mail us | mail this page

(追記) (追記ここまで)

Appendix E: LDAP - Object Classes and Attributes

There are bucket loads of off-the-shelf attributes and objectclasses some are standardized, some from the kindness of heart of the author(s). Many are packaged into Schemas distributed with OpenLDAP. Some of the most common are defined below. This list is not exhaustive. Where possible it is always sensible to use a pre-existing attribute and objectclass but you can build your own - if your heart will stand the strain of ASN.1.

Find the attribute you want then check with its objectclass to see what other 'stuff' it picks up. The objectclass hierarchy is shown by the notation [->objectclassname] under Name (and is mostly hyperlinked in the schema definitions). So if you use, say, the objectclass of residentialPerson which has a parent of person then the MUST attributes are the sum of (inherits from in the jargon) both objectclasses which is this case means cn, sn and l are MUST attributes.

Notes: Attribute names are case insensitive but you will see them mostly written in that Camel Case notation which puts capitals in (mostly) inconsistent places!

Contents

1. Commonly used attributes
2. Object Classes
3. config.ldif - used by OpenLDAP OLC (cn=config) feature - browsable
4. corba.schema - OpenLDAP distribution - browsable
5. core.schema - OpenLDAP distribution - browsable
6. cosine.schema - OpenLDAP distribution - browsable
   
7. dyngroup.schema - used by Dynamic Group feature - browsable
8. inetorgperson.schema - OpenLDAP distribution - browsable
9. java.schema - OpenLDAP distribution - not browsable
10. misc.schema - OpenLDAP distribution - not browsable
11. nis.schema - OpenLDAP distribution - browsable
12. openldap.schema - distribution schema - not browsable
13. qmail.schema - Qmail distribution - browsable
14. samba3.schema - (edited) OpenLDAP distribution - browsable
15. authldap.schema (courier-imap) - Courier distribution - browsable
16. ppolicy.schema - used by OpenLDAP ppolicy overlay - not browsable

Commonly Used Attributes

This not an exhaustive list but defines some common attributes and cross links them to some of the objectclasses in which they are used. Clicking the schema link will take you to the attribute definition, clicking the objectClass link will show its usage in that object.

Up Arrow

Object Classes

Not an exhaustive list but shows the mandatory (MUST) and optional (MAY) attributes in some commonly used objectclasses. Clicking the schema link will take you to the objectClass definition. While many objectClasses show no MUST attributes you must (ouch) follow any hierarchy (shown using the [->...] notation) to determine if this is the really case. Thus, if you try to create an entry with inetOrgPerson without at least one cn and sn attribute - it will fail. More information about objectClass and Attribute hierachies.

Up Arrow

Problems, comments, suggestions, corrections (including broken links) or something to add? Please take the time from a busy life to 'mail us' (at top of screen), the webmaster (below) or . You will have a warm inner glow for the rest of the day.

Site