nspmConfigurationOptions nspmChangePassword Message Password Expiration Interval Login Grace Limit nspmMinPasswordLifetime Password Unique Required nspmPasswordHistoryLimit nspmPasswordHistory Expiration Password Allow Change Password Required Password Minimum Length nspmMaximumLength nspmCaseSensitive nspmMinUpperCase Characters nspmMaxUpperCase Characters nspmMinLowerCase Characters nspmMaxLowerCase Characters nspmNumericCharacters Allowed nspmNumericAsFirst Character nspmNumericAsLast Character nspmMinNumericCharacters nspmMaxNumericCharacters nspmSpecialCharacters Allowed nspmSpecialAsFirst Character nspmSpecialAsLast Character nspmMinSpecialCharacters nspmMaxSpecialCharacters nspmMaxRepeated Characters nspmMaxConsecutive Characters nspmMinUniqueCharacters nspmDisallowedAttribute Values nspmExcludeList nspmExtendedCharacters Allowed
nspmPassword PolicyContainer	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	SAS:Security	CN	CN	Description
nspmPolicyAgent	DS_EFFECTIVE_CLASS	Top	nspmPassword PolicyContainer	CN	CN	Description nspmPolicyAgentNetWare nspmPolicyAgentWINNT nspmPolicyAgentSolaris nspmPolicyAgentLinux nspmPolicyAgentAIX nspmPolicyAgentHPUX
Organization	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	ndsLogin Properties ndsContainer LoginProperties	Top Tree Root Country Locality [Nothing] domain	O	O	Description Facsimile Telephone Number L Login Script EMail Address Physical Delivery Office Name Postal Address Postal Code Postal Office Box Print Job Configuration Printer Control See Also S SA Telephone Number Login Intruder Limit Intruder Attempt Reset Interval Detect Intruder Lockout After Detection Intruder Lockout Reset Interval NNS Domain Mailbox Location Mailbox ID x121Address registeredAddress destinationIndicator preferredDeliveryMethod telexNumber teletexTerminal Identifier internationaliSDNNumber businessCategory searchGuide RADIUS:Attribute Lists RADIUS:Default Profile RADIUS:Dial Access Group RADIUS:Enable Dial Access RADIUS:Service List
Organizational Person	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Person	Organization domain Organizational Unit	CN OU UniqueID	”	Facsimile Telephone Number L EMail Address OU Physical Delivery Office Name Postal Address Postal Code Postal Office Box S SA Title Mailbox Location Mailbox ID uniqueID Internet EMail Address NSCP:employeeNumber destinationIndicator internationaliSDNNumber preferredDeliveryMethod registeredAddress teletexTerminal Identifier telexNumber x121Address businessCategory roomNumber x500UniqueIdentifier
Organizational Role	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN	CN	Description Facsimile Telephone Number L EMail Address OU Physical Delivery Office Name Postal Address Postal Code Postal Office Box Role Occupant See Also S SA Telephone Number Mailbox Location Mailbox ID x121Address registeredAddress destinationIndicator preferredDeliveryMethod telexNumber teletexTerminal Identifier InternationaliSDNNumber
Organizational Unit	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	ndsLogin Properties ndsContainer LoginProperties	Locality Organization domain Organizational Unit	OU	OU	Description Facsimile Telephone Number L Login Script EMail Address Physical Delivery Office Name Postal Address Postal Code Postal Office Box Print Job Configuration Printer Control See Also S SA Telephone Number Login Intruder Limit Intruder Attempt Reset Interval Detect Intruder Lockout After Detection Intruder Lockout Reset Interval NNS Domain Mailbox Location Mailbox ID x121Address registeredAddress destinationIndicator preferredDeliveryMethod telexNumber teletexTerminal Identifier internationaliSDNNumber businessCategory searchGuide RADIUS:Attribute Lists RADIUS:Default Profile RADIUS:Dial Access Group RADIUS:Enable Dial Access RADIUS:Service List
Partition	DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	”	”	”	”	Convergence Partition Creation Time Replica Inherited ACL Low Convergence Sync Interval Received Up To Synchronized Up To Authority Revocation Certificate Revocation CA Private Key CA Public Key Cross Certificate Pair Low Convergence Reset Time High Convergence Sync Interval Partition Control Replica Up To Partition Status Transitive Vector Purge Vector Synchronization Tolerance Obituary Notify Local Received Up To federationControl syncPanePoint syncWindowVector authoritative SAS:Security DN masvLabel ndapPartitionPasswordMgmt
Person	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	ndsLogin Properties	Organization domain Organizational Unit	CN	CN UniqueID	Description Surname Telephone Number Full Name Given Name Initials Generational Qualifier uniqueID assistant assistantPhone city S company co directReports manager mailstop mobile personalTitle pager workforceID instantMessagingID preferredName photo jobCode siteLocation employeeStatus employeeType costCenter costCenterDescription tollFreePhoneNumber otherPhoneNumber managerWorkforceID roomNumber jackNumber departmentNumber vehicleInformation accessCardNumber isManager
pkiCA	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	cACertificate certificateRevocation List authorityRevocationList crossCertificatePair attributeCertificate Public Key Private Key Network Address Login Time Last Login Time Auxiliary Class Flag
pkiUser	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	userCertificate Auxiliary Class Flag
Print Server	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Server	”	”	”	Operator Printer SAP Name
Printer	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Device	”	”	”	Cartridge Printer Configuration Default Queue Host Device Print Server Memory Network Address Restriction Notify Operator Page Description Language Queue Status Supported Typefaces
Profile	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN	CN Login Script	Description L OU O See Also Full Name
Queue	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Resource	”	”	Queue Directory	Device Operator Server User Network Address Volume Host Server
RADIUS:Dial Access System	DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization	CN	CN	Public Key Private Key RADIUS:Aged Interval RADIUS:Client RADIUS:Common Name Resolution RADIUS:Concurrent Limit RADIUS:DAS Version RADIUS:Enable Common Name Login RADIUS:Enable Dial Access RADIUS:Interim Accting Timeout RADIUS:Lookup Contexts RADIUS:Max DAS History Record RADIUS:Maximum History Record RADIUS:Password Policy RADIUS:Private Key RADIUS:Proxy Context RADIUS:Proxy Domain RADIUS:Proxy Target RADIUS:Public Key SAS:Login Configuration SAS:Login Configuration Key
RADIUS:Profile	DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization	CN	CN	RADIUS:Attribute List
rbsBook rbsPageMembership	DS_EFFECTIVE_CLASS	rbsTask	”	”	”	rbsTargetObjectType
rbsBook2	DS_EFFECTIVE_CLASS	rbsTask2	”	”	”	RbsTargetObjectType rbsPageMembership
rbsCollection	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain	CN	CN	Owner Description rbsXMLInfo
rbsCollection2	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	Country Locality Organizational Unit Organization domain	CN	CN	rbsPortalObject rbsXMLInfo RbsParameters Owner Description
rbsExternalScope	”	Top	RbsCollection	CN	CN	RbsURL Description rbsXMLInfo
rbsExternalScope2	”	Top	rbsCollection2	CN	CN	rbsXMLInfo Description
rbsModule	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	rbsCollection	CN	CN	rbsURL rbsPath rbsType Description rbsXMLInfo
rbsModule2	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	rbsCollection2	CN	CN	rbsXMLInfo rbsPath rbsType Description
RbsRole	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	rbsCollection	CN	CN	rbsContent rbsMember rbsTrusteeOf rbsGALabel rbsParameters Description rbsXMLInfo
rbsRole2	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	rbsCollection2	CN	CN	rbsXMLInfo rbsContent rbsMember rbsTrusteeOf rbsParameters Description
rbsScope	DS_EFFECTIVE_CLASS	Group	rbsRole	”	”	rbsContext rbsXMLInfo
rbsScope2	DS_EFFECTIVE_CLASS	Group	rbsRole2	”	”	rbsContext rbsXMLInfo
rbsTask	DS_EFFECTIVE_CLASS	Top	rbsModule	CN	CN	rbsContentMembership rbsType rbsTaskRights rbsEntryPoint rbsParameters rbsTaskTemplates rbsTaskTemplatesURL Description rbsXMLInfo
rbsTask2	DS_EFFECTIVE_CLASS	Top	rbsModule2	CN	CN	rbsGadget rbsXMLInfo rbsContentMembership rbsType rbsTaskRights rbsEntryPoint rbsParameters Description
Resource	DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN	CN L OU O See Also Uses	Description Host Resource Name
SAS:Login Method Container	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	SAS:Security Country Locality Organizational Unit Organization	CN	CN	Description
SAS:Login Policy	DS_EFFECTIVE_CLASS	Top	SAS:Security	CN	CN	Description Private Key Public Key SAS:Allow NDS Password Window SAS:Policy Credentials SAS:Policy Methods SAS:Policy Object Version SAS:Policy Service Subtypes SAS:Policy Services SAS:Policy Users SAS:Login Sequence SAS:Login Policy Update sasNMASProductOptions sasPolicyMethods sasPolicyServices sasPolicyUsers sasAllowNDSPassword Window sasLoginFailureDelay nspmPasswordPolicyDN
SAS:NMAS Base Login Method	DS_CONTAINER_CLASS	Top	SAS:Login Method Container	M	CN	Description SAS:Login Secret SAS:Login Secret Key SAS:Encryption Type SAS:Login Configuration SAS:Login Configuration Key SAS:Method Identifier SAS:Method Vendor SAS:Vendor Support SAS:Advisory Method Grade SAS:Login Client Method NetWare SAS:Login Server Method NetWare SAS:Login Client Method WINNT SAS:Login Server Method WINNT sasCertificateSearch Containers sasNMASMethodConfigData sasMethodVersion SAS:Login Policy Update sasLoginClientMethod Solaris sasLoginServerMethod Solaris sasLoginClientMethod Linux sasLoginServerMethod Linux sasLoginClientMethod Tru64 sasLoginServerMethod Tru64 sasLoginClientMethodAIX sasLoginServerMethodAIX sasLoginClientMethodHPUX sasLoginServerMethodHPUX sasLoginClientMethods390 sasLoginServerMethods390
SAS:NMAS Login Method	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	SAS:NMAS Base Login Method	”	”	”	”
SAS:Security	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	Top Tree Root Country Organization domain	CN	CN	NDSPKI:Tree CA DN masvPolicyDN SAS:Login Policy DN SAS:Login Method Container DN sasPostLoginMethod ContainerDN NspmPolicyAgentContainer DN
SAS:Service	DS_EFFECTIVE_CLASS	Resource	”	CN	”	Host Server Private Key Public Key Allow Unlimited Credit Full Name Last Login Time Locked By Intruder Login Allowed Time Map Login Disabled Login Expiration Time Login Intruder Address Login Intruder Attempts Login Intruder Reset Time Login Maximum Simultaneous Login Time Network Address Network Address Restriction Notify Operator Owner Path Security Equals Security Flags Status version NDSPKI:Key Material DN
sasPostLoginMethod	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	sasPostLogin Method container	CN	CN	Description SAS:Login Secret SAS:Login Secret Key SAS:Encryption Type SAS:Login Configuration SAS:Login Configuration Key SAS:Method Identifier SAS:Method Vendor SAS:Vendor Support SAS:Advisory Method Grade SAS:Login Client Method NetWare SAS:Login Server Method NetWare SAS:Login Client Method WINNT SAS:Login Server Method WINNT sasMethodVersion SAS:Login Policy Update sasLoginClientMethod Solaris sasLoginServerMethod Solaris sasLoginClientMethod Linux sasLoginServerMethod Linux sasLoginClientMethod Tru64 sasLoginServerMethod Tru64 sasLoginClientMethodAIX sasLoginServerMethodAIX sasLoginClientMethodHPUX sasLoginServerMethodHPUX sasLoginClientMethods390 sasLoginServerMethods390
sasPostLogin MethodContainer	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS	Top	SAS:Security	CN	CN	Description
Server	DS_NONREMOVABLE_CLASS	Top	Organization domain Organizational Unit	CN	CN	Description Host Device L OU O Private Key Public Key Resource See Also Status User Version Network Address Account Balance Allow Unlimited Credit Minimum Account Balance Full Name Security Equals Security Flags Timezone ndapClassPasswordMgmt
slServerConfig	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	slConfigData slConfigList Auxiliary Class Flag
snmpGroup	DS_EFFECTIVE_CLASS	Top	Country Locality Organization domain Organizational Unit	CN	CN	version snmpServerList snmpTrapDisable snmpTrapInterval snmpTrapDescription snmpTrapConfig
strong AuthenticationUser	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	userCertificate Auxiliary Class Flag
Template	DS_EFFECTIVE_CLASS	Top	Organizational Unit Organization	CN	CN	Trustees Of New Object New Object's DS Rights New Object's FS Rights Setup Script Run Setup Script Members Of Template Volume Space Restrictions Set Password After Create Home Directory Rights Account Balance Allow Unlimited Credit Description EMail Address Facsimile Telephone Number Group Membership Higher Privileges Home Directory L Language Login Allowed Time Map Login Disabled Login Expiration Time Login Grace Limit Login Maximum Simultaneous Login Script Mailbox ID Mailbox Location Member Message Server Minimum Account Balance Network Address Restriction New Object's Self Rights OU Password Allow Change Password Expiration Interval Password Expiration Time Password Minimum Length Password Required Password Unique Required Physical Delivery Office Name Postal Address Postal Code Postal Office Box Profile S SA Security Equals Security Flags See Also Telephone Number Title assistant assistantPhone city company co manager managerWorkforceID mailstop siteLocation employeeType costCenter costCenterDescription tollFreePhoneNumber departmentNumber
Top	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT	”	”	”	Object Class	CA Public Key CA Private Key Certificate Validity Interval Authority Revocation Last Referenced Time Equivalent To Me ACL Back Link Bindery Property Obituary Reference Revision Cross Certificate Pair Certificate Revocation Used By GUID Other GUID DirXML-Associations creatorsName modifiersName objectVersion auxClassCompatibility Unknown Base Class Unknown Auxiliary Class masvProposedLabel masvDefaultRange masvAuthorizedRange Audit:File Link rbsAssignedRoles rbsOwnedCollections rbsAssignedRoles2 rbsOwnedCollections2
Tree Root	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	[Nothing]	T	T	”
Unknown	DS_CONTAINER_CLASS DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Top	”	”	”	”
User	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Organizational Person	”	”	”	Group Membership Home Directory Login Allowed Time Map Login Disabled Login Expiration Time Login Grace Limit Login Grace Remaining Login Intruder Address Login Intruder Attempts Login Intruder Reset Time Login Maximum Simultaneous Login Script Login Time Network Address Restriction Network Address Passwords Used Password Allow Change Password Expiration Interval Password Expiration Time Password Minimum Length Password Required Password Unique Required Print Job Configuration Private Key Profile Public Key Security Equals Account Balance Allow Unlimited Credit Minimum Account Balance Message Server Language UID Locked By Intruder Server Holds Last Login Time Type Creator Map Higher Privileges Printer Control Security Flags Profile Membership Timezone SAS:Service DN SAS:SecretStore SAS:SecretStore:Key SAS:SecretStore:Data SAS:PKIStore:Keys userCertificate NDSPKI:userCertificate Info NDSPKI:Keystore RADIUS:Active Connections RADIUS:Attribute Lists RADIUS:Concurrent Limit RADIUS:Connection History RADIUS:Default Profile RADIUS:Dial Access Group RADIUS:Enable Dial Access RADIUS:Password RADIUS:Service List audio businessCategory carLicense departmentNumber NSCP:employeeNumber employeeType displayName Given Name homePhone homePostalAddress Initials jpegPhoto labeledUri Internet EMail Address manager mobile O pager ldapPhoto preferredLanguage roomNumber secretary uniqueID userSMIMECertificate x500UniqueIdentifier userPKCS12
userSecurity Information	DS_AMBIGUOUS_NAMING DS_AMBIGUOUS_CONTAINMENT DS_AUXILIARY_CLASS	Top	Top	”	”	supportedAlgorithms Auxiliary Class Flag
Volume	DS_EFFECTIVE_CLASS DS_NONREMOVABLE_CLASS	Resource	”	”	Host Server	Status
WANMAN:LAN Area	DS_EFFECTIVE_CLASS	Top	Country Locality Organization Organizational Unit	CN	CN	Description L Member O OU Owner See Also WANMAN:WAN Policy WANMAN:Cost WANMAN:Default Cost