This appendix includes information on object class definitions. Most of
the schema elements used in the Directory Server are part of the
standard LDAP protocol, which is in turn based on the X.500 standard.
However, some of the Directory Server's object classes are extensions
for use with its implementation of LDAP. If an
object class is an extension and is not part of the standard
LDAP schema, a note is made in the description of that object class.
For information on what the Directory Server
schema is and what it is
used for, refer to the Directory Server Deployment Guide.
For information on the attributes in the schema, see Appendix
B, "Attributes."
The following types of object classes are described here:
The base OID for the schema extensions is:
2.16.840.1.113730.3
All object classes schema extensions have the base OID:
2.16.840.1.113730.3.2
Groups
The following object classes describe entries
representing an unordered set of names that represent individual
objects or other groups of objects. Membership of a group is static:
only administrative action can modify a group (such as adding a
member), the membership is not determined dynamically each time a
reference is made to the group. Each object class contains attributes
that describe the group and its members. The object classes described
here are groupOfNames,
groupOfUniqueNames,
and NTGroup.
groupOfNames
Defines entries for a group of names. This object
class was inherited from X.500 Directory Services.
OID: 2.5.6.9
groupOfUniqueNames
Defines entries for a group of unique names. This
object class was inherited from X.500 Directory Services.
OID: 2.5.6.17
NTGroup
Object class used by the NT synchronization service
to map the attributes of an NT group to an entry in the directory. This
object class is an extension to the standard LDAP
schema.
OID: 2.16.840.1.113730.3.2.9
NOTE: ntGroupDomainId is deprecated.
ntUserDomainId is used for both NT users and groups.
The following object classes define Directory Servers. The first object
class identifies the master or supplier server. The second object class
identifies consumer servers and the entries to be supplied to those
consumers. The object classes are cirReplicaSource,
LDAPServer,
and LDAPReplica.
Object class used by the Directory Server for consumer initiated
replication that contains all the replication information for a
particular subtree of the directory. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.11
Extensible object class used by the Directory Server to facilitate
replication. For more information about extensible object classes, see
"Types of Object Classes" in the Directory Server Deployment
Guide. Reserved. This object class is an extension to
the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.30
Identifies the local server. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.35
Identifies entries in the local server that are replicated to a remote
server, and identifies the remote server to which the entries are
replicated. This object class is an extension to the
standard LDAP schema.
OID: 2.16.840.1.113730.3.2.36
The following object classes describe locations in the directory tree.
Each object class contains attributes that describe a location, such as
the country name and description. The object classes described here are
country
and locality.
Defines entries that represent countries. This object class was
inherited from X.500 Directory Services.
OID: 2.5.6.2
Defines entries that represent localities or geographic areas. This
object class was inherited from X.500 Directory Services.
OID: 2.5.6.3
The following object classes describe entries representing
organizations in the directory tree. Each object class contains
attributes that describe an organization, such as its name and
description. The object classes described here are organization
and organizationalUnit.
Defines entries that represent organizations. An organization is
generally assumed to be a large, relatively static grouping within a
larger corporation or enterprise. This object class was inherited from
X.500 Directory Services.
OID: 2.5.6.4
Defines entries that represent organizational units. An organizational
unit is generally assumed to be a relatively static grouping within a
larger organization. This object class was inherited from X.500
Directory Services.
OID: 2.5.6.5
.
The following object classes describe entries representing people in
the directory. Each object class contains attributes that describe a
person, such as name, telephone number, and address. The object classes
described here are inetOrgPerson,
newPilotPerson,
nsLicenseUser,
ntUser,
organizationalPerson,
organizationalRole,
person,
and residentialPerson.
Defines entries representing people in an organization's intranet. This
object class is an extension to the standard LDAP
schema.
OID: 2.16.840.1.113730.3.2.2
Used as a subclass of person, to allow the use of a number of
additional attributes to be assigned to entries of the person object
class. Reserved.
OID: 0.9.2342.19200300.100.4.4
Object class used to track licenses for servers that are licensed on a
per-client basis. nsLicenseUser is intended to be used with the
inetOrgPerson object class. You can manage the contents of this object
class through the Users and Groups area of the Administration Server.
This object class is an extension to the standard LDAP
schema.
OID: 2.16.840.1.113730.3.2.7
Defines entries that are to be synchronized between the Directory
Server and a Windows NT network. The attributes defined by ntUser
assist in NT Synchronization. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.8
All ntUser attributes are read-only, except for ntUserCreateNewAccount,
ntUserDomainId, and ntUserDeleteAccount. Any modifications you make to
read-only ntUser attributes will be deleted and the original values
will be replaced when the next NT Synchronization occurs.
Several Directory Server attributes correspond
directly to NT user
account fields. When you create a new person entry in the Directory
Server that is to be synchronized with NT, Directory Server attributes
will be assigned to NT user account fields as follows:
Defines entries for people employed by or associated with an
organization. The organizationalPerson object class is an extension of
the person object class. This object class was inherited from X.500
Directory Services.
OID: 2.5.6.7
organizationalRole
Defines entries that represent roles held by people
within an organization. This object class was inherited from X.500
Directory Services.
OID: 2.5.6.8
person
Defines entries that generically represent people.
This object class is the base class for the organizationalPerson object
class. This object class was inherited from X.500 Directory Services.
OID: 2.5.6.6
residentialPerson
Object class used by the Directory Server to contain
a person's residential information. This object class was inherited
from X.500 Directory Services.
OID: 2.5.6.10
The following object classes are used by the Calendar Server. The
object classes described here include netscapeCalendarServer,
nsCalAdmin,
nsCalResource,
and nsCalUser.
Object class used to store information about the Calendar Server in the
directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.17
Object class used by the Calendar Server to store information about the
calendar server administrator in the directory. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.15
Object class used by the Calendar Server to store information about
calendar resources, such as conference rooms, in the directory. This
object class is an extension to the standard LDAP
schema.
OID: 2.16.840.1.113730.3.2.16
Object class used by the Calendar Server to store information about
calendar users in the directory. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.14
This section describes the netscapeCertificateServer
object class used by the Certificate Server.
Object class used to store information about the Certificate Server in
the directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.18
The object classes in this section are used by the News Server. The
object classes described here include netscapeNewsServer
and nginfo.
Object class used to store information about the News Server in the
directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.27
Object class used by the News Server to store discussion (news) group
information. This object class is an extension to the
standard LDAP schema.
OID: 2.16.840.1.113730.3.2.26
Object classes of this type are stored in a separate subtree under ou=Netscape
Servers. The branch point is represented by the ngcomponent=.
entry. Thus, if your directory's suffix is o=Example.com, then
all discussion group information is stored in the subtree:
ngcomponent=., o=Example.com
This subtree and it's contents are written to the directory by the
Collabra server. The structure of this tree, the format and usage of
the nginfo
object class, and the format and usage of the nginfo
attributes are subject to change without notice.
The object classes in this section are used by the Compass Server. The
object classes described here include netscapeCompassServer,
personalInterestProfile,
PIPUser,
and PIPUserInfo.
Object class used to store information about the Compass Server in the
directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.19
Object class used by the Compass Server to store personal interest
profile information for Compass server users. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.20
Object class used by the Compass Server to contain information about
Personal Interest Profile (PIP) users. This object class is an extension to the standard LDAP schema. Reserved for
future use.
OID: 2.16.840.1.113730.3.2.22
Object class used by the Compass Server to contain information about
Personal Interest Profile (PIP) users that do not have a user ID. This
object class is an extension to the standard LDAP
schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.21
The following object classes are used by the Directory Server. The
object classes described here include changeLogEntry,
cirReplicaSource,
groupOfCertificates,
residentialPerson,
netscapeMachineData,
netscapeServer,
nsLicenseUser,
NTGroup,
passwordObject,
passwordPolicy,
referral,
and subschema.
Object class used by the Directory Server to represent a
change made to its directory. This object class is an extension
to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.1
Object class used by the Directory Server to contain information about
a group of X.509 certificates. Any certificate that matches the values
in memberCertificateDescription
is considered to be a member of the group. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.31
netscapeDirectoryServer
Object class used to store information about the
Directory Server in the directory. This object class is an extension to the standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.23
netscapeMachineData
Object class used by the Directory Server to
distinguish between machine data and non-machine data. Machine data is
filtered out during replication. This object class is an extension to the standard LDAP schema. Reserved.
OID: 2.16.840.1.113730.3.2.32
netscapeServer
Object class that identifies entries used by servers
when they bind to the directory. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.10
passwordObject
Object class that contains password information for a
user in the directory. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.12
passwordPolicy
Object class that contains the password policy for
all users in the entire directory. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.13
Object class that allows smart referrals to be placed in an entry. This
object class is an extension to the standard LDAP
schema.
OID: 2.16.840.1.113730.3.2.6
Object class that contains all the attributes and object classes for a
given Directory Server. This object class was inherited from X.500
Directory Services. Reserved for use by the Directory Server.
OID: 2.5.20.1
This section describes the netscapeMediaServer
object class used by the Media Server.
Object class used to store information about the Media Server in the
directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.25
The following object classes are used by the Messaging Server. The
object classes described here include groupOfMailEnhancedUniqueNames,
mailRecipient,
mailGroup,and
netscapeMailServer.
This is an extension used by the Messaging Server to store
information about a mail group. This object class is an extension to the standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.5
Object class used as an enhancement to inetOrgPerson to define a
Messaging Server user. That is, mailRecipient represents a mail
account. This object class is an extension to the
standard LDAP schema.
OID: 2.16.840.1.113730.3.2.3
Object class used as an enhancement to groupOfUniqueNames
to define a group of mail recipients. That is, mailGroup is used to
store Messaging Server mailing lists. This object class is an extension to the standard LDAP schema.
OID: 2.16.840.1.113730.3.2.4
Object class used to store information about the Messaging Server in
the directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.24
This section describes the netscapeProxyServer
object class used by the Proxy Server.
Object class used to store information about the Proxy Server in the
directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.28
This section describes the netscapeWebServer
object class used by Web servers.
Object class used to store information about a web server in the
directory. This object class is an extension to the
standard LDAP schema. Reserved for future use.
OID: 2.16.840.1.113730.3.2.29
This section describes object classes that are not defined for this
release or are reserved for future use by the Directory Server.
Reserved.
OID: 0.9.2342.19200300.100.4.5
Object class used to point to other entries in the directory tree. This
object class was inherited from X.500 Directory Services. Reserved.
OID: 2.5.6.1
Object class used to represent application entities in the directory.
This object class was inherited from X.500 Directory Services. Reserved.
OID: 2.5.6.12
Object class used to define entries representing application processes
in the directory. This object class was inherited from X.500 Directory
Services. Reserved.
OID: 2.5.6.11
Object class that allows an entry to contain the timeToLive (ttl)
attribute.
OID: 1.3.6.1.4.1.250.3.18
Object class used to store information about Certificate Authorities
(CAs) in the directory. This object class was inherited from X.500
Directory Services. Reserved.
OID: 2.5.6.16
Object class that allows domain components to be defined for an entry.
This object class is defined as auxiliary because it is commonly used
in combination with another object class, such as organization,
organizationalUnit,
or locality.
For example,
dn: dc=example,dc=com
objectClass: top
objectClass: organization
objectClass: dcObject
dc: example
o: Example Corp.
OID: 1.3.6.1.4.1.1466.344
Object class used to store information about network devices, such as
printers, in the directory. This object class was inherited from X.500
Directory Services. Reserved.
OID: 2.5.6.14
Object class used as a subclass of domain to store DNS resource records
in the directory. Reserved.
OID: 0.9.2342.19200300.100.4.15
Used to define entries which represent documents in the directory.
Reserved.
OID: 0.9.2342.19200300.100.4.6
Used to define an entry that represents a series of documents. Reserved.
OID: 0.9.2342.19200300.100.4.9
Object class used to define entries that represent DNS domains in the
directory. The domainComponent attribute should be used for naming
entries of this object class. Reserved.
OID: 0.9.2342.19200300.100.4.13
Object class used to define entries that represent a DNS domain that is
equivalent to an X.500 domain, usually an organization or
organizational unit. Reserved.
OID: 0.9.2342.19200300.100.4.17
Object class used to define entries representing DSAs in the directory.
This object class was inherited from X.500 Directory Services. Reserved.
OID: 2.5.6.13
Object class used to define country entries in the directory tree. This
object class is used to allow more user-friendly country names than
those allowed by the country object class. Reserved.
OID: 0.9.2342.19200300.100.4.18
This object class can be added to existing directory objects to allow
for inclusion of URI values. This approach does not preclude including
the labeledURI attribute type directly in other object classes as
appropriate. Reserved.
OID: 1.3.6.1.4.1.250.3.15
Object class used as a subclass to allow additional attributes to be
assigned to entries of all other object classes. Reserved.
OID: 0.9.2342.19200300.100.4.3
Object class used as a subclass to allow additional attributes to be
assigned to organization and organizationalUnit object class entries.
Reserved.
OID: 0.9.2342.19200300.100.4.20
RFC822LocalPart
Object class used to define entries that represent
the local part of RFC822 mail addresses. The directory treats this part
of an RFC822 address as a domain. Reserved.
OID: 0.9.2342.19200300.100.4.14
room
Object class used to store information about a room
in the directory. Reserved.
OID: 0.9.2342.19200300.100.4.7
simpleSecurityObject
Object class used to allow an entry to contain the
userPassword attribute when an entry's principal object classes do not
allow userPassword as an attribute type. Reserved.
OID: 0.9.2342.19200300.100.4.19
strongAuthenticationUser
Object class used to store information about clients
and certificates in the directory. This object class was inherited from
X.500 Directory Services. Reserved.
OID: 2.5.6.15
Object class used as a superclass for all other object classes in the
directory. This object class was inherited from X.500 Directory
Services. Reserved.
OID: 2.5.6.0