#-----------------------------------------------------------------
# Local fallback subschema for web2ldap
#-----------------------------------------------------------------
version: 1

dn: cn=web2ldap's local subschema
objectClass: top
objectClass: subentry
objectClass: subschema
objectClass: extensibleObject
cn: web2ldap's local subschema
createTimestamp: 20120614091538Z
modifyTimestamp: 20120614091538Z
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.4 DESC 'Audio' X-NOT-HUMAN-READABLE
  'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.5 DESC 'Binary' X-NOT-HUMAN-READABL
 E 'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.6 DESC 'Bit String' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.7 DESC 'Boolean' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.8 DESC 'Certificate' X-BINARY-TRANS
 FER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.9 DESC 'Certificate List' X-BINARY-
 TRANSFER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.10 DESC 'Certificate Pair' X-BINARY
 -TRANSFER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.10.2.1 DESC 'X.509 AttributeCertificat
 e' X-BINARY-TRANSFER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.12 DESC 'Distinguished Name' )
ldapSyntaxes: ( 1.2.36.79672281.1.5.0 DESC 'RDN' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.14 DESC 'Delivery Method' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.15 DESC 'Directory String' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.22 DESC 'Facsimile Telephone Number
 ' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.24 DESC 'Generalized Time' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.26 DESC 'IA5 String' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.27 DESC 'Integer' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.28 DESC 'JPEG' X-NOT-HUMAN-READABLE
  'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.34 DESC 'Name And Optional UID' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.36 DESC 'Numeric String' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.38 DESC 'OID' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.39 DESC 'Other Mailbox' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.40 DESC 'Octet String' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.41 DESC 'Postal Address' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.44 DESC 'Printable String' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.11 DESC 'Country String' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.45 DESC 'SubtreeSpecification' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.49 DESC 'Supported Algorithm' X-BIN
 ARY-TRANSFER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.50 DESC 'Telephone Number' )
ldapSyntaxes: ( 1.3.6.1.4.1.1466.115.121.1.52 DESC 'Telex Number' )
ldapSyntaxes: ( 1.3.6.1.1.1.0.0 DESC 'RFC2307 NIS Netgroup Triple' )
ldapSyntaxes: ( 1.3.6.1.1.1.0.1 DESC 'RFC2307 Boot Parameter' )
ldapSyntaxes: ( 1.3.6.1.1.15.1 DESC 'Certificate Exact Assertion' )
ldapSyntaxes: ( 1.3.6.1.1.15.5 DESC 'Certificate List Exact Assertion' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.10.2.2 DESC 'AttributeCertificate Exac
 t Assertion' )
ldapSyntaxes: ( 1.3.6.1.1.16.1 DESC 'UUID' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.2.1 DESC 'CSN' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.2.4 DESC 'CSN SID' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.1.1.1 DESC 'OpenLDAP void' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.2.7 DESC 'OpenLDAP authz' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.10.2.4 DESC 'X.509 PMI attribute carti
 ficate path: SEQUENCE OF AttributeCertificate' X-SUBST '1.3.6.1.4.1.1466.115.
 121.1.15' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.10.2.5 DESC 'X.509 PMI policy syntax' 
 X-SUBST '1.3.6.1.4.1.1466.115.121.1.15' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.10.2.6 DESC 'X.509 PMI role syntax' X-
 SUBST '1.3.6.1.4.1.1466.115.121.1.15' )
ldapSyntaxes: ( 1.3.6.1.4.1.4203.666.11.5.3.1 DESC 'Control' )
matchingRules: ( 1.3.6.1.4.1.4203.666.4.12 NAME 'authzMatch' SYNTAX 1.3.6.1.4.
 1.4203.666.2.7 )
matchingRules: ( 1.3.6.1.4.1.4203.666.11.2.5 NAME 'CSNSIDMatch' SYNTAX 1.3.6.1
 .4.1.4203.666.11.2.4 )
matchingRules: ( 1.3.6.1.4.1.4203.666.11.2.3 NAME 'CSNOrderingMatch' SYNTAX 1.
 3.6.1.4.1.4203.666.11.2.1 )
matchingRules: ( 1.3.6.1.4.1.4203.666.11.2.2 NAME 'CSNMatch' SYNTAX 1.3.6.1.4.
 1.4203.666.11.2.1 )
matchingRules: ( 1.3.6.1.1.16.3 NAME 'UUIDOrderingMatch' SYNTAX 1.3.6.1.1.16.1
  )
matchingRules: ( 1.3.6.1.1.16.2 NAME 'UUIDMatch' SYNTAX 1.3.6.1.1.16.1 )
matchingRules: ( 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.27 )
matchingRules: ( 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.27 )
matchingRules: ( 1.3.6.1.4.1.4203.1.2.1 NAME 'caseExactIA5SubstringsMatch' SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.26 )
matchingRules: ( 1.3.6.1.4.1.1466.109.114.3 NAME 'caseIgnoreIA5SubstringsMatch
 ' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
matchingRules: ( 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.26 )
matchingRules: ( 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.26 )
matchingRules: ( 2.5.13.45 NAME 'attributeCertificateExactMatch' SYNTAX 1.3.6.
 1.4.1.4203.666.11.10.2.2 )
matchingRules: ( 2.5.13.38 NAME 'certificateListExactMatch' SYNTAX 1.3.6.1.1.1
 5.5 )
matchingRules: ( 2.5.13.34 NAME 'certificateExactMatch' SYNTAX 1.3.6.1.1.15.1 
 )
matchingRules: ( 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.38 )
matchingRules: ( 2.5.13.29 NAME 'integerFirstComponentMatch' SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.27 )
matchingRules: ( 2.5.13.28 NAME 'generalizedTimeOrderingMatch' SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.24 )
matchingRules: ( 2.5.13.27 NAME 'generalizedTimeMatch' SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.24 )
matchingRules: ( 2.5.13.23 NAME 'uniqueMemberMatch' SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.34 )
matchingRules: ( 2.5.13.21 NAME 'telephoneNumberSubstringsMatch' SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.58 )
matchingRules: ( 2.5.13.20 NAME 'telephoneNumberMatch' SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.50 )
matchingRules: ( 2.5.13.19 NAME 'octetStringSubstringsMatch' SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.40 )
matchingRules: ( 2.5.13.18 NAME 'octetStringOrderingMatch' SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.40 )
matchingRules: ( 2.5.13.17 NAME 'octetStringMatch' SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.40 )
matchingRules: ( 2.5.13.16 NAME 'bitStringMatch' SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.6 )
matchingRules: ( 2.5.13.15 NAME 'integerOrderingMatch' SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.27 )
matchingRules: ( 2.5.13.14 NAME 'integerMatch' SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.27 )
matchingRules: ( 2.5.13.13 NAME 'booleanMatch' SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.7 )
matchingRules: ( 2.5.13.11 NAME 'caseIgnoreListMatch' SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.41 )
matchingRules: ( 2.5.13.10 NAME 'numericStringSubstringsMatch' SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.58 )
matchingRules: ( 2.5.13.9 NAME 'numericStringOrderingMatch' SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.36 )
matchingRules: ( 2.5.13.8 NAME 'numericStringMatch' SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.36 )
matchingRules: ( 2.5.13.7 NAME 'caseExactSubstringsMatch' SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.58 )
matchingRules: ( 2.5.13.6 NAME 'caseExactOrderingMatch' SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.15 )
matchingRules: ( 2.5.13.5 NAME 'caseExactMatch' SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.15 )
matchingRules: ( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch' SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.58 )
matchingRules: ( 2.5.13.3 NAME 'caseIgnoreOrderingMatch' SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.15 )
matchingRules: ( 2.5.13.2 NAME 'caseIgnoreMatch' SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.15 )
matchingRules: ( 1.2.36.79672281.1.13.3 NAME 'rdnMatch' SYNTAX 1.2.36.79672281
 .1.5.0 )
matchingRules: ( 1.3.6.1.4.1.4203.666.4.11 NAME 'dnSuperiorMatch' SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.12 )
matchingRules: ( 1.3.6.1.4.1.4203.666.4.10 NAME 'dnSubordinateMatch' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.12 )
matchingRules: ( 1.3.6.1.4.1.4203.666.4.8 NAME 'dnOneLevelMatch' SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.12 )
matchingRules: ( 1.3.6.1.4.1.4203.666.4.9 NAME 'dnSubtreeMatch' SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.12 )
matchingRules: ( 2.5.13.1 NAME 'distinguishedNameMatch' SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.12 )
matchingRules: ( 2.5.13.0 NAME 'objectIdentifierMatch' SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.38 )
matchingRules: ( 1.3.6.1.4.1.4203.666.4.5 NAME 'IA5StringApproxMatch' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.26 )
matchingRules: ( 1.3.6.1.4.1.4203.666.4.4 NAME 'directoryStringApproxMatch' SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.15 )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.11.2.5 NAME 'CSNSIDMatch' APPLIES ( en
 tryCSN $ namingCSN $ contextCSN ) )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.11.2.3 NAME 'CSNOrderingMatch' APPLIES
  ( entryCSN $ namingCSN $ contextCSN ) )
matchingRuleUse: ( 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES ( s
 upportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olc
 ConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMin
 Len $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $
  olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcRe
 plicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcTh
 reads $ olcToolThreads $ olcWriteTimeout $ olcDbMaxReaders $ olcDbMaxSize $ o
 lcDbSearchStack $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbI
 DLcacheSize $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ o
 lcChainMaxReferralDepth $ monitorCounter $ monitorOpCompleted $ monitorOpInit
 iated $ monitorConnectionNumber $ monitorConnectionOpsReceived $ monitorConne
 ctionOpsExecuting $ monitorConnectionOpsPending $ monitorConnectionOpsComplet
 ed $ monitorConnectionGet $ monitorConnectionRead $ monitorConnectionWrite $ 
 reqResult $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ e
 rrCode $ errSleepTime $ olcRetcodeSleep $ olcSpSessionlog $ olcSssVlvMax $ ol
 cSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcDDSmaxDynamicObjects $ olcLastBindP
 recision $ olcSmbK5PwdMustChange $ olcSmbK5PwdCanChange $ mailPreferenceOptio
 n $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive
  $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumbe
 r $ pwdMinAge $ pwdMaxAge $ pwdInHistory $ pwdCheckQuality $ pwdMinLength $ p
 wdExpireWarning $ pwdGraceAuthNLimit $ pwdLockoutDuration $ pwdMaxFailure $ p
 wdFailureCountInterval $ searchTimeLimit $ bindTimeLimit $ profileTTL $ schac
 Gender $ dNSTTL $ SolarisCacheTTL $ SolarisSearchTimeLimit $ radiusSimultaneo
 usUse $ sambaPwdLastSet $ sambaPwdCanChange $ sambaPwdMustChange $ sambaLogon
 Time $ sambaLogoffTime $ sambaKickoffTime $ sambaBadPasswordCount $ sambaBadP
 asswordTime $ sambaGroupType $ sambaNextUserRid $ sambaNextGroupRid $ sambaNe
 xtRid $ sambaAlgorithmicRidBase $ sambaIntegerOption $ sambaMinPwdLength $ sa
 mbaPwdHistoryLength $ sambaLogonToChgPwd $ sambaMaxPwdAge $ sambaMinPwdAge $ 
 sambaLockoutDuration $ sambaLockoutObservationWindow $ sambaLockoutThreshold 
 $ sambaForceLogoff $ sambaRefuseMachinePwdChange $ sambaTrustType $ sambaTrus
 tAttributes $ sambaTrustDirection $ sambaTrustPosixOffset $ sambaSupportedEnc
 ryptionTypes $ krb5KeyVersionNumber $ krb5MaxLife $ krb5MaxRenew $ krb5KDCFla
 gs $ krb5EncryptionType $ krbPrincipalType $ krbTicketFlags $ krbMaxTicketLif
 e $ krbMaxRenewableAge $ krbSearchScope $ krbMaxPwdLife $ krbMinPwdLife $ krb
 PwdMinDiffChars $ krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ 
 krbPwdFailureCountInterval $ krbPwdLockoutDuration $ krbLoginFailedCount $ dh
 cpNetMask $ dhcpDnsStatus $ dhcpDelayedServiceParameter $ dhcpMaxClientLeadTi
 me $ x509CRLNumber $ x509CRLDeltaIndicator $ x509CRLCertReasonCode $ x509vers
 ion $ x509serialNumber $ x509authorityCertSerialNumber $ x509ACHolderPKCSeria
 lNumber $ x509ACDigestedObjectType $ vPIMMaxMessageSize $ dlmDedicated $ dlmB
 iometric $ pcimRuleEnabled $ pcimConditionGroupNumber $ pcimActionOrder $ pce
 lsDecisionStrategy $ pcelsPriority $ pcelsConditionListType $ pcelsSequencedA
 ctions $ pcelsExecutionStrategy $ pcelsIPHdrVersion $ pcelsIPHdrProtocolID $ 
 pcelsIPHdrSourcePortStart $ pcelsIPHdrSourcePortEnd $ pcelsIPHdrDestPortStart
  $ pcelsIPHdrDestPortEnd $ pcelsIPHdrDSCPList $ pcels8021HdrProtocolID $ pcel
 s8021HdrPriority $ pcels8021HdrVLANID $ pcelsFilterDirection $ sudoOrder $ ge
 nder ) )
matchingRuleUse: ( 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES ( 
 supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ ol
 cConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMi
 nLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep 
 $ olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcR
 eplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcT
 hreads $ olcToolThreads $ olcWriteTimeout $ olcDbMaxReaders $ olcDbMaxSize $ 
 olcDbSearchStack $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDb
 IDLcacheSize $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ 
 olcChainMaxReferralDepth $ monitorCounter $ monitorOpCompleted $ monitorOpIni
 tiated $ monitorConnectionNumber $ monitorConnectionOpsReceived $ monitorConn
 ectionOpsExecuting $ monitorConnectionOpsPending $ monitorConnectionOpsComple
 ted $ monitorConnectionGet $ monitorConnectionRead $ monitorConnectionWrite $
  reqResult $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ 
 errCode $ errSleepTime $ olcRetcodeSleep $ olcSpSessionlog $ olcSssVlvMax $ o
 lcSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcDDSmaxDynamicObjects $ olcLastBind
 Precision $ olcSmbK5PwdMustChange $ olcSmbK5PwdCanChange $ mailPreferenceOpti
 on $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactiv
 e $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumb
 er $ pwdMinAge $ pwdMaxAge $ pwdInHistory $ pwdCheckQuality $ pwdMinLength $ 
 pwdExpireWarning $ pwdGraceAuthNLimit $ pwdLockoutDuration $ pwdMaxFailure $ 
 pwdFailureCountInterval $ searchTimeLimit $ bindTimeLimit $ profileTTL $ scha
 cGender $ dNSTTL $ SolarisCacheTTL $ SolarisSearchTimeLimit $ radiusSimultane
 ousUse $ sambaPwdLastSet $ sambaPwdCanChange $ sambaPwdMustChange $ sambaLogo
 nTime $ sambaLogoffTime $ sambaKickoffTime $ sambaBadPasswordCount $ sambaBad
 PasswordTime $ sambaGroupType $ sambaNextUserRid $ sambaNextGroupRid $ sambaN
 extRid $ sambaAlgorithmicRidBase $ sambaIntegerOption $ sambaMinPwdLength $ s
 ambaPwdHistoryLength $ sambaLogonToChgPwd $ sambaMaxPwdAge $ sambaMinPwdAge $
  sambaLockoutDuration $ sambaLockoutObservationWindow $ sambaLockoutThreshold
  $ sambaForceLogoff $ sambaRefuseMachinePwdChange $ sambaTrustType $ sambaTru
 stAttributes $ sambaTrustDirection $ sambaTrustPosixOffset $ sambaSupportedEn
 cryptionTypes $ krb5KeyVersionNumber $ krb5MaxLife $ krb5MaxRenew $ krb5KDCFl
 ags $ krb5EncryptionType $ krbPrincipalType $ krbTicketFlags $ krbMaxTicketLi
 fe $ krbMaxRenewableAge $ krbSearchScope $ krbMaxPwdLife $ krbMinPwdLife $ kr
 bPwdMinDiffChars $ krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $
  krbPwdFailureCountInterval $ krbPwdLockoutDuration $ krbLoginFailedCount $ d
 hcpNetMask $ dhcpDnsStatus $ dhcpDelayedServiceParameter $ dhcpMaxClientLeadT
 ime $ x509CRLNumber $ x509CRLDeltaIndicator $ x509CRLCertReasonCode $ x509ver
 sion $ x509serialNumber $ x509authorityCertSerialNumber $ x509ACHolderPKCSeri
 alNumber $ x509ACDigestedObjectType $ vPIMMaxMessageSize $ dlmDedicated $ dlm
 Biometric $ pcimRuleEnabled $ pcimConditionGroupNumber $ pcimActionOrder $ pc
 elsDecisionStrategy $ pcelsPriority $ pcelsConditionListType $ pcelsSequenced
 Actions $ pcelsExecutionStrategy $ pcelsIPHdrVersion $ pcelsIPHdrProtocolID $
  pcelsIPHdrSourcePortStart $ pcelsIPHdrSourcePortEnd $ pcelsIPHdrDestPortStar
 t $ pcelsIPHdrDestPortEnd $ pcelsIPHdrDSCPList $ pcels8021HdrProtocolID $ pce
 ls8021HdrPriority $ pcels8021HdrVLANID $ pcelsFilterDirection $ sudoOrder $ g
 ender ) )
matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIE
 S ( altServer $ olcDbConfig $ c $ mail $ dc $ associatedDomain $ email $ aRec
 ord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox
  $ mailLocalAddress $ mailHost $ mailRoutingAddress $ rfc822MailMember $ geco
 s $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber
  $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry $ 
 javaCodebase $ javaDoc $ corbaIor $ pwdCheckModule $ attributeMap $ credentia
 lLevel $ objectclassMap $ defaultSearchScope $ serviceCredentialLevel $ eduOr
 gHomePageURI $ eduOrgIdentityAuthNPolicyURI $ eduOrgSuperiorURI $ eduOrgWhite
 PagesURI $ schacUserPrivateAttribute $ dNSClass $ pTRRecord $ hInfoRecord $ m
 InfoRecord $ tXTRecord $ SigRecord $ KeyRecord $ aAAARecord $ LocRecord $ nXT
 Record $ sRVRecord $ nAPTRRecord $ kXRecord $ certRecord $ a6Record $ dNameRe
 cord $ nisPublickey $ nisSecretkey $ mgrpRFC822MailMember $ nisNetIdUser $ ni
 sNetIdGroup $ nisNetIdHost $ mozillaSecondEmail $ homeurl $ workurl $ custom1
  $ custom2 $ custom3 $ custom4 $ radiusArapFeatures $ radiusArapSecurity $ ra
 diusArapZoneAccess $ radiusAuthType $ radiusCallbackId $ radiusCallbackNumber
  $ radiusCalledStationId $ radiusCallingStationId $ radiusClass $ radiusClien
 tIPAddress $ radiusFilterId $ radiusFramedAppleTalkLink $ radiusFramedAppleTa
 lkNetwork $ radiusFramedAppleTalkZone $ radiusFramedCompression $ radiusFrame
 dIPAddress $ radiusFramedIPNetmask $ radiusFramedIPXNetwork $ radiusFramedMTU
  $ radiusFramedProtocol $ radiusFramedRoute $ radiusFramedRouting $ radiusGro
 upName $ radiusHint $ radiusHuntgroupName $ radiusIdleTimeout $ radiusLoginIP
 Host $ radiusLoginLATGroup $ radiusLoginLATNode $ radiusLoginLATPort $ radius
 LoginLATService $ radiusLoginService $ radiusLoginTCPPort $ radiusPasswordRet
 ry $ radiusPortLimit $ radiusPrompt $ radiusProxyToRealm $ radiusReplicateToR
 ealm $ radiusRealm $ radiusServiceType $ radiusSessionTimeout $ radiusTermina
 tionAction $ radiusTunnelAssignmentId $ radiusTunnelMediumType $ radiusTunnel
 Password $ radiusTunnelPreference $ radiusTunnelPrivateGroupId $ radiusTunnel
 ServerEndpoint $ radiusTunnelType $ radiusVSA $ radiusTunnelClientEndpoint $ 
 radiusLoginTime $ radiusUserCategory $ dialupAccess $ radiusExpiration $ radi
 usCheckItem $ radiusReplyItem $ sambaLMPassword $ sambaNTPassword $ sambaAcct
 Flags $ sambaLogonHours $ sambaHomeDrive $ sambaPasswordHistory $ sambaSID $ 
 sambaPrimaryGroupSID $ sambaSIDList $ sambaStringOption $ sambaTrustFlags $ s
 ambaSecurityIdentifier $ krb5PrincipalName $ krbPrincipalName $ krbCanonicalN
 ame $ krbHostServer $ krbPrincipalAliases $ krbAllowedToDelegateTo $ esgConta
 ctMail $ dhcpStatements $ dhcpRange $ dhcpPermitList $ dhcpClassData $ dhcpVe
 rsion $ dhcpImplementation $ dhcpAddressState $ dhcpDomainName $ dhcpRequeste
 dHostName $ dhcpAssignedHostName $ dhcpFailOverEndpointState $ dhcpErrorLog $
  automountInformation $ x509CRLDPRfc822Name $ x509CRLDPDnsName $ x509CRLDPURI
  $ x509CRLDPIpAddress $ x509CRLCertIssuerRfc822Name $ x509CRLCertIssuerDnsNam
 e $ x509CRLCertIssuerURI $ x509CRLCertIssuerIpAddress $ x509subjectRfc822Name
  $ x509subjectDnsName $ x509subjectUniformResourceIdentifier $ x509subjectIpA
 ddress $ x509issuerRfc822Name $ x509issuerDnsName $ x509issuerUniformResource
 Identifier $ x509issuerIpAddress $ x509fullCRLDistributionPointURI $ x509ACHo
 lderRfc822Name $ x509ACHolderDNSName $ x509ACHolderURI $ x509ACHolderIPAddres
 s $ x509ACTargetRfc822Name $ x509ACTargetDNSName $ x509ACTargetURI $ x509ACTa
 rgetIPAddress $ x509ACTargetGroupRfc822Name $ x509ACTargetGroupDNSName $ x509
 ACTargetGroupURI $ x509ACTargetGroupIPAddress $ x509DPRfc822Name $ x509DPDNSN
 ame $ x509DPURI $ x509DPIPAddress $ x509DPissuerRfc822Name $ x509DPissuerDNSN
 ame $ x509DPissuerURI $ x509DPissuerIPAddress $ vPIMRfc822Mailbox $ vPIMSuppo
 rtedAudioMediaTypes $ vPIMSupportedMessageContext $ vPIMExtendedAbsenceStatus
  $ vPIMSupportedUABehaviors $ pgpKey $ hordePrefs $ impPrefs $ turbaPrefs $ t
 urbaType $ turbaPGPPublicKey $ kronolithPrefs $ nagPrefs $ gollemPrefs $ chor
 aPrefs $ mnemoPrefs $ trollPrefs $ klutzPrefs $ jonahPrefs $ hermesPrefs $ ju
 noPrefs $ treanPrefs $ whupsPrefs $ ingoPrefs $ anselPrefs $ geniePrefs $ scr
 yPrefs $ wickedPrefs $ agoraPrefs $ goopsPrefs $ merkPrefs $ mimpPrefs $ mott
 lePrefs $ nicPrefs $ occamPrefs $ odinPrefs $ rakimPrefs $ seshaPrefs $ swoos
 hPrefs $ thorPrefs $ ulaformPrefs $ volosPrefs $ jetaPrefs $ sudoUser $ sudoH
 ost $ sudoCommand $ sudoRunAs $ sudoOption $ sudoRunAsUser $ sudoRunAsGroup $
  dateOfBirth $ euVATId $ msPwdResetPasswordHash ) )
matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES
  ( altServer $ olcDbConfig $ c $ mail $ dc $ associatedDomain $ email $ aReco
 rd $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox 
 $ mailLocalAddress $ mailHost $ mailRoutingAddress $ rfc822MailMember $ gecos
  $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber 
 $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry $ j
 avaCodebase $ javaDoc $ corbaIor $ pwdCheckModule $ attributeMap $ credential
 Level $ objectclassMap $ defaultSearchScope $ serviceCredentialLevel $ eduOrg
 HomePageURI $ eduOrgIdentityAuthNPolicyURI $ eduOrgSuperiorURI $ eduOrgWhiteP
 agesURI $ schacUserPrivateAttribute $ dNSClass $ pTRRecord $ hInfoRecord $ mI
 nfoRecord $ tXTRecord $ SigRecord $ KeyRecord $ aAAARecord $ LocRecord $ nXTR
 ecord $ sRVRecord $ nAPTRRecord $ kXRecord $ certRecord $ a6Record $ dNameRec
 ord $ nisPublickey $ nisSecretkey $ mgrpRFC822MailMember $ nisNetIdUser $ nis
 NetIdGroup $ nisNetIdHost $ mozillaSecondEmail $ homeurl $ workurl $ custom1 
 $ custom2 $ custom3 $ custom4 $ radiusArapFeatures $ radiusArapSecurity $ rad
 iusArapZoneAccess $ radiusAuthType $ radiusCallbackId $ radiusCallbackNumber 
 $ radiusCalledStationId $ radiusCallingStationId $ radiusClass $ radiusClient
 IPAddress $ radiusFilterId $ radiusFramedAppleTalkLink $ radiusFramedAppleTal
 kNetwork $ radiusFramedAppleTalkZone $ radiusFramedCompression $ radiusFramed
 IPAddress $ radiusFramedIPNetmask $ radiusFramedIPXNetwork $ radiusFramedMTU 
 $ radiusFramedProtocol $ radiusFramedRoute $ radiusFramedRouting $ radiusGrou
 pName $ radiusHint $ radiusHuntgroupName $ radiusIdleTimeout $ radiusLoginIPH
 ost $ radiusLoginLATGroup $ radiusLoginLATNode $ radiusLoginLATPort $ radiusL
 oginLATService $ radiusLoginService $ radiusLoginTCPPort $ radiusPasswordRetr
 y $ radiusPortLimit $ radiusPrompt $ radiusProxyToRealm $ radiusReplicateToRe
 alm $ radiusRealm $ radiusServiceType $ radiusSessionTimeout $ radiusTerminat
 ionAction $ radiusTunnelAssignmentId $ radiusTunnelMediumType $ radiusTunnelP
 assword $ radiusTunnelPreference $ radiusTunnelPrivateGroupId $ radiusTunnelS
 erverEndpoint $ radiusTunnelType $ radiusVSA $ radiusTunnelClientEndpoint $ r
 adiusLoginTime $ radiusUserCategory $ dialupAccess $ radiusExpiration $ radiu
 sCheckItem $ radiusReplyItem $ sambaLMPassword $ sambaNTPassword $ sambaAcctF
 lags $ sambaLogonHours $ sambaHomeDrive $ sambaPasswordHistory $ sambaSID $ s
 ambaPrimaryGroupSID $ sambaSIDList $ sambaStringOption $ sambaTrustFlags $ sa
 mbaSecurityIdentifier $ krb5PrincipalName $ krbPrincipalName $ krbCanonicalNa
 me $ krbHostServer $ krbPrincipalAliases $ krbAllowedToDelegateTo $ esgContac
 tMail $ dhcpStatements $ dhcpRange $ dhcpPermitList $ dhcpClassData $ dhcpVer
 sion $ dhcpImplementation $ dhcpAddressState $ dhcpDomainName $ dhcpRequested
 HostName $ dhcpAssignedHostName $ dhcpFailOverEndpointState $ dhcpErrorLog $ 
 automountInformation $ x509CRLDPRfc822Name $ x509CRLDPDnsName $ x509CRLDPURI 
 $ x509CRLDPIpAddress $ x509CRLCertIssuerRfc822Name $ x509CRLCertIssuerDnsName
  $ x509CRLCertIssuerURI $ x509CRLCertIssuerIpAddress $ x509subjectRfc822Name 
 $ x509subjectDnsName $ x509subjectUniformResourceIdentifier $ x509subjectIpAd
 dress $ x509issuerRfc822Name $ x509issuerDnsName $ x509issuerUniformResourceI
 dentifier $ x509issuerIpAddress $ x509fullCRLDistributionPointURI $ x509ACHol
 derRfc822Name $ x509ACHolderDNSName $ x509ACHolderURI $ x509ACHolderIPAddress
  $ x509ACTargetRfc822Name $ x509ACTargetDNSName $ x509ACTargetURI $ x509ACTar
 getIPAddress $ x509ACTargetGroupRfc822Name $ x509ACTargetGroupDNSName $ x509A
 CTargetGroupURI $ x509ACTargetGroupIPAddress $ x509DPRfc822Name $ x509DPDNSNa
 me $ x509DPURI $ x509DPIPAddress $ x509DPissuerRfc822Name $ x509DPissuerDNSNa
 me $ x509DPissuerURI $ x509DPissuerIPAddress $ vPIMRfc822Mailbox $ vPIMSuppor
 tedAudioMediaTypes $ vPIMSupportedMessageContext $ vPIMExtendedAbsenceStatus 
 $ vPIMSupportedUABehaviors $ pgpKey $ hordePrefs $ impPrefs $ turbaPrefs $ tu
 rbaType $ turbaPGPPublicKey $ kronolithPrefs $ nagPrefs $ gollemPrefs $ chora
 Prefs $ mnemoPrefs $ trollPrefs $ klutzPrefs $ jonahPrefs $ hermesPrefs $ jun
 oPrefs $ treanPrefs $ whupsPrefs $ ingoPrefs $ anselPrefs $ geniePrefs $ scry
 Prefs $ wickedPrefs $ agoraPrefs $ goopsPrefs $ merkPrefs $ mimpPrefs $ mottl
 ePrefs $ nicPrefs $ occamPrefs $ odinPrefs $ rakimPrefs $ seshaPrefs $ swoosh
 Prefs $ thorPrefs $ ulaformPrefs $ volosPrefs $ jetaPrefs $ sudoUser $ sudoHo
 st $ sudoCommand $ sudoRunAs $ sudoOption $ sudoRunAsUser $ sudoRunAsGroup $ 
 dateOfBirth $ euVATId $ msPwdResetPasswordHash ) )
matchingRuleUse: ( 2.5.13.45 NAME 'attributeCertificateExactMatch' APPLIES ( a
 ttributeCertificateAttribute $ aACertificate $ attributeDescriptorCertificate
  $ protPrivPolicy ) )
matchingRuleUse: ( 2.5.13.38 NAME 'certificateListExactMatch' APPLIES ( author
 ityRevocationList $ certificateRevocationList $ deltaRevocationList $ attribu
 teCertificateRevocationList $ attributeAuthorityRevocationList ) )
matchingRuleUse: ( 2.5.13.34 NAME 'certificateExactMatch' APPLIES ( userCertif
 icate $ cACertificate $ x509userCert $ x509caCert ) )
matchingRuleUse: ( 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIE
 S ( supportedControl $ supportedExtension $ supportedFeatures $ administrativ
 eRole $ nameForms $ ldapSyntaxes $ reqControls $ reqRespControls $ errUnsolic
 itedOID $ allowedChildClasses $ allowedChildClassesEffective $ allowedAttribu
 tes $ allowedAttributesEffective $ supportedApplicationContext $ x509CRLDPReg
 isteredID $ x509CRLCertIssuerRegisteredID $ x509CRLCertHoldInstructionCode $ 
 x509signatureAlgorithm $ x509subjectPublicKeyInfoAlgorithm $ x509policyInform
 ationIdentifier $ x509subjectRegisteredID $ x509issuerRegisteredID $ x509extK
 eyUsage $ x509ACHolderRegisteredID $ x509ACDigestAlgorithm $ x509ACTargetRegi
 steredID $ x509ACTargetGroupRegisteredID $ x509DPRegisteredID $ x509DPissuerR
 egisteredID $ pcelsVendorVariableEncoding $ pcelsVendorValueEncoding ) )
matchingRuleUse: ( 2.5.13.29 NAME 'integerFirstComponentMatch' APPLIES ( suppo
 rtedLDAPVersion $ dITStructureRules $ entryTtl $ uidNumber $ gidNumber $ olcC
 oncurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olc
 IndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcInde
 xSubstrAnyStep $ olcIndexIntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDe
 refDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxInco
 mingAuth $ olcThreads $ olcToolThreads $ olcWriteTimeout $ olcDbMaxReaders $ 
 olcDbMaxSize $ olcDbSearchStack $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNca
 cheSize $ olcDbIDLcacheSize $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConne
 ctionPoolMax $ olcChainMaxReferralDepth $ monitorCounter $ monitorOpCompleted
  $ monitorOpInitiated $ monitorConnectionNumber $ monitorConnectionOpsReceive
 d $ monitorConnectionOpsExecuting $ monitorConnectionOpsPending $ monitorConn
 ectionOpsCompleted $ monitorConnectionGet $ monitorConnectionRead $ monitorCo
 nnectionWrite $ reqResult $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit 
 $ reqEntries $ errCode $ errSleepTime $ olcRetcodeSleep $ olcSpSessionlog $ o
 lcSssVlvMax $ olcSssVlvMaxKeys $ olcSssVlvMaxPerConn $ olcDDSmaxDynamicObject
 s $ olcLastBindPrecision $ olcSmbK5PwdMustChange $ olcSmbK5PwdCanChange $ mai
 lPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning 
 $ shadowInactive $ shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumb
 er $ oncRpcNumber $ pwdMinAge $ pwdMaxAge $ pwdInHistory $ pwdCheckQuality $ 
 pwdMinLength $ pwdExpireWarning $ pwdGraceAuthNLimit $ pwdLockoutDuration $ p
 wdMaxFailure $ pwdFailureCountInterval $ searchTimeLimit $ bindTimeLimit $ pr
 ofileTTL $ schacGender $ dNSTTL $ SolarisCacheTTL $ SolarisSearchTimeLimit $ 
 radiusSimultaneousUse $ sambaPwdLastSet $ sambaPwdCanChange $ sambaPwdMustCha
 nge $ sambaLogonTime $ sambaLogoffTime $ sambaKickoffTime $ sambaBadPasswordC
 ount $ sambaBadPasswordTime $ sambaGroupType $ sambaNextUserRid $ sambaNextGr
 oupRid $ sambaNextRid $ sambaAlgorithmicRidBase $ sambaIntegerOption $ sambaM
 inPwdLength $ sambaPwdHistoryLength $ sambaLogonToChgPwd $ sambaMaxPwdAge $ s
 ambaMinPwdAge $ sambaLockoutDuration $ sambaLockoutObservationWindow $ sambaL
 ockoutThreshold $ sambaForceLogoff $ sambaRefuseMachinePwdChange $ sambaTrust
 Type $ sambaTrustAttributes $ sambaTrustDirection $ sambaTrustPosixOffset $ s
 ambaSupportedEncryptionTypes $ krb5KeyVersionNumber $ krb5MaxLife $ krb5MaxRe
 new $ krb5KDCFlags $ krb5EncryptionType $ krbPrincipalType $ krbTicketFlags $
  krbMaxTicketLife $ krbMaxRenewableAge $ krbSearchScope $ krbMaxPwdLife $ krb
 MinPwdLife $ krbPwdMinDiffChars $ krbPwdMinLength $ krbPwdHistoryLength $ krb
 PwdMaxFailure $ krbPwdFailureCountInterval $ krbPwdLockoutDuration $ krbLogin
 FailedCount $ dhcpNetMask $ dhcpDnsStatus $ dhcpDelayedServiceParameter $ dhc
 pMaxClientLeadTime $ x509CRLNumber $ x509CRLDeltaIndicator $ x509CRLCertReaso
 nCode $ x509version $ x509serialNumber $ x509authorityCertSerialNumber $ x509
 ACHolderPKCSerialNumber $ x509ACDigestedObjectType $ vPIMMaxMessageSize $ dlm
 Dedicated $ dlmBiometric $ pcimRuleEnabled $ pcimConditionGroupNumber $ pcimA
 ctionOrder $ pcelsDecisionStrategy $ pcelsPriority $ pcelsConditionListType $
  pcelsSequencedActions $ pcelsExecutionStrategy $ pcelsIPHdrVersion $ pcelsIP
 HdrProtocolID $ pcelsIPHdrSourcePortStart $ pcelsIPHdrSourcePortEnd $ pcelsIP
 HdrDestPortStart $ pcelsIPHdrDestPortEnd $ pcelsIPHdrDSCPList $ pcels8021HdrP
 rotocolID $ pcels8021HdrPriority $ pcels8021HdrVLANID $ pcelsFilterDirection 
 $ sudoOrder $ gender ) )
matchingRuleUse: ( 2.5.13.28 NAME 'generalizedTimeOrderingMatch' APPLIES ( cre
 ateTimestamp $ modifyTimestamp $ monitorTimestamp $ monitorConnectionStartTim
 e $ monitorConnectionActivityTime $ reqStart $ reqEnd $ pwdChangedTime $ pwdA
 ccountLockedTime $ pwdFailureTime $ pwdGraceUseTime $ entryExpireTimestamp $ 
 authTimestamp $ schacExpiryDate $ krb5ValidStart $ krb5ValidEnd $ krb5Passwor
 dEnd $ krbPrincipalExpiration $ krbPasswordExpiration $ krbLastPwdChange $ kr
 bLastSuccessfulAuth $ krbLastFailedAuth $ esgFirstShown $ esgFinalEnd $ dhcpE
 xpirationTime $ dhcpStartTimeOfState $ dhcpLastTransactionTime $ x509CRLThisU
 pdate $ x509CRLNextUpdate $ x509CRLCertRevocationDate $ x509CRLCertInvalidity
 Date $ x509validityNotBefore $ x509validityNotAfter $ dlmInstallDate $ sudoNo
 tBefore $ sudoNotAfter $ msPwdResetTimestamp $ msPwdResetExpirationTime ) )
matchingRuleUse: ( 2.5.13.27 NAME 'generalizedTimeMatch' APPLIES ( createTimes
 tamp $ modifyTimestamp $ monitorTimestamp $ monitorConnectionStartTime $ moni
 torConnectionActivityTime $ reqStart $ reqEnd $ pwdChangedTime $ pwdAccountLo
 ckedTime $ pwdFailureTime $ pwdGraceUseTime $ entryExpireTimestamp $ authTime
 stamp $ schacExpiryDate $ krb5ValidStart $ krb5ValidEnd $ krb5PasswordEnd $ k
 rbPrincipalExpiration $ krbPasswordExpiration $ krbLastPwdChange $ krbLastSuc
 cessfulAuth $ krbLastFailedAuth $ esgFirstShown $ esgFinalEnd $ dhcpExpiratio
 nTime $ dhcpStartTimeOfState $ dhcpLastTransactionTime $ x509CRLThisUpdate $ 
 x509CRLNextUpdate $ x509CRLCertRevocationDate $ x509CRLCertInvalidityDate $ x
 509validityNotBefore $ x509validityNotAfter $ dlmInstallDate $ sudoNotBefore 
 $ sudoNotAfter $ msPwdResetTimestamp $ msPwdResetExpirationTime ) )
matchingRuleUse: ( 2.5.13.24 NAME 'protocolInformationMatch' APPLIES protocolI
 nformation )
matchingRuleUse: ( 2.5.13.23 NAME 'uniqueMemberMatch' APPLIES uniqueMember )
matchingRuleUse: ( 2.5.13.22 NAME 'presentationAddressMatch' APPLIES presentat
 ionAddress )
matchingRuleUse: ( 2.5.13.20 NAME 'telephoneNumberMatch' APPLIES ( telephoneNu
 mber $ homePhone $ mobile $ pager $ nsAIMid $ esgContactPhone ) )
matchingRuleUse: ( 2.5.13.18 NAME 'octetStringOrderingMatch' APPLIES ( syncrep
 lCookie $ userPassword $ olcDbCryptKey $ reqMod $ reqOld $ reqData $ errUnsol
 icitedData $ pwdHistory $ javaSerializedData $ entrustPolicyCertificate $ ent
 rustRoamFileEncInfo $ entrustRoamingCAPAB $ entrustRoamingEOP $ entrustRoamin
 gPAB $ entrustRoamingPRV $ entrustRoamingProfile $ entrustRoamingRecipList $ 
 entrustRoamingSLA $ entrustAttributeCertificate $ sambaClearTextPassword $ sa
 mbaPreviousClearTextPassword $ krb5RealmName $ krbPrincipalKey $ krbPwdHistor
 y $ krbMKey $ krbExtraData $ dhcpOption $ dhcpRelayAgentInfo $ dhcpHWAddress 
 $ dhcpHashBucketAssignment $ x509authorityKeyIdentifier $ x509subjectKeyIdent
 ifier $ x509ACAuditID $ vPIMSpokenName $ pgpReconData $ pgpData $ pcelsIPHdrS
 ourceAddress $ pcelsIPHdrSourceAddressEndOfRange $ pcelsIPHdrSourceMask $ pce
 lsIPHdrDestAddress $ pcelsIPHdrDestAddressEndOfRange $ pcelsIPHdrDestMask $ p
 celsIPHdrFlowLabel $ pcels8021HdrSourceMACAddress $ pcels8021HdrSourceMACMask
  $ pcels8021HdrDestMACAddress $ pcels8021HdrDestMACMask $ pcelsVendorVariable
 Data $ pcelsVendorValueData $ sshPublicKey ) )
matchingRuleUse: ( 2.5.13.17 NAME 'octetStringMatch' APPLIES ( syncreplCookie 
 $ userPassword $ olcDbCryptKey $ reqMod $ reqOld $ reqData $ errUnsolicitedDa
 ta $ pwdHistory $ javaSerializedData $ entrustPolicyCertificate $ entrustRoam
 FileEncInfo $ entrustRoamingCAPAB $ entrustRoamingEOP $ entrustRoamingPAB $ e
 ntrustRoamingPRV $ entrustRoamingProfile $ entrustRoamingRecipList $ entrustR
 oamingSLA $ entrustAttributeCertificate $ sambaClearTextPassword $ sambaPrevi
 ousClearTextPassword $ krb5RealmName $ krbPrincipalKey $ krbPwdHistory $ krbM
 Key $ krbExtraData $ dhcpOption $ dhcpRelayAgentInfo $ dhcpHWAddress $ dhcpHa
 shBucketAssignment $ x509authorityKeyIdentifier $ x509subjectKeyIdentifier $ 
 x509ACAuditID $ vPIMSpokenName $ pgpReconData $ pgpData $ pcelsIPHdrSourceAdd
 ress $ pcelsIPHdrSourceAddressEndOfRange $ pcelsIPHdrSourceMask $ pcelsIPHdrD
 estAddress $ pcelsIPHdrDestAddressEndOfRange $ pcelsIPHdrDestMask $ pcelsIPHd
 rFlowLabel $ pcels8021HdrSourceMACAddress $ pcels8021HdrSourceMACMask $ pcels
 8021HdrDestMACAddress $ pcels8021HdrDestMACMask $ pcelsVendorVariableData $ p
 celsVendorValueData $ sshPublicKey ) )
matchingRuleUse: ( 2.5.13.16 NAME 'bitStringMatch' APPLIES ( x500UniqueIdentif
 ier $ x509CRLDPOnlySomeReasons $ x509ACObjectDigest $ x509DPReasonCodes ) )
matchingRuleUse: ( 2.5.13.15 NAME 'integerOrderingMatch' APPLIES ( supportedLD
 APVersion $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPen
 ding $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcI
 ndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexI
 ntLen $ olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationI
 nterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ ol
 cToolThreads $ olcWriteTimeout $ olcDbMaxReaders $ olcDbMaxSize $ olcDbSearch
 Stack $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSiz
 e $ olcDbShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcChainMax
 ReferralDepth $ monitorCounter $ monitorOpCompleted $ monitorOpInitiated $ mo
 nitorConnectionNumber $ monitorConnectionOpsReceived $ monitorConnectionOpsEx
 ecuting $ monitorConnectionOpsPending $ monitorConnectionOpsCompleted $ monit
 orConnectionGet $ monitorConnectionRead $ monitorConnectionWrite $ reqResult 
 $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ errCode $ e
 rrSleepTime $ olcRetcodeSleep $ olcSpSessionlog $ olcSssVlvMax $ olcSssVlvMax
 Keys $ olcSssVlvMaxPerConn $ olcDDSmaxDynamicObjects $ olcLastBindPrecision $
  olcSmbK5PwdMustChange $ olcSmbK5PwdCanChange $ mailPreferenceOption $ shadow
 LastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowE
 xpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber $ pwdMin
 Age $ pwdMaxAge $ pwdInHistory $ pwdCheckQuality $ pwdMinLength $ pwdExpireWa
 rning $ pwdGraceAuthNLimit $ pwdLockoutDuration $ pwdMaxFailure $ pwdFailureC
 ountInterval $ searchTimeLimit $ bindTimeLimit $ profileTTL $ schacGender $ d
 NSTTL $ SolarisCacheTTL $ SolarisSearchTimeLimit $ radiusSimultaneousUse $ sa
 mbaPwdLastSet $ sambaPwdCanChange $ sambaPwdMustChange $ sambaLogonTime $ sam
 baLogoffTime $ sambaKickoffTime $ sambaBadPasswordCount $ sambaBadPasswordTim
 e $ sambaGroupType $ sambaNextUserRid $ sambaNextGroupRid $ sambaNextRid $ sa
 mbaAlgorithmicRidBase $ sambaIntegerOption $ sambaMinPwdLength $ sambaPwdHist
 oryLength $ sambaLogonToChgPwd $ sambaMaxPwdAge $ sambaMinPwdAge $ sambaLocko
 utDuration $ sambaLockoutObservationWindow $ sambaLockoutThreshold $ sambaFor
 ceLogoff $ sambaRefuseMachinePwdChange $ sambaTrustType $ sambaTrustAttribute
 s $ sambaTrustDirection $ sambaTrustPosixOffset $ sambaSupportedEncryptionTyp
 es $ krb5KeyVersionNumber $ krb5MaxLife $ krb5MaxRenew $ krb5KDCFlags $ krb5E
 ncryptionType $ krbPrincipalType $ krbTicketFlags $ krbMaxTicketLife $ krbMax
 RenewableAge $ krbSearchScope $ krbMaxPwdLife $ krbMinPwdLife $ krbPwdMinDiff
 Chars $ krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ krbPwdFail
 ureCountInterval $ krbPwdLockoutDuration $ krbLoginFailedCount $ dhcpNetMask 
 $ dhcpDnsStatus $ dhcpDelayedServiceParameter $ dhcpMaxClientLeadTime $ x509C
 RLNumber $ x509CRLDeltaIndicator $ x509CRLCertReasonCode $ x509version $ x509
 serialNumber $ x509authorityCertSerialNumber $ x509ACHolderPKCSerialNumber $ 
 x509ACDigestedObjectType $ vPIMMaxMessageSize $ dlmDedicated $ dlmBiometric $
  pcimRuleEnabled $ pcimConditionGroupNumber $ pcimActionOrder $ pcelsDecision
 Strategy $ pcelsPriority $ pcelsConditionListType $ pcelsSequencedActions $ p
 celsExecutionStrategy $ pcelsIPHdrVersion $ pcelsIPHdrProtocolID $ pcelsIPHdr
 SourcePortStart $ pcelsIPHdrSourcePortEnd $ pcelsIPHdrDestPortStart $ pcelsIP
 HdrDestPortEnd $ pcelsIPHdrDSCPList $ pcels8021HdrProtocolID $ pcels8021HdrPr
 iority $ pcels8021HdrVLANID $ pcelsFilterDirection $ sudoOrder $ gender ) )
matchingRuleUse: ( 2.5.13.14 NAME 'integerMatch' APPLIES ( supportedLDAPVersio
 n $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ o
 lcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubs
 trIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ 
 olcListenerThreads $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval 
 $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThr
 eads $ olcWriteTimeout $ olcDbMaxReaders $ olcDbMaxSize $ olcDbSearchStack $ 
 olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcD
 bShmKey $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcChainMaxReferral
 Depth $ monitorCounter $ monitorOpCompleted $ monitorOpInitiated $ monitorCon
 nectionNumber $ monitorConnectionOpsReceived $ monitorConnectionOpsExecuting 
 $ monitorConnectionOpsPending $ monitorConnectionOpsCompleted $ monitorConnec
 tionGet $ monitorConnectionRead $ monitorConnectionWrite $ reqResult $ reqId 
 $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ errCode $ errSleepT
 ime $ olcRetcodeSleep $ olcSpSessionlog $ olcSssVlvMax $ olcSssVlvMaxKeys $ o
 lcSssVlvMaxPerConn $ olcDDSmaxDynamicObjects $ olcLastBindPrecision $ olcSmbK
 5PwdMustChange $ olcSmbK5PwdCanChange $ mailPreferenceOption $ shadowLastChan
 ge $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ 
 shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber $ pwdMinAge $ pw
 dMaxAge $ pwdInHistory $ pwdCheckQuality $ pwdMinLength $ pwdExpireWarning $ 
 pwdGraceAuthNLimit $ pwdLockoutDuration $ pwdMaxFailure $ pwdFailureCountInte
 rval $ searchTimeLimit $ bindTimeLimit $ profileTTL $ schacGender $ dNSTTL $ 
 SolarisCacheTTL $ SolarisSearchTimeLimit $ radiusSimultaneousUse $ sambaPwdLa
 stSet $ sambaPwdCanChange $ sambaPwdMustChange $ sambaLogonTime $ sambaLogoff
 Time $ sambaKickoffTime $ sambaBadPasswordCount $ sambaBadPasswordTime $ samb
 aGroupType $ sambaNextUserRid $ sambaNextGroupRid $ sambaNextRid $ sambaAlgor
 ithmicRidBase $ sambaIntegerOption $ sambaMinPwdLength $ sambaPwdHistoryLengt
 h $ sambaLogonToChgPwd $ sambaMaxPwdAge $ sambaMinPwdAge $ sambaLockoutDurati
 on $ sambaLockoutObservationWindow $ sambaLockoutThreshold $ sambaForceLogoff
  $ sambaRefuseMachinePwdChange $ sambaTrustType $ sambaTrustAttributes $ samb
 aTrustDirection $ sambaTrustPosixOffset $ sambaSupportedEncryptionTypes $ krb
 5KeyVersionNumber $ krb5MaxLife $ krb5MaxRenew $ krb5KDCFlags $ krb5Encryptio
 nType $ krbPrincipalType $ krbTicketFlags $ krbMaxTicketLife $ krbMaxRenewabl
 eAge $ krbSearchScope $ krbMaxPwdLife $ krbMinPwdLife $ krbPwdMinDiffChars $ 
 krbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ krbPwdFailureCount
 Interval $ krbPwdLockoutDuration $ krbLoginFailedCount $ dhcpNetMask $ dhcpDn
 sStatus $ dhcpDelayedServiceParameter $ dhcpMaxClientLeadTime $ x509CRLNumber
  $ x509CRLDeltaIndicator $ x509CRLCertReasonCode $ x509version $ x509serialNu
 mber $ x509authorityCertSerialNumber $ x509ACHolderPKCSerialNumber $ x509ACDi
 gestedObjectType $ vPIMMaxMessageSize $ dlmDedicated $ dlmBiometric $ pcimRul
 eEnabled $ pcimConditionGroupNumber $ pcimActionOrder $ pcelsDecisionStrategy
  $ pcelsPriority $ pcelsConditionListType $ pcelsSequencedActions $ pcelsExec
 utionStrategy $ pcelsIPHdrVersion $ pcelsIPHdrProtocolID $ pcelsIPHdrSourcePo
 rtStart $ pcelsIPHdrSourcePortEnd $ pcelsIPHdrDestPortStart $ pcelsIPHdrDestP
 ortEnd $ pcelsIPHdrDSCPList $ pcels8021HdrProtocolID $ pcels8021HdrPriority $
  pcels8021HdrVLANID $ pcelsFilterDirection $ sudoOrder $ gender ) )
matchingRuleUse: ( 2.5.13.13 NAME 'booleanMatch' APPLIES ( hasSubordinates $ o
 lcAddContentAcl $ olcGentleHUP $ olcHidden $ olcLastMod $ olcMirrorMode $ olc
 Monitoring $ olcReadOnly $ olcReverseLookup $ olcSyncUseSubentry $ olcDbNoSyn
 c $ olcDbChecksum $ olcDbDirtyRead $ olcDbLinearIndex $ olcDbRebindAsUser $ o
 lcDbChaseReferrals $ olcDbProxyWhoAmI $ olcDbSingleConn $ olcDbUseTemporaryCo
 nn $ olcDbSessionTrackingRequest $ olcDbNoRefs $ olcDbNoUndefFilter $ olcChai
 nCacheURI $ olcChainReturnError $ readOnly $ monitorIsShadow $ monitorRuntime
 Config $ olcAccessLogSuccess $ reqDeleteOldRDN $ reqAttrsOnly $ olcMemberOfRe
 fInt $ errDisconnect $ olcRetcodeInDir $ olcSpNoPresent $ olcSpReloadHint $ o
 lcTranslucentStrict $ olcTranslucentNoGlue $ olcTranslucentBindLocal $ olcTra
 nslucentPwModLocal $ olcUniqueStrict $ pwdReset $ olcPPolicyHashCleartext $ o
 lcPPolicyForwardUpdates $ olcPPolicyUseLockout $ olcDDSstate $ pwdLockout $ p
 wdMustChange $ pwdAllowUserChange $ pwdSafeModify $ followReferrals $ derefer
 enceAliases $ xmozillausehtmlmail $ radiusStripUserName $ sambaBoolOption $ k
 rbUPEnabled $ esgAlwaysOn $ dhcpBootpFlag $ x509CRLDPOnlyUserCerts $ x509CRLD
 POnlyCACerts $ x509CRLDPOnlyAttCerts $ x509CRLDPindirect $ x509basicConstrain
 tsCa $ x509ACNoRevocation $ dlmStarted $ dlm1FilterEntryBaseIsNegated $ pcimR
 uleMandatory $ pcimConditionNegated $ pcelsIsMirrored $ pcelsBoolean $ pcelsF
 ilterIsNegated ) )
matchingRuleUse: ( 2.5.13.11 NAME 'caseIgnoreListMatch' APPLIES ( postalAddres
 s $ registeredAddress $ homePostalAddress $ mozillaPostalAddress2 $ mozillaHo
 mePostalAddress2 ) )
matchingRuleUse: ( 2.5.13.9 NAME 'numericStringOrderingMatch' APPLIES ( x121Ad
 dress $ internationaliSDNNumber $ schacDateOfBirth $ schacYearOfBirth $ esgDu
 ration $ esgRepeatInterval $ esgIntervalOffset $ esgTotalDuration $ vPIMSubMa
 ilboxes $ germanBankAccountNumber $ germanBankCode ) )
matchingRuleUse: ( 2.5.13.8 NAME 'numericStringMatch' APPLIES ( x121Address $ 
 internationaliSDNNumber $ schacDateOfBirth $ schacYearOfBirth $ esgDuration $
  esgRepeatInterval $ esgIntervalOffset $ esgTotalDuration $ vPIMSubMailboxes 
 $ germanBankAccountNumber $ germanBankCode ) )
matchingRuleUse: ( 2.5.13.7 NAME 'caseExactSubstringsMatch' APPLIES ( serialNu
 mber $ destinationIndicator $ dnQualifier $ vPIMTelephoneNumber ) )
matchingRuleUse: ( 2.5.13.6 NAME 'caseExactOrderingMatch' APPLIES ( supportedS
 ASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledU
 RI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olc
 ArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAu
 thzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDit
 ContentRules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olc
 LogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ ol
 cObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash
  $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olc
 ReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestri
 ct $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ 
 olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ ol
 cSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificat
 eFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKe
 yFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $
  olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ 
 olcDbDirectory $ olcDbCheckpoint $ olcDbIndex $ olcDbMode $ olcDbCryptFile $ 
 olcDbPageSize $ olcDbLockDetect $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $
  olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $
  olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ 
 olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbIDA
 ssertPassThru $ olcChainingBehavior $ monitoredInfo $ managedInfo $ monitorCo
 nnectionLocalAddress $ monitorConnectionPeerAddress $ monitorOverlay $ restri
 ctedOperation $ monitorConnectionProtocol $ monitorConnectionMask $ monitorCo
 nnectionListener $ monitorConnectionPeerDomain $ monitorUpdateRef $ olcAuditl
 ogFile $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLog
 OldAttr $ olcAccessLogBase $ reqType $ reqSession $ reqMessage $ reqReferral 
 $ reqMethod $ reqAssertion $ reqScope $ reqDerefAliases $ reqFilter $ reqAttr
  $ olcDlAttrSet $ olcRefintAttribute $ olcMemberOfDangling $ olcMemberOfGroup
 OC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError $
  errOp $ errText $ olcRetcodeItem $ olcSpCheckpoint $ olcTranslucentLocal $ o
 lcTranslucentRemote $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ o
 lcValSortAttr $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinterv
 al $ olcDDStolerance $ olcSmbK5PwdEnable $ olmDbDirectory $ olmDbURIList $ kn
 owledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title
  $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName
  $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQual
 ifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $
  drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $
  documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $
  organizationalStatus $ buildingName $ documentPublisher $ carLicense $ depar
 tmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguage
  $ ipServiceProtocol $ nisMapName $ javaClassName $ javaClassNames $ javaFact
 ory $ javaReferenceAddress $ corbaRepositoryId $ memberURL $ xmlPrivilegeInfo
  $ xmlPrivPolicy $ defaultServerList $ preferredServerList $ authenticationMe
 thod $ serviceSearchDescriptor $ serviceAuthenticationMethod $ entrustRoaming
 Id $ eduPersonAffiliation $ eduPersonNickname $ eduPersonPrimaryAffiliation $
  eduPersonPrincipalName $ eduPersonEntitlement $ eduPersonScopedAffiliation $
  eduOrgLegalName $ schacMotherTongue $ schacPlaceOfBirth $ schacCountryOfCiti
 zenship $ schacSn1 $ schacSn2 $ schacPersonalTitle $ schacHomeOrganization $ 
 schacHomeOrganizationType $ schacCountryOfResidence $ schacUserPresenceID $ s
 chacPersonalPosition $ schacPersonalUniqueCode $ schacPersonalUniqueID $ scha
 cUserStatus $ schacProjectMembership $ schacProjectSpecificRole $ nisDomain $
  SolarisLDAPServers $ SolarisSearchBaseDN $ SolarisBindDN $ SolarisBindPasswo
 rd $ SolarisAuthMethod $ SolarisTransportSecurity $ SolarisDataSearchDN $ Sol
 arisSearchScope $ SolarisPreferedServer $ SolarisPreferedServerOnly $ Solaris
 SearchReferral $ middleName $ xmozillanickname $ mozillaHomeLocalityName $ mo
 zillaHomeState $ mozillaHomePostalCode $ mozillaHomeCountryName $ mozillaHome
 FriendlyCountryName $ sambaLogonScript $ sambaProfilePath $ sambaUserWorkstat
 ions $ sambaHomePath $ sambaDomainName $ sambaMungedDial $ sambaShareName $ s
 ambaOptionName $ sambaStringListOption $ sambaTrustPartner $ sambaFlatName $ 
 sambaTrustAuthOutgoing $ sambaTrustAuthIncoming $ sambaTrustForestTrustInfo $
  krbLdapServers $ krbPrincNamingAttr $ krbDefaultEncSaltTypes $ krbSupportedE
 ncSaltTypes $ esgSid $ esgSN $ esgInfo $ esgInfoUri $ esgContact $ esgCategor
 y $ esgTool $ esgSource $ esgFormat $ esgStreamUri $ esgSdpUri $ x509keyUsage
  $ vPIMTelephoneNumber $ vPIMTextName $ astUsername $ astSecret $ astMailbox 
 $ astTemplate $ astFromdomain $ astRegexten $ astFromuser $ astHost $ astMask
  $ astPort $ astQualify $ astDefaultip $ astRtptimeout $ astRtpholdtimeout $ 
 astContext $ astPermit $ astDeny $ astMd5Secret $ astDtmfmode $ astCanReinvit
 e $ astNat $ astCallgroup $ astPickupgroup $ astLanguage $ astAllow $ astDisa
 llow $ astInsecure $ astTrustrpid $ astProgressinband $ astPromiscredir $ ast
 Callerid $ astAccountcode $ astAmaflags $ astIncominglimit $ astRestrictcid $
  astReghost $ astRegport $ astRegseconds $ astName $ astAuth $ astInkeys $ as
 tNotransfer $ astJitterbuffer $ astSendani $ astPeercontext $ astTrunk $ astO
 utkey $ astIPaddr $ pgpSoftware $ pgpVersion $ pgpCertID $ pgpDisabled $ pgpK
 eyID $ pgpKeyType $ pgpUserID $ pgpKeyCreateTime $ pgpSignerID $ pgpRevoked $
  pgpSubKeyID $ pgpKeySize $ pgpKeyExpireTime $ pgpReconCertID $ pgpElementTyp
 e $ calCalURI $ calFBURL $ calCAPURI $ calCalAdrURI $ calOtherCalURIs $ calOt
 herFBURLs $ calOtherCAPURIs $ calOtherCalAdrURIs $ turbaMembers $ arrayIndex 
 $ dlmIdentifyingDescription $ dlmOtherIdentifyingInfo $ orderedCimKeys $ orde
 redCimModelPath $ dlmCaption $ dlmDescription $ dlmName $ dlmStatus $ dlmCrea
 tionClassName $ dlmNameFormat $ dlmPrimaryOwnerContact $ dlmPrimaryOwnerName 
 $ dlmRoles $ dlmStartMode $ dlmSettingID $ dlm1FilterListDirection $ dlmProto
 colType $ dlmOtherTypeDescription $ dlmIPAddress $ dlmIPSubnetMask $ dlmIPAdd
 ressType $ dlmIPVersionSupport $ dlmElementID $ dlmRemoteID $ dlmAlgorithm $ 
 dlmProtocol $ dlmSecret $ pcimRoles $ pcimKeywords $ pcimGroupName $ pcimRule
 Name $ pcimRuleUsage $ pcimConditionName $ pcimActionName $ pcimRepositoryNam
 e $ pcelsPolicySetName $ pcelsVariableName $ pcelsVariableModelClass $ pcelsV
 ariableModelProperty $ pcelsExpectedValueTypes $ pcelsValueName $ pcelsIPv4Ad
 drList $ pcelsIPv6AddrList $ pcelsMACAddrList $ pcelsStringList $ pcelsBitStr
 ingList $ pcelsIntegerList $ pcelsReusableContainerName $ pcelsRole $ pcelsRo
 leCollectionName $ pcelsFilterName $ pcelsFilterListName $ demailMaxAuthLevel
  $ birthPlace $ birthName $ businessTitle $ academicTitle $ nickName $ labele
 dBICandIBAN $ germanTaxId $ musicalInstrument $ musicalOrchestra $ musicalArt
 istName $ germanBankName $ germanBankAccountInfo $ germanBankAccountHolder $ 
 sAMAccountName $ userPrincipalName ) )
matchingRuleUse: ( 2.5.13.5 NAME 'caseExactMatch' APPLIES ( supportedSASLMecha
 nisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ des
 cription $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile
  $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolic
 y $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentR
 ules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile 
 $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectI
 dentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPi
 dFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaA
 rgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olc
 RootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSaslS
 ecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubordi
 nate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $ 
 olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ 
 olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLSV
 erifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDir
 ectory $ olcDbCheckpoint $ olcDbIndex $ olcDbMode $ olcDbCryptFile $ olcDbPag
 eSize $ olcDbLockDetect $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbAC
 LBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbID
 AssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbCon
 nTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbIDAssertPas
 sThru $ olcChainingBehavior $ monitoredInfo $ managedInfo $ monitorConnection
 LocalAddress $ monitorConnectionPeerAddress $ monitorOverlay $ restrictedOper
 ation $ monitorConnectionProtocol $ monitorConnectionMask $ monitorConnection
 Listener $ monitorConnectionPeerDomain $ monitorUpdateRef $ olcAuditlogFile $
  olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr 
 $ olcAccessLogBase $ reqType $ reqSession $ reqMessage $ reqReferral $ reqMet
 hod $ reqAssertion $ reqScope $ reqDerefAliases $ reqFilter $ reqAttr $ olcDl
 AttrSet $ olcRefintAttribute $ olcMemberOfDangling $ olcMemberOfGroupOC $ olc
 MemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError $ errOp $
  errText $ olcRetcodeItem $ olcSpCheckpoint $ olcTranslucentLocal $ olcTransl
 ucentRemote $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ olcValSor
 tAttr $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinterval $ olc
 DDStolerance $ olcSmbK5PwdEnable $ olmDbDirectory $ olmDbURIList $ knowledgeI
 nformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ busin
 essCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ desti
 nationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ 
 houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink $
  roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ documen
 tVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organiz
 ationalStatus $ buildingName $ documentPublisher $ carLicense $ departmentNum
 ber $ displayName $ employeeNumber $ employeeType $ preferredLanguage $ ipSer
 viceProtocol $ nisMapName $ javaClassName $ javaClassNames $ javaFactory $ ja
 vaReferenceAddress $ corbaRepositoryId $ memberURL $ xmlPrivilegeInfo $ xmlPr
 ivPolicy $ defaultServerList $ preferredServerList $ authenticationMethod $ s
 erviceSearchDescriptor $ serviceAuthenticationMethod $ entrustRoamingId $ edu
 PersonAffiliation $ eduPersonNickname $ eduPersonPrimaryAffiliation $ eduPers
 onPrincipalName $ eduPersonEntitlement $ eduPersonScopedAffiliation $ eduOrgL
 egalName $ schacMotherTongue $ schacPlaceOfBirth $ schacCountryOfCitizenship 
 $ schacSn1 $ schacSn2 $ schacPersonalTitle $ schacHomeOrganization $ schacHom
 eOrganizationType $ schacCountryOfResidence $ schacUserPresenceID $ schacPers
 onalPosition $ schacPersonalUniqueCode $ schacPersonalUniqueID $ schacUserSta
 tus $ schacProjectMembership $ schacProjectSpecificRole $ nisDomain $ Solaris
 LDAPServers $ SolarisSearchBaseDN $ SolarisBindDN $ SolarisBindPassword $ Sol
 arisAuthMethod $ SolarisTransportSecurity $ SolarisDataSearchDN $ SolarisSear
 chScope $ SolarisPreferedServer $ SolarisPreferedServerOnly $ SolarisSearchRe
 ferral $ middleName $ xmozillanickname $ mozillaHomeLocalityName $ mozillaHom
 eState $ mozillaHomePostalCode $ mozillaHomeCountryName $ mozillaHomeFriendly
 CountryName $ sambaLogonScript $ sambaProfilePath $ sambaUserWorkstations $ s
 ambaHomePath $ sambaDomainName $ sambaMungedDial $ sambaShareName $ sambaOpti
 onName $ sambaStringListOption $ sambaTrustPartner $ sambaFlatName $ sambaTru
 stAuthOutgoing $ sambaTrustAuthIncoming $ sambaTrustForestTrustInfo $ krbLdap
 Servers $ krbPrincNamingAttr $ krbDefaultEncSaltTypes $ krbSupportedEncSaltTy
 pes $ esgSid $ esgSN $ esgInfo $ esgInfoUri $ esgContact $ esgCategory $ esgT
 ool $ esgSource $ esgFormat $ esgStreamUri $ esgSdpUri $ x509keyUsage $ vPIMT
 elephoneNumber $ vPIMTextName $ astUsername $ astSecret $ astMailbox $ astTem
 plate $ astFromdomain $ astRegexten $ astFromuser $ astHost $ astMask $ astPo
 rt $ astQualify $ astDefaultip $ astRtptimeout $ astRtpholdtimeout $ astConte
 xt $ astPermit $ astDeny $ astMd5Secret $ astDtmfmode $ astCanReinvite $ astN
 at $ astCallgroup $ astPickupgroup $ astLanguage $ astAllow $ astDisallow $ a
 stInsecure $ astTrustrpid $ astProgressinband $ astPromiscredir $ astCallerid
  $ astAccountcode $ astAmaflags $ astIncominglimit $ astRestrictcid $ astRegh
 ost $ astRegport $ astRegseconds $ astName $ astAuth $ astInkeys $ astNotrans
 fer $ astJitterbuffer $ astSendani $ astPeercontext $ astTrunk $ astOutkey $ 
 astIPaddr $ pgpSoftware $ pgpVersion $ pgpCertID $ pgpDisabled $ pgpKeyID $ p
 gpKeyType $ pgpUserID $ pgpKeyCreateTime $ pgpSignerID $ pgpRevoked $ pgpSubK
 eyID $ pgpKeySize $ pgpKeyExpireTime $ pgpReconCertID $ pgpElementType $ calC
 alURI $ calFBURL $ calCAPURI $ calCalAdrURI $ calOtherCalURIs $ calOtherFBURL
 s $ calOtherCAPURIs $ calOtherCalAdrURIs $ turbaMembers $ arrayIndex $ dlmIde
 ntifyingDescription $ dlmOtherIdentifyingInfo $ orderedCimKeys $ orderedCimMo
 delPath $ dlmCaption $ dlmDescription $ dlmName $ dlmStatus $ dlmCreationClas
 sName $ dlmNameFormat $ dlmPrimaryOwnerContact $ dlmPrimaryOwnerName $ dlmRol
 es $ dlmStartMode $ dlmSettingID $ dlm1FilterListDirection $ dlmProtocolType 
 $ dlmOtherTypeDescription $ dlmIPAddress $ dlmIPSubnetMask $ dlmIPAddressType
  $ dlmIPVersionSupport $ dlmElementID $ dlmRemoteID $ dlmAlgorithm $ dlmProto
 col $ dlmSecret $ pcimRoles $ pcimKeywords $ pcimGroupName $ pcimRuleName $ p
 cimRuleUsage $ pcimConditionName $ pcimActionName $ pcimRepositoryName $ pcel
 sPolicySetName $ pcelsVariableName $ pcelsVariableModelClass $ pcelsVariableM
 odelProperty $ pcelsExpectedValueTypes $ pcelsValueName $ pcelsIPv4AddrList $
  pcelsIPv6AddrList $ pcelsMACAddrList $ pcelsStringList $ pcelsBitStringList 
 $ pcelsIntegerList $ pcelsReusableContainerName $ pcelsRole $ pcelsRoleCollec
 tionName $ pcelsFilterName $ pcelsFilterListName $ demailMaxAuthLevel $ birth
 Place $ birthName $ businessTitle $ academicTitle $ nickName $ labeledBICandI
 BAN $ germanTaxId $ musicalInstrument $ musicalOrchestra $ musicalArtistName 
 $ germanBankName $ germanBankAccountInfo $ germanBankAccountHolder $ sAMAccou
 ntName $ userPrincipalName ) )
matchingRuleUse: ( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch' APPLIES ( serialN
 umber $ destinationIndicator $ dnQualifier $ vPIMTelephoneNumber ) )
matchingRuleUse: ( 2.5.13.3 NAME 'caseIgnoreOrderingMatch' APPLIES ( supported
 SASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeled
 URI $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ ol
 cArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcA
 uthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDi
 tContentRules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ ol
 cLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ o
 lcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHas
 h $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ ol
 cReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestr
 ict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $
  olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ o
 lcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertifica
 teFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateK
 eyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile 
 $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $
  olcDbDirectory $ olcDbCheckpoint $ olcDbIndex $ olcDbMode $ olcDbCryptFile $
  olcDbPageSize $ olcDbLockDetect $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd 
 $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode 
 $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $
  olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbID
 AssertPassThru $ olcChainingBehavior $ monitoredInfo $ managedInfo $ monitorC
 onnectionLocalAddress $ monitorConnectionPeerAddress $ monitorOverlay $ restr
 ictedOperation $ monitorConnectionProtocol $ monitorConnectionMask $ monitorC
 onnectionListener $ monitorConnectionPeerDomain $ monitorUpdateRef $ olcAudit
 logFile $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLo
 gOldAttr $ olcAccessLogBase $ reqType $ reqSession $ reqMessage $ reqReferral
  $ reqMethod $ reqAssertion $ reqScope $ reqDerefAliases $ reqFilter $ reqAtt
 r $ olcDlAttrSet $ olcRefintAttribute $ olcMemberOfDangling $ olcMemberOfGrou
 pOC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError 
 $ errOp $ errText $ olcRetcodeItem $ olcSpCheckpoint $ olcTranslucentLocal $ 
 olcTranslucentRemote $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ 
 olcValSortAttr $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinter
 val $ olcDDStolerance $ olcSmbK5PwdEnable $ olmDbDirectory $ olmDbURIList $ k
 nowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ titl
 e $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeNam
 e $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQua
 lifier $ houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info 
 $ drink $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle 
 $ documentVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier 
 $ organizationalStatus $ buildingName $ documentPublisher $ carLicense $ depa
 rtmentNumber $ displayName $ employeeNumber $ employeeType $ preferredLanguag
 e $ ipServiceProtocol $ nisMapName $ javaClassName $ javaClassNames $ javaFac
 tory $ javaReferenceAddress $ corbaRepositoryId $ memberURL $ xmlPrivilegeInf
 o $ xmlPrivPolicy $ defaultServerList $ preferredServerList $ authenticationM
 ethod $ serviceSearchDescriptor $ serviceAuthenticationMethod $ entrustRoamin
 gId $ eduPersonAffiliation $ eduPersonNickname $ eduPersonPrimaryAffiliation 
 $ eduPersonPrincipalName $ eduPersonEntitlement $ eduPersonScopedAffiliation 
 $ eduOrgLegalName $ schacMotherTongue $ schacPlaceOfBirth $ schacCountryOfCit
 izenship $ schacSn1 $ schacSn2 $ schacPersonalTitle $ schacHomeOrganization $
  schacHomeOrganizationType $ schacCountryOfResidence $ schacUserPresenceID $ 
 schacPersonalPosition $ schacPersonalUniqueCode $ schacPersonalUniqueID $ sch
 acUserStatus $ schacProjectMembership $ schacProjectSpecificRole $ nisDomain 
 $ SolarisLDAPServers $ SolarisSearchBaseDN $ SolarisBindDN $ SolarisBindPassw
 ord $ SolarisAuthMethod $ SolarisTransportSecurity $ SolarisDataSearchDN $ So
 larisSearchScope $ SolarisPreferedServer $ SolarisPreferedServerOnly $ Solari
 sSearchReferral $ middleName $ xmozillanickname $ mozillaHomeLocalityName $ m
 ozillaHomeState $ mozillaHomePostalCode $ mozillaHomeCountryName $ mozillaHom
 eFriendlyCountryName $ sambaLogonScript $ sambaProfilePath $ sambaUserWorksta
 tions $ sambaHomePath $ sambaDomainName $ sambaMungedDial $ sambaShareName $ 
 sambaOptionName $ sambaStringListOption $ sambaTrustPartner $ sambaFlatName $
  sambaTrustAuthOutgoing $ sambaTrustAuthIncoming $ sambaTrustForestTrustInfo 
 $ krbLdapServers $ krbPrincNamingAttr $ krbDefaultEncSaltTypes $ krbSupported
 EncSaltTypes $ esgSid $ esgSN $ esgInfo $ esgInfoUri $ esgContact $ esgCatego
 ry $ esgTool $ esgSource $ esgFormat $ esgStreamUri $ esgSdpUri $ x509keyUsag
 e $ vPIMTelephoneNumber $ vPIMTextName $ astUsername $ astSecret $ astMailbox
  $ astTemplate $ astFromdomain $ astRegexten $ astFromuser $ astHost $ astMas
 k $ astPort $ astQualify $ astDefaultip $ astRtptimeout $ astRtpholdtimeout $
  astContext $ astPermit $ astDeny $ astMd5Secret $ astDtmfmode $ astCanReinvi
 te $ astNat $ astCallgroup $ astPickupgroup $ astLanguage $ astAllow $ astDis
 allow $ astInsecure $ astTrustrpid $ astProgressinband $ astPromiscredir $ as
 tCallerid $ astAccountcode $ astAmaflags $ astIncominglimit $ astRestrictcid 
 $ astReghost $ astRegport $ astRegseconds $ astName $ astAuth $ astInkeys $ a
 stNotransfer $ astJitterbuffer $ astSendani $ astPeercontext $ astTrunk $ ast
 Outkey $ astIPaddr $ pgpSoftware $ pgpVersion $ pgpCertID $ pgpDisabled $ pgp
 KeyID $ pgpKeyType $ pgpUserID $ pgpKeyCreateTime $ pgpSignerID $ pgpRevoked 
 $ pgpSubKeyID $ pgpKeySize $ pgpKeyExpireTime $ pgpReconCertID $ pgpElementTy
 pe $ calCalURI $ calFBURL $ calCAPURI $ calCalAdrURI $ calOtherCalURIs $ calO
 therFBURLs $ calOtherCAPURIs $ calOtherCalAdrURIs $ turbaMembers $ arrayIndex
  $ dlmIdentifyingDescription $ dlmOtherIdentifyingInfo $ orderedCimKeys $ ord
 eredCimModelPath $ dlmCaption $ dlmDescription $ dlmName $ dlmStatus $ dlmCre
 ationClassName $ dlmNameFormat $ dlmPrimaryOwnerContact $ dlmPrimaryOwnerName
  $ dlmRoles $ dlmStartMode $ dlmSettingID $ dlm1FilterListDirection $ dlmProt
 ocolType $ dlmOtherTypeDescription $ dlmIPAddress $ dlmIPSubnetMask $ dlmIPAd
 dressType $ dlmIPVersionSupport $ dlmElementID $ dlmRemoteID $ dlmAlgorithm $
  dlmProtocol $ dlmSecret $ pcimRoles $ pcimKeywords $ pcimGroupName $ pcimRul
 eName $ pcimRuleUsage $ pcimConditionName $ pcimActionName $ pcimRepositoryNa
 me $ pcelsPolicySetName $ pcelsVariableName $ pcelsVariableModelClass $ pcels
 VariableModelProperty $ pcelsExpectedValueTypes $ pcelsValueName $ pcelsIPv4A
 ddrList $ pcelsIPv6AddrList $ pcelsMACAddrList $ pcelsStringList $ pcelsBitSt
 ringList $ pcelsIntegerList $ pcelsReusableContainerName $ pcelsRole $ pcelsR
 oleCollectionName $ pcelsFilterName $ pcelsFilterListName $ demailMaxAuthLeve
 l $ birthPlace $ birthName $ businessTitle $ academicTitle $ nickName $ label
 edBICandIBAN $ germanTaxId $ musicalInstrument $ musicalOrchestra $ musicalAr
 tistName $ germanBankName $ germanBankAccountInfo $ germanBankAccountHolder $
  sAMAccountName $ userPrincipalName ) )
matchingRuleUse: ( 2.5.13.2 NAME 'caseIgnoreMatch' APPLIES ( supportedSASLMech
 anisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ de
 scription $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFil
 e $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPoli
 cy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContent
 Rules $ olcExtraAttrs $ olcInclude $ olcLdapSyntaxes $ olcLimits $ olcLogFile
  $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObject
 Identifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcP
 idFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplica
 ArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ ol
 cRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ olcSasl
 SecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSortVals $ olcSubord
 inate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit $ olcTLSCACertificateFile $
  olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $
  olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $ olcTLSRandFile $ olcTLS
 VerifyClient $ olcTLSDHParamFile $ olcTLSProtocolMin $ olcUpdateRef $ olcDbDi
 rectory $ olcDbCheckpoint $ olcDbIndex $ olcDbMode $ olcDbCryptFile $ olcDbPa
 geSize $ olcDbLockDetect $ olcDbURI $ olcDbStartTLS $ olcDbACLPasswd $ olcDbA
 CLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcDbI
 DAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdleTimeout $ olcDbCo
 nnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuarantine $ olcDbIDAssertPa
 ssThru $ olcChainingBehavior $ monitoredInfo $ managedInfo $ monitorConnectio
 nLocalAddress $ monitorConnectionPeerAddress $ monitorOverlay $ restrictedOpe
 ration $ monitorConnectionProtocol $ monitorConnectionMask $ monitorConnectio
 nListener $ monitorConnectionPeerDomain $ monitorUpdateRef $ olcAuditlogFile 
 $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr
  $ olcAccessLogBase $ reqType $ reqSession $ reqMessage $ reqReferral $ reqMe
 thod $ reqAssertion $ reqScope $ reqDerefAliases $ reqFilter $ reqAttr $ olcD
 lAttrSet $ olcRefintAttribute $ olcMemberOfDangling $ olcMemberOfGroupOC $ ol
 cMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMemberOfDanglingError $ errOp 
 $ errText $ olcRetcodeItem $ olcSpCheckpoint $ olcTranslucentLocal $ olcTrans
 lucentRemote $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI $ olcValSo
 rtAttr $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDSinterval $ ol
 cDDStolerance $ olcSmbK5PwdEnable $ olmDbDirectory $ olmDbURIList $ knowledge
 Information $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ busi
 nessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ dest
 inationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $
  houseIdentifier $ dmdName $ pseudonym $ textEncodedORAddress $ info $ drink 
 $ roomNumber $ userClass $ host $ documentIdentifier $ documentTitle $ docume
 ntVersion $ documentLocation $ personalTitle $ co $ uniqueIdentifier $ organi
 zationalStatus $ buildingName $ documentPublisher $ carLicense $ departmentNu
 mber $ displayName $ employeeNumber $ employeeType $ preferredLanguage $ ipSe
 rviceProtocol $ nisMapName $ javaClassName $ javaClassNames $ javaFactory $ j
 avaReferenceAddress $ corbaRepositoryId $ memberURL $ xmlPrivilegeInfo $ xmlP
 rivPolicy $ defaultServerList $ preferredServerList $ authenticationMethod $ 
 serviceSearchDescriptor $ serviceAuthenticationMethod $ entrustRoamingId $ ed
 uPersonAffiliation $ eduPersonNickname $ eduPersonPrimaryAffiliation $ eduPer
 sonPrincipalName $ eduPersonEntitlement $ eduPersonScopedAffiliation $ eduOrg
 LegalName $ schacMotherTongue $ schacPlaceOfBirth $ schacCountryOfCitizenship
  $ schacSn1 $ schacSn2 $ schacPersonalTitle $ schacHomeOrganization $ schacHo
 meOrganizationType $ schacCountryOfResidence $ schacUserPresenceID $ schacPer
 sonalPosition $ schacPersonalUniqueCode $ schacPersonalUniqueID $ schacUserSt
 atus $ schacProjectMembership $ schacProjectSpecificRole $ nisDomain $ Solari
 sLDAPServers $ SolarisSearchBaseDN $ SolarisBindDN $ SolarisBindPassword $ So
 larisAuthMethod $ SolarisTransportSecurity $ SolarisDataSearchDN $ SolarisSea
 rchScope $ SolarisPreferedServer $ SolarisPreferedServerOnly $ SolarisSearchR
 eferral $ middleName $ xmozillanickname $ mozillaHomeLocalityName $ mozillaHo
 meState $ mozillaHomePostalCode $ mozillaHomeCountryName $ mozillaHomeFriendl
 yCountryName $ sambaLogonScript $ sambaProfilePath $ sambaUserWorkstations $ 
 sambaHomePath $ sambaDomainName $ sambaMungedDial $ sambaShareName $ sambaOpt
 ionName $ sambaStringListOption $ sambaTrustPartner $ sambaFlatName $ sambaTr
 ustAuthOutgoing $ sambaTrustAuthIncoming $ sambaTrustForestTrustInfo $ krbLda
 pServers $ krbPrincNamingAttr $ krbDefaultEncSaltTypes $ krbSupportedEncSaltT
 ypes $ esgSid $ esgSN $ esgInfo $ esgInfoUri $ esgContact $ esgCategory $ esg
 Tool $ esgSource $ esgFormat $ esgStreamUri $ esgSdpUri $ x509keyUsage $ vPIM
 TelephoneNumber $ vPIMTextName $ astUsername $ astSecret $ astMailbox $ astTe
 mplate $ astFromdomain $ astRegexten $ astFromuser $ astHost $ astMask $ astP
 ort $ astQualify $ astDefaultip $ astRtptimeout $ astRtpholdtimeout $ astCont
 ext $ astPermit $ astDeny $ astMd5Secret $ astDtmfmode $ astCanReinvite $ ast
 Nat $ astCallgroup $ astPickupgroup $ astLanguage $ astAllow $ astDisallow $ 
 astInsecure $ astTrustrpid $ astProgressinband $ astPromiscredir $ astCalleri
 d $ astAccountcode $ astAmaflags $ astIncominglimit $ astRestrictcid $ astReg
 host $ astRegport $ astRegseconds $ astName $ astAuth $ astInkeys $ astNotran
 sfer $ astJitterbuffer $ astSendani $ astPeercontext $ astTrunk $ astOutkey $
  astIPaddr $ pgpSoftware $ pgpVersion $ pgpCertID $ pgpDisabled $ pgpKeyID $ 
 pgpKeyType $ pgpUserID $ pgpKeyCreateTime $ pgpSignerID $ pgpRevoked $ pgpSub
 KeyID $ pgpKeySize $ pgpKeyExpireTime $ pgpReconCertID $ pgpElementType $ cal
 CalURI $ calFBURL $ calCAPURI $ calCalAdrURI $ calOtherCalURIs $ calOtherFBUR
 Ls $ calOtherCAPURIs $ calOtherCalAdrURIs $ turbaMembers $ arrayIndex $ dlmId
 entifyingDescription $ dlmOtherIdentifyingInfo $ orderedCimKeys $ orderedCimM
 odelPath $ dlmCaption $ dlmDescription $ dlmName $ dlmStatus $ dlmCreationCla
 ssName $ dlmNameFormat $ dlmPrimaryOwnerContact $ dlmPrimaryOwnerName $ dlmRo
 les $ dlmStartMode $ dlmSettingID $ dlm1FilterListDirection $ dlmProtocolType
  $ dlmOtherTypeDescription $ dlmIPAddress $ dlmIPSubnetMask $ dlmIPAddressTyp
 e $ dlmIPVersionSupport $ dlmElementID $ dlmRemoteID $ dlmAlgorithm $ dlmProt
 ocol $ dlmSecret $ pcimRoles $ pcimKeywords $ pcimGroupName $ pcimRuleName $ 
 pcimRuleUsage $ pcimConditionName $ pcimActionName $ pcimRepositoryName $ pce
 lsPolicySetName $ pcelsVariableName $ pcelsVariableModelClass $ pcelsVariable
 ModelProperty $ pcelsExpectedValueTypes $ pcelsValueName $ pcelsIPv4AddrList 
 $ pcelsIPv6AddrList $ pcelsMACAddrList $ pcelsStringList $ pcelsBitStringList
  $ pcelsIntegerList $ pcelsReusableContainerName $ pcelsRole $ pcelsRoleColle
 ctionName $ pcelsFilterName $ pcelsFilterListName $ demailMaxAuthLevel $ birt
 hPlace $ birthName $ businessTitle $ academicTitle $ nickName $ labeledBICand
 IBAN $ germanTaxId $ musicalInstrument $ musicalOrchestra $ musicalArtistName
  $ germanBankName $ germanBankAccountInfo $ germanBankAccountHolder $ sAMAcco
 untName $ userPrincipalName ) )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.4.11 NAME 'dnSuperiorMatch' APPLIES ( 
 creatorsName $ modifiersName $ subschemaSubentry $ entryDN $ namingContexts $
  monitorContext $ configContext $ aliasedObjectName $ dynamicSubtrees $ disti
 nguishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olc
 Suffix $ olcUpdateDN $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ monitorConnec
 tionAuthzDN $ monitorSuperiorDN $ olcAccessLogDB $ reqDN $ reqAuthzID $ reqNe
 wRDN $ reqNewSuperior $ auditContext $ olcRefintNothing $ olcRefintModifiersN
 ame $ memberOf $ olcMemberOfDN $ errMatchedDN $ olcRetcodeParent $ olcUniqueB
 ase $ pwdPolicySubentry $ olcPPolicyDefault $ member $ owner $ roleOccupant $
  manager $ documentAuthor $ secretary $ associatedName $ dITRedirect $ dgIden
 tity $ defaultSearchBase $ eduPersonOrgDN $ eduPersonOrgUnitDN $ eduPersonPri
 maryOrgUnitDN $ radiusProfileDn $ krb5PrincipalRealm $ krbRealmReferences $ k
 rbKdcServers $ krbPwdServers $ krbPrincipalReferences $ krbAdmServers $ krbPw
 dPolicyReference $ krbTicketPolicyReference $ krbSubTrees $ krbObjectReferenc
 es $ krbPrincContainerRef $ esgContactDN $ dhcpPrimaryDN $ dhcpSecondaryDN $ 
 dhcpOptionsDN $ dhcpHostDN $ dhcpPoolDN $ dhcpGroupDN $ dhcpSubnetDN $ dhcpLe
 aseDN $ dhcpLeasesDN $ dhcpClassesDN $ dhcpSubclassesDN $ dhcpSharedNetworkDN
  $ dhcpServiceDN $ dhcpReservedForClient $ dhcpAssignedToClient $ x509CRLDPDN
  $ x509CRLCertIssuerDN $ x509issuer $ x509subject $ x509authorityCertIssuer $
  x509subjectDirectoryName $ x509issuerDirectoryName $ x509certLocation $ x509
 certHolder $ x509issuerSerial $ x509ACHolderPKCissuerDN $ x509ACHolderDN $ x5
 09ACTargetDN $ x509ACTargetGroupDN $ x509DPDN $ x509DPrelativeToIssuer $ x509
 DPissuerDN $ pgpBaseKeySpaceDN $ dlmElementSettingElementRef $ dlmElementSett
 ingSettingRef $ dlmMemberOfCollectionCollectionRef $ dlmMemberOfCollectionMem
 berRef $ dlmElementAsUserAntecedentRef $ dlmElementAsUserDependentRef $ dlmUs
 ersCredentialAntecedentRef $ dlmUsersCredentialDependentRef $ pcimConditionDN
  $ pcimActionDN $ pcelsPolicySetList $ pcelsPolicySetDN $ pcelsRuleValidityPe
 riodList $ pcelsConditionList $ pcelsActionList $ pcelsVariableDN $ pcelsValu
 eDN $ pcelsExpectedValueList $ pcelsReusableContainerList $ pcelsElementList 
 $ pcelsFilterEntryList $ delegatesTo ) )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.4.10 NAME 'dnSubordinateMatch' APPLIES
  ( creatorsName $ modifiersName $ subschemaSubentry $ entryDN $ namingContext
 s $ monitorContext $ configContext $ aliasedObjectName $ dynamicSubtrees $ di
 stinguishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ 
 olcSuffix $ olcUpdateDN $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ monitorCon
 nectionAuthzDN $ monitorSuperiorDN $ olcAccessLogDB $ reqDN $ reqAuthzID $ re
 qNewRDN $ reqNewSuperior $ auditContext $ olcRefintNothing $ olcRefintModifie
 rsName $ memberOf $ olcMemberOfDN $ errMatchedDN $ olcRetcodeParent $ olcUniq
 ueBase $ pwdPolicySubentry $ olcPPolicyDefault $ member $ owner $ roleOccupan
 t $ manager $ documentAuthor $ secretary $ associatedName $ dITRedirect $ dgI
 dentity $ defaultSearchBase $ eduPersonOrgDN $ eduPersonOrgUnitDN $ eduPerson
 PrimaryOrgUnitDN $ radiusProfileDn $ krb5PrincipalRealm $ krbRealmReferences 
 $ krbKdcServers $ krbPwdServers $ krbPrincipalReferences $ krbAdmServers $ kr
 bPwdPolicyReference $ krbTicketPolicyReference $ krbSubTrees $ krbObjectRefer
 ences $ krbPrincContainerRef $ esgContactDN $ dhcpPrimaryDN $ dhcpSecondaryDN
  $ dhcpOptionsDN $ dhcpHostDN $ dhcpPoolDN $ dhcpGroupDN $ dhcpSubnetDN $ dhc
 pLeaseDN $ dhcpLeasesDN $ dhcpClassesDN $ dhcpSubclassesDN $ dhcpSharedNetwor
 kDN $ dhcpServiceDN $ dhcpReservedForClient $ dhcpAssignedToClient $ x509CRLD
 PDN $ x509CRLCertIssuerDN $ x509issuer $ x509subject $ x509authorityCertIssue
 r $ x509subjectDirectoryName $ x509issuerDirectoryName $ x509certLocation $ x
 509certHolder $ x509issuerSerial $ x509ACHolderPKCissuerDN $ x509ACHolderDN $
  x509ACTargetDN $ x509ACTargetGroupDN $ x509DPDN $ x509DPrelativeToIssuer $ x
 509DPissuerDN $ pgpBaseKeySpaceDN $ dlmElementSettingElementRef $ dlmElementS
 ettingSettingRef $ dlmMemberOfCollectionCollectionRef $ dlmMemberOfCollection
 MemberRef $ dlmElementAsUserAntecedentRef $ dlmElementAsUserDependentRef $ dl
 mUsersCredentialAntecedentRef $ dlmUsersCredentialDependentRef $ pcimConditio
 nDN $ pcimActionDN $ pcelsPolicySetList $ pcelsPolicySetDN $ pcelsRuleValidit
 yPeriodList $ pcelsConditionList $ pcelsActionList $ pcelsVariableDN $ pcelsV
 alueDN $ pcelsExpectedValueList $ pcelsReusableContainerList $ pcelsElementLi
 st $ pcelsFilterEntryList $ delegatesTo ) )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.4.8 NAME 'dnOneLevelMatch' APPLIES ( c
 reatorsName $ modifiersName $ subschemaSubentry $ entryDN $ namingContexts $ 
 monitorContext $ configContext $ aliasedObjectName $ dynamicSubtrees $ distin
 guishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcS
 uffix $ olcUpdateDN $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ monitorConnect
 ionAuthzDN $ monitorSuperiorDN $ olcAccessLogDB $ reqDN $ reqAuthzID $ reqNew
 RDN $ reqNewSuperior $ auditContext $ olcRefintNothing $ olcRefintModifiersNa
 me $ memberOf $ olcMemberOfDN $ errMatchedDN $ olcRetcodeParent $ olcUniqueBa
 se $ pwdPolicySubentry $ olcPPolicyDefault $ member $ owner $ roleOccupant $ 
 manager $ documentAuthor $ secretary $ associatedName $ dITRedirect $ dgIdent
 ity $ defaultSearchBase $ eduPersonOrgDN $ eduPersonOrgUnitDN $ eduPersonPrim
 aryOrgUnitDN $ radiusProfileDn $ krb5PrincipalRealm $ krbRealmReferences $ kr
 bKdcServers $ krbPwdServers $ krbPrincipalReferences $ krbAdmServers $ krbPwd
 PolicyReference $ krbTicketPolicyReference $ krbSubTrees $ krbObjectReference
 s $ krbPrincContainerRef $ esgContactDN $ dhcpPrimaryDN $ dhcpSecondaryDN $ d
 hcpOptionsDN $ dhcpHostDN $ dhcpPoolDN $ dhcpGroupDN $ dhcpSubnetDN $ dhcpLea
 seDN $ dhcpLeasesDN $ dhcpClassesDN $ dhcpSubclassesDN $ dhcpSharedNetworkDN 
 $ dhcpServiceDN $ dhcpReservedForClient $ dhcpAssignedToClient $ x509CRLDPDN 
 $ x509CRLCertIssuerDN $ x509issuer $ x509subject $ x509authorityCertIssuer $ 
 x509subjectDirectoryName $ x509issuerDirectoryName $ x509certLocation $ x509c
 ertHolder $ x509issuerSerial $ x509ACHolderPKCissuerDN $ x509ACHolderDN $ x50
 9ACTargetDN $ x509ACTargetGroupDN $ x509DPDN $ x509DPrelativeToIssuer $ x509D
 PissuerDN $ pgpBaseKeySpaceDN $ dlmElementSettingElementRef $ dlmElementSetti
 ngSettingRef $ dlmMemberOfCollectionCollectionRef $ dlmMemberOfCollectionMemb
 erRef $ dlmElementAsUserAntecedentRef $ dlmElementAsUserDependentRef $ dlmUse
 rsCredentialAntecedentRef $ dlmUsersCredentialDependentRef $ pcimConditionDN 
 $ pcimActionDN $ pcelsPolicySetList $ pcelsPolicySetDN $ pcelsRuleValidityPer
 iodList $ pcelsConditionList $ pcelsActionList $ pcelsVariableDN $ pcelsValue
 DN $ pcelsExpectedValueList $ pcelsReusableContainerList $ pcelsElementList $
  pcelsFilterEntryList $ delegatesTo ) )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.4.9 NAME 'dnSubtreeMatch' APPLIES ( cr
 eatorsName $ modifiersName $ subschemaSubentry $ entryDN $ namingContexts $ m
 onitorContext $ configContext $ aliasedObjectName $ dynamicSubtrees $ disting
 uishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcSu
 ffix $ olcUpdateDN $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ monitorConnecti
 onAuthzDN $ monitorSuperiorDN $ olcAccessLogDB $ reqDN $ reqAuthzID $ reqNewR
 DN $ reqNewSuperior $ auditContext $ olcRefintNothing $ olcRefintModifiersNam
 e $ memberOf $ olcMemberOfDN $ errMatchedDN $ olcRetcodeParent $ olcUniqueBas
 e $ pwdPolicySubentry $ olcPPolicyDefault $ member $ owner $ roleOccupant $ m
 anager $ documentAuthor $ secretary $ associatedName $ dITRedirect $ dgIdenti
 ty $ defaultSearchBase $ eduPersonOrgDN $ eduPersonOrgUnitDN $ eduPersonPrima
 ryOrgUnitDN $ radiusProfileDn $ krb5PrincipalRealm $ krbRealmReferences $ krb
 KdcServers $ krbPwdServers $ krbPrincipalReferences $ krbAdmServers $ krbPwdP
 olicyReference $ krbTicketPolicyReference $ krbSubTrees $ krbObjectReferences
  $ krbPrincContainerRef $ esgContactDN $ dhcpPrimaryDN $ dhcpSecondaryDN $ dh
 cpOptionsDN $ dhcpHostDN $ dhcpPoolDN $ dhcpGroupDN $ dhcpSubnetDN $ dhcpLeas
 eDN $ dhcpLeasesDN $ dhcpClassesDN $ dhcpSubclassesDN $ dhcpSharedNetworkDN $
  dhcpServiceDN $ dhcpReservedForClient $ dhcpAssignedToClient $ x509CRLDPDN $
  x509CRLCertIssuerDN $ x509issuer $ x509subject $ x509authorityCertIssuer $ x
 509subjectDirectoryName $ x509issuerDirectoryName $ x509certLocation $ x509ce
 rtHolder $ x509issuerSerial $ x509ACHolderPKCissuerDN $ x509ACHolderDN $ x509
 ACTargetDN $ x509ACTargetGroupDN $ x509DPDN $ x509DPrelativeToIssuer $ x509DP
 issuerDN $ pgpBaseKeySpaceDN $ dlmElementSettingElementRef $ dlmElementSettin
 gSettingRef $ dlmMemberOfCollectionCollectionRef $ dlmMemberOfCollectionMembe
 rRef $ dlmElementAsUserAntecedentRef $ dlmElementAsUserDependentRef $ dlmUser
 sCredentialAntecedentRef $ dlmUsersCredentialDependentRef $ pcimConditionDN $
  pcimActionDN $ pcelsPolicySetList $ pcelsPolicySetDN $ pcelsRuleValidityPeri
 odList $ pcelsConditionList $ pcelsActionList $ pcelsVariableDN $ pcelsValueD
 N $ pcelsExpectedValueList $ pcelsReusableContainerList $ pcelsElementList $ 
 pcelsFilterEntryList $ delegatesTo ) )
matchingRuleUse: ( 2.5.13.1 NAME 'distinguishedNameMatch' APPLIES ( creatorsNa
 me $ modifiersName $ subschemaSubentry $ entryDN $ namingContexts $ monitorCo
 ntext $ configContext $ aliasedObjectName $ dynamicSubtrees $ distinguishedNa
 me $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcSuffix $ o
 lcUpdateDN $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ monitorConnectionAuthzD
 N $ monitorSuperiorDN $ olcAccessLogDB $ reqDN $ reqAuthzID $ reqNewRDN $ req
 NewSuperior $ auditContext $ olcRefintNothing $ olcRefintModifiersName $ memb
 erOf $ olcMemberOfDN $ errMatchedDN $ olcRetcodeParent $ olcUniqueBase $ pwdP
 olicySubentry $ olcPPolicyDefault $ member $ owner $ roleOccupant $ manager $
  documentAuthor $ secretary $ associatedName $ dITRedirect $ dgIdentity $ def
 aultSearchBase $ eduPersonOrgDN $ eduPersonOrgUnitDN $ eduPersonPrimaryOrgUni
 tDN $ radiusProfileDn $ krb5PrincipalRealm $ krbRealmReferences $ krbKdcServe
 rs $ krbPwdServers $ krbPrincipalReferences $ krbAdmServers $ krbPwdPolicyRef
 erence $ krbTicketPolicyReference $ krbSubTrees $ krbObjectReferences $ krbPr
 incContainerRef $ esgContactDN $ dhcpPrimaryDN $ dhcpSecondaryDN $ dhcpOption
 sDN $ dhcpHostDN $ dhcpPoolDN $ dhcpGroupDN $ dhcpSubnetDN $ dhcpLeaseDN $ dh
 cpLeasesDN $ dhcpClassesDN $ dhcpSubclassesDN $ dhcpSharedNetworkDN $ dhcpSer
 viceDN $ dhcpReservedForClient $ dhcpAssignedToClient $ x509CRLDPDN $ x509CRL
 CertIssuerDN $ x509issuer $ x509subject $ x509authorityCertIssuer $ x509subje
 ctDirectoryName $ x509issuerDirectoryName $ x509certLocation $ x509certHolder
  $ x509issuerSerial $ x509ACHolderPKCissuerDN $ x509ACHolderDN $ x509ACTarget
 DN $ x509ACTargetGroupDN $ x509DPDN $ x509DPrelativeToIssuer $ x509DPissuerDN
  $ pgpBaseKeySpaceDN $ dlmElementSettingElementRef $ dlmElementSettingSetting
 Ref $ dlmMemberOfCollectionCollectionRef $ dlmMemberOfCollectionMemberRef $ d
 lmElementAsUserAntecedentRef $ dlmElementAsUserDependentRef $ dlmUsersCredent
 ialAntecedentRef $ dlmUsersCredentialDependentRef $ pcimConditionDN $ pcimAct
 ionDN $ pcelsPolicySetList $ pcelsPolicySetDN $ pcelsRuleValidityPeriodList $
  pcelsConditionList $ pcelsActionList $ pcelsVariableDN $ pcelsValueDN $ pcel
 sExpectedValueList $ pcelsReusableContainerList $ pcelsElementList $ pcelsFil
 terEntryList $ delegatesTo ) )
matchingRuleUse: ( 2.5.13.0 NAME 'objectIdentifierMatch' APPLIES ( supportedCo
 ntrol $ supportedExtension $ supportedFeatures $ administrativeRole $ errUnso
 licitedOID $ allowedChildClasses $ allowedChildClassesEffective $ allowedAttr
 ibutes $ allowedAttributesEffective $ supportedApplicationContext $ x509CRLDP
 RegisteredID $ x509CRLCertIssuerRegisteredID $ x509CRLCertHoldInstructionCode
  $ x509signatureAlgorithm $ x509subjectPublicKeyInfoAlgorithm $ x509policyInf
 ormationIdentifier $ x509subjectRegisteredID $ x509issuerRegisteredID $ x509e
 xtKeyUsage $ x509ACHolderRegisteredID $ x509ACDigestAlgorithm $ x509ACTargetR
 egisteredID $ x509ACTargetGroupRegisteredID $ x509DPRegisteredID $ x509DPissu
 erRegisteredID $ pcelsVendorVariableEncoding $ pcelsVendorValueEncoding ) )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.4.5 NAME 'IA5StringApproxMatch' APPLIE
 S ( altServer $ olcDbConfig $ c $ mail $ dc $ associatedDomain $ email $ aRec
 ord $ mDRecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox
  $ mailLocalAddress $ mailHost $ mailRoutingAddress $ rfc822MailMember $ geco
 s $ homeDirectory $ loginShell $ memberUid $ memberNisNetgroup $ ipHostNumber
  $ ipNetworkNumber $ ipNetmaskNumber $ macAddress $ bootFile $ nisMapEntry $ 
 javaCodebase $ javaDoc $ corbaIor $ pwdCheckModule $ attributeMap $ credentia
 lLevel $ objectclassMap $ defaultSearchScope $ serviceCredentialLevel $ eduOr
 gHomePageURI $ eduOrgIdentityAuthNPolicyURI $ eduOrgSuperiorURI $ eduOrgWhite
 PagesURI $ schacUserPrivateAttribute $ dNSClass $ pTRRecord $ hInfoRecord $ m
 InfoRecord $ tXTRecord $ SigRecord $ KeyRecord $ aAAARecord $ LocRecord $ nXT
 Record $ sRVRecord $ nAPTRRecord $ kXRecord $ certRecord $ a6Record $ dNameRe
 cord $ nisPublickey $ nisSecretkey $ mgrpRFC822MailMember $ nisNetIdUser $ ni
 sNetIdGroup $ nisNetIdHost $ mozillaSecondEmail $ homeurl $ workurl $ custom1
  $ custom2 $ custom3 $ custom4 $ radiusArapFeatures $ radiusArapSecurity $ ra
 diusArapZoneAccess $ radiusAuthType $ radiusCallbackId $ radiusCallbackNumber
  $ radiusCalledStationId $ radiusCallingStationId $ radiusClass $ radiusClien
 tIPAddress $ radiusFilterId $ radiusFramedAppleTalkLink $ radiusFramedAppleTa
 lkNetwork $ radiusFramedAppleTalkZone $ radiusFramedCompression $ radiusFrame
 dIPAddress $ radiusFramedIPNetmask $ radiusFramedIPXNetwork $ radiusFramedMTU
  $ radiusFramedProtocol $ radiusFramedRoute $ radiusFramedRouting $ radiusGro
 upName $ radiusHint $ radiusHuntgroupName $ radiusIdleTimeout $ radiusLoginIP
 Host $ radiusLoginLATGroup $ radiusLoginLATNode $ radiusLoginLATPort $ radius
 LoginLATService $ radiusLoginService $ radiusLoginTCPPort $ radiusPasswordRet
 ry $ radiusPortLimit $ radiusPrompt $ radiusProxyToRealm $ radiusReplicateToR
 ealm $ radiusRealm $ radiusServiceType $ radiusSessionTimeout $ radiusTermina
 tionAction $ radiusTunnelAssignmentId $ radiusTunnelMediumType $ radiusTunnel
 Password $ radiusTunnelPreference $ radiusTunnelPrivateGroupId $ radiusTunnel
 ServerEndpoint $ radiusTunnelType $ radiusVSA $ radiusTunnelClientEndpoint $ 
 radiusLoginTime $ radiusUserCategory $ dialupAccess $ radiusExpiration $ radi
 usCheckItem $ radiusReplyItem $ sambaLMPassword $ sambaNTPassword $ sambaAcct
 Flags $ sambaLogonHours $ sambaHomeDrive $ sambaPasswordHistory $ sambaSID $ 
 sambaPrimaryGroupSID $ sambaSIDList $ sambaStringOption $ sambaTrustFlags $ s
 ambaSecurityIdentifier $ krb5PrincipalName $ krbPrincipalName $ krbCanonicalN
 ame $ krbHostServer $ krbPrincipalAliases $ krbAllowedToDelegateTo $ esgConta
 ctMail $ dhcpStatements $ dhcpRange $ dhcpPermitList $ dhcpClassData $ dhcpVe
 rsion $ dhcpImplementation $ dhcpAddressState $ dhcpDomainName $ dhcpRequeste
 dHostName $ dhcpAssignedHostName $ dhcpFailOverEndpointState $ dhcpErrorLog $
  automountInformation $ x509CRLDPRfc822Name $ x509CRLDPDnsName $ x509CRLDPURI
  $ x509CRLDPIpAddress $ x509CRLCertIssuerRfc822Name $ x509CRLCertIssuerDnsNam
 e $ x509CRLCertIssuerURI $ x509CRLCertIssuerIpAddress $ x509subjectRfc822Name
  $ x509subjectDnsName $ x509subjectUniformResourceIdentifier $ x509subjectIpA
 ddress $ x509issuerRfc822Name $ x509issuerDnsName $ x509issuerUniformResource
 Identifier $ x509issuerIpAddress $ x509fullCRLDistributionPointURI $ x509ACHo
 lderRfc822Name $ x509ACHolderDNSName $ x509ACHolderURI $ x509ACHolderIPAddres
 s $ x509ACTargetRfc822Name $ x509ACTargetDNSName $ x509ACTargetURI $ x509ACTa
 rgetIPAddress $ x509ACTargetGroupRfc822Name $ x509ACTargetGroupDNSName $ x509
 ACTargetGroupURI $ x509ACTargetGroupIPAddress $ x509DPRfc822Name $ x509DPDNSN
 ame $ x509DPURI $ x509DPIPAddress $ x509DPissuerRfc822Name $ x509DPissuerDNSN
 ame $ x509DPissuerURI $ x509DPissuerIPAddress $ vPIMRfc822Mailbox $ vPIMSuppo
 rtedAudioMediaTypes $ vPIMSupportedMessageContext $ vPIMExtendedAbsenceStatus
  $ vPIMSupportedUABehaviors $ pgpKey $ hordePrefs $ impPrefs $ turbaPrefs $ t
 urbaType $ turbaPGPPublicKey $ kronolithPrefs $ nagPrefs $ gollemPrefs $ chor
 aPrefs $ mnemoPrefs $ trollPrefs $ klutzPrefs $ jonahPrefs $ hermesPrefs $ ju
 noPrefs $ treanPrefs $ whupsPrefs $ ingoPrefs $ anselPrefs $ geniePrefs $ scr
 yPrefs $ wickedPrefs $ agoraPrefs $ goopsPrefs $ merkPrefs $ mimpPrefs $ mott
 lePrefs $ nicPrefs $ occamPrefs $ odinPrefs $ rakimPrefs $ seshaPrefs $ swoos
 hPrefs $ thorPrefs $ ulaformPrefs $ volosPrefs $ jetaPrefs $ sudoUser $ sudoH
 ost $ sudoCommand $ sudoRunAs $ sudoOption $ sudoRunAsUser $ sudoRunAsGroup $
  dateOfBirth $ euVATId $ msPwdResetPasswordHash ) )
matchingRuleUse: ( 1.3.6.1.4.1.4203.666.4.4 NAME 'directoryStringApproxMatch' 
 APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $
  cn $ uid $ labeledURI $ description $ olcConfigFile $ olcConfigDir $ olcAcce
 ss $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcA
 uthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ o
 lcDisallows $ olcDitContentRules $ olcExtraAttrs $ olcInclude $ olcLdapSyntax
 es $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ o
 lcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltForm
 at $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferra
 l $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olc
 Requires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslAuxprops $ olcSaslHo
 st $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimi
 t $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTCPBuffer $ olcTimeLimit 
 $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $
  olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFil
 e $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSProtocolM
 in $ olcUpdateRef $ olcDbDirectory $ olcDbCheckpoint $ olcDbIndex $ olcDbMode
  $ olcDbCryptFile $ olcDbPageSize $ olcDbLockDetect $ olcDbURI $ olcDbStartTL
 S $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $
  olcDbIDAssertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $
  olcDbIdleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQ
 uarantine $ olcDbIDAssertPassThru $ olcChainingBehavior $ monitoredInfo $ man
 agedInfo $ monitorConnectionLocalAddress $ monitorConnectionPeerAddress $ mon
 itorOverlay $ restrictedOperation $ monitorConnectionProtocol $ monitorConnec
 tionMask $ monitorConnectionListener $ monitorConnectionPeerDomain $ monitorU
 pdateRef $ olcAuditlogFile $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessL
 ogOld $ olcAccessLogOldAttr $ olcAccessLogBase $ reqType $ reqSession $ reqMe
 ssage $ reqReferral $ reqMethod $ reqAssertion $ reqScope $ reqDerefAliases $
  reqFilter $ reqAttr $ olcDlAttrSet $ olcRefintAttribute $ olcMemberOfDanglin
 g $ olcMemberOfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD $ olcMem
 berOfDanglingError $ errOp $ errText $ olcRetcodeItem $ olcSpCheckpoint $ olc
 TranslucentLocal $ olcTranslucentRemote $ olcUniqueIgnore $ olcUniqueAttribut
 e $ olcUniqueURI $ olcValSortAttr $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefau
 ltTtl $ olcDDSinterval $ olcDDStolerance $ olcSmbK5PwdEnable $ olmDbDirectory
  $ olmDbURIList $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ str
 eet $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physic
 alDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generati
 onQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ textEncod
 edORAddress $ info $ drink $ roomNumber $ userClass $ host $ documentIdentifi
 er $ documentTitle $ documentVersion $ documentLocation $ personalTitle $ co 
 $ uniqueIdentifier $ organizationalStatus $ buildingName $ documentPublisher 
 $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType
  $ preferredLanguage $ ipServiceProtocol $ nisMapName $ javaClassName $ javaC
 lassNames $ javaFactory $ javaReferenceAddress $ corbaRepositoryId $ memberUR
 L $ xmlPrivilegeInfo $ xmlPrivPolicy $ defaultServerList $ preferredServerLis
 t $ authenticationMethod $ serviceSearchDescriptor $ serviceAuthenticationMet
 hod $ entrustRoamingId $ eduPersonAffiliation $ eduPersonNickname $ eduPerson
 PrimaryAffiliation $ eduPersonPrincipalName $ eduPersonEntitlement $ eduPerso
 nScopedAffiliation $ eduOrgLegalName $ schacMotherTongue $ schacPlaceOfBirth 
 $ schacCountryOfCitizenship $ schacSn1 $ schacSn2 $ schacPersonalTitle $ scha
 cHomeOrganization $ schacHomeOrganizationType $ schacCountryOfResidence $ sch
 acUserPresenceID $ schacPersonalPosition $ schacPersonalUniqueCode $ schacPer
 sonalUniqueID $ schacUserStatus $ schacProjectMembership $ schacProjectSpecif
 icRole $ nisDomain $ SolarisLDAPServers $ SolarisSearchBaseDN $ SolarisBindDN
  $ SolarisBindPassword $ SolarisAuthMethod $ SolarisTransportSecurity $ Solar
 isDataSearchDN $ SolarisSearchScope $ SolarisPreferedServer $ SolarisPrefered
 ServerOnly $ SolarisSearchReferral $ middleName $ xmozillanickname $ mozillaH
 omeLocalityName $ mozillaHomeState $ mozillaHomePostalCode $ mozillaHomeCount
 ryName $ mozillaHomeFriendlyCountryName $ sambaLogonScript $ sambaProfilePath
  $ sambaUserWorkstations $ sambaHomePath $ sambaDomainName $ sambaMungedDial 
 $ sambaShareName $ sambaOptionName $ sambaStringListOption $ sambaTrustPartne
 r $ sambaFlatName $ sambaTrustAuthOutgoing $ sambaTrustAuthIncoming $ sambaTr
 ustForestTrustInfo $ krbLdapServers $ krbPrincNamingAttr $ krbDefaultEncSaltT
 ypes $ krbSupportedEncSaltTypes $ esgSid $ esgSN $ esgInfo $ esgInfoUri $ esg
 Contact $ esgCategory $ esgTool $ esgSource $ esgFormat $ esgStreamUri $ esgS
 dpUri $ x509keyUsage $ vPIMTelephoneNumber $ vPIMTextName $ astUsername $ ast
 Secret $ astMailbox $ astTemplate $ astFromdomain $ astRegexten $ astFromuser
  $ astHost $ astMask $ astPort $ astQualify $ astDefaultip $ astRtptimeout $ 
 astRtpholdtimeout $ astContext $ astPermit $ astDeny $ astMd5Secret $ astDtmf
 mode $ astCanReinvite $ astNat $ astCallgroup $ astPickupgroup $ astLanguage 
 $ astAllow $ astDisallow $ astInsecure $ astTrustrpid $ astProgressinband $ a
 stPromiscredir $ astCallerid $ astAccountcode $ astAmaflags $ astIncominglimi
 t $ astRestrictcid $ astReghost $ astRegport $ astRegseconds $ astName $ astA
 uth $ astInkeys $ astNotransfer $ astJitterbuffer $ astSendani $ astPeerconte
 xt $ astTrunk $ astOutkey $ astIPaddr $ pgpSoftware $ pgpVersion $ pgpCertID 
 $ pgpDisabled $ pgpKeyID $ pgpKeyType $ pgpUserID $ pgpKeyCreateTime $ pgpSig
 nerID $ pgpRevoked $ pgpSubKeyID $ pgpKeySize $ pgpKeyExpireTime $ pgpReconCe
 rtID $ pgpElementType $ calCalURI $ calFBURL $ calCAPURI $ calCalAdrURI $ cal
 OtherCalURIs $ calOtherFBURLs $ calOtherCAPURIs $ calOtherCalAdrURIs $ turbaM
 embers $ arrayIndex $ dlmIdentifyingDescription $ dlmOtherIdentifyingInfo $ o
 rderedCimKeys $ orderedCimModelPath $ dlmCaption $ dlmDescription $ dlmName $
  dlmStatus $ dlmCreationClassName $ dlmNameFormat $ dlmPrimaryOwnerContact $ 
 dlmPrimaryOwnerName $ dlmRoles $ dlmStartMode $ dlmSettingID $ dlm1FilterList
 Direction $ dlmProtocolType $ dlmOtherTypeDescription $ dlmIPAddress $ dlmIPS
 ubnetMask $ dlmIPAddressType $ dlmIPVersionSupport $ dlmElementID $ dlmRemote
 ID $ dlmAlgorithm $ dlmProtocol $ dlmSecret $ pcimRoles $ pcimKeywords $ pcim
 GroupName $ pcimRuleName $ pcimRuleUsage $ pcimConditionName $ pcimActionName
  $ pcimRepositoryName $ pcelsPolicySetName $ pcelsVariableName $ pcelsVariabl
 eModelClass $ pcelsVariableModelProperty $ pcelsExpectedValueTypes $ pcelsVal
 ueName $ pcelsIPv4AddrList $ pcelsIPv6AddrList $ pcelsMACAddrList $ pcelsStri
 ngList $ pcelsBitStringList $ pcelsIntegerList $ pcelsReusableContainerName $
  pcelsRole $ pcelsRoleCollectionName $ pcelsFilterName $ pcelsFilterListName 
 $ demailMaxAuthLevel $ birthPlace $ birthName $ businessTitle $ academicTitle
  $ nickName $ labeledBICandIBAN $ germanTaxId $ musicalInstrument $ musicalOr
 chestra $ musicalArtistName $ germanBankName $ germanBankAccountInfo $ german
 BankAccountHolder $ sAMAccountName $ userPrincipalName ) )
attributeTypes: ( 2.5.4.0 NAME 'objectClass' DESC 'RFC4512: object classes of 
 the entity' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 38 )
attributeTypes: ( 2.5.21.9 NAME 'structuralObjectClass' DESC 'RFC4512: structu
 ral object class of entry' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.38 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation 
 )
attributeTypes: ( 2.5.18.1 NAME 'createTimestamp' DESC 'RFC4512: time which ob
 ject was created' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrder
 ingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIFICATI
 ON USAGE directoryOperation )
attributeTypes: ( 2.5.18.2 NAME 'modifyTimestamp' DESC 'RFC4512: time which ob
 ject was last modified' EQUALITY generalizedTimeMatch ORDERING generalizedTim
 eOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODI
 FICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.3 NAME 'creatorsName' DESC 'RFC4512: name of creator'
  EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-
 VALUE NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.4 NAME 'modifiersName' DESC 'RFC4512: name of last mo
 difier' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 
 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.9 NAME 'hasSubordinates' DESC 'X.501: entry has child
 ren' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE N
 O-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 2.5.18.10 NAME 'subschemaSubentry' DESC 'RFC4512: name of co
 ntrolling subschema entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.12 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation
  )
attributeTypes: ( 1.3.6.1.1.20 NAME 'entryDN' DESC 'DN of the entry' EQUALITY 
 distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE NO-U
 SER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.1.16.4 NAME 'entryUUID' DESC 'UUID of the entry' EQU
 ALITY UUIDMatch ORDERING UUIDOrderingMatch SYNTAX 1.3.6.1.1.16.1 SINGLE-VALUE
  NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.7 NAME 'entryCSN' DESC 'change sequen
 ce number of the entry content' EQUALITY CSNMatch ORDERING CSNOrderingMatch S
 YNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE NO-USER-MODIFICATION USAGE
  directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.13 NAME 'namingCSN' DESC 'change sequ
 ence number of the entry naming (RDN)' EQUALITY CSNMatch ORDERING CSNOrdering
 Match SYNTAX 1.3.6.1.4.1.4203.666.11.2.1{64} SINGLE-VALUE NO-USER-MODIFICATIO
 N USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.23 NAME 'syncreplCookie' DESC 'syncre
 pl Cookie for shadow copy' EQUALITY octetStringMatch ORDERING octetStringOrde
 ringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE NO-USER-MODIFICAT
 ION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.25 NAME 'contextCSN' DESC 'the larges
 t committed CSN of a context' EQUALITY CSNMatch ORDERING CSNOrderingMatch SYN
 TAX 1.3.6.1.4.1.4203.666.11.2.1{64} NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.6 NAME 'altServer' DESC 'RFC4512: a
 lternative servers' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.5 NAME 'namingContexts' DESC 'RFC45
 12: naming contexts' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 USAGE dSAOperation 
 )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.13 NAME 'supportedControl' DESC 'RF
 C4512: supported controls' SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 USAGE dSAOper
 ation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.7 NAME 'supportedExtension' DESC 'R
 FC4512: supported extended operations' SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 U
 SAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.15 NAME 'supportedLDAPVersion' DESC
  'RFC4512: supported LDAP versions' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 USAG
 E dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.14 NAME 'supportedSASLMechanisms' D
 ESC 'RFC4512: supported SASL mechanisms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.1.3.5 NAME 'supportedFeatures' DESC 'RFC451
 2: features supported by the server' EQUALITY objectIdentifierMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.38 USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.10 NAME 'monitorContext' DESC 'monito
 r context' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 12 SINGLE-VALUE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.1 NAME 'configContext' DESC 'config 
 context' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
  SINGLE-VALUE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.1.4 NAME 'vendorName' DESC 'RFC3045: name of impleme
 ntation vendor' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
 SINGLE-VALUE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.1.5 NAME 'vendorVersion' DESC 'RFC3045: version of i
 mplementation' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 S
 INGLE-VALUE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 2.5.18.5 NAME 'administrativeRole' DESC 'RFC3672: administra
 tive role' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.3
 8 USAGE directoryOperation )
attributeTypes: ( 2.5.18.6 NAME 'subtreeSpecification' DESC 'RFC3672: subtree 
 specification' SYNTAX 1.3.6.1.4.1.1466.115.121.1.45 SINGLE-VALUE USAGE direct
 oryOperation )
attributeTypes: ( 2.5.21.1 NAME 'dITStructureRules' DESC 'RFC4512: DIT structu
 re rules' EQUALITY integerFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.17 USAGE directoryOperation )
attributeTypes: ( 2.5.21.2 NAME 'dITContentRules' DESC 'RFC4512: DIT content r
 ules' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.16 USAGE directoryOperation )
attributeTypes: ( 2.5.21.4 NAME 'matchingRules' DESC 'RFC4512: matching rules'
  EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.30 USAGE directoryOperation )
attributeTypes: ( 2.5.21.5 NAME 'attributeTypes' DESC 'RFC4512: attribute type
 s' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.3 USAGE directoryOperation )
attributeTypes: ( 2.5.21.6 NAME 'objectClasses' DESC 'RFC4512: object classes'
  EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.37 USAGE directoryOperation )
attributeTypes: ( 2.5.21.7 NAME 'nameForms' DESC 'RFC4512: name forms ' EQUALI
 TY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.35 U
 SAGE directoryOperation )
attributeTypes: ( 2.5.21.8 NAME 'matchingRuleUse' DESC 'RFC4512: matching rule
  uses' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.31 USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.16 NAME 'ldapSyntaxes' DESC 'RFC451
 2: LDAP syntaxes' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.54 USAGE directoryOperation )
attributeTypes: ( 2.5.4.1 NAME ( 'aliasedObjectName' 'aliasedEntryName' ) DESC
  'RFC4512: name of aliased object' EQUALITY distinguishedNameMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113730.3.1.34 NAME 'ref' DESC 'RFC3296: subordina
 te referral URL' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  USAGE distributedOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.1.3.1 NAME 'entry' DESC 'OpenLDAP ACL entry
  pseudo-attribute' SYNTAX 1.3.6.1.4.1.4203.1.1.1 SINGLE-VALUE NO-USER-MODIFIC
 ATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.1.3.2 NAME 'children' DESC 'OpenLDAP ACL ch
 ildren pseudo-attribute' SYNTAX 1.3.6.1.4.1.4203.1.1.1 SINGLE-VALUE NO-USER-M
 ODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.8 NAME ( 'authzTo' 'saslAuthzTo' ) DE
 SC 'proxy authorization targets' EQUALITY authzMatch SYNTAX 1.3.6.1.4.1.4203.
 666.2.7 USAGE distributedOperation X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.9 NAME ( 'authzFrom' 'saslAuthzFrom' 
 ) DESC 'proxy authorization sources' EQUALITY authzMatch SYNTAX 1.3.6.1.4.1.4
 203.666.2.7 USAGE distributedOperation X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.1466.101.119.3 NAME 'entryTtl' DESC 'RFC2589: en
 try time-to-live' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE NO-USER-M
 ODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.1466.101.119.4 NAME 'dynamicSubtrees' DESC 'RFC2
 589: dynamic subtrees' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 NO-USER-MODIFICAT
 ION USAGE dSAOperation )
attributeTypes: ( 2.5.4.49 NAME 'distinguishedName' DESC 'RFC4519: common supe
 rtype of DN attributes' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.12 )
attributeTypes: ( 2.5.4.41 NAME 'name' DESC 'RFC4519: common supertype of name
  attributes' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15{32768} )
attributeTypes: ( 2.5.4.3 NAME ( 'cn' 'commonName' ) DESC 'RFC4519: common nam
 e(s) for which the entity is known by' SUP name )
attributeTypes: ( 0.9.2342.19200300.100.1.1 NAME ( 'uid' 'userid' ) DESC 'RFC4
 519: user identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 1.3.6.1.1.1.1.0 NAME 'uidNumber' DESC 'RFC2307: An integer u
 niquely identifying a user in an administrative domain' EQUALITY integerMatch
  ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.1.1.1.1 NAME 'gidNumber' DESC 'RFC2307: An integer u
 niquely identifying a group in an administrative domain' EQUALITY integerMatc
 h ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-V
 ALUE )
attributeTypes: ( 2.5.4.35 NAME 'userPassword' DESC 'RFC4519/2307: password of
  user' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )
attributeTypes: ( 1.3.6.1.4.1.250.1.57 NAME 'labeledURI' DESC 'RFC2079: Unifor
 m Resource Identifier with optional label' EQUALITY caseExactMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.5.4.13 NAME 'description' DESC 'RFC4519: descriptive infor
 mation' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15{1024} )
attributeTypes: ( 2.5.4.34 NAME 'seeAlso' DESC 'RFC4519: DN of related object'
  SUP distinguishedName )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.78 NAME 'olcConfigFile' DESC 'Fi
 le for slapd configuration directives' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.79 NAME 'olcConfigDir' DESC 'Dir
 ectory for slapd configuration backend' EQUALITY caseIgnoreMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.1 NAME 'olcAccess' DESC 'Access 
 Control List' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X
 -ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.86 NAME 'olcAddContentAcl' DESC 
 'Check ACLs against content of Add ops' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.2 NAME 'olcAllows' DESC 'Allowed
  set of deprecated features' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.3 NAME 'olcArgsFile' DESC 'File 
 for slapd command line options' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.5 NAME 'olcAttributeOptions' EQU
 ALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.4 NAME 'olcAttributeTypes' DESC 
 'OpenLDAP attributeTypes' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstring
 sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.6 NAME 'olcAuthIDRewrite' EQUALI
 TY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.7 NAME 'olcAuthzPolicy' EQUALITY
  caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.8 NAME 'olcAuthzRegexp' EQUALITY
  caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.9 NAME 'olcBackend' DESC 'A type
  of backend' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SI
 NGLE-VALUE X-ORDERED 'SIBLINGS' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.10 NAME 'olcConcurrency' SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.11 NAME 'olcConnMaxPending' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.12 NAME 'olcConnMaxPendingAuth' 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.13 NAME 'olcDatabase' DESC 'The 
 backend type for a database instance' SUP olcBackend SINGLE-VALUE X-ORDERED '
 SIBLINGS' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.14 NAME 'olcDefaultSearchBase' S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.15 NAME 'olcDisallows' EQUALITY 
 caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.16 NAME 'olcDitContentRules' DES
 C 'OpenLDAP DIT content rules' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubs
 tringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.20 NAME 'olcExtraAttrs' EQUALI
 TY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.17 NAME 'olcGentleHUP' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.17 NAME 'olcHidden' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.18 NAME 'olcIdleTimeout' SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.19 NAME 'olcInclude' SUP labeled
 URI )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.20 NAME 'olcIndexSubstrIfMinLen'
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.21 NAME 'olcIndexSubstrIfMaxLen'
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.22 NAME 'olcIndexSubstrAnyLen' S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.23 NAME 'olcIndexSubstrAnyStep' 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.84 NAME 'olcIndexIntLen' SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.4 NAME 'olcLastMod' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.85 NAME 'olcLdapSyntaxes' DESC '
 OpenLDAP ldapSyntax' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.5 NAME 'olcLimits' EQUALITY ca
 seIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.93 NAME 'olcListenerThreads' SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.26 NAME 'olcLocalSSF' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.27 NAME 'olcLogFile' SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.28 NAME 'olcLogLevel' EQUALITY c
 aseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.6 NAME 'olcMaxDerefDepth' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.16 NAME 'olcMirrorMode' SYNTAX
  1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.30 NAME 'olcModuleLoad' EQUALITY
  caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.31 NAME 'olcModulePath' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.18 NAME 'olcMonitoring' SYNTAX
  1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.32 NAME 'olcObjectClasses' DESC 
 'OpenLDAP object classes' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstring
 sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.33 NAME 'olcObjectIdentifier' EQ
 UALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.34 NAME 'olcOverlay' SUP olcData
 base SINGLE-VALUE X-ORDERED 'SIBLINGS' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.35 NAME 'olcPasswordCryptSaltFor
 mat' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.36 NAME 'olcPasswordHash' EQUALI
 TY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.37 NAME 'olcPidFile' SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.38 NAME 'olcPlugin' EQUALITY cas
 eIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.39 NAME 'olcPluginLogFile' SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.40 NAME 'olcReadOnly' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.41 NAME 'olcReferral' SUP labele
 dURI SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.7 NAME 'olcReplica' SUP labele
 dURI EQUALITY caseIgnoreMatch X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.43 NAME 'olcReplicaArgsFile' SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.44 NAME 'olcReplicaPidFile' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.45 NAME 'olcReplicationInterval'
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.46 NAME 'olcReplogFile' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.47 NAME 'olcRequires' EQUALITY c
 aseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.48 NAME 'olcRestrict' EQUALITY c
 aseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.49 NAME 'olcReverseLookup' SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.8 NAME 'olcRootDN' EQUALITY di
 stinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.51 NAME 'olcRootDSE' EQUALITY ca
 seIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.9 NAME 'olcRootPW' SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.89 NAME 'olcSaslAuxprops' SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.53 NAME 'olcSaslHost' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.54 NAME 'olcSaslRealm' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.56 NAME 'olcSaslSecProps' SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.58 NAME 'olcSchemaDN' EQUALITY d
 istinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.59 NAME 'olcSecurity' EQUALITY c
 aseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.81 NAME 'olcServerID' EQUALITY c
 aseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.60 NAME 'olcSizeLimit' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.61 NAME 'olcSockbufMaxIncoming' 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.62 NAME 'olcSockbufMaxIncomingAu
 th' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.83 NAME 'olcSortVals' DESC 'Attr
 ibutes whose values will always be sorted' EQUALITY caseIgnoreMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.15 NAME 'olcSubordinate' SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.10 NAME 'olcSuffix' EQUALITY d
 istinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.19 NAME 'olcSyncUseSubentry' D
 ESC 'Store sync context in a subentry' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SI
 NGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.11 NAME 'olcSyncrepl' EQUALITY
  caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.90 NAME 'olcTCPBuffer' DESC 'Cus
 tom TCP buffer size' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.66 NAME 'olcThreads' SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.67 NAME 'olcTimeLimit' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.68 NAME 'olcTLSCACertificateFile
 ' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.69 NAME 'olcTLSCACertificatePath
 ' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.70 NAME 'olcTLSCertificateFile' 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.71 NAME 'olcTLSCertificateKeyFil
 e' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.72 NAME 'olcTLSCipherSuite' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.73 NAME 'olcTLSCRLCheck' SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.82 NAME 'olcTLSCRLFile' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.74 NAME 'olcTLSRandFile' SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.75 NAME 'olcTLSVerifyClient' SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.77 NAME 'olcTLSDHParamFile' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.87 NAME 'olcTLSProtocolMin' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.80 NAME 'olcToolThreads' SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.12 NAME 'olcUpdateDN' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.13 NAME 'olcUpdateRef' SUP lab
 eledURI EQUALITY caseIgnoreMatch )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.0.88 NAME 'olcWriteTimeout' SYNTAX
  1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.1 NAME 'olcDbDirectory' DESC '
 Directory for database content' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.2 NAME 'olcDbCheckpoint' DESC 
 'Database checkpoint interval in kbytes and minutes' SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.4 NAME 'olcDbNoSync' DESC 'Dis
 able synchronous database writes' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.2 NAME 'olcDbIndex' DESC 'Attr
 ibute index parameters' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.12.1 NAME 'olcDbMaxReaders' DESC
  'Maximum number of threads that may access the DB concurrently' SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.12.2 NAME 'olcDbMaxSize' DESC 'M
 aximum size of DB in bytes' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.3 NAME 'olcDbMode' DESC 'Unix 
 permissions of database files' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.9 NAME 'olcDbSearchStack' DESC
  'Depth of search stack in IDLs' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.11 NAME 'olcDbCacheFree' DESC 
 'Number of extra entries to free when max is reached' SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.1 NAME 'olcDbCacheSize' DESC '
 Entry cache size in entries' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.16 NAME 'olcDbChecksum' DESC '
 Enable database checksum validation' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SING
 LE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.13 NAME 'olcDbCryptFile' DESC 
 'Pathname of file containing the DB encryption key' SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.14 NAME 'olcDbCryptKey' DESC '
 DB encryption key' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.3 NAME 'olcDbConfig' DESC 'Ber
 keleyDB DB_CONFIG configuration directives' SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .26 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.15 NAME 'olcDbPageSize' DESC '
 Page size of specified DB, in Kbytes' EQUALITY caseExactMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.5 NAME 'olcDbDirtyRead' DESC '
 Allow reads of uncommitted data' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-V
 ALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.12 NAME 'olcDbDNcacheSize' DES
 C 'DN cache size' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.6 NAME 'olcDbIDLcacheSize' DES
 C 'IDL cache size in IDLs' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.7 NAME 'olcDbLinearIndex' DESC
  'Index attributes one at a time' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.8 NAME 'olcDbLockDetect' DESC 
 'Deadlock detection algorithm' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.1.10 NAME 'olcDbShmKey' DESC 'Ke
 y for shared memory region' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.0.14 NAME 'olcDbURI' DESC 'URI (
 list) for remote DSA' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.1 NAME 'olcDbStartTLS' DESC 'S
 tartTLS' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.2 NAME 'olcDbACLAuthcDn' DESC 
 'Remote ACL administrative identity' OBSOLETE SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.3 NAME 'olcDbACLPasswd' DESC '
 Remote ACL administrative identity credentials' OBSOLETE SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.4 NAME 'olcDbACLBind' DESC 'Re
 mote ACL administrative identity auth bind configuration' SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.5 NAME 'olcDbIDAssertAuthcDn' 
 DESC 'Remote Identity Assertion administrative identity' OBSOLETE SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.6 NAME 'olcDbIDAssertPasswd' D
 ESC 'Remote Identity Assertion administrative identity credentials' OBSOLETE 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.7 NAME 'olcDbIDAssertBind' DES
 C 'Remote Identity Assertion administrative identity auth bind configuration'
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.8 NAME 'olcDbIDAssertMode' DES
 C 'Remote Identity Assertion mode' OBSOLETE SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.9 NAME 'olcDbIDAssertAuthzFrom
 ' DESC 'Remote Identity Assertion authz rules' EQUALITY caseIgnoreMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.10 NAME 'olcDbRebindAsUser' DE
 SC 'Rebind as user' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.11 NAME 'olcDbChaseReferrals' 
 DESC 'Chase referrals' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.12 NAME 'olcDbTFSupport' DESC 
 'Absolute filters support' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.13 NAME 'olcDbProxyWhoAmI' DES
 C 'Proxy whoAmI exop' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.14 NAME 'olcDbTimeout' DESC 'P
 er-operation timeouts' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.15 NAME 'olcDbIdleTimeout' DES
 C 'connection idle timeout' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.16 NAME 'olcDbConnTtl' DESC 'c
 onnection ttl' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.17 NAME 'olcDbNetworkTimeout' 
 DESC 'connection network timeout' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE
 -VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.18 NAME 'olcDbProtocolVersion'
  DESC 'protocol version' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.19 NAME 'olcDbSingleConn' DESC
  'cache a single connection per identity' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
  SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.20 NAME 'olcDbCancel' DESC 'ab
 andon/ignore/exop operations when appropriate' SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.21 NAME 'olcDbQuarantine' DESC
  'Quarantine database if connection fails and retry according to rule' SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.22 NAME 'olcDbUseTemporaryConn
 ' DESC 'Use temporary connections if the cached one is busy' SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.23 NAME 'olcDbConnectionPoolMa
 x' DESC 'Max size of privileged connections pool' SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.24 NAME 'olcDbSessionTrackingR
 equest' DESC 'Add session tracking control to proxied requests' SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.25 NAME 'olcDbNoRefs' DESC 'Do
  not return search reference responses' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.26 NAME 'olcDbNoUndefFilter' D
 ESC 'Do not propagate undefined search filters' SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.2.3.27 NAME 'olcDbIDAssertPassThru
 ' DESC 'Remote Identity Assertion passthru rules' EQUALITY caseIgnoreMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.3.1 NAME 'olcChainingBehavior' D
 ESC 'Chaining behavior control parameters (draft-sermersheim-ldap-chaining)' 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.3.2 NAME 'olcChainCacheURI' DESC
  'Enables caching of URIs not present in configuration' SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.3.3 NAME 'olcChainMaxReferralDep
 th' DESC 'max referral depth' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.3.4 NAME 'olcChainReturnError' D
 ESC 'Errors are returned instead of the original referral' SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.1 NAME 'monitoredInfo' DESC 'monit
 ored info' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15{32768} NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.2 NAME 'managedInfo' DESC 'monitor
  managed info' SUP name )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.3 NAME 'monitorCounter' DESC 'moni
 tor counter' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.27 NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.4 NAME 'monitorOpCompleted' DESC '
 monitor completed operations' SUP monitorCounter NO-USER-MODIFICATION USAGE d
 SAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.5 NAME 'monitorOpInitiated' DESC '
 monitor initiated operations' SUP monitorCounter NO-USER-MODIFICATION USAGE d
 SAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.6 NAME 'monitorConnectionNumber' D
 ESC 'monitor connection number' SUP monitorCounter NO-USER-MODIFICATION USAGE
  dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.7 NAME 'monitorConnectionAuthzDN' 
 DESC 'monitor connection authorization DN' EQUALITY distinguishedNameMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.12 NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.8 NAME 'monitorConnectionLocalAddr
 ess' DESC 'monitor connection local address' SUP monitoredInfo NO-USER-MODIFI
 CATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.9 NAME 'monitorConnectionPeerAddre
 ss' DESC 'monitor connection peer address' SUP monitoredInfo NO-USER-MODIFICA
 TION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.10 NAME 'monitorTimestamp' DESC 'm
 onitor timestamp' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrder
 ingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIFICATI
 ON USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.11 NAME 'monitorOverlay' DESC 'nam
 e of overlays defined for a given database' SUP monitoredInfo NO-USER-MODIFIC
 ATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.12 NAME 'readOnly' DESC 'read/writ
 e status of a given database' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.7 SINGLE-VALUE USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.13 NAME 'restrictedOperation' DESC
  'name of restricted operation for a given database' SUP managedInfo )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.14 NAME 'monitorConnectionProtocol
 ' DESC 'monitor connection protocol' SUP monitoredInfo NO-USER-MODIFICATION U
 SAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.15 NAME 'monitorConnectionOpsRecei
 ved' DESC 'monitor number of operations received by the connection' SUP monit
 orCounter NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.16 NAME 'monitorConnectionOpsExecu
 ting' DESC 'monitor number of operations in execution within the connection' 
 SUP monitorCounter NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.17 NAME 'monitorConnectionOpsPendi
 ng' DESC 'monitor number of pending operations within the connection' SUP mon
 itorCounter NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.18 NAME 'monitorConnectionOpsCompl
 eted' DESC 'monitor number of operations completed within the connection' SUP
  monitorCounter NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.19 NAME 'monitorConnectionGet' DES
 C 'number of times connection_get() was called so far' SUP monitorCounter NO-
 USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.20 NAME 'monitorConnectionRead' DE
 SC 'number of times connection_read() was called so far' SUP monitorCounter N
 O-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.21 NAME 'monitorConnectionWrite' D
 ESC 'number of times connection_write() was called so far' SUP monitorCounter
  NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.22 NAME 'monitorConnectionMask' DE
 SC 'monitor connection mask' SUP monitoredInfo NO-USER-MODIFICATION USAGE dSA
 Operation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.23 NAME 'monitorConnectionListener
 ' DESC 'monitor connection listener' SUP monitoredInfo NO-USER-MODIFICATION U
 SAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.24 NAME 'monitorConnectionPeerDoma
 in' DESC 'monitor connection peer domain' SUP monitoredInfo NO-USER-MODIFICAT
 ION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.25 NAME 'monitorConnectionStartTim
 e' DESC 'monitor connection start time' SUP monitorTimestamp SINGLE-VALUE NO-
 USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.26 NAME 'monitorConnectionActivity
 Time' DESC 'monitor connection activity time' SUP monitorTimestamp SINGLE-VAL
 UE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.27 NAME 'monitorIsShadow' DESC 'TR
 UE if the database is shadow' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.7 SINGLE-VALUE USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.28 NAME 'monitorUpdateRef' DESC 'u
 pdate referral for shadow databases' SUP monitoredInfo SINGLE-VALUE USAGE dSA
 Operation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.29 NAME 'monitorRuntimeConfig' DES
 C 'TRUE if component allows runtime configuration' EQUALITY booleanMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.30 NAME 'monitorSuperiorDN' DESC '
 monitor superior DN' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.12 NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.15.1 NAME 'olcAuditlogFile' DESC
  'Filename for auditlogging' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.4.1 NAME 'olcAccessLogDB' DESC '
 Suffix of database for log content' SUP distinguishedName SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.4.2 NAME 'olcAccessLogOps' DESC 
 'Operation types to log' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.4.3 NAME 'olcAccessLogPurge' DES
 C 'Log cleanup parameters' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.4.4 NAME 'olcAccessLogSuccess' D
 ESC 'Log successful ops only' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.4.5 NAME 'olcAccessLogOld' DESC 
 'Log old values when modifying entries matching the filter' SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.4.6 NAME 'olcAccessLogOldAttr' D
 ESC 'Log old values of these attributes even if unmodified' EQUALITY caseIgno
 reMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.4.7 NAME 'olcAccessLogBase' DESC
  'Operation types to log under a specific branch' EQUALITY caseIgnoreMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.1 NAME 'reqDN' DESC 'Target DN o
 f request' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.2 NAME 'reqStart' DESC 'Start ti
 me of request' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrdering
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.3 NAME 'reqEnd' DESC 'End time o
 f request' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrderingMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.4 NAME 'reqType' DESC 'Type of r
 equest' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.5 NAME 'reqSession' DESC 'Sessio
 n ID of request' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 5 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.6 NAME 'reqAuthzID' DESC 'Author
 ization ID of requestor' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.7 NAME 'reqResult' DESC 'Result 
 code of request' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.8 NAME 'reqMessage' DESC 'Error 
 text of request' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.9 NAME 'reqReferral' DESC 'Refer
 rals returned for request' SUP labeledURI )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.10 NAME 'reqControls' DESC 'Requ
 est controls' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1
 .4203.666.11.5.3.1 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.11 NAME 'reqRespControls' DESC '
 Response controls of request' EQUALITY objectIdentifierFirstComponentMatch SY
 NTAX 1.3.6.1.4.1.4203.666.11.5.3.1 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.12 NAME 'reqId' DESC 'ID of Requ
 est to Abandon' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.13 NAME 'reqVersion' DESC 'Proto
 col version of Bind request' EQUALITY integerMatch ORDERING integerOrderingMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.14 NAME 'reqMethod' DESC 'Bind m
 ethod of request' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.15 NAME 'reqAssertion' DESC 'Com
 pare Assertion of request' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.16 NAME 'reqMod' DESC 'Modificat
 ions of request' EQUALITY octetStringMatch SUBSTR octetStringSubstringsMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.17 NAME 'reqOld' DESC 'Old value
 s of entry before request completed' EQUALITY octetStringMatch SUBSTR octetSt
 ringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.18 NAME 'reqNewRDN' DESC 'New RD
 N of request' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.19 NAME 'reqDeleteOldRDN' DESC '
 Delete old RDN' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SIN
 GLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.20 NAME 'reqNewSuperior' DESC 'N
 ew superior DN of request' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.21 NAME 'reqScope' DESC 'Scope o
 f request' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SING
 LE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.22 NAME 'reqDerefAliases' DESC '
 Disposition of Aliases in request' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.23 NAME 'reqAttrsOnly' DESC 'Att
 ributes and values of request' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.24 NAME 'reqFilter' DESC 'Filter
  of request' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.25 NAME 'reqAttr' DESC 'Attribut
 es of request' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
 )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.26 NAME 'reqSizeLimit' DESC 'Siz
 e limit of request' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.27 NAME 'reqTimeLimit' DESC 'Tim
 e limit of request' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.28 NAME 'reqEntries' DESC 'Numbe
 r of entries returned' EQUALITY integerMatch ORDERING integerOrderingMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.29 NAME 'reqData' DESC 'Data of 
 extended request' EQUALITY octetStringMatch SUBSTR octetStringSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.30 NAME 'auditContext' DESC 'DN 
 of auditContainer' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE NO-USER-
 MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.5.1.31 NAME 'reqEntryUUID' DESC 'UUI
 D of entry' EQUALITY UUIDMatch ORDERING UUIDOrderingMatch SYNTAX 1.3.6.1.1.16
 .1 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.8.1 NAME 'olcDlAttrSet' DESC 'Dy
 namic list: <group objectClass>, <URL attributeDescription>, <member attribut
 eDescription>' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.11.1 NAME 'olcRefintAttribute' D
 ESC 'Attributes for referential integrity' EQUALITY caseIgnoreMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.11.2 NAME 'olcRefintNothing' DES
 C 'Replacement DN to supply when needed' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
  SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.11.3 NAME 'olcRefintModifiersNam
 e' DESC 'The DN to use as modifiersName' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
  SINGLE-VALUE )
attributeTypes: ( 1.2.840.113556.1.2.102 NAME 'memberOf' DESC 'Group that the 
 entry belongs to' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.12 USAGE dSAOperation X-ORIGIN 'iPlanet Delegated Administrator' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.18.0 NAME 'olcMemberOfDN' DESC '
 DN to be used as modifiersName' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-V
 ALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.18.1 NAME 'olcMemberOfDangling' 
 DESC 'Behavior with respect to dangling members, constrained to ignore, drop,
  error' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.18.2 NAME 'olcMemberOfRefInt' DE
 SC 'Take care of referential integrity' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.18.3 NAME 'olcMemberOfGroupOC' D
 ESC 'Group objectClass' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.18.4 NAME 'olcMemberOfMemberAD' 
 DESC 'member attribute' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.18.5 NAME 'olcMemberOfMemberOfAD
 ' DESC 'memberOf attribute' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.18.7 NAME 'olcMemberOfDanglingEr
 ror' DESC 'Error code returned in case of dangling back reference' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.1 NAME 'errCode' DESC 'LDAP erro
 r code' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.2 NAME 'errOp' DESC 'Operations 
 the errObject applies to' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstring
 sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.3 NAME 'errText' DESC 'LDAP erro
 r textual description' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.4 NAME 'errSleepTime' DESC 'Time
  to wait before returning the error' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.5 NAME 'errMatchedDN' DESC 'Valu
 e to be returned as matched DN' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.6 NAME 'errUnsolicitedOID' DESC 
 'OID to be returned within unsolicited response' EQUALITY objectIdentifierMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.7 NAME 'errUnsolicitedData' DESC
  'Data to be returned within unsolicited response' SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.4.1.8 NAME 'errDisconnect' DESC 'Dis
 connect without notice' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.20.1 NAME 'olcRetcodeParent' DES
 C '' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.20.2 NAME 'olcRetcodeItem' DESC 
 '' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORDERED 'V
 ALUES' )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.20.3 NAME 'olcRetcodeInDir' DESC
  '' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.20.4 NAME 'olcRetcodeSleep' DESC
  '' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.1.1 NAME 'olcSpCheckpoint' DESC 
 'ContextCSN checkpoint interval in ops and minutes' SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.1.2 NAME 'olcSpSessionlog' DESC 
 'Session log size in ops' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.1.3 NAME 'olcSpNoPresent' DESC '
 Omit Present phase processing' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VAL
 UE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.1.4 NAME 'olcSpReloadHint' DESC 
 'Observe Reload Hint in Request control' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 
 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.14.1 NAME 'olcTranslucentStrict'
  DESC 'Reveal attribute deletion constraint violations' SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.14.2 NAME 'olcTranslucentNoGlue'
  DESC 'Disable automatic glue records for ADD and MODRDN' SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.14.3 NAME 'olcTranslucentLocal' 
 DESC 'Attributes to use in local search filter' SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.14.4 NAME 'olcTranslucentRemote'
  DESC 'Attributes to use in remote search filter' SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.14.5 NAME 'olcTranslucentBindLoc
 al' DESC 'Enable local bind' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.14.6 NAME 'olcTranslucentPwModLo
 cal' DESC 'Enable local RFC 3062 Password Modify extended operation' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.10.1 NAME 'olcUniqueBase' DESC '
 Subtree for uniqueness searches' EQUALITY distinguishedNameMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.10.2 NAME 'olcUniqueIgnore' DESC
  'Attributes for which uniqueness shall not be enforced' EQUALITY caseIgnoreM
 atch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.10.3 NAME 'olcUniqueAttribute' D
 ESC 'Attributes for which uniqueness shall be enforced' EQUALITY caseIgnoreMa
 tch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.10.4 NAME 'olcUniqueStrict' DESC
  'Enforce uniqueness of null values' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.10.5 NAME 'olcUniqueURI' DESC 'L
 ist of keywords and LDAP URIs for a uniqueness domain' EQUALITY caseExactMatc
 h ORDERING caseExactOrderingMatch SUBSTR caseExactSubstringsMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.5.1 NAME 'olcValSortAttr' DESC '
 Sorting rule for attribute under given DN' EQUALITY caseIgnoreMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.21.1 NAME 'olcSssVlvMax' DESC 'M
 aximum number of concurrent Sort requests' SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.21.2 NAME 'olcSssVlvMaxKeys' DES
 C 'Maximum number of Keys in a Sort request' SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.21.3 NAME 'olcSssVlvMaxPerConn' 
 DESC 'Maximum number of concurrent paged search requests per connection' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.16 NAME 'pwdChangedTime' DESC 'The t
 ime the password was last changed' EQUALITY generalizedTimeMatch ORDERING gen
 eralizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE N
 O-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.17 NAME 'pwdAccountLockedTime' DESC 
 'The time an user account was locked' EQUALITY generalizedTimeMatch ORDERING 
 generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALU
 E USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.19 NAME 'pwdFailureTime' DESC 'The t
 imestamps of the last consecutive authentication failures' EQUALITY generaliz
 edTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.24 NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.20 NAME 'pwdHistory' DESC 'The histo
 ry of users passwords' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.40 NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.21 NAME 'pwdGraceUseTime' DESC 'The 
 timestamps of the grace login once the password has expired' EQUALITY general
 izedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 NO-USER-MODIFICATION USAGE
  directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.22 NAME 'pwdReset' DESC 'The indicat
 ion that the password has been reset' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.7 SINGLE-VALUE USAGE directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.23 NAME 'pwdPolicySubentry' DESC 'Th
 e pwdPolicy subentry in effect for this object' EQUALITY distinguishedNameMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE USAGE directoryOperation
  )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.12.1 NAME 'olcPPolicyDefault' DE
 SC 'DN of a pwdPolicy object for uncustomized objects' SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.12.2 NAME 'olcPPolicyHashClearte
 xt' DESC 'Hash passwords on add or modify' SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.12.4 NAME 'olcPPolicyForwardUpda
 tes' DESC 'Allow policy state updates to be forwarded via updateref' SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.12.3 NAME 'olcPPolicyUseLockout'
  DESC 'Warn clients with AccountLocked' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.57 NAME 'entryExpireTimestamp' DESC '
 RFC2589 OpenLDAP extension: expire time of a dynamic object, computed as now 
 + entryTtl' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrderingMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIFICATION USA
 GE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.9.1 NAME 'olcDDSstate' DESC 'RFC
 2589 Dynamic directory services state' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SI
 NGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.9.2 NAME 'olcDDSmaxTtl' DESC 'RF
 C2589 Dynamic directory services max TTL' SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 5 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.9.3 NAME 'olcDDSminTtl' DESC 'RF
 C2589 Dynamic directory services min TTL' SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 5 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.9.4 NAME 'olcDDSdefaultTtl' DESC
  'RFC2589 Dynamic directory services default TTL' SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.9.5 NAME 'olcDDSinterval' DESC '
 RFC2589 Dynamic directory services expiration task run interval' SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.9.6 NAME 'olcDDStolerance' DESC 
 'RFC2589 Dynamic directory services additional TTL in expiration scheduling' 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.3.9.7 NAME 'olcDDSmaxDynamicObject
 s' DESC 'RFC2589 Dynamic directory services max number of dynamic objects' SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.2.840.113556.1.4.911 NAME 'allowedChildClasses' DESC 'Chil
 d classes allowed for a given object' EQUALITY objectIdentifierMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.38 NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.2.840.113556.1.4.912 NAME 'allowedChildClassesEffective' D
 ESC 'Child classes allowed for a given object according to ACLs' EQUALITY obj
 ectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 NO-USER-MODIFICATION 
 USAGE directoryOperation )
attributeTypes: ( 1.2.840.113556.1.4.913 NAME 'allowedAttributes' DESC 'Attrib
 utes allowed for a given object' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.38 NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes: ( 1.2.840.113556.1.4.914 NAME 'allowedAttributesEffective' DES
 C 'Attributes allowed for a given object according to ACLs' EQUALITY objectId
 entifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 NO-USER-MODIFICATION USAGE
  directoryOperation )
attributeTypes: ( 1.3.6.1.4.1.453.16.2.188 NAME 'authTimestamp' DESC 'last suc
 cessful authentication using any method/mech' EQUALITY generalizedTimeMatch O
 RDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SIN
 GLE-VALUE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.5.1 NAME 'olcLastBindPrecision' DE
 SC 'Precision of authTimestamp attribute' SYNTAX 1.3.6.1.4.1.1466.115.121.1.2
 7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.4.1.1 NAME 'olcSmbK5PwdEnable' DES
 C 'Modules to be enabled' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.4.1.2 NAME 'olcSmbK5PwdMustChange'
  DESC 'Credentials validity interval' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SI
 NGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.1.12.2.3.4.1.3 NAME 'olcSmbK5PwdCanChange' 
 DESC 'Credentials minimum validity interval' SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.0.1.1 NAME 'olmDbDirectory' DESC '
 Path name of the directory where the database environment resides' SUP monito
 redInfo NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.55.0.1.2.1 NAME 'olmDbURIList' DESC '
 List of URIs a proxy is serving; can be modified run-time' SUP managedInfo )
attributeTypes: ( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: knowledge
  information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{3
 2768} )
attributeTypes: ( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (family)
  name(s) for which the entity is known by' SUP name )
attributeTypes: ( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial number of 
 the entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.44{64} )
attributeTypes: ( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC4519: two-letter
  ISO-3166 country code' SUP name SYNTAX 1.3.6.1.4.1.1466.115.121.1.11 SINGLE-
 VALUE )
attributeTypes: ( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: locality 
 which this object resides in' SUP name )
attributeTypes: ( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2256: s
 tate or province which this object resides in' SUP name )
attributeTypes: ( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC2256: str
 eet address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
attributeTypes: ( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC2256: orga
 nization this object belongs to' SUP name )
attributeTypes: ( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC 'RFC225
 6: organizational unit this object belongs to' SUP name )
attributeTypes: ( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated with t
 he entity' SUP name )
attributeTypes: ( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search guide, dep
 recated by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 )
attributeTypes: ( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: business cat
 egory' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15{128} )
attributeTypes: ( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal address'
  EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.41 )
attributeTypes: ( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal code' EQUAL
 ITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.15{40} )
attributeTypes: ( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post Office Box
 ' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.15{40} )
attributeTypes: ( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RFC2256: Ph
 ysical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstr
 ingsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
attributeTypes: ( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Telephone Num
 ber' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.50{32} )
attributeTypes: ( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Number' SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.52 )
attributeTypes: ( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC2256: Tel
 etex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )
attributeTypes: ( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DESC 'RFC
 2256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 
 )
attributeTypes: ( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Address' EQ
 UALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.36{15} )
attributeTypes: ( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC2256: inter
 national ISDN number' EQUALITY numericStringMatch SUBSTR numericStringSubstri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} )
attributeTypes: ( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: registered 
 postal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributeTypes: ( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: destinat
 ion indicator' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.44{128} )
attributeTypes: ( 2.5.4.28 NAME 'preferredDeliveryMethod' DESC 'RFC2256: prefe
 rred delivery method' SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE )
attributeTypes: ( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256: presentat
 ion address' EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.43 SINGLE-VALUE )
attributeTypes: ( 2.5.4.30 NAME 'supportedApplicationContext' DESC 'RFC2256: s
 upported application context' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.38 )
attributeTypes: ( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a group' SUP
  distinguishedName )
attributeTypes: ( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the object)' 
 SUP distinguishedName )
attributeTypes: ( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupant of role
 ' SUP distinguishedName )
attributeTypes: ( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.509 user ce
 rtificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.8 )
attributeTypes: ( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA certif
 icate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.8 )
attributeTypes: ( 2.5.4.38 NAME 'authorityRevocationList' DESC 'RFC2256: X.509
  authority revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 
 )
attributeTypes: ( 2.5.4.39 NAME 'certificateRevocationList' DESC 'RFC2256: X.5
 09 certificate revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.9 )
attributeTypes: ( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256: X.509 cr
 oss certificate pair, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.10 )
attributeTypes: ( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256: first name
 (s) for which the entity is known by' SUP name )
attributeTypes: ( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of some or 
 all of names, but not the surname(s).' SUP name )
attributeTypes: ( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256: name qual
 ifier indicating a generation' SUP name )
attributeTypes: ( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256: X.500 un
 ique identifier' EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 
 )
attributeTypes: ( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN qualifier' EQU
 ALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubst
 ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 )
attributeTypes: ( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256: enhanced 
 search guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 )
attributeTypes: ( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256: protocol 
 information' EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.42 )
attributeTypes: ( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique member of
  a group' EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 )
attributeTypes: ( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC2256: house identif
 ier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.15{32768} )
attributeTypes: ( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256: supported
  algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 )
attributeTypes: ( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256: delta rev
 ocation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )
attributeTypes: ( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD' SUP name
  )
attributeTypes: ( 2.5.4.65 NAME 'pseudonym' DESC 'X.520(4th): pseudonym for th
 e object' SUP name )
attributeTypes: ( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mailbox' ) DE
 SC 'RFC1274: RFC822 Mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5
 SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domainComponent' ) D
 ESC 'RFC1274/2247: domain component' EQUALITY caseIgnoreIA5Match SUBSTR caseI
 gnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain' DESC 'RFC
 1274: domain associated with object' EQUALITY caseIgnoreIA5Match SUBSTR caseI
 gnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.2.840.113549.1.9.1 NAME ( 'email' 'emailAddress' 'pkcs9ema
 il' ) DESC 'RFC3280: legacy attribute for email addresses in DNs' EQUALITY ca
 seIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.26{128} )
attributeTypes: ( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress' EQUALI
 TY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274: general
  information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15{2048} )
attributeTypes: ( 0.9.2342.19200300.100.1.5 NAME ( 'drink' 'favouriteDrink' ) 
 DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubs
 tringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC 'RFC1274: r
 oom number' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274: photo 
 (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )
attributeTypes: ( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC 'RFC1274: ca
 tegory of user' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274: host co
 mputer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC 'RFC1274: DN 
 of manager' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .12 )
attributeTypes: ( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier' DESC 'R
 FC1274: unique identifier of document' EQUALITY caseIgnoreMatch SUBSTR caseIg
 noreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC 'RFC127
 4: title of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DESC 'RFC1
 274: version of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstring
 sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC 'RFC12
 74: DN of author of document' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.12 )
attributeTypes: ( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DESC 'RFC
 1274: location of document original' EQUALITY caseIgnoreMatch SUBSTR caseIgno
 reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone' 'homeTelephone
 Number' ) DESC 'RFC1274: home telephone number' EQUALITY telephoneNumberMatch
  SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributeTypes: ( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC1274: D
 N of secretary' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.12 )
attributeTypes: ( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.39 )
attributeTypes: ( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY caseIgnor
 eIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY caseIgno
 reIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY caseIgno
 reIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY caseIgno
 reIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY caseIgn
 oreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALITY caseI
 gnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC 'RFC12
 74: DN of entry associated with domain' EQUALITY distinguishedNameMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress' DESC 'RF
 C1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreLis
 tSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributeTypes: ( 0.9.2342.19200300.100.1.40 NAME 'personalTitle' DESC 'RFC127
 4: personal title' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.41 NAME ( 'mobile' 'mobileTelephoneN
 umber' ) DESC 'RFC1274: mobile telephone number' EQUALITY telephoneNumberMatc
 h SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 
 )
attributeTypes: ( 0.9.2342.19200300.100.1.42 NAME ( 'pager' 'pagerTelephoneNum
 ber' ) DESC 'RFC1274: pager telephone number' EQUALITY telephoneNumberMatch S
 UBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributeTypes: ( 0.9.2342.19200300.100.1.43 NAME ( 'co' 'friendlyCountryName'
  ) DESC 'RFC1274: friendly country name' EQUALITY caseIgnoreMatch SUBSTR case
 IgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier' DESC 'RFC
 1274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.45 NAME 'organizationalStatus' DESC 
 'RFC1274: organizational status' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSu
 bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox' DESC 'RFC1274
 : Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.47 NAME 'mailPreferenceOption' DESC 
 'RFC1274: mail preference option' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 0.9.2342.19200300.100.1.48 NAME 'buildingName' DESC 'RFC1274
 : name of building' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality' DESC 'RFC1274: 
 DSA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19 SINGLE-VALUE )
attributeTypes: ( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality' DESC 'R
 FC1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VAL
 UE )
attributeTypes: ( 0.9.2342.19200300.100.1.51 NAME 'subtreeMinimumQuality' DESC
  'RFC1274: Subtree Mininum Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SING
 LE-VALUE )
attributeTypes: ( 0.9.2342.19200300.100.1.52 NAME 'subtreeMaximumQuality' DESC
  'RFC1274: Subtree Maximun Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SING
 LE-VALUE )
attributeTypes: ( 0.9.2342.19200300.100.1.53 NAME 'personalSignature' DESC 'RF
 C1274: Personal Signature (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23 )
attributeTypes: ( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect' DESC 'RFC1274:
  DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.12 )
attributeTypes: ( 0.9.2342.19200300.100.1.55 NAME 'audio' DESC 'RFC1274: audio
  (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} )
attributeTypes: ( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher' DESC 'RF
 C1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubst
 ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC 'RFC2798: veh
 icle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR caseIgnor
 eSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber' DESC 'RFC279
 8: identifies a department within an organization' EQUALITY caseIgnoreMatch S
 UBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC 'RFC2798: 
 preferred name to be used when displaying entries' EQUALITY caseIgnoreMatch S
 UBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-V
 ALUE )
attributeTypes: ( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC 'RFC2798:
  numerically identifies an employee within an organization' EQUALITY caseIgno
 reMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC 'RFC2798: t
 ype of employment for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSub
 stringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC 'RFC2798: a
  JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 )
attributeTypes: ( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage' DESC 'RFC2
 798: preferred written or spoken language for a person' EQUALITY caseIgnoreMa
 tch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SIN
 GLE-VALUE )
attributeTypes: ( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate' DESC 'R
 FC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.5 )
attributeTypes: ( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC 'RFC2798: p
 ersonal identity information, a PKCS #12 PFX' SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.5 )
attributeTypes: ( 2.16.840.1.113730.3.1.13 NAME 'mailLocalAddress' DESC 'RFC82
 2 email address of this recipient' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.26{256} )
attributeTypes: ( 2.16.840.1.113730.3.1.18 NAME 'mailHost' DESC 'FQDN of the S
 MTP/MTA of this recipient' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.26{256} SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113730.3.1.47 NAME 'mailRoutingAddress' DESC 'RFC
 822 routing address of this recipient' EQUALITY caseIgnoreIA5Match SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.2.1.15 NAME 'rfc822MailMember' DESC 'rfc
 822 mail address of group member(s)' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field; the comm
 on name' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The absolute path
  to the home directory' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to the logi
 n shell' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SING
 LE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY integerMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY integerMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY integerMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY integerMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY integerMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY integerMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY integerMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY caseExactIA5Match
  SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY caseExact
 IA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .26 )
attributeTypes: ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgroup tri
 ple' SYNTAX 1.3.6.1.1.1.0.0 )
attributeTypes: ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY integerMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP name )
attributeTypes: ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY integerMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY integerMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP address' EQUAL
 ITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
attributeTypes: ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP network' EQ
 UALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP netmask' EQ
 UALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address' EQUALI
 TY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
attributeTypes: ( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC 'rpc.bootparamd p
 arameter' SYNTAX 1.3.6.1.1.1.0.1 )
attributeTypes: ( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image name' EQUA
 LITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name )
attributeTypes: ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY caseExactIA5Mat
 ch SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{10
 24} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.6 NAME 'javaClassName' DESC 'Fully q
 ualified name of distinguished Java class or interface' EQUALITY caseExactMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.7 NAME 'javaCodebase' DESC 'URL(s) s
 pecifying the location of class definition' EQUALITY caseExactIA5Match SYNTAX
  1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.13 NAME 'javaClassNames' DESC 'Fully
  qualified Java class or interface name' EQUALITY caseExactMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.8 NAME 'javaSerializedData' DESC 'Se
 rialized form of a Java object' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-V
 ALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.10 NAME 'javaFactory' DESC 'Fully qu
 alified Java class name of a JNDI object factory' EQUALITY caseExactMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.11 NAME 'javaReferenceAddress' DESC 
 'Addresses associated with a JNDI Reference' EQUALITY caseExactMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.12 NAME 'javaDoc' DESC 'The Java doc
 umentation for the class' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.14 NAME 'corbaIor' DESC 'Stringified
  interoperable object reference of a CORBA object' EQUALITY caseIgnoreIA5Matc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.4.1.15 NAME 'corbaRepositoryId' DESC 'Re
 pository ids of interfaces implemented by a CORBA object' EQUALITY caseExactM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.16.840.1.113730.3.1.198 NAME 'memberURL' DESC 'Identifies 
 an URL associated with each member of a group. Any type of labeled URL can be
  used.' SUP labeledURI )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.8.1.1 NAME 'dgIdentity' DESC 'Identi
 ty to use when processing the memberURL' SUP distinguishedName SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4203.666.11.8.1.2 NAME 'dgAuthz' DESC 'Optional 
 authorization rules that determine who is allowed to assume the dgIdentity' E
 QUALITY authzMatch SYNTAX 1.3.6.1.4.1.4203.666.2.7 X-ORDERED 'VALUES' )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.1 NAME 'pwdAttribute' EQUALITY objec
 tIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.2 NAME 'pwdMinAge' EQUALITY integerM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.3 NAME 'pwdMaxAge' EQUALITY integerM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.4 NAME 'pwdInHistory' EQUALITY integ
 erMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.5 NAME 'pwdCheckQuality' EQUALITY in
 tegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.6 NAME 'pwdMinLength' EQUALITY integ
 erMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.7 NAME 'pwdExpireWarning' EQUALITY i
 ntegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.8 NAME 'pwdGraceAuthNLimit' EQUALITY
  integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.9 NAME 'pwdLockout' EQUALITY boolean
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.10 NAME 'pwdLockoutDuration' EQUALIT
 Y integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.11 NAME 'pwdMaxFailure' EQUALITY int
 egerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.12 NAME 'pwdFailureCountInterval' EQ
 UALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.13 NAME 'pwdMustChange' EQUALITY boo
 leanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.14 NAME 'pwdAllowUserChange' EQUALIT
 Y booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.15 NAME 'pwdSafeModify' EQUALITY boo
 leanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.4754.1.99.1 NAME 'pwdCheckModule' DESC 'Loadable
  module that instantiates "check_password() function' EQUALITY caseExactIA5Ma
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 2.5.4.72 NAME 'role' DESC 'X.509 Role attribute, use ;binary
 ' SYNTAX 1.3.6.1.4.1.4203.666.11.10.2.6 )
attributeTypes: ( 2.5.4.75 NAME 'xmlPrivilegeInfo' DESC 'X.509 XML privilege i
 nformation attribute' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.5.4.58 NAME 'attributeCertificateAttribute' DESC 'X.509 At
 tribute certificate attribute, use ;binary' EQUALITY attributeCertificateExac
 tMatch SYNTAX 1.3.6.1.4.1.4203.666.11.10.2.1 )
attributeTypes: ( 2.5.4.61 NAME 'aACertificate' DESC 'X.509 AA certificate att
 ribute, use ;binary' EQUALITY attributeCertificateExactMatch SYNTAX 1.3.6.1.4
 .1.4203.666.11.10.2.1 )
attributeTypes: ( 2.5.4.62 NAME 'attributeDescriptorCertificate' DESC 'X.509 A
 ttribute descriptor certificate attribute, use ;binary' EQUALITY attributeCer
 tificateExactMatch SYNTAX 1.3.6.1.4.1.4203.666.11.10.2.1 )
attributeTypes: ( 2.5.4.59 NAME 'attributeCertificateRevocationList' DESC 'X.5
 09 Attribute certificate revocation list attribute, use ;binary' SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.9 X-EQUALITY 'certificateListExactMatch, not implemente
 d yet' )
attributeTypes: ( 2.5.4.63 NAME 'attributeAuthorityRevocationList' DESC 'X.509
  AA certificate revocation list attribute, use ;binary' SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.9 X-EQUALITY 'certificateListExactMatch, not implemented yet' )
attributeTypes: ( 2.5.4.73 NAME 'delegationPath' DESC 'X.509 Delegation path a
 ttribute, use ;binary' SYNTAX 1.3.6.1.4.1.4203.666.11.10.2.4 )
attributeTypes: ( 2.5.4.71 NAME 'privPolicy' DESC 'X.509 Privilege policy attr
 ibute, use ;binary' SYNTAX 1.3.6.1.4.1.4203.666.11.10.2.5 )
attributeTypes: ( 2.5.4.74 NAME 'protPrivPolicy' DESC 'X.509 Protected privile
 ge policy attribute, use ;binary' EQUALITY attributeCertificateExactMatch SYN
 TAX 1.3.6.1.4.1.4203.666.11.10.2.1 )
attributeTypes: ( 2.5.4.76 NAME 'xmlPrivPolicy' DESC 'X.509 XML Protected priv
 ilege policy attribute' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.0 NAME 'defaultServerList' DESC 'Defa
 ult LDAP server host address used by a DUA' EQUALITY caseIgnoreMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.1 NAME 'defaultSearchBase' DESC 'Defa
 ult LDAP base DN used by a DUA' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.2 NAME 'preferredServerList' DESC 'Pr
 eferred LDAP server host addresses to be used by a            DUA' EQUALITY c
 aseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.3 NAME 'searchTimeLimit' DESC 'Maximu
 m time in seconds a DUA should allow for a            search to complete' EQU
 ALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.4 NAME 'bindTimeLimit' DESC 'Maximum 
 time in seconds a DUA should allow for the            bind operation to compl
 ete' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.5 NAME 'followReferrals' DESC 'Tells 
 DUA if it should follow referrals            returned by a DSA search result'
  EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.16 NAME 'dereferenceAliases' DESC 'Te
 lls DUA if it should dereference aliases' EQUALITY booleanMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.6 NAME 'authenticationMethod' DESC 'A
  keystring which identifies the type of            authentication method used
  to contact the DSA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.7 NAME 'profileTTL' DESC 'Time to liv
 e, in seconds, before a client DUA            should re-read this configurati
 on profile' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE
 -VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.14 NAME 'serviceSearchDescriptor' DES
 C 'LDAP search descriptor list used by a DUA' EQUALITY caseExactMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.9 NAME 'attributeMap' DESC 'Attribute
  mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.10 NAME 'credentialLevel' DESC 'Ident
 ifies type of credentials a DUA should            use when binding to the LDA
 P server' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SI
 NGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.11 NAME 'objectclassMap' DESC 'Object
 class mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.12 NAME 'defaultSearchScope' DESC 'De
 fault search scope used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.13 NAME 'serviceCredentialLevel' DESC
  'Identifies type of credentials a DUA            should use when binding to 
 the LDAP server for a            specific service' EQUALITY caseIgnoreIA5Matc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod'
  DESC 'Authentication method used by a service of the DUA' EQUALITY caseIgnor
 eMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.2.840.113533.7.68.10 NAME 'attributeCertificate' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.5 )
attributeTypes: ( 1.2.840.113533.7.68.0 NAME 'entrustCAInfo' SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.5 )
attributeTypes: ( 1.2.840.113533.7.68.30 NAME 'entrustPolicyCertificate' SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.68.22 NAME 'entrustRoamFileEncInfo' EQUALIT
 Y octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.79.0 NAME 'entrustRoamingCAPAB' EQUALITY oc
 tetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.68.28 NAME 'entrustRoamingEOP' EQUALITY oct
 etStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.68.24 NAME 'entrustRoamingPAB' EQUALITY oct
 etStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.68.27 NAME 'entrustRoamingPRV' EQUALITY oct
 etStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.68.23 NAME 'entrustRoamingProfile' EQUALITY
  octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.68.25 NAME 'entrustRoamingRecipList' EQUALI
 TY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.68.26 NAME 'entrustRoamingSLA' EQUALITY oct
 etStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 2.16.840.1.114027.22.4 NAME 'entrustAttributeCertificate' EQ
 UALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.2.840.113533.7.79.1 NAME 'entrustRoamingId' SUP uid )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.1 NAME 'eduPersonAffiliation' DESC 'e
 duPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SUBSTR caseIgno
 reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.2 NAME 'eduPersonNickname' DESC 'eduP
 erson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreS
 ubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.3 NAME 'eduPersonOrgDN' DESC 'eduPers
 on per Internet2 and EDUCAUSE' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.4 NAME 'eduPersonOrgUnitDN' DESC 'edu
 Person per Internet2 and EDUCAUSE' EQUALITY distinguishedNameMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.5 NAME 'eduPersonPrimaryAffiliation' 
 DESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SUBSTR c
 aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.6 NAME 'eduPersonPrincipalName' DESC 
 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SUBSTR caseIg
 noreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.7 NAME 'eduPersonEntitlement' DESC 'e
 duPerson per Internet2 and EDUCAUSE' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.8 NAME 'eduPersonPrimaryOrgUnitDN' DE
 SC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY distinguishedNameMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5923.1.1.1.9 NAME 'eduPersonScopedAffiliation' D
 ESC 'eduPerson per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5923.1.2.1.2 NAME 'eduOrgHomePageURI' DESC 'eduO
 rg per Internet2 and EDUCAUSE' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.2.1.3 NAME 'eduOrgIdentityAuthNPolicyURI'
  DESC 'eduOrg per Internet2 and EDUCAUSE' EQUALITY caseExactIA5Match SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.2.1.4 NAME 'eduOrgLegalName' DESC 'eduOrg
  per Internet2 and EDUCAUSE' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.2.1.5 NAME 'eduOrgSuperiorURI' DESC 'eduO
 rg per Internet2 and EDUCAUSE' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.5923.1.2.1.6 NAME 'eduOrgWhitePagesURI' DESC 'ed
 uOrg per Internet2 and EDUCAUSE' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.1 NAME 'schacMotherTongue' DESC 'RFC 3
 066 code for prefered language of communication' EQUALITY caseExactMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.2 NAME 'schacGender' DESC 'Representat
 ion of human sex (see ISO 5218)' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.3 NAME 'schacDateOfBirth' DESC 'Date o
 f birth (format YYYYMMDD, only numeric chars)' EQUALITY numericStringMatch OR
 DERING numericStringOrderingMatch SUBSTR numericStringSubstringsMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.36 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.4 NAME 'schacPlaceOfBirth' DESC 'Birth
  place of a person' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch
  SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE
 -VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.5 NAME 'schacCountryOfCitizenship' DES
 C 'Country of citizenship of a person. Format two-letter acronym according to
  ISO 3166' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.6 NAME 'schacSn1' DESC 'First surname 
 of a person' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR
  caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.7 NAME 'schacSn2' DESC 'Second surname
  of a person' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBST
 R caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.8 NAME 'schacPersonalTitle' DESC 'RFC1
 274: personal title' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.9 NAME 'schacHomeOrganization' DESC 'D
 omain name of the home organization' EQUALITY caseIgnoreMatch SUBSTR caseIgno
 reSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.10 NAME 'schacHomeOrganizationType' DE
 SC 'Type of the home organization' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.11 NAME 'schacCountryOfResidence' DESC
  'Country of citizenship of a person. Format two-letter acronym according to 
 ISO 3166' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.12 NAME 'schacUserPresenceID' DESC 'Us
 ed to store a set of values related to the network presence' EQUALITY caseExa
 ctMatch SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.13 NAME 'schacPersonalPosition' DESC '
 Position inside an institution' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSub
 stringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.14 NAME 'schacPersonalUniqueCode' DESC
  'unique code for the subject' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOr
 deringMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.15 NAME 'schacPersonalUniqueID' DESC '
 Unique identifier for the subject' EQUALITY caseExactMatch ORDERING caseExact
 OrderingMatch SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.17 NAME 'schacExpiryDate' DESC 'Date f
 rom which the set of data is to be considered invalid (format YYYYMMDDhhmmssZ
 )' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.18 NAME 'schacUserPrivateAttribute' DE
 SC 'Set of denied access attributes' EQUALITY caseIgnoreIA5Match SUBSTR caseI
 gnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.19 NAME 'schacUserStatus' DESC 'Used t
 o store a set of status of a person as user of services' EQUALITY caseIgnoreM
 atch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.20 NAME 'schacProjectMembership' DESC 
 'Name of the project' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.2.21 NAME 'schacProjectSpecificRole' DES
 C 'Used to store a set of roles of a person inside a project' EQUALITY caseIg
 noreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 15 )
attributeTypes: ( 1.3.6.1.4.1.25178.1.0.2.3 NAME 'schacYearOfBirth' DESC 'Year
  of birth (format YYYY, only numeric chars)' EQUALITY numericStringMatch ORDE
 RING numericStringOrderingMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.36 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.2428.20.0.0 NAME 'dNSTTL' DESC 'An integer denot
 ing time to live' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.0.1 NAME 'dNSClass' DESC 'The class of a
  resource record' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.12 NAME 'pTRRecord' DESC 'domain name 
 pointer, RFC 1035' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Substrings
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.13 NAME 'hInfoRecord' DESC 'host infor
 mation, RFC 1035' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.14 NAME 'mInfoRecord' DESC 'mailbox or
  mail list information, RFC 1035' EQUALITY caseIgnoreIA5Match SUBSTR caseIgno
 reIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.16 NAME 'tXTRecord' DESC 'text string,
  RFC 1035' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.24 NAME 'SigRecord' DESC 'Signature, R
 FC 2535' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.25 NAME 'KeyRecord' DESC 'Key, RFC 253
 5' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.28 NAME 'aAAARecord' DESC 'IPv6 addres
 s, RFC 1886' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.29 NAME 'LocRecord' DESC 'Location, RF
 C 1876' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.30 NAME 'nXTRecord' DESC 'non-existant
 , RFC 2535' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.33 NAME 'sRVRecord' DESC 'service loca
 tion, RFC 2782' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.35 NAME 'nAPTRRecord' DESC 'Naming Aut
 hority Pointer, RFC 2915' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Sub
 stringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.36 NAME 'kXRecord' DESC 'Key Exchange 
 Delegation, RFC 2230' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Substri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.37 NAME 'certRecord' DESC 'certificate
 , RFC 2538' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.38 NAME 'a6Record' DESC 'A6 Record Typ
 e, RFC 2874' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.20.1.39 NAME 'dNameRecord' DESC 'Non-Termin
 al DNS Name Redirection, RFC 2672' EQUALITY caseIgnoreIA5Match SUBSTR caseIgn
 oreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.1.1.28 NAME 'nisPublickey' DESC 'nisPublickey' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.1.1.29 NAME 'nisSecretkey' DESC 'nisSecretkey' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.1.1.30 NAME 'nisDomain' SUP name )
attributeTypes: ( 2.16.840.1.113730.3.1.30 NAME 'mgrpRFC822MailMember' DESC 'm
 grpRFC822MailMember' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.1.1.12 NAME 'nisNetIdUser' DESC 'nisNetI
 dUser' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.1.1.13 NAME 'nisNetIdGroup' DESC 'nisNet
 IdGroup' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.1.1.14 NAME 'nisNetIdHost' DESC 'nisNetI
 dHost' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.15 NAME 'SolarisLDAPServers' DESC 'S
 olarisLDAPServers' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.16 NAME 'SolarisSearchBaseDN' DESC '
 SolarisSearchBaseDN' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.17 NAME 'SolarisCacheTTL' DESC 'Sola
 risCacheTTL' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGL
 E-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.18 NAME 'SolarisBindDN' DESC 'Solari
 sBindDN' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.19 NAME 'SolarisBindPassword' DESC '
 SolarisBindPassword' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.20 NAME 'SolarisAuthMethod' DESC 'So
 larisAuthMethod' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.21 NAME 'SolarisTransportSecurity' D
 ESC 'SolarisTransportSecurity' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.24 NAME 'SolarisDataSearchDN' DESC '
 SolarisDataSearchDN' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.25 NAME 'SolarisSearchScope' DESC 'S
 olarisSearchScope' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.26 NAME 'SolarisSearchTimeLimit' DES
 C 'SolarisSearchTimeLimit' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.27 NAME 'SolarisPreferedServer' DESC
  'SolarisPreferedServer' SUP name )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.28 NAME 'SolarisPreferedServerOnly' 
 DESC 'SolarisPreferedServerOnly' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.5.1.29 NAME 'SolarisSearchReferral' DESC
  'SolarisSearchReferral' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.31 NAME 'homeFax' SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.22 )
attributeTypes: ( 2.16.128.113533.1.1400.1 NAME 'thumbnailPhoto' SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.28 )
attributeTypes: ( 2.16.128.113533.1.1400.2 NAME 'thumbnailLogo' SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.28 )
attributeTypes: ( 1.3.6.1.4.1.1466.101.120.34 NAME 'middleName' SUP name )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.1 NAME ( 'xmozillanickname' 'mozillaNi
 ckname' ) SUP name )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.2 NAME ( 'xmozillausehtmlmail' 'mozill
 aUseHtmlMail' ) SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.3 NAME 'mozillaSecondEmail' EQUALITY c
 aseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.26{256} )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.4 NAME 'mozillaHomeLocalityName' EQUAL
 ITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.15{128} )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.5 NAME 'mozillaPostalAddress2' EQUALIT
 Y caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.41 )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.6 NAME 'mozillaHomePostalAddress2' EQU
 ALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.41 )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.7 NAME 'mozillaHomeState' SUP name )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.8 NAME 'mozillaHomePostalCode' EQUALIT
 Y caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.15{40} )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.9 NAME 'mozillaHomeCountryName' SUP na
 me SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.10 NAME 'mozillaHomeFriendlyCountryNam
 e' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.11 NAME ( 'homeurl' 'mozillaHomeUrl' )
  EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.26{256} )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.12 NAME ( 'workurl' 'mozillaWorkUrl' )
  EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.26{256} )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.13 NAME 'nsAIMid' DESC 'AOL Instant Me
 ssenger (AIM) Identity' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberS
 ubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.96 NAME ( 'custom1' 'mozillaCustom1' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.97 NAME ( 'custom2' 'mozillaCustom2' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.98 NAME ( 'custom3' 'mozillaCustom3' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.13769.2.1.99 NAME ( 'custom4' 'mozillaCustom4' )
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.1 NAME 'radiusArapFeatures' DESC '' E
 QUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.2 NAME 'radiusArapSecurity' DESC '' E
 QUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.3 NAME 'radiusArapZoneAccess' DESC ''
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.44 NAME 'radiusAuthType' DESC '' EQUA
 LITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.4 NAME 'radiusCallbackId' DESC '' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.5 NAME 'radiusCallbackNumber' DESC ''
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.6 NAME 'radiusCalledStationId' DESC '
 ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VAL
 UE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.7 NAME 'radiusCallingStationId' DESC 
 '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.8 NAME 'radiusClass' DESC '' EQUALITY
  caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.45 NAME 'radiusClientIPAddress' DESC 
 '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.9 NAME 'radiusFilterId' DESC '' EQUAL
 ITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.10 NAME 'radiusFramedAppleTalkLink' D
 ESC '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGL
 E-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.11 NAME 'radiusFramedAppleTalkNetwork
 ' DESC '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SI
 NGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.12 NAME 'radiusFramedAppleTalkZone' D
 ESC '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGL
 E-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.13 NAME 'radiusFramedCompression' DES
 C '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.14 NAME 'radiusFramedIPAddress' DESC 
 '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.15 NAME 'radiusFramedIPNetmask' DESC 
 '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.16 NAME 'radiusFramedIPXNetwork' DESC
  '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-V
 ALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.17 NAME 'radiusFramedMTU' DESC '' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.18 NAME 'radiusFramedProtocol' DESC '
 ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VAL
 UE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.19 NAME 'radiusFramedRoute' DESC '' E
 QUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.20 NAME 'radiusFramedRouting' DESC ''
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.46 NAME 'radiusGroupName' DESC '' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.47 NAME 'radiusHint' DESC '' EQUALITY
  caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.48 NAME 'radiusHuntgroupName' DESC ''
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.21 NAME 'radiusIdleTimeout' DESC '' E
 QUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.22 NAME 'radiusLoginIPHost' DESC '' E
 QUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.23 NAME 'radiusLoginLATGroup' DESC ''
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.24 NAME 'radiusLoginLATNode' DESC '' 
 EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.25 NAME 'radiusLoginLATPort' DESC '' 
 EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.26 NAME 'radiusLoginLATService' DESC 
 '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.27 NAME 'radiusLoginService' DESC '' 
 EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.28 NAME 'radiusLoginTCPPort' DESC '' 
 EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.29 NAME 'radiusPasswordRetry' DESC ''
  EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.30 NAME 'radiusPortLimit' DESC '' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.49 NAME 'radiusProfileDn' DESC '' EQU
 ALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.31 NAME 'radiusPrompt' DESC '' EQUALI
 TY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.50 NAME 'radiusProxyToRealm' DESC '' 
 EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.51 NAME 'radiusReplicateToRealm' DESC
  '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-V
 ALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.52 NAME 'radiusRealm' DESC '' EQUALIT
 Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.32 NAME 'radiusServiceType' DESC '' E
 QUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE 
 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.33 NAME 'radiusSessionTimeout' DESC '
 ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VAL
 UE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.34 NAME 'radiusTerminationAction' DES
 C '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.35 NAME 'radiusTunnelAssignmentId' DE
 SC '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.36 NAME 'radiusTunnelMediumType' DESC
  '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.37 NAME 'radiusTunnelPassword' DESC '
 ' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VAL
 UE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.38 NAME 'radiusTunnelPreference' DESC
  '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.39 NAME 'radiusTunnelPrivateGroupId' 
 DESC '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.40 NAME 'radiusTunnelServerEndpoint' 
 DESC '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.41 NAME 'radiusTunnelType' DESC '' EQ
 UALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.42 NAME 'radiusVSA' DESC '' EQUALITY 
 caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.43 NAME 'radiusTunnelClientEndpoint' 
 DESC '' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.53 NAME 'radiusSimultaneousUse' DESC 
 '' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.54 NAME 'radiusLoginTime' DESC '' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.55 NAME 'radiusUserCategory' DESC '' 
 EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.56 NAME 'radiusStripUserName' DESC ''
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.57 NAME 'dialupAccess' DESC '' EQUALI
 TY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.58 NAME 'radiusExpiration' DESC '' EQ
 UALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.59 NAME 'radiusCheckItem' DESC '' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.3317.4.3.1.60 NAME 'radiusReplyItem' DESC '' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.24 NAME 'sambaLMPassword' DESC 'LanMana
 ger Password' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.2
 6{32} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.25 NAME 'sambaNTPassword' DESC 'MD4 has
 h of the unicode password' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.26{32} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.26 NAME 'sambaAcctFlags' DESC 'Account 
 Flags' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{16} S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.27 NAME 'sambaPwdLastSet' DESC 'Timesta
 mp of the last password update' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.28 NAME 'sambaPwdCanChange' DESC 'Times
 tamp of when the user is allowed to update the password' EQUALITY integerMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.29 NAME 'sambaPwdMustChange' DESC 'Time
 stamp of when the password will expire' EQUALITY integerMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.30 NAME 'sambaLogonTime' DESC 'Timestam
 p of last logon' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.31 NAME 'sambaLogoffTime' DESC 'Timesta
 mp of last logoff' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.32 NAME 'sambaKickoffTime' DESC 'Timest
 amp of when the user will be logged off automatically' EQUALITY integerMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.48 NAME 'sambaBadPasswordCount' DESC 'B
 ad password attempt count' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.49 NAME 'sambaBadPasswordTime' DESC 'Ti
 me of the last bad password attempt' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.55 NAME 'sambaLogonHours' DESC 'Logon H
 ours' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{42} SI
 NGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.33 NAME 'sambaHomeDrive' DESC 'Driver l
 etter of home directory mapping' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.26{4} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.34 NAME 'sambaLogonScript' DESC 'Logon 
 script path' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{25
 5} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.35 NAME 'sambaProfilePath' DESC 'Roamin
 g profile path' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
 {255} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.36 NAME 'sambaUserWorkstations' DESC 'L
 ist of user workstations the user is allowed to logon to' EQUALITY caseIgnore
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{255} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.37 NAME 'sambaHomePath' DESC 'Home dire
 ctory UNC path' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
 {128} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.38 NAME 'sambaDomainName' DESC 'Windows
  NT domain to which the user belongs' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.15{128} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.47 NAME 'sambaMungedDial' DESC 'Base64 
 encoded user parameter string' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.15{1050} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.54 NAME 'sambaPasswordHistory' DESC 'Co
 ncatenated MD5 hashes of the salted NT passwords used on this account' EQUALI
 TY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{32} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID' DESC 'Security ID' E
 QUALITY caseIgnoreIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.26{64} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.23 NAME 'sambaPrimaryGroupSID' DESC 'Pr
 imary Group Security ID' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.26{64} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.51 NAME 'sambaSIDList' DESC 'Security I
 D List' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} 
 )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.19 NAME 'sambaGroupType' DESC 'NT Group
  Type' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.21 NAME 'sambaNextUserRid' DESC 'Next N
 T rid to give our for users' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.22 NAME 'sambaNextGroupRid' DESC 'Next 
 NT rid to give out for groups' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.39 NAME 'sambaNextRid' DESC 'Next NT ri
 d to give out for anything' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.40 NAME 'sambaAlgorithmicRidBase' DESC 
 'Base at which the samba RID generation algorithm should operate' EQUALITY in
 tegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.41 NAME 'sambaShareName' DESC 'Share Na
 me' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.42 NAME 'sambaOptionName' DESC 'Option 
 Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.43 NAME 'sambaBoolOption' DESC 'A boole
 an option' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-V
 ALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.44 NAME 'sambaIntegerOption' DESC 'An i
 nteger option' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SIN
 GLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.45 NAME 'sambaStringOption' DESC 'A str
 ing option' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.46 NAME 'sambaStringListOption' DESC 'A
  string list option' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.53 NAME 'sambaTrustFlags' DESC 'Trust P
 assword Flags' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 26 )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.58 NAME 'sambaMinPwdLength' DESC 'Minim
 al password length (default: 5)' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.59 NAME 'sambaPwdHistoryLength' DESC 'L
 ength of Password History Entries (default: 0 => off)' EQUALITY integerMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.60 NAME 'sambaLogonToChgPwd' DESC 'Forc
 e Users to logon for password change (default: 0 => off, 2 => on)' EQUALITY i
 ntegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.61 NAME 'sambaMaxPwdAge' DESC 'Maximum 
 password age, in seconds (default: -1 => never expire passwords)' EQUALITY in
 tegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.62 NAME 'sambaMinPwdAge' DESC 'Minimum 
 password age, in seconds (default: 0 => allow immediate password change)' EQU
 ALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.63 NAME 'sambaLockoutDuration' DESC 'Lo
 ckout duration in minutes (default: 30, -1 => forever)' EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.64 NAME 'sambaLockoutObservationWindow'
  DESC 'Reset time after lockout in minutes (default: 30)' EQUALITY integerMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.65 NAME 'sambaLockoutThreshold' DESC 'L
 ockout users after bad logon attempts (default: 0 => off)' EQUALITY integerMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.66 NAME 'sambaForceLogoff' DESC 'Discon
 nect Users outside logon hours (default: -1 => off, 0 => on)' EQUALITY intege
 rMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.67 NAME 'sambaRefuseMachinePwdChange' D
 ESC 'Allow Machine Password changes (default: 0 => off)' EQUALITY integerMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.68 NAME 'sambaClearTextPassword' DESC '
 Clear text password (used for trusted domain passwords)' EQUALITY octetString
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.69 NAME 'sambaPreviousClearTextPassword
 ' DESC 'Previous clear text password (used for trusted domain passwords)' EQU
 ALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.70 NAME 'sambaTrustType' DESC 'Type of 
 trust' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.71 NAME 'sambaTrustAttributes' DESC 'Tr
 ust attributes for a trusted domain' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.72 NAME 'sambaTrustDirection' DESC 'Dir
 ection of a trust' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
  SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.73 NAME 'sambaTrustPartner' DESC 'Fully
  qualified name of the domain with which a trust exists' EQUALITY caseIgnoreM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.74 NAME 'sambaFlatName' DESC 'NetBIOS n
 ame of a domain' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 5{128} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.75 NAME 'sambaTrustAuthOutgoing' DESC '
 Authentication information for the outgoing portion of a trust' EQUALITY case
 ExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.76 NAME 'sambaTrustAuthIncoming' DESC '
 Authentication information for the incoming portion of a trust' EQUALITY case
 ExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.77 NAME 'sambaSecurityIdentifier' DESC 
 'SID of a trusted domain' EQUALITY caseIgnoreIA5Match SUBSTR caseExactIA5Subs
 tringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.78 NAME 'sambaTrustForestTrustInfo' DES
 C 'Forest trust information for a trusted domain object' EQUALITY caseExactMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1050} )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.79 NAME 'sambaTrustPosixOffset' DESC 'P
 OSIX offset of a trust' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7165.2.1.80 NAME 'sambaSupportedEncryptionTypes'
  DESC 'Supported encryption types of a trust' EQUALITY integerMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.1 NAME 'krb5PrincipalName' DESC 'The u
 nparsed Kerberos principal name' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.2 NAME 'krb5KeyVersionNumber' EQUALITY
  integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.3 NAME 'krb5MaxLife' EQUALITY integerM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.4 NAME 'krb5MaxRenew' EQUALITY integer
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.5 NAME 'krb5KDCFlags' EQUALITY integer
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.6 NAME 'krb5EncryptionType' EQUALITY i
 ntegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.7 NAME 'krb5ValidStart' EQUALITY gener
 alizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.8 NAME 'krb5ValidEnd' EQUALITY general
 izedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.9 NAME 'krb5PasswordEnd' EQUALITY gene
 ralizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.10 NAME 'krb5Key' DESC 'Encoded ASN1 K
 ey as an octet string' SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.11 NAME 'krb5PrincipalRealm' DESC 'Dis
 tinguished name of krb5Realm entry' SUP distinguishedName )
attributeTypes: ( 1.3.6.1.4.1.5322.10.1.12 NAME 'krb5RealmName' EQUALITY octet
 StringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )
attributeTypes: ( 2.16.840.1.113719.1.301.4.1.1 NAME 'krbPrincipalName' EQUALI
 TY caseExactIA5Match SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.26 )
attributeTypes: ( 1.2.840.113554.1.4.1.6.1 NAME 'krbCanonicalName' EQUALITY ca
 seExactIA5Match SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.26 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.3.1 NAME 'krbPrincipalType' EQUALI
 TY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.5.1 NAME 'krbUPEnabled' DESC 'Bool
 ean' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.6.1 NAME 'krbPrincipalExpiration' 
 EQUALITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VAL
 UE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.8.1 NAME 'krbTicketFlags' EQUALITY
  integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.9.1 NAME 'krbMaxTicketLife' EQUALI
 TY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.10.1 NAME 'krbMaxRenewableAge' EQU
 ALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.14.1 NAME 'krbRealmReferences' EQU
 ALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.15.1 NAME 'krbLdapServers' EQUALIT
 Y caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.17.1 NAME 'krbKdcServers' EQUALITY
  distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.18.1 NAME 'krbPwdServers' EQUALITY
  distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.24.1 NAME 'krbHostServer' EQUALITY
  caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.25.1 NAME 'krbSearchScope' EQUALIT
 Y integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.26.1 NAME 'krbPrincipalReferences'
  EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.28.1 NAME 'krbPrincNamingAttr' EQU
 ALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.29.1 NAME 'krbAdmServers' EQUALITY
  distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.30.1 NAME 'krbMaxPwdLife' EQUALITY
  integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.31.1 NAME 'krbMinPwdLife' EQUALITY
  integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.32.1 NAME 'krbPwdMinDiffChars' EQU
 ALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.33.1 NAME 'krbPwdMinLength' EQUALI
 TY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.34.1 NAME 'krbPwdHistoryLength' EQ
 UALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.21.2.1 NAME 'krbPwdMaxFailure' EQUALITY int
 egerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.21.2.2 NAME 'krbPwdFailureCountInterval' EQ
 UALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5322.21.2.3 NAME 'krbPwdLockoutDuration' EQUALIT
 Y integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.36.1 NAME 'krbPwdPolicyReference' 
 EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-V
 ALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.37.1 NAME 'krbPasswordExpiration' 
 EQUALITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VAL
 UE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.39.1 NAME 'krbPrincipalKey' EQUALI
 TY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.40.1 NAME 'krbTicketPolicyReferenc
 e' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGL
 E-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.41.1 NAME 'krbSubTrees' EQUALITY d
 istinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.42.1 NAME 'krbDefaultEncSaltTypes'
  EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.43.1 NAME 'krbSupportedEncSaltType
 s' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.44.1 NAME 'krbPwdHistory' EQUALITY
  octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.45.1 NAME 'krbLastPwdChange' EQUAL
 ITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.46.1 NAME 'krbMKey' EQUALITY octet
 StringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.47.1 NAME 'krbPrincipalAliases' EQ
 UALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.48.1 NAME 'krbLastSuccessfulAuth' 
 EQUALITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VAL
 UE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.49.1 NAME 'krbLastFailedAuth' EQUA
 LITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.50.1 NAME 'krbLoginFailedCount' EQ
 UALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.301.4.51.1 NAME 'krbExtraData' EQUALITY 
 octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.52.1 NAME 'krbObjectReferences' EQ
 UALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.301.4.53.1 NAME 'krbPrincContainerRef' E
 QUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.5322.21.2.4 NAME 'krbAllowedToDelegateTo' EQUALI
 TY caseExactIA5Match SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.1 NAME ( 'esgSid' 'esgStreamId' ) DE
 SC 'String uniquely identifying each stream' EQUALITY caseExactMatch SUBSTR c
 aseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.2 NAME ( 'esgSN' 'esgSessionName' ) 
 DESC 'Session name/title' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstring
 sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.3 NAME ( 'esgInfo' 'esgInformation' 
 ) DESC 'Short description' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstrin
 gsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.4 NAME 'esgInfoUri' DESC 'URI to mor
 e Information' SUP labeledURI )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.4.1 NAME 'esgContact' DESC 'Other cont
 act Information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.4.2 NAME 'esgContactMail' DESC 'Email-
 address to contact-person' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Su
 bstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.4.3 NAME 'esgContactPhone' DESC 'Phone
  number to contact-person' EQUALITY telephoneNumberMatch SUBSTR telephoneNumb
 erSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.4.4 NAME 'esgContactDN' DESC 'LDAP DN 
 to contact-person' SUP distinguishedName )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.6 NAME ( 'esgCategory' 'esgCat' ) DE
 SC 'Meta-category: meeting, broadcast, test etc.' EQUALITY caseIgnoreMatch SU
 BSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{64} )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.7 NAME 'esgTool' DESC 'Tool that mad
 e the announcement (SDP: a=tool:...)' EQUALITY caseIgnoreMatch SUBSTR caseIgn
 oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.8 NAME 'esgSource' DESC 'How the ann
 ouncement entered the system' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubst
 ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.3.1 NAME 'esgFormat' DESC 'Media forma
 t' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.3.10 NAME 'esgStreamUri' DESC 'Direct 
 absolute url to stream' SUP labeledURI )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.3.11 NAME 'esgSdpUri' DESC 'Url to fil
 e in sdp-format, if any' SUP labeledURI )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.2.1 NAME 'esgAlwaysOn' DESC 'Whether t
 he stream is permanent/on-demand or temporary/live' EQUALITY booleanMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.7 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.2.2 NAME 'esgFirstShown' DESC 'When th
 e stream starts to be transmitted for the first time' EQUALITY generalizedTim
 eMatch ORDERING generalizedTimeOrderingMatch SUBSTR caseIgnoreSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.2.3 NAME 'esgFinalEnd' DESC 'When the 
 stream will no longer be transmitted' EQUALITY generalizedTimeMatch ORDERING 
 generalizedTimeOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.24 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.2.4 NAME 'esgDuration' DESC 'Duration 
 of stream if temporary' EQUALITY numericStringMatch SUBSTR numericStringSubst
 ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.2.5 NAME 'esgRepeatInterval' DESC 'Fro
 m SDP: r=repeatinterval duration offset [offset [offset ...]]' EQUALITY numer
 icStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.36 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.2.6 NAME 'esgIntervalOffset' DESC 'Fro
 m SDP: r=repeatinterval duration offset [offset [offset ...]]' EQUALITY numer
 icStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.36 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.2.8 NAME 'esgTotalDuration' DESC 'Leng
 th if on-demand stream, else: finalend - firsthown' EQUALITY numericStringMat
 ch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36 )
attributeTypes: ( 1.3.6.1.4.1.2428.70.1.1.255 NAME 'esgSdp' DESC 'File in sdp-
 format, if any' SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.1 NAME 'dhcpPrimaryDN' DESC 'The D
 N of the dhcpServer which is the primary server for the configuration.' EQUAL
 ITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE 
 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.2 NAME 'dhcpSecondaryDN' DESC 'The
  DN of dhcpServer(s) which provide backup service for the configuration.' EQU
 ALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.3 NAME 'dhcpStatements' DESC 'Flex
 ible storage for specific data depending on what object this exists in. Like 
 conditional statements, server parameters, etc. This allows the standard to e
 volve without needing to adjust the schema.' EQUALITY caseIgnoreIA5Match SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.4 NAME 'dhcpRange' DESC 'The start
 ing & ending IP Addresses in the range (inclusive), separated by a hyphen; if
  the range only contains one address, then just the address can be specified 
 with no hyphen.  Each range is defined as a separate value.' EQUALITY caseIgn
 oreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.5 NAME 'dhcpPermitList' DESC 'This
  attribute contains the permit lists associated with a pool. Each permit list
  is defined as a separate value.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.26 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.6 NAME 'dhcpNetMask' DESC 'The sub
 net mask length for the subnet.  The mask can be easily computed from this le
 ngth.' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALU
 E )
attributeTypes: ( 2.16.840.1.113719.1.203.4.7 NAME 'dhcpOption' DESC 'Encoded 
 option values to be sent to clients.  Each value represents a single option a
 nd contains (OptionTag, Length, OptionValue) encoded in the format used by DH
 CP.' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.8 NAME 'dhcpClassData' DESC 'Encod
 ed text string or list of bytes expressed in hexadecimal, separated by colons
 .  Clients match subclasses based on matching the class data with the results
  of match or spawn with statements in the class name declarations.' EQUALITY 
 caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.9 NAME 'dhcpOptionsDN' DESC 'The d
 istinguished name(s) of the dhcpOption objects containing the configuration o
 ptions provided by the server.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.10 NAME 'dhcpHostDN' DESC 'the dis
 tinguished name(s) of the dhcpHost objects.' EQUALITY distinguishedNameMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.11 NAME 'dhcpPoolDN' DESC 'The dis
 tinguished name(s) of pools.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.12 NAME 'dhcpGroupDN' DESC 'The di
 stinguished name(s)   of the groups.' EQUALITY distinguishedNameMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.13 NAME 'dhcpSubnetDN' DESC 'The d
 istinguished name(s) of the subnets.' EQUALITY distinguishedNameMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.14 NAME 'dhcpLeaseDN' DESC 'The di
 stinguished name of a client address.' EQUALITY distinguishedNameMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.15 NAME 'dhcpLeasesDN' DESC 'The d
 istinguished name(s) client addresses.' EQUALITY distinguishedNameMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.16 NAME 'dhcpClassesDN' DESC 'The 
 distinguished name(s) of a class(es) in a subclass.' EQUALITY distinguishedNa
 meMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.17 NAME 'dhcpSubclassesDN' DESC 'T
 he distinguished name(s) of subclass(es).' EQUALITY distinguishedNameMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.18 NAME 'dhcpSharedNetworkDN' DESC
  'The distinguished name(s) of sharedNetworks.' EQUALITY distinguishedNameMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.19 NAME 'dhcpServiceDN' DESC 'The 
 DN of dhcpService object(s)which contain the configuration information. Each 
 dhcpServer object has this attribute identifying the DHCP configuration(s) th
 at the server is associated with.' EQUALITY distinguishedNameMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 2.16.840.1.113719.1.203.4.20 NAME 'dhcpVersion' DESC 'The ve
 rsion attribute of this object.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.21 NAME 'dhcpImplementation' DESC 
 'Description of the DHCP Server implementation e.g. DHCP Servers vendor.' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.22 NAME 'dhcpAddressState' DESC 'T
 his stores information about the current binding-status of an address.  For d
 ynamic addresses managed by DHCP, the values should be restricted to the foll
 owing: "FREE", "ACTIVE", "EXPIRED", "RELEASED", "RESET", "ABANDONED", "BACKUP
 ".  For other addresses, it SHOULD be one of the following: "UNKNOWN", "RESER
 VED" (an address that is managed by DHCP that is reserved for a specific clie
 nt), "RESERVED-ACTIVE" (same as reserved, but address is currently in use), "
 ASSIGNED" (assigned manually or by some other mechanism), "UNASSIGNED", "NOTA
 SSIGNABLE".' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
  SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.23 NAME 'dhcpExpirationTime' DESC 
 'This is the time the current lease for an address expires.' EQUALITY general
 izedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.24 NAME 'dhcpStartTimeOfState' DES
 C 'This is the time of the last state change for a leased address.' EQUALITY 
 generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.25 NAME 'dhcpLastTransactionTime' 
 DESC 'This is the last time a valid DHCP packet was received from the client.
 ' EQUALITY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-V
 ALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.26 NAME 'dhcpBootpFlag' DESC 'This
  indicates whether the address was assigned via BOOTP.' EQUALITY booleanMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.27 NAME 'dhcpDomainName' DESC 'Thi
 s is the name of the domain sent to the client by the server.  It is essentia
 lly the same as the value for DHCP option 15 sent to the client, and represen
 ts only the domain - not the full FQDN.  To obtain the full FQDN assigned to 
 the client you must prepend the "dhcpAssignedHostName" to this value with a "
 .".' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-
 VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.28 NAME 'dhcpDnsStatus' DESC 'This
  indicates the status of updating DNS resource records on behalf of the clien
 t by the DHCP server for this address.  The value is a 16-bit bitmask.' EQUAL
 ITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.29 NAME 'dhcpRequestedHostName' DE
 SC 'This is the hostname that was requested by the client.' EQUALITY caseIgno
 reIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.30 NAME 'dhcpAssignedHostName' DES
 C 'This is the actual hostname that was assigned to a client. It may not be t
 he name that was requested by the client.  The fully qualified domain name ca
 n be determined by appending the value of "dhcpDomainName" (with a dot separa
 tor) to this name.' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.26 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.31 NAME 'dhcpReservedForClient' DE
 SC 'The distinguished name of a "dhcpClient" that an address is reserved for.
   This may not be the same as the "dhcpAssignedToClient" attribute if the add
 ress is being reassigned but the current lease has not yet expired.' EQUALITY
  distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.32 NAME 'dhcpAssignedToClient' DES
 C 'This is the distinguished name of a "dhcpClient" that an address is curren
 tly assigned to.  This attribute is only present in the class when the addres
 s is leased.' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.12 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.33 NAME 'dhcpRelayAgentInfo' DESC 
 'If the client request was received via a relay agent, this contains informat
 ion about the relay agent that was available from the DHCP request.  This is 
 a hex-encoded option value.' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.34 NAME 'dhcpHWAddress' DESC 'The 
 clients hardware address that requested this IP address.' EQUALITY octetStrin
 gMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.35 NAME 'dhcpHashBucketAssignment'
  DESC 'HashBucketAssignment bit map for the DHCP Server, as defined in DHC Lo
 ad Balancing Algorithm [RFC 3074].' EQUALITY octetStringMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.36 NAME 'dhcpDelayedServiceParamet
 er' DESC 'Delay in seconds corresponding to Delayed Service Parameter configu
 ration, as defined in  DHC Load Balancing Algorithm [RFC 3074]. ' EQUALITY in
 tegerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.37 NAME 'dhcpMaxClientLeadTime' DE
 SC 'Maximum Client Lead Time configuration in seconds, as defined in DHCP Fai
 lover Protocol [FAILOVR]' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.27 SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.38 NAME 'dhcpFailOverEndpointState
 ' DESC 'Server (Failover Endpoint) state, as defined in DHCP Failover Protoco
 l [FAILOVR]' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
  SINGLE-VALUE )
attributeTypes: ( 2.16.840.1.113719.1.203.4.39 NAME 'dhcpErrorLog' DESC 'Gener
 ic error log attribute that allows logging error conditions within a dhcpServ
 ice or a dhcpSubnet, like no IP addresses available for lease.' EQUALITY case
 IgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.1.1.25 NAME 'automountInformation' DESC 'Informati
 on used by the autofs automounter' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.2.826.0.1.3344810.1.1.37 NAME 'x509CRLThisUpdate' DESC 'Da
 te at which this revocation list was issued - see RFC3280 5.1.2.4' EQUALITY g
 eneralizedTimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.24 SINGLE-VALUE )
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS4zOCBOQU1FICd4NTA5Q1JMTmV4d
 FVwZGF0ZScgREVTQyAnRGF0ZSBieSB3aGljaCB0aGUgbmV4dCByZXZvY2F0aW9uIGxpc3QgaW4gdG
 hpcyBzZXJpZXMgCXdpbGwgYmUgaXNzdWVkLCBzZWUgLSBSRkMzMjgwIDUuMS4yLjUnIEVRVUFMSVR
 ZIGdlbmVyYWxpemVkVGltZU1hdGNoIE9SREVSSU5HIGdlbmVyYWxpemVkVGltZU9yZGVyaW5nTWF0
 Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI0IFNJTkdMRS1WQUxVRSAp
attributeTypes: ( 1.2.826.0.1.3344810.1.1.102 NAME 'x509CRLNumber' DESC 'seque
 nce number of issued CRL - see RFC3280 5.2.3' EQUALITY integerMatch ORDERING 
 integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40OCBOQU1FICd4NTA5Q1JMRFBSZ
 mM4MjJOYW1lJyBERVNDICdJbnRlcm5ldCBlbGVjdHJvbmljIG1haWwgYWRkcmVzcyBvZiB0aGUgaX
 NzdWluZyAgIAlkaXN0cmlidXRpb24gcG9pbnQsIHNlZSBSRkMzMjgwIDUuMi41JyBFUVVBTElUWSB
 jYXNlSWdub3JlSUE1TWF0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lO
 VEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40OSBOQU1FICd4NTA5Q1JMRFBEb
 nNOYW1lJyBERVNDICdJbnRlcm5ldCBkb21haW4gbmFtZSBvZiB0aGUgaXNzdWluZyBkaXN0cmlidX
 Rpb24gcG9pbnQsIHNlZSAJUkZDMzI4MCA1LjIuNScgRVFVQUxJVFkgY2FzZUlnbm9yZUlBNU1hdGN
 oIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4x
 NDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41MCBOQU1FICd4NTA5Q1JMRFBET
 icgREVTQyAnRGlzdGluZ3Vpc2hlZCBuYW1lIG9mIHRoZSBpc3N1aW5nIGRpc3RyaWJ1dGlvbiBwb2
 ludCwgc2VlIAlSRkMzMjgwIDUuMi41JyBFUVVBTElUWSBkaXN0aW5ndWlzaGVkTmFtZU1hdGNoIFN
 ZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4xMiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41MSBOQU1FICd4NTA5Q1JMRFBVU
 kknIERFU0MgJ1VuaWZvcm0gUmVzb3VyY2UgSWRlbnRpZmllciBvZiB0aGUgaXNzdWluZyBkaXN0cm
 lidXRpb24gIAlwb2ludCwgc2VlIFJGQzMyODAgNS4yLjUnIEVRVUFMSVRZIGNhc2VFeGFjdElBNU1
 hdGNoIFNVQlNUUiBjYXNlRXhhY3RJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4x
 LjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41MiBOQU1FICd4NTA5Q1JMRFBJc
 EFkZHJlc3MnIERFU0MgJ0ludGVybmV0IFByb3RvY29sIGFkZHJlc3MsIG9mIHRoZSBpc3N1aW5nIG
 Rpc3RyaWJ1dGlvbiBwb2ludCwgc2VlIAlSRkMzMjgwIDUuMi41JyBFUVVBTElUWSBjYXNlSWdub3J
 lSUE1TWF0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42
 LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41MyBOQU1FICd4NTA5Q1JMRFBSZ
 Wdpc3RlcmVkSUQnIERFU0MgJ0FueSByZWdpc3RlcmVkIE9JRCBvZiB0aGUgY2VydGlmaWNhdGUgaX
 NzdWVyLCBzZWUgCVJGQzMyODAgNS4yLjUnIEVRVUFMSVRZIG9iamVjdElkZW50aWZpZXJNYXRjaCB
 TWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMzggKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41NCBOQU1FICd4NTA5Q1JMRFBPb
 mx5VXNlckNlcnRzJyBERVNDICdJZiB0cnVlLCB0aGUgQ1JMIG9ubHkgY29udGFpbnMgcmV2b2NhdG
 lvbnMgZm9yIGVuZC1lbnRpdHkgY2VydHMsIHNlZSAJUkZDMzI4MCA1LjIuNScgRVFVQUxJVFkgYm9
 vbGVhbk1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS43ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41NSBOQU1FICd4NTA5Q1JMRFBPb
 mx5Q0FDZXJ0cycgREVTQyAnSWYgdHJ1ZSwgdGhlIENSTCBvbmx5IGNvbnRhaW5zIHJldm9jYXRpb2
 5zIGZvciBDQSBjZXJ0cywgc2VlIAlSRkMzMjgwIDUuMi41JyBFUVVBTElUWSBib29sZWFuTWF0Y2g
 gU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjcgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41NiBOQU1FICd4NTA5Q1JMRFBPb
 mx5U29tZVJlYXNvbnMnIERFU0MgJ0lmIHRydWUsIHRoZSBDUkwgb25seSBjb250YWlucyBzb21lIH
 Jldm9jYXRpb24gcmVhc29uIGNvZGVzLCBzZWUgCVJGQzMyODAgNS4yLjUnIEVRVUFMSVRZIGJpdFN
 0cmluZ01hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS42ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41NyBOQU1FICd4NTA5Q1JMRFBPb
 mx5QXR0Q2VydHMnIERFU0MgJ0lmIHRydWUsIHRoZSBDUkwgb25seSBjb250YWlucyByZXZvY2F0aW
 9ucyBmb3IgYXR0cmlidXRlIGNlcnRzLCBzZWUgCVJGQzMyODAgNS4yLjUnIEVRVUFMSVRZIGJvb2x
 lYW5NYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuNyAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41OCBOQU1FICd4NTA5Q1JMRFBpb
 mRpcmVjdCcgREVTQyAnSWYgdHJ1ZSwgdGhlIENSTCBpcyBhbiBpbmRpcmVjdCBDUkwsIHNlZSAJUk
 ZDMzI4MCA1LjIuNScgRVFVQUxJVFkgYm9vbGVhbk1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY
 2LjExNS4xMjEuMS43ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS41OSBOQU1FICd4NTA5Q1JMRGVsd
 GFJbmRpY2F0b3InIERFU0MgJ0luZGljYXRlcyB0aGlzIGlzIGEgZGVsdGEgQ1JMLCBhbmQgdGhlIH
 ZhbHVlIHBvaW50cyB0byB0aGUgCXNlcXVlbmNlIG51bWJlciBvZiB0aGUgaXNzdWVkIGJhc2UgQ1J
 MIHRvIHdoaWNoIHRoaXMgaXMgYSBkZWx0YSAgCS0gc2VlIFJGQzMyODAgNS4yLjQnIEVRVUFMSVRZ
 IGludGVnZXJNYXRjaCBPUkRFUklORyBpbnRlZ2VyT3JkZXJpbmdNYXRjaCBTWU5UQVggMS4zLjYuM
 S40LjEuMTQ2Ni4xMTUuMTIxLjEuMjcgU0lOR0xFLVZBTFVFICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS4zOSBOQU1FICd4NTA5Q1JMQ2Vyd
 FJldm9jYXRpb25EYXRlJyBERVNDICdEYXRlL3RpbWUgdGhlIENBIGFjdHVhbGx5IHJldm9rZWQgdG
 hlIGNlcnRpZmljYXRlLCBzZWUg4oCTICAJUkZDMzI4MCA1LjEuMi42JyBFUVVBTElUWSBnZW5lcmF
 saXplZFRpbWVNYXRjaCBPUkRFUklORyBnZW5lcmFsaXplZFRpbWVPcmRlcmluZ01hdGNoIFNZTlRB
 WCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4yNCBTSU5HTEUtVkFMVUUgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40MCBOQU1FICd4NTA5Q1JMQ2Vyd
 EludmFsaWRpdHlEYXRlJyBERVNDICdkYXRlIGF0IHdoaWNoIGl0IGlzIGtub3duIG9yIHN1c3BlY3
 RlZCB0aGF0IHRoZSBwcml2YXRlIAlrZXkgd2FzIGNvbXByb21pc2VkLCBzZWUgUkZDMzI4MCA1LjM
 uMycgRVFVQUxJVFkgZ2VuZXJhbGl6ZWRUaW1lTWF0Y2ggT1JERVJJTkcgZ2VuZXJhbGl6ZWRUaW1l
 T3JkZXJpbmdNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMjQgU0lOR0xFL
 VZBTFVFICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40MSBOQU1FICd4NTA5Q1JMQ2Vyd
 Elzc3VlclJmYzgyMk5hbWUnIERFU0MgJ0ludGVybmV0IGVsZWN0cm9uaWMgbWFpbCBhZGRyZXNzIG
 9mIHRoZSBjZXJ0aWZpY2F0ZSBpc3N1ZXIsIHNlZSAJUkZDMzI4MCA1LjMuNCcgRVFVQUxJVFkgY2F
 zZUlnbm9yZUlBNU1hdGNoIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZTlRB
 WCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40MiBOQU1FICd4NTA5Q1JMQ2Vyd
 Elzc3VlckRuc05hbWUnIERFU0MgJ0ludGVybmV0IGRvbWFpbiBuYW1lIG9mIHRoZSBjZXJ0aWZpY2
 F0ZSBpc3N1ZXIsIHNlZSAJUkZDMzI4MCA1LjMuNCcgRVFVQUxJVFkgY2FzZUlnbm9yZUlBNU1hdGN
 oIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4x
 NDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40MyBOQU1FICd4NTA5Q1JMQ2Vyd
 Elzc3VlckROJyBERVNDICdEaXN0aW5ndWlzaGVkIG5hbWUgb2YgdGhlIGNlcnRpZmljYXRlIGlzc3
 Vlciwgc2VlIAlSRkMzMjgwIDUuMy40JyBFUVVBTElUWSBkaXN0aW5ndWlzaGVkTmFtZU1hdGNoIFN
 ZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4xMiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40NCBOQU1FICd4NTA5Q1JMQ2Vyd
 Elzc3VlclVSSScgREVTQyAnVW5pZm9ybSBSZXNvdXJjZSBJZGVudGlmaWVyIG9mIHRoZSBjZXJ0aW
 ZpY2F0ZSBpc3N1ZXIsIHNlZSAJUkZDMzI4MCA1LjMuNCcgRVFVQUxJVFkgY2FzZUV4YWN0SUE1TWF
 0Y2ggU1VCU1RSIGNhc2VFeGFjdElBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEu
 MTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40NSBOQU1FICd4NTA5Q1JMQ2Vyd
 Elzc3VlcklwQWRkcmVzcycgREVTQyAnSW50ZXJuZXQgUHJvdG9jb2wgYWRkcmVzcywgb2YgdGhlIG
 NlcnRpZmljYXRlIGlzc3Vlciwgc2VlIAlSRkMzMjgwIDUuMy40JyBFUVVBTElUWSBjYXNlSWdub3J
 lSUE1TWF0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42
 LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40NiBOQU1FICd4NTA5Q1JMQ2Vyd
 Elzc3VlclJlZ2lzdGVyZWRJRCcgREVTQyAnQW55IHJlZ2lzdGVyZWQgT0lEIG9mIHRoZSBjZXJ0aW
 ZpY2F0ZSBpc3N1ZXIsIHNlZSAJUkZDMzI4MCA1LjMuNCcgRVFVQUxJVFkgb2JqZWN0SWRlbnRpZml
 lck1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4zOCAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS40NyBOQU1FICd4NTA5Q1JMQ2Vyd
 FJlYXNvbkNvZGUnIERFU0MgJ0FuIGludGVnZXIgY29kZSBpbmRpY2F0aW5nIHRoZSByZWFzb24gZm
 9yIHRoZSByZXZvY2F0aW9uLCBzZWUgCVJGQzMyODAgNS4zLjEnIEVRVUFMSVRZIGludGVnZXJNYXR
 jaCBPUkRFUklORyBpbnRlZ2VyT3JkZXJpbmdNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4x
 MTUuMTIxLjEuMjcgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS4xMDMgTkFNRSAneDUwOUNSTENlc
 nRIb2xkSW5zdHJ1Y3Rpb25Db2RlJyBERVNDICdBbnkgcmVnaXN0ZXJlZCBPSUQgaW5kaWNhdGluZy
 BhIGhvbGQgaW5zdHJ1Y3Rpb24sIHNlZSAJUkZDMzI4MCA1LjMuMicgRVFVQUxJVFkgb2JqZWN0SWR
 lbnRpZmllck1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4zOCAp
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.3.1 NAME 'x509version' DESC 'X.509 Ver
 sion of the certificate, or of the CRL' EQUALITY integerMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yIE5BTUUgJ3g1MDlzZXJpYWxOd
 W1iZXInIERFU0MgJ1VuaXF1ZSBpbnRlZ2VyIGZvciBlYWNoIGNlcnRpZmljYXRlIGlzc3VlZCBieS
 BhIAlwYXJ0aWN1bGFyIENBJyBFUVVBTElUWSBpbnRlZ2VyTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4
 xLjE0NjYuMTE1LjEyMS4xLjI3ICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4zIE5BTUUgJ3g1MDlzaWduYXR1c
 mVBbGdvcml0aG0nIERFU0MgJ09JRCBvZiB0aGUgYWxnb3JpdGhtIHVzZWQgYnkgdGhlIENBIGluIA
 lzaWduaW5nIHRoZSBDUkwgb3IgdGhlIGNlcnRpZmljYXRlJyBFUVVBTElUWSBvYmplY3RJZGVudGl
 maWVyTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjM4IFNJTkdMRS1WQUxV
 RSAp
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy40IE5BTUUgJ3g1MDlpc3N1ZXInI
 ERFU0MgJ0Rpc3Rpbmd1aXNoZWQgbmFtZSBvZiB0aGUgZW50aXR5IHdobyBoYXMgc2lnbmVkIGFuZC
 AJaXNzdWVkIHRoZSBjZXJ0aWZpY2F0ZScgRVFVQUxJVFkgZGlzdGluZ3Vpc2hlZE5hbWVNYXRjaCB
 TWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMTIgU0lOR0xFLVZBTFVFICk=
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.3.5 NAME 'x509validityNotBefore' DESC 
 'Date on which the certificate validity period begins' EQUALITY generalizedTi
 meMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.3.6 NAME 'x509validityNotAfter' DESC '
 Date on which the certificate validity period ends' EQUALITY generalizedTimeM
 atch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 24 SINGLE-VALUE )
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy43IE5BTUUgJ3g1MDlzdWJqZWN0J
 yBERVNDICdEaXN0aW5ndWlzaGVkIG5hbWUgb2YgdGhlIGVudGl0eSBhc3NvY2lhdGVkIHdpdGggdG
 hpcyAJcHVibGljLWtleScgRVFVQUxJVFkgZGlzdGluZ3Vpc2hlZE5hbWVNYXRjaCBTWU5UQVggMS4
 zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMTIgU0lOR0xFLVZBTFVFICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy44IE5BTUUgJ3g1MDlzdWJqZWN0U
 HVibGljS2V5SW5mb0FsZ29yaXRobScgREVTQyAnT0lEIGlkZW50aWZ5aW5nIHRoZSBhbGdvcml0aG
 0gYXNzb2NpYXRlZCB3aXRoIHRoZSBjZXJ0aWZpZWQgCXB1YmxpYyBrZXknIEVRVUFMSVRZIG9iamV
 jdElkZW50aWZpZXJNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMzggU0lO
 R0xFLVZBTFVFICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xMSBOQU1FICd4NTA5YXV0aG9ya
 XR5S2V5SWRlbnRpZmllcicgREVTQyAnS2V5IElkZW50aWZpZXIgZmllbGQgb2YgdGhlIEF1dGhvcm
 l0eSBLZXkgSWRlbnRpZmllciAJZXh0ZW5zaW9uJyBFUVVBTElUWSBvY3RldFN0cmluZ01hdGNoIFN
 ZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS40MCBTSU5HTEUtVkFMVUUgKQ==
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xMiBOQU1FICd4NTA5YXV0aG9ya
 XR5Q2VydElzc3VlcicgREVTQyAnQXV0aG9yaXR5IENlcnQgSXNzdWVyIGZpZWxkIG9mIHRoZSBBdX
 Rob3JpdHkgS2V5IElkZW50aWZpZXIgCWV4dGVuc2lvbicgRVFVQUxJVFkgZGlzdGluZ3Vpc2hlZE5
 hbWVNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMTIgU0lOR0xFLVZBTFVF
 ICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xMyBOQU1FICd4NTA5YXV0aG9ya
 XR5Q2VydFNlcmlhbE51bWJlcicgREVTQyAnQXV0aG9yaXR5IENlcnQgU2VyaWFsIE51bWJlciBmaW
 VsZCBvZiB0aGUgCUF1dGhvcml0eSBLZXkgSWRlbnRpZmllciBleHRlbnNpb24nIEVRVUFMSVRZIGl
 udGVnZXJNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMjcgU0lOR0xFLVZB
 TFVFICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xNCBOQU1FICd4NTA5c3ViamVjd
 EtleUlkZW50aWZpZXInIERFU0MgJ0tleSBpZGVudGlmaWVyIHdoaWNoIG11c3QgYmUgdW5pcXVlIH
 dpdGggcmVzcGVjdCB0byBhbGwgCWtleSBpZGVudGlmaWVycyBmb3IgdGhlIHN1YmplY3QnIEVRVUF
 MSVRZIG9jdGV0U3RyaW5nTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjQw
 IFNJTkdMRS1WQUxVRSAp
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.3.15 NAME 'x509keyUsage' DESC 'Purpose
  for which the certified public key is used' EQUALITY caseIgnoreMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xNiBOQU1FICd4NTA5cG9saWN5S
 W5mb3JtYXRpb25JZGVudGlmaWVyJyBERVNDICdPSUQgd2hpY2ggaW5kaWNhdGVzIHRoZSBwb2xpY3
 kgdW5kZXIgd2hpY2ggdGhlIAljZXJ0aWZpY2F0ZSBoYXMgYmVlbiBpc3N1ZWQgYW5kIHRoZSBwdXJ
 wb3NlcyBmb3Igd2hpY2ggCXRoZSBjZXJ0aWZpY2F0ZSBtYXkgYmUgdXNlZCcgRVFVQUxJVFkgb2Jq
 ZWN0SWRlbnRpZmllck1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4zOCBTS
 U5HTEUtVkFMVUUgKQ==
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xNyBOQU1FICd4NTA5c3ViamVjd
 FJmYzgyMk5hbWUnIERFU0MgJ0ludGVybmV0IGVsZWN0cm9uaWMgbWFpbCBhZGRyZXNzIG9mIHRoZS
 BlbnRpdHkgCWFzc29jaWF0ZWQgd2l0aCB0aGlzIHB1YmxpYy1rZXknIEVRVUFMSVRZIGNhc2VJZ25
 vcmVJQTVNYXRjaCBTVUJTVFIgY2FzZUlnbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4z
 LjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xOCBOQU1FICd4NTA5c3ViamVjd
 ERuc05hbWUnIERFU0MgJ0ludGVybmV0IGRvbWFpbiBuYW1lIG9mIHRoZSBlbnRpdHkgCWFzc29jaW
 F0ZWQgd2l0aCB0aGlzIHB1YmxpYy1rZXknIEVRVUFMSVRZIGNhc2VJZ25vcmVJQTVNYXRjaCBTVUJ
 TVFIgY2FzZUlnbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4x
 MTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4xOSBOQU1FICd4NTA5c3ViamVjd
 ERpcmVjdG9yeU5hbWUnIERFU0MgJ0Rpc3Rpbmd1aXNoZWQgbmFtZSBvZiB0aGUgZW50aXR5IAlhc3
 NvY2lhdGVkIHdpdGggdGhpcyBwdWJsaWMta2V5JyBFUVVBTElUWSBkaXN0aW5ndWlzaGVkTmFtZU1
 hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4xMiAp
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yMCBOQU1FICd4NTA5c3ViamVjd
 FVuaWZvcm1SZXNvdXJjZUlkZW50aWZpZXInIERFU0MgJ1VuaWZvcm0gUmVzb3VyY2UgSWRlbnRpZm
 llciBmb3IgdGhlIFdvcmxkLVdpZGUgV2ViIAlvZiB0aGUgZW50aXR5IGFzc29jaWF0ZWQgd2l0aCB
 0aGlzIHB1YmxpYy1rZXknIEVRVUFMSVRZIGNhc2VFeGFjdElBNU1hdGNoIFNVQlNUUiBjYXNlRXhh
 Y3RJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI2I
 Ck=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yMSBOQU1FICd4NTA5c3ViamVjd
 ElwQWRkcmVzcycgREVTQyAnSW50ZXJuZXQgUHJvdG9jb2wgYWRkcmVzcyBvZiB0aGUgZW50aXR5IA
 lhc3NvY2lhdGVkIHdpdGggdGhpcyBwdWJsaWMta2V5JyBFUVVBTElUWSBjYXNlSWdub3JlSUE1TWF
 0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4x
 LjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yMiBOQU1FICd4NTA5c3ViamVjd
 FJlZ2lzdGVyZWRJRCcgREVTQyAnT0lEIG9mIGFueSByZWdpc3RlcmVkIG9iamVjdCBpZGVudGlmeW
 luZyB0aGUgZW50aXR5IAlhc3NvY2lhdGVkIHdpdGggdGhpcyBwdWJsaWMta2V5JyBFUVVBTElUWSB
 vYmplY3RJZGVudGlmaWVyTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjM4
 ICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yMyBOQU1FICd4NTA5aXNzdWVyU
 mZjODIyTmFtZScgREVTQyAnSW50ZXJuZXQgZWxlY3Ryb25pYyBtYWlsIGFkZHJlc3Mgb2YgdGhlIG
 VudGl0eSB3aG8gaGFzIAlzaWduZWQgYW5kIGlzc3VlZCB0aGUgY2VydGlmaWNhdGUnIEVRVUFMSVR
 ZIGNhc2VJZ25vcmVJQTVNYXRjaCBTVUJTVFIgY2FzZUlnbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBT
 WU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yNCBOQU1FICd4NTA5aXNzdWVyR
 G5zTmFtZScgREVTQyAnSW50ZXJuZXQgZG9tYWluIG5hbWUgb2YgdGhlIGVudGl0eSB3aG8gaGFzIA
 lzaWduZWQgYW5kIGlzc3VlZCB0aGUgY2VydGlmaWNhdGUnIEVRVUFMSVRZIGNhc2VJZ25vcmVJQTV
 NYXRjaCBTVUJTVFIgY2FzZUlnbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40
 LjEuMTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yNSBOQU1FICd4NTA5aXNzdWVyR
 GlyZWN0b3J5TmFtZScgREVTQyAnRGlzdGluZ3Vpc2hlZCBuYW1lIG9mIHRoZSBlbnRpdHkgd2hvIG
 hhcyAJc2lnbmVkIGFuZCBpc3N1ZWQgdGhlIGNlcnRpZmljYXRlJyBFUVVBTElUWSBkaXN0aW5ndWl
 zaGVkTmFtZU1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4xMiAp
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yNiBOQU1FICd4NTA5aXNzdWVyV
 W5pZm9ybVJlc291cmNlSWRlbnRpZmllcicgREVTQyAnVW5pZm9ybSBSZXNvdXJjZSBJZGVudGlmaW
 VyIGZvciB0aGUgV29ybGQtV2lkZSBXZWIgCW9mIHRoZSBlbnRpdHkgd2hvIGhhcyBzaWduZWQgYW5
 kIGlzc3VlZCB0aGUgY2VydGlmaWNhdGUnIEVRVUFMSVRZIGNhc2VFeGFjdElBNU1hdGNoIFNVQlNU
 UiBjYXNlRXhhY3RJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1L
 jEyMS4xLjI2ICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yNyBOQU1FICd4NTA5aXNzdWVyS
 XBBZGRyZXNzJyBERVNDICdJbnRlcm5ldCBQcm90b2NvbCBhZGRyZXNzIG9mIHRoZSBlbnRpdHkgd2
 hvIGhhcyAJc2lnbmVkIGFuZCBpc3N1ZWQgdGhlIGNlcnRpZmljYXRlJyBFUVVBTElUWSBjYXNlSWd
 ub3JlSUE1TWF0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEu
 My42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yOCBOQU1FICd4NTA5aXNzdWVyU
 mVnaXN0ZXJlZElEJyBERVNDICdPSUQgb2YgYW55IHJlZ2lzdGVyZWQgb2JqZWN0IGlkZW50aWZ5aW
 5nIHRoZSBlbnRpdHkgd2hvIGhhcyAJc2lnbmVkIGFuZCBpc3N1ZWQgdGhlIGNlcnRpZmljYXRlJyB
 FUVVBTElUWSBvYmplY3RJZGVudGlmaWVyTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1
 LjEyMS4xLjM4ICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4yOSBOQU1FICd4NTA5YmFzaWNDb
 25zdHJhaW50c0NhJyBERVNDICdJZGVudGlmaWVzIHdoZXRoZXIgdGhlIHN1YmplY3Qgb2YgdGhlIG
 NlcnRpZmljYXRlIGlzIGEgCUNBJyBFUVVBTElUWSBib29sZWFuTWF0Y2ggU1lOVEFYIDEuMy42LjE
 uNC4xLjE0NjYuMTE1LjEyMS4xLjcgU0lOR0xFLVZBTFVFICk=
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuMy4zMCBOQU1FICd4NTA5ZXh0S2V5V
 XNhZ2UnIERFU0MgJ1B1cnBvc2VzIGZvciB3aGljaCB0aGUgY2VydGlmaWVkIHB1YmxpYyBrZXkgbW
 F5IGJlIHVzZWQsIAlpZGVudGlmaWVkIGJ5IGFuIE9JRCcgRVFVQUxJVFkgb2JqZWN0SWRlbnRpZml
 lck1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4zOCAp
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.3.32 NAME 'x509fullCRLDistributionPoin
 tURI' DESC 'URI type of DistributionPointName for the full CRL' EQUALITY case
 ExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.4.74 NAME 'x509certLocation' DESC 'Poi
 nter to a x509certificate Entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.12 )
attributeTypes:: KCAxLjMuNi4xLjQuMS4xMDEyNi4xLjUuNC43NSBOQU1FICd4NTA5Y2VydEhvb
 GRlcicgREVTQyAnUG9pbnRlciB0byB0aGUgZGlyZWN0b3J5IGVudHJ5IG9mIHRoZSBlbmQgZW50aX
 R5IHRvIHdoaWNoIHRoaXMgCWNlcnRpZmljYXRlIHdhcyBpc3N1ZWQnIEVRVUFMSVRZIGRpc3Rpbmd
 1aXNoZWROYW1lTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjEyICk=
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.4.76 NAME 'x509userCert' DESC 'Complet
 e x.509 user certificate' SUP userCertificate SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.1.5.4.77 NAME 'x509caCert' DESC 'Complete 
 x.509 CA certificate' SUP caCertificate SINGLE-VALUE )
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42MCBOQU1FICd4NTA5aXNzdWVyU
 2VyaWFsJyBERVNDICdVc2VkIHRvIGhvbGQgdGhlIFJETiBvZiBhIGNlcnRpZmljYXRlIGVudHJ5LC
 Bmb3JtZWQgYnkgCWNvbmNhdGVuYXRpbmcgdGhlIEFDIHNlcmlhbCBudW1iZXIgYW5kIGlzc3VlciB
 maWVsZHMgJyBFUVVBTElUWSBkaXN0aW5ndWlzaGVkTmFtZU1hdGNoIFNZTlRBWCAxLjMuNi4xLjQu
 MS4xNDY2LjExNS4xMjEuMS4xMiBTSU5HTEUtVkFMVUUgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42MSBOQU1FICd4NTA5QUNIb2xkZ
 XJQS0NTZXJpYWxOdW1iZXInIERFU0MgJ1RoZSBzZXJpYWwgbnVtYmVyIG9mIHRoZSBQS0Mgb2YgdG
 hlIEFDIGhvbGRlciAJLSBzZWUgUkZDMzI4MSA0LjIuMicgRVFVQUxJVFkgaW50ZWdlck1hdGNoIE9
 SREVSSU5HIGludGVnZXJPcmRlcmluZ01hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4x
 MjEuMS4yNyBTSU5HTEUtVkFMVUUgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42MiBOQU1FICd4NTA5QUNIb2xkZ
 XJQS0Npc3N1ZXJETicgREVTQyAnRGlzdGluZ3Vpc2hlZCBuYW1lIG9mIHRoZSBpc3N1ZXIgb2YgdG
 hlIFBLQyBiZWxvbmdpbmcgdG8gdGhlIAlBQyBob2xkZXIgLSBzZWUgIFJGQzMyODEgNC4yLjInIEV
 RVUFMSVRZIGRpc3Rpbmd1aXNoZWROYW1lTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1
 LjEyMS4xLjEyICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42MyBOQU1FICd4NTA5QUNIb2xkZ
 XJSZmM4MjJOYW1lJyBERVNDICdJbnRlcm5ldCBlbGVjdHJvbmljIG1haWwgYWRkcmVzcyBvZiB0aG
 UgQUMgaG9sZGVyICAJLSBzZWUgUkZDMzI4MSA0LjIuMicgRVFVQUxJVFkgY2FzZUlnbm9yZUlBNU1
 hdGNoIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZTlRBWCAxLjMuNi4xLjQu
 MS4xNDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42NCBOQU1FICd4NTA5QUNIb2xkZ
 XJETlNOYW1lJyBERVNDICdJbnRlcm5ldCBkb21haW4gbmFtZSBvZiB0aGUgQUMgSG9sZGVyLCBzZW
 UgCVJGQzMyODEgNC4yLjInIEVRVUFMSVRZIGNhc2VJZ25vcmVJQTVNYXRjaCBTVUJTVFIgY2FzZUl
 nbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEu
 MjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42NSBOQU1FICd4NTA5QUNIb2xkZ
 XJETicgREVTQyAnRGlzdGluZ3Vpc2hlZCBuYW1lIG9mIHRoZSBBQyBIb2xkZXIsIHNlZSAJUkZDMz
 I4MSA0LjIuMicgRVFVQUxJVFkgZGlzdGluZ3Vpc2hlZE5hbWVNYXRjaCBTWU5UQVggMS4zLjYuMS4
 0LjEuMTQ2Ni4xMTUuMTIxLjEuMTIgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42NiBOQU1FICd4NTA5QUNIb2xkZ
 XJVUkknIERFU0MgJ1VuaWZvcm0gUmVzb3VyY2UgSWRlbnRpZmllciBvZiB0aGUgQUMgSG9sZGVyIC
 AJLSBzZWUgUkZDMzI4MSA0LjIuMicgRVFVQUxJVFkgY2FzZUV4YWN0SUE1TWF0Y2ggU1VCU1RSIGN
 hc2VFeGFjdElBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIx
 LjEuMjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42NyBOQU1FICd4NTA5QUNIb2xkZ
 XJJUEFkZHJlc3MnIERFU0MgJ0ludGVybmV0IFByb3RvY29sIGFkZHJlc3Mgb2YgdGhlIEFDIEhvbG
 Rlciwgc2VlIAlSRkMzMjgxIDQuMi4yJyBFUVVBTElUWSBjYXNlSWdub3JlSUE1TWF0Y2ggU1VCU1R
 SIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1
 LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42OCBOQU1FICd4NTA5QUNIb2xkZ
 XJSZWdpc3RlcmVkSUQnIERFU0MgJ0FueSByZWdpc3RlcmVkIE9JRCBvZiB0aGUgQUMgaG9sZGVyLC
 BzZWUgCVJGQzMyODEgNC4yLjInIEVRVUFMSVRZIG9iamVjdElkZW50aWZpZXJNYXRjaCBTWU5UQVg
 gMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMzggKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS42OSBOQU1FICd4NTA5QUNPYmplY
 3REaWdlc3QnIERFU0MgJ0hvbGRzIHRoZSBoYXNoIHZhbHVlIG9mIHRoZSBvYmplY3QgaWRlbnRpZm
 llZCBieSAJeDUwOUFDRGlnZXN0ZWRPYmplY3RUeXBlIOKAkyBzZWUgUkZDIDMyODEsIHNlY3Rpb24
 gNy4zJyBFUVVBTElUWSBiaXRTdHJpbmdNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUu
 MTIxLjEuNiBTSU5HTEUtVkFMVUUgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS43MCBOQU1FICd4NTA5QUNEaWdlc
 3RBbGdvcml0aG0nIERFU0MgJ09JRCBvZiB0aGUgaGFzaGluZyBhbGdvcml0aG0gdXNlZCB0byBjcm
 VhdGUgdGhlIAlPYmplY3QgZGlnZXN0LCBzZWUgUkZDMzI4MSwgc2VjdGlvbiA3LjMnIEVRVUFMSVR
 ZIG9iamVjdElkZW50aWZpZXJNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEu
 MzggU0lOR0xFLVZBTFVFICk=
attributeTypes: ( 1.2.826.0.1.3344810.1.1.71 NAME 'x509ACDigestedObjectType' D
 ESC 'Type of object being digested - see RFC3281, section 7.3' EQUALITY integ
 erMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SI
 NGLE-VALUE )
attributeTypes: ( 1.2.826.0.1.3344810.1.1.72 NAME 'x509ACAuditID' DESC 'Identi
 ty of holder used in audit trails - see RFC3281 4.3.1' EQUALITY octetStringMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS43MyBOQU1FICd4NTA5QUNUYXJnZ
 XRSZmM4MjJOYW1lJyBERVNDICdJbnRlcm5ldCBlbGVjdHJvbmljIG1haWwgYWRkcmVzcyBvZiB0aG
 UgQUNzIFRhcmdldCAgCS0gc2VlIFJGQzMyODEgNC4zLjInIEVRVUFMSVRZIGNhc2VJZ25vcmVJQTV
 NYXRjaCBTVUJTVFIgY2FzZUlnbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40
 LjEuMTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS43NCBOQU1FICd4NTA5QUNUYXJnZ
 XRETlNOYW1lJyBERVNDICdJbnRlcm5ldCBkb21haW4gbmFtZSBvZiB0aGUgQUNzIFRhcmdldCwgc2
 VlIAlSRkMzMjgxIDQuMy4yJyBFUVVBTElUWSBjYXNlSWdub3JlSUE1TWF0Y2ggU1VCU1RSIGNhc2V
 JZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4x
 LjI2ICk=
attributeTypes: ( 1.2.826.0.1.3344810.1.1.75 NAME 'x509ACTargetDN' DESC 'Disti
 nguished name of the ACs Target, see RFC3281 4.3.2' EQUALITY distinguishedNam
 eMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS43NiBOQU1FICd4NTA5QUNUYXJnZ
 XRVUkknIERFU0MgJ1VuaWZvcm0gUmVzb3VyY2UgSWRlbnRpZmllciBvZiB0aGUgQUNzIFRhcmdldC
 AgCS0gc2VlIFJGQzMyODEgNC4zLjInIEVRVUFMSVRZIGNhc2VFeGFjdElBNU1hdGNoIFNVQlNUUiB
 jYXNlRXhhY3RJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEy
 MS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS43NyBOQU1FICd4NTA5QUNUYXJnZ
 XRJUEFkZHJlc3MnIERFU0MgJ0ludGVybmV0IFByb3RvY29sIGFkZHJlc3Mgb2YgdGhlIEFDcyBUYX
 JnZXQsIHNlZSAJUkZDMzI4MSA0LjMuMicgRVFVQUxJVFkgY2FzZUlnbm9yZUlBNU1hdGNoIFNVQlN
 UUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjEx
 NS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS43OCBOQU1FICd4NTA5QUNUYXJnZ
 XRSZWdpc3RlcmVkSUQnIERFU0MgJ0FueSByZWdpc3RlcmVkIE9JRCBvZiB0aGUgQUNzIFRhcmdldC
 wgc2VlIAlSRkMzMjgxIDQuMy4yJyBFUVVBTElUWSBvYmplY3RJZGVudGlmaWVyTWF0Y2ggU1lOVEF
 YIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjM4ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS43OSBOQU1FICd4NTA5QUNUYXJnZ
 XRHcm91cFJmYzgyMk5hbWUnIERFU0MgJ0ludGVybmV0IGVsZWN0cm9uaWMgbWFpbCBhZGRyZXNzIG
 9mIHRoZSBBQ3MgVGFyZ2V0IGdyb3VwICAJLSBzZWUgUkZDMzI4MSA0LjMuMicgRVFVQUxJVFkgY2F
 zZUlnbm9yZUlBNU1hdGNoIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZTlRB
 WCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44MCBOQU1FICd4NTA5QUNUYXJnZ
 XRHcm91cEROU05hbWUnIERFU0MgJ0ludGVybmV0IGRvbWFpbiBuYW1lIG9mIHRoZSBBQ3MgVGFyZ2
 V0IGdyb3VwLCBzZWUgCVJGQzMyODEgNC4zLjInIEVRVUFMSVRZIGNhc2VJZ25vcmVJQTVNYXRjaCB
 TVUJTVFIgY2FzZUlnbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2
 Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44MSBOQU1FICd4NTA5QUNUYXJnZ
 XRHcm91cEROJyBERVNDICdEaXN0aW5ndWlzaGVkIG5hbWUgb2YgdGhlIEFD4oCZcyBUYXJnZXQgZ3
 JvdXAsIHNlZSAJUkZDMzI4MSA0LjMuMicgRVFVQUxJVFkgZGlzdGluZ3Vpc2hlZE5hbWVNYXRjaCB
 TWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMTIgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44MiBOQU1FICd4NTA5QUNUYXJnZ
 XRHcm91cFVSSScgREVTQyAnVW5pZm9ybSBSZXNvdXJjZSBJZGVudGlmaWVyIG9mIHRoZSBBQ+KAmX
 MgVGFyZ2V0IGdyb3VwICAJLSBzZWUgUkZDMzI4MSA0LjMuMicgRVFVQUxJVFkgY2FzZUV4YWN0SUE
 1TWF0Y2ggU1VCU1RSIGNhc2VFeGFjdElBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYuMS40
 LjEuMTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44MyBOQU1FICd4NTA5QUNUYXJnZ
 XRHcm91cElQQWRkcmVzcycgREVTQyAnSW50ZXJuZXQgUHJvdG9jb2wgYWRkcmVzcyBvZiB0aGUgQU
 NzIFRhcmdldCBncm91cCwgc2VlIAlSRkMzMjgxIDQuMy4yJyBFUVVBTElUWSBjYXNlSWdub3JlSUE
 1TWF0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEu
 NC4xLjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44NCBOQU1FICd4NTA5QUNUYXJnZ
 XRHcm91cFJlZ2lzdGVyZWRJRCcgREVTQyAnQW55IHJlZ2lzdGVyZWQgT0lEIG9mIHRoZSBBQ3MgVG
 FyZ2V0IGdyb3VwLCBzZWUgCVJGQzMyODEgNC4zLjInIEVRVUFMSVRZIG9iamVjdElkZW50aWZpZXJ
 NYXRjaCBTWU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMzggKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44NSBOQU1FICd4NTA5QUNOb1Jld
 m9jYXRpb24nIERFU0MgJ0lmIHRydWUsIHRoZSBBQyB3aWxsIG5ldmVyIGJlIHJldm9rZWQsIHNlZS
 AJUkZDMzI4MSBzZWN0aW9uIDQuMy42JyBFUVVBTElUWSBib29sZWFuTWF0Y2ggU1lOVEFYIDEuMy4
 2LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjcgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44NiBOQU1FICd4NTA5RFBSZmM4M
 jJOYW1lJyBERVNDICdJbnRlcm5ldCBlbGVjdHJvbmljIG1haWwgYWRkcmVzcyBvZiB0aGUgICAgCW
 Rpc3RyaWJ1dGlvbiBwb2ludCwgc2VlIFJGQzMyODAgc2VjdGlvbiA0LjIuMS4xNCcgRVFVQUxJVFk
 gY2FzZUlnbm9yZUlBNU1hdGNoIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZ
 TlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44NyBOQU1FICd4NTA5RFBETlNOY
 W1lJyBERVNDICdJbnRlcm5ldCBkb21haW4gbmFtZSBvZiB0aGUgZGlzdHJpYnV0aW9uIHBvaW50LC
 BzZWUgCVJGQzMyODAgc2VjdGlvbiA0LjIuMS4xNCcgRVFVQUxJVFkgY2FzZUlnbm9yZUlBNU1hdGN
 oIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4x
 NDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44OCBOQU1FICd4NTA5RFBETicgR
 EVTQyAnRGlzdGluZ3Vpc2hlZCBuYW1lIG9mIHRoZSBkaXN0cmlidXRpb24gcG9pbnQsIHNlZSAJUk
 ZDMzI4MCBzZWN0aW9uIDQuMi4xLjE0JyBFUVVBTElUWSBkaXN0aW5ndWlzaGVkTmFtZU1hdGNoIFN
 ZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4xMiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS44OSBOQU1FICd4NTA5RFBVUkknI
 ERFU0MgJ1VuaWZvcm0gUmVzb3VyY2UgSWRlbnRpZmllciBvZiB0aGUgZGlzdHJpYnV0aW9uICAJcG
 9pbnQsIHNlZSBSRkMzMjgwIHNlY3Rpb24gNC4yLjEuMTQnIEVRVUFMSVRZIGNhc2VFeGFjdElBNU1
 hdGNoIFNVQlNUUiBjYXNlRXhhY3RJQTVTdWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4x
 LjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45MCBOQU1FICd4NTA5RFBJUEFkZ
 HJlc3MnIERFU0MgJ0ludGVybmV0IFByb3RvY29sIGFkZHJlc3Mgb2YgdGhlIGRpc3RyaWJ1dGlvbi
 Bwb2ludCwgc2VlIAlSRkMzMjgwIHNlY3Rpb24gNC4yLjEuMTQnIEVRVUFMSVRZIGNhc2VJZ25vcmV
 JQTVNYXRjaCBTVUJTVFIgY2FzZUlnbm9yZUlBNVN1YnN0cmluZ3NNYXRjaCBTWU5UQVggMS4zLjYu
 MS40LjEuMTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45MSBOQU1FICd4NTA5RFBSZWdpc
 3RlcmVkSUQnIERFU0MgJ0FueSByZWdpc3RlcmVkIE9JRCBvZiB0aGUgZGlzdHJpYnV0aW9uIHBvaW
 50LCBzZWUgCVJGQzMyODAgc2VjdGlvbiA0LjIuMS4xNCcgRVFVQUxJVFkgb2JqZWN0SWRlbnRpZml
 lck1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4zOCAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45MiBOQU1FICd4NTA5RFByZWxhd
 Gl2ZVRvSXNzdWVyJyBERVNDICdSRE4gb2YgdGhlICBkaXN0cmlidXRpb24gcG9pbnQsIHJlbGF0aX
 ZlIHRvIHRoZSBpc3N1ZXIsIHNlZSAJUkZDMzI4MCBzZWN0aW9uIDQuMi4xLjE0JyBFUVVBTElUWSB
 kaXN0aW5ndWlzaGVkTmFtZU1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4x
 MiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45MyBOQU1FICd4NTA5RFBpc3N1Z
 XJSZmM4MjJOYW1lJyBERVNDICdJbnRlcm5ldCBlbGVjdHJvbmljIG1haWwgYWRkcmVzcyBvZiB0aG
 UgICAgCWRpc3RyaWJ1dGlvbiBwb2ludCBDUkwgaXNzdWVyLCBzZWUgUkZDMzI4MCBzZWN0aW9uIDQ
 uMi4xLjE0JyBFUVVBTElUWSBjYXNlSWdub3JlSUE1TWF0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVT
 dWJzdHJpbmdzTWF0Y2ggU1lOVEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45NCBOQU1FICd4NTA5RFBpc3N1Z
 XJETlNOYW1lJyBERVNDICdJbnRlcm5ldCBkb21haW4gbmFtZSBvZiB0aGUgZGlzdHJpYnV0aW9uIH
 BvaW50IENSTCBpc3N1ZXIsIAlzZWUgUkZDMzI4MCBzZWN0aW9uIDQuMi4xLjE0JyBFUVVBTElUWSB
 jYXNlSWdub3JlSUE1TWF0Y2ggU1VCU1RSIGNhc2VJZ25vcmVJQTVTdWJzdHJpbmdzTWF0Y2ggU1lO
 VEFYIDEuMy42LjEuNC4xLjE0NjYuMTE1LjEyMS4xLjI2ICk=
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45NSBOQU1FICd4NTA5RFBpc3N1Z
 XJETicgREVTQyAnRGlzdGluZ3Vpc2hlZCBuYW1lIG9mIHRoZSBkaXN0cmlidXRpb24gcG9pbnQgQ1
 JMIGlzc3VlciwgIAlzZWUgUkZDMzI4MCBzZWN0aW9uIDQuMi4xLjE0JyBFUVVBTElUWSBkaXN0aW5
 ndWlzaGVkTmFtZU1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4xMiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45NiBOQU1FICd4NTA5RFBpc3N1Z
 XJVUkknIERFU0MgJ1VuaWZvcm0gUmVzb3VyY2UgSWRlbnRpZmllciBvZiB0aGUgZGlzdHJpYnV0aW
 9uICAJcG9pbnQgQ1JMIGlzc3Vlciwgc2VlIFJGQzMyODAgc2VjdGlvbiA0LjIuMS4xNCcgRVFVQUx
 JVFkgY2FzZUV4YWN0SUE1TWF0Y2ggU1VCU1RSIGNhc2VFeGFjdElBNVN1YnN0cmluZ3NNYXRjaCBT
 WU5UQVggMS4zLjYuMS40LjEuMTQ2Ni4xMTUuMTIxLjEuMjYgKQ==
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45NyBOQU1FICd4NTA5RFBpc3N1Z
 XJJUEFkZHJlc3MnIERFU0MgJ0ludGVybmV0IFByb3RvY29sIGFkZHJlc3Mgb2YgdGhlIGRpc3RyaW
 J1dGlvbiBwb2ludCBDUkwgCWlzc3Vlciwgc2VlIFJGQzMyODAgc2VjdGlvbiA0LjIuMS4xNCcgRVF
 VQUxJVFkgY2FzZUlnbm9yZUlBNU1hdGNoIFNVQlNUUiBjYXNlSWdub3JlSUE1U3Vic3RyaW5nc01h
 dGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEuMS4yNiAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45OCBOQU1FICd4NTA5RFBpc3N1Z
 XJSZWdpc3RlcmVkSUQnIERFU0MgJ0FueSByZWdpc3RlcmVkIE9JRCBvZiB0aGUgZGlzdHJpYnV0aW
 9uIHBvaW50IENSTCBpc3N1ZXIsIAlzZWUgIFJGQzMyODAgc2VjdGlvbiA0LjIuMS4xNCcgRVFVQUx
 JVFkgb2JqZWN0SWRlbnRpZmllck1hdGNoIFNZTlRBWCAxLjMuNi4xLjQuMS4xNDY2LjExNS4xMjEu
 MS4zOCAp
attributeTypes:: KCAxLjIuODI2LjAuMS4zMzQ0ODEwLjEuMS45OSBOQU1FICd4NTA5RFBSZWFzb
 25Db2RlcycgREVTQyAnVGhlIHJlYXNvbiBjb2RlcyB1c2VkIGJ5IGEgRFAsIHNlZSAJUkZDMzI4MC
 BzZWN0aW9uIDQuMi4xLjE0JyBFUVVBTElUWSBiaXRTdHJpbmdNYXRjaCBTWU5UQVggMS4zLjYuMS4
 0LjEuMTQ2Ni4xMTUuMTIxLjEuNiAp
attributeTypes: ( 1.3.6.1.1.11.1.2.1 NAME 'vPIMTelephoneNumber' DESC 'draft-ie
 tf-vpim-vpimdir: The full E.164 form of the telephone number, including any s
 ub-addressing portion' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.44{20} )
attributeTypes: ( 1.3.6.1.1.11.1.2.2 NAME 'vPIMRfc822Mailbox' DESC 'draft-ietf
 -vpim-vpimdir: stores the inter-domain SMTP address of the voice mailbox asso
 ciated with a given telephone number' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.26{256} )
attributeTypes: ( 1.3.6.1.1.11.1.2.3 NAME 'vPIMSpokenName' DESC 'draft-ietf-vp
 im-vpimdir: the spoken name of the user in the voice of the user' EQUALITY oc
 tetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{20000} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.11.1.2.4 NAME 'vPIMTextName' DESC 'draft-ietf-vpim
 -vpimdir: consistent with the unstructured text name databases used for calli
 ng name delivery service of caller ID' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15{20} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.11.1.2.5 NAME 'vPIMSupportedAudioMediaTypes' DESC 
 'draft-ietf-vpim-vpimdir: MIME audio subtype(s) of encodings that can be rece
 ived at the address specified in vPIMRfc822Mailbox' EQUALITY caseIgnoreIA5Mat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.11.1.2.6 NAME 'vPIMSupportedMessageContext' DESC '
 draft-ietf-vpim-vpimdir: provides guidance to the sender about the message co
 ntexts the recipient is likely to accept' EQUALITY caseIgnoreIA5Match SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.11.1.2.7 NAME 'vPIMExtendedAbsenceStatus' DESC 'dr
 aft-ietf-vpim-vpimdir: indicates to the subscriber whether the recipient is a
 ccepting messages during his absence' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.11.1.2.8 NAME 'vPIMSupportedUABehaviors' DESC 'dra
 ft-ietf-vpim-vpimdir: list of the attributes considered optional by VPIM and 
 other vendor-specific attributes maybe supported by the recipient' EQUALITY c
 aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.11.1.2.9 NAME 'vPIMMaxMessageSize' DESC 'draft-iet
 f-vpim-vpimdir: maximum message length in seconds the receiving mailbox accep
 ts' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.11.1.2.10 NAME 'vPIMSubMailboxes' DESC 'draft-ietf
 -vpim-vpimdir: indicates the presence of sub-mailboxes' EQUALITY numericStrin
 gMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{4} )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.1 NAME 'astUsername' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.2 NAME 'astSecret' DESC '' SUP nam
 e )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.3 NAME 'astMailbox' DESC '' SUP na
 me )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.4 NAME 'astTemplate' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.5 NAME 'astFromdomain' DESC '' SUP
  name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.6 NAME 'astRegexten' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.7 NAME 'astFromuser' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.8 NAME 'astHost' DESC '' SUP name 
 )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.9 NAME 'astMask' DESC '' SUP name 
 )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.10 NAME 'astPort' DESC '' SUP name
  )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.11 NAME 'astQualify' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.12 NAME 'astDefaultip' DESC '' SUP
  name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.13 NAME 'astRtptimeout' DESC '' SU
 P name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.14 NAME 'astRtpholdtimeout' DESC '
 ' SUP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.16 NAME 'astContext' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.17 NAME 'astPermit' DESC '' SUP na
 me )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.18 NAME 'astDeny' DESC '' SUP name
  )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.19 NAME 'astMd5Secret' DESC '' SUP
  name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.20 NAME 'astDtmfmode' DESC '' SUP 
 name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.21 NAME 'astCanReinvite' DESC '' S
 UP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.22 NAME 'astNat' DESC '' SUP name 
 )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.23 NAME 'astCallgroup' DESC '' SUP
  name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.24 NAME 'astPickupgroup' DESC '' S
 UP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.25 NAME 'astLanguage' DESC '' SUP 
 name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.26 NAME 'astAllow' DESC '' SUP nam
 e )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.27 NAME 'astDisallow' DESC '' SUP 
 name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.28 NAME 'astInsecure' DESC '' SUP 
 name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.29 NAME 'astTrustrpid' DESC '' SUP
  name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.30 NAME 'astProgressinband' DESC '
 ' SUP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.31 NAME 'astPromiscredir' DESC '' 
 SUP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.32 NAME 'astCallerid' DESC '' SUP 
 name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.33 NAME 'astAccountcode' DESC '' S
 UP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.34 NAME 'astAmaflags' DESC '' SUP 
 name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.35 NAME 'astIncominglimit' DESC ''
  SUP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.36 NAME 'astRestrictcid' DESC '' S
 UP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.37 NAME 'astReghost' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.38 NAME 'astRegport' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.39 NAME 'astRegseconds' DESC '' SU
 P name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.40 NAME 'astName' DESC 'Authorisie
 rungsname' SUP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.41 NAME 'astAuth' DESC '' SUP name
  )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.42 NAME 'astInkeys' DESC '' SUP na
 me )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.43 NAME 'astNotransfer' DESC '' SU
 P name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.44 NAME 'astJitterbuffer' DESC '' 
 SUP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.45 NAME 'astSendani' DESC '' SUP n
 ame )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.46 NAME 'astPeercontext' DESC '' S
 UP name )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.47 NAME 'astTrunk' DESC '' SUP nam
 e )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.48 NAME 'astOutkey' DESC '' SUP na
 me )
attributeTypes: ( 1.3.6.1.4.1.23935.5.2.1.1.49 NAME 'astIPaddr' DESC '' SUP na
 me )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.8 NAME 'pgpBaseKeySpaceDN' DESC 'Points
  to DN of the object that will store the PGP keys.' SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.12 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.9 NAME 'pgpSoftware' DESC 'pgpSoftware 
 attribute for PGP' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN
  'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.10 NAME 'pgpVersion' DESC 'pgpVersion a
 ttribute for PGP' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 
 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.11 NAME 'pgpKey' DESC 'pgpKey attribute
  for PGP' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'Pretty 
 Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.12 NAME 'pgpCertID' DESC 'pgpCertID att
 ribute for PGP' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy 
 (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.13 NAME 'pgpDisabled' DESC 'pgpDisabled
  attribute for PGP' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.15 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.14 NAME 'pgpKeyID' DESC 'pgpKeyID attri
 bute for PGP' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy (P
 GP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.15 NAME 'pgpKeyType' DESC 'pgpKeyType a
 ttribute for PGP' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Pretty Good Privac
 y (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.16 NAME 'pgpUserID' DESC 'User ID(s) as
 sociated with the PGP key.' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Pretty Good Privacy (
 PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.17 NAME 'pgpKeyCreateTime' DESC 'pgpKey
 CreateTime attribute for PGP' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrd
 eringMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .15 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.18 NAME 'pgpSignerID' DESC 'pgpSignerID
  attribute for PGP' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.19 NAME 'pgpRevoked' DESC 'pgpRevoked a
 ttribute for PGP' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 15 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.20 NAME 'pgpSubKeyID' DESC 'Sub-key ID(
 s) of the PGP key.' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.21 NAME 'pgpKeySize' DESC 'pgpKeySize a
 ttribute for PGP' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch S
 UBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN
  'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.22 NAME 'pgpKeyExpireTime' DESC 'pgpKey
 ExpireTime attribute for PGP' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrd
 eringMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .15 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.6 NAME 'pgpReconData' DESC 'PGP defined
  attributed containing reconstruction data' SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .40 SINGLE-VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.7 NAME 'pgpReconCertID' DESC 'PGP defin
 ed attribute containing the certID of the key' EQUALITY caseIgnoreMatch SUBST
 R caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
  X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.2 NAME 'pgpElementType' DESC 'PGP defin
 ed attribute containing the type of the pref object' EQUALITY caseIgnoreMatch
  SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE
 -VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.3.6.1.4.1.3401.8.2.3 NAME 'pgpData' DESC 'PGP defined attr
 ibute containing the admin pref data' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SI
 NGLE-VALUE X-ORIGIN 'Pretty Good Privacy (PGP)' )
attributeTypes: ( 1.2.840.113556.1.4.478 NAME 'calCalURI' DESC 'URI to a snaps
 hot of the users entire default calendar' EQUALITY caseIgnoreMatch SUBSTR cas
 eIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.2.840.113556.1.4.479 NAME 'calFBURL' DESC 'URI to the user
 s default free/busy time data' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubs
 tringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.2.840.113556.1.4.480 NAME 'calCAPURI' DESC 'URI used to co
 mmunicate with the users calendar' EQUALITY caseIgnoreMatch SUBSTR caseIgnore
 SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.2.840.113556.1.4.481 NAME 'calCalAdrURI' DESC 'URI to whic
 h event requests should be sent for the user' EQUALITY caseIgnoreMatch SUBSTR
  caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE 
 )
attributeTypes: ( 1.2.840.113556.1.4.482 NAME 'calOtherCalURIs' DESC 'URIs to 
 snapshots of non-default calendars belonging to the user' EQUALITY caseIgnore
 Match SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.2.840.113556.1.4.483 NAME 'calOtherFBURLs' DESC 'URIs to n
 on-default free/busy data belonging to the user' EQUALITY caseIgnoreMatch SUB
 STR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.2.840.113556.1.4.484 NAME 'calOtherCAPURIs' DESC 'URIs to 
 non-default calendars belonging to the user' EQUALITY caseIgnoreMatch SUBSTR 
 caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.2.840.113556.1.4.485 NAME 'calOtherCalAdrURIs' DESC 'URIs 
 of destinations for event requests to non-default calendars' EQUALITY caseIgn
 oreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 5 )
attributeTypes: ( 1.3.6.1.4.1.13040.2.1.1 NAME 'hordePrefs' DESC 'Horde Prefer
 ences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024}
  )
attributeTypes: ( 1.3.6.1.4.1.13040.3.1.1 NAME 'impPrefs' DESC 'IMP Preference
 s' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} )
attributeTypes: ( 1.3.6.1.4.1.13040.4.1.1 NAME 'turbaPrefs' DESC 'Turba Prefer
 ences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024}
  )
attributeTypes: ( 1.3.6.1.4.1.13040.4.1.2 NAME 'turbaType' DESC 'Turba Object 
 Type: Contact/List' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5Substring
 sMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{8} )
attributeTypes: ( 1.3.6.1.4.1.13040.4.1.3 NAME 'turbaMembers' DESC 'Encoded me
 mbers of a Turba list' SUP name )
attributeTypes: ( 1.3.6.1.4.1.13040.4.1.4 NAME 'turbaPGPPublicKey' DESC 'PGP/G
 PG Public Key' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 26{4000} )
attributeTypes: ( 1.3.6.1.4.1.13040.5.1.1 NAME 'kronolithPrefs' DESC 'Kronolit
 h Preferences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 26{1024} )
attributeTypes: ( 1.3.6.1.4.1.13040.6.1.1 NAME 'nagPrefs' DESC 'Nag Preference
 s' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} )
attributeTypes: ( 1.3.6.1.4.1.13040.7.1.1 NAME 'gollemPrefs' DESC 'Gollem Pref
 erences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{102
 4} )
attributeTypes: ( 1.3.6.1.4.1.13040.8.1.1 NAME 'choraPrefs' DESC 'Chora Prefer
 ences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024}
  )
attributeTypes: ( 1.3.6.1.4.1.13040.9.1.1 NAME 'mnemoPrefs' DESC 'Mnemo Prefer
 ences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024}
  )
attributeTypes: ( 1.3.6.1.4.1.13040.10.1.1 NAME 'trollPrefs' DESC 'Troll Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.11.1.1 NAME 'klutzPrefs' DESC 'Klutz Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.12.1.1 NAME 'jonahPrefs' DESC 'Jonah Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.13.1.1 NAME 'hermesPrefs' DESC 'Hermes Pre
 ferences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{10
 24} )
attributeTypes: ( 1.3.6.1.4.1.13040.14.1.1 NAME 'junoPrefs' DESC 'Juno Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.13040.15.1.1 NAME 'treanPrefs' DESC 'Trean Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.16.1.1 NAME 'whupsPrefs' DESC 'Whups Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.17.1.1 NAME 'ingoPrefs' DESC 'Ingo Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.13040.18.1.1 NAME 'anselPrefs' DESC 'Ansel Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.19.1.1 NAME 'geniePrefs' DESC 'Genie Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.20.1.1 NAME 'scryPrefs' DESC 'Scry Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.13040.21.1.1 NAME 'wickedPrefs' DESC 'Wicked Pre
 ferences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{10
 24} )
attributeTypes: ( 1.3.6.1.4.1.13040.22.1.1 NAME 'agoraPrefs' DESC 'Agora Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.24.1.1 NAME 'goopsPrefs' DESC 'Goops Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.25.1.1 NAME 'merkPrefs' DESC 'Merk Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.13040.26.1.1 NAME 'mimpPrefs' DESC 'MIMP Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.13040.27.1.1 NAME 'mottlePrefs' DESC 'Mottle Pre
 ferences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{10
 24} )
attributeTypes: ( 1.3.6.1.4.1.13040.28.1.1 NAME 'nicPrefs' DESC 'NIC Preferenc
 es' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} )
attributeTypes: ( 1.3.6.1.4.1.13040.29.1.1 NAME 'occamPrefs' DESC 'Occam Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.30.1.1 NAME 'odinPrefs' DESC 'Odin Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.13040.31.1.1 NAME 'rakimPrefs' DESC 'Rakim Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.32.1.1 NAME 'seshaPrefs' DESC 'Sesha Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.33.1.1 NAME 'swooshPrefs' DESC 'Swoosh Pre
 ferences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{10
 24} )
attributeTypes: ( 1.3.6.1.4.1.13040.34.1.1 NAME 'thorPrefs' DESC 'Thor Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.13040.35.1.1 NAME 'ulaformPrefs' DESC 'Ulaform P
 references' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{
 1024} )
attributeTypes: ( 1.3.6.1.4.1.13040.36.1.1 NAME 'volosPrefs' DESC 'Volos Prefe
 rences' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024
 } )
attributeTypes: ( 1.3.6.1.4.1.13040.37.1.1 NAME 'jetaPrefs' DESC 'Jeta Prefere
 nces' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} 
 )
attributeTypes: ( 1.3.6.1.4.1.412.100.1.2.5 NAME 'arrayIndex' DESC 'the index 
 of this child' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
 )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.101 NAME 'dlmIdentifyingDescription'
  DESC 'A free-form string providing explanation and            details behind
  the entries in the dlmOtherIdentifyingInfo            attribute.' EQUALITY c
 aseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.112 NAME 'dlmOtherIdentifyingInfo' D
 ESC 'OtherIdentifyingInfo captures additional data,            beyond that of
  Tag information, that could be used to            identify a Physical Elemen
 t. One example is bar code            data associated with an Element that al
 so has an asset             tag. Note that if only bar code data is available
  and            is unique/able to be used as an Element key, this            
 property would be NULL and the bar code data used as            the class key
 , in the Tag property.' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.1.2.1 NAME 'orderedCimKeys' DESC 'The mo
 del path for the instance (without propagated            keys). May be used a
 s an RDN' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGL
 E-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.1.2.2 NAME 'orderedCimModelPath' DESC 'T
 he model path for the instance (with propagated keys). May            be used
  as an RDN' OBSOLETE EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.103 NAME 'dlmCaption' DESC 'The Capt
 ion property is a short textual            description (oneline string) of th
 e object.' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{64} 
 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.104 NAME 'dlmDescription' DESC 'The 
 Description property provides a textual           description of the object.'
  EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.105 NAME 'dlmInstallDate' DESC 'A da
 tetime value indicating when the object was            installed. A lack of a
  value does not indicate that            the object is not installed.' EQUALI
 TY generalizedTimeMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.106 NAME 'dlmName' DESC 'The Name pr
 operty defines the label by which the            object is known. When subcla
 ssed, the Name property            can be overridden to be a Key property.' E
 QUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.107 NAME 'dlmStatus' DESC 'A string 
 indicating the current status of the            object. Various operational a
 nd non-operational            statuses are defined. Operational statuses are 
 "OK",            "Degraded", "Stressed" and "Pred Fail". "Stressed"          
   indicates that the Element is functioning, but needs            attention. 
 Examples of "Stressed" states are overload,             overheated, etc. The 
 condition "Pred Fail" (failure            predicted) indicates that an Elemen
 t is functioning            properly but predicting a failure in the near fut
 ure.            An example is a SMART-enabled hard drive.               [...]
 ' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{10} SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.108 NAME 'dlmCreationClassName' DESC
  'CreationClassName indicates the name of the class             or the subcla
 ss used in the creation of an instance.            When used with the other k
 ey properties of this class,             this property allows all instances o
 f this class and            its subclasses to be uniquely identified.' EQUALI
 TY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.119 NAME 'dlmNameFormat' DESC 'The S
 ystem object and its derivatives are Top            Level Objects of CIM. The
 y provide the scope for            numerous components. Having unique System 
 keys is            required. A heuristic can be defined in individual        
     System subclasses to attempt to always generate the            same Syste
 m Name Key. The NameFormat property            identifies how the System name
  was generated, using            the subclass" heuristic.' EQUALITY caseIgnor
 eMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{64} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.120 NAME 'dlmPrimaryOwnerContact' DE
 SC 'A string that provides information on how the            primary system o
 wner can be reached (e.g. phone            number, email address, ...).' EQUA
 LITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.121 NAME 'dlmPrimaryOwnerName' DESC 
 'The name of the primary system owner.' EQUALITY caseIgnoreMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15{64} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.122 NAME 'dlmRoles' DESC 'An array (
 bag) of strings that specify the roles            this System plays in the IT
 -environment. Subclasses of             System may override this property to 
 define explicit            Roles values. Alternately, a Working Group may    
         describe the heuristics, conventions and guidelines            for sp
 ecifying Roles. For example, for an instance of            a networking syste
 m, the Roles property might contain            the string, "Switch" or "Bridg
 e".' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.123 NAME 'dlmDedicated' DESC 'Enumer
 ation indicating whether the ComputerSystem             is a special-purpose 
 System (ie, dedicated to a            particular use), versus being "general 
 purpose". For            example, one could specify that the System is       
      dedicated to "Print" (value=11) or acts as a "Hub"            (value=8).
   Values are 0="Not Dedicated",            1="Unknown", 2="Other", 3="Storage
 ", 4="Router",            5="Switch", 6="Layer 3 Switch", 7="Central Office  
           Switch", 8="Hub", 9="Access Server", 10="Firewall",            11="
 Print", 12="I/O", 13="Web Caching",            14="Management"' EQUALITY inte
 gerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.136 NAME 'dlmStartMode' DESC 'StartM
 ode is a string value indicating whether            the Service is automatica
 lly started by a System,            Operating System, etc. or only started up
 on request.             Value Mapping are "Automatic", "Manual"' EQUALITY cas
 eIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{10} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.137 NAME 'dlmStarted' DESC 'Started 
 is a boolean indicating whether the            Service has been started (TRUE
 ), or stopped (FALSE).' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.139 NAME 'dlmSettingID' DESC 'The id
 entifier by which the Setting object is            known.' EQUALITY caseIgnor
 eMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.159 NAME 'dlmElementSettingElementRe
 f' DESC 'The ManagedSystemElement. Values of this            attribute point 
 to entries of class            dlmManagedSystemElement.' EQUALITY distinguish
 edNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.160 NAME 'dlmElementSettingSettingRe
 f' DESC 'The Setting object associated with the            ManagedSystem Elem
 ent. Values of this attribute point            to entries of class dlmSetting
 .' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.186 NAME 'dlmMemberOfCollectionColle
 ctionRef' DESC 'The Collection that aggregates members. Values of            
  this attribute point to entries of class dlmCollection.' EQUALITY distinguis
 hedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.412.100.2.2.187 NAME 'dlmMemberOfCollectionMembe
 rRef' DESC 'The aggregated member of the collection. Values            of thi
 s attribute point to entries of class            dlmManagedElement.' EQUALITY
  distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.8 NAME 'dlm1FilterListDirection' D
 ESC 'This defines whether the FilterList is used          for input, output, 
 or both input and output          filtering. All values are used with respect
  to          the interface for which the FilterList applies.          "Not Ap
 plicable" (0) is used when there is no          direction applicable to the F
 ilterList.          "Input" (1) is used when the FilterList applies          
 to packets that are inbound on the related          interface.          "Outp
 ut" (2) is used when the FilterList applies          to packets that are outb
 ound on the related          interface.          "Both" (3) is used to indica
 te that          the direction is immaterial, e.g., to filter on          a s
 ource subnet regardless of whether the flow is          inbound or outbound. 
          "Mirrored" (4) is also applicable to          both inbound and outbo
 und flow processing, but          indicates that the filter criteria are appl
 ied          asymmetrically to traffic in both directions          and, thus,
  specifies the reversal of source and          destination criteria (as oppos
 ed to the equality          of these criteria as indicated by "Both").       
    The match conditions in the aggregated          FilterEntryBase subclass i
 nstances are defined          from the perspective of outbound flows and appl
 ied          to inbound flows as well by reversing the source          and de
 stination criteria. So, for example,          consider a FilterList with 3 Fi
 lterEntries          indicating destination port = 80, and source and        
   destination addresses of a and b, respectively.          Then, for the outb
 ound direction, the filter          entries match as specified and the mirror
  (for          the inbound direction) matches on source          port = 80 an
 d source and destination addresses          of b and a, respectively.),      
     Values are "Not Applicable", "Input", "Output",          "Both", "Mirrore
 d"' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.1 NAME 'dlm1FilterEntryBaseIsNegat
 ed' DESC 'Boolean indicating that the match condition described          in t
 he properties of the FilterEntryBase subclass          should be negated.' EQ
 UALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.2 NAME 'dlmProtocolType' DESC 'Pro
 tocolType is an enumeration that provides additional          information tha
 t can be used to help categorize and          classify different instances of
  this class.          Values are "Unknown", "Other", "IPv4", "IPv6", "IPX",  
         "AppleTalk", "DECnet", "SNA", "CONP", "CLNP", "VINES",          "XNS"
 , "ATM", "Frame Relay", "Ethernet", "TokenRing",          "FDDI", "Infiniband
 ", "Fibre Channel", "ISDN BRI Endpoint",          "ISDN B Channel Endpoint", 
 "ISDN D Channel Endpoint"' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.3 NAME 'dlmOtherTypeDescription' D
 ESC 'A string describing the type of ProtocolEndpoint that this          inst
 ance is when the Type property of this class (or any of          its  subclas
 ses) is set to "Other". The format of          the string inserted in this pr
 operty should be similar in          format to the values defined for the Typ
 e property. This          property should be set to NULL when the Type proper
 ty is          any value other than "Other".' EQUALITY caseIgnoreMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.4 NAME 'dlmIPAddress' DESC 'The IP
  address that this ProtocolEndpoint represents,          formatted according 
 to the appropriate convention as          defined in the AddressType property
  of this class          (e.g., 171.79.6.40).' EQUALITY caseIgnoreMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.5 NAME 'dlmIPSubnetMask' DESC 'The
  mask for the IP address of this ProtocolEndpoint,          formatted accordi
 ng to the appropriate convention as          defined in the AddressType prope
 rty of this class          (e.g., 255.255.252.0).' EQUALITY caseIgnoreMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.6 NAME 'dlmIPAddressType' DESC 'An
  enumeration that describes the format of the address          property. When
 ever possible, IPv4-compatible addresses          should be used instead of n
 ative IPv6 addresses (see          RFC 2373, section 2.5.4). In order to have
  a consistent          format for IPv4 addresses in a mixed IPv4/v6 environme
 nt,          all IPv4 addresses and both IPv4-compatible IPv6 addresses      
     and IPv4-mapped IPv6 addresses, per RFC 2373, section          2.5.4, sho
 uld be formatted in standard IPv4 format.          However, this (the 2.2) ve
 rsion of the Network Common          Model will not explicitly support mixed 
 IPv4/IPv6          environments. This will be added in a future release.     
      Values are "Unknown", "IPv4", "IPv6".' EQUALITY caseIgnoreMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.10126.7.1.3.1.7 NAME 'dlmIPVersionSupport' DESC 
 'It is not possible to tell from the address alone if a          given IPProt
 ocolEndpoint can support IPv4 and IPv6, or          just one of these. This p
 roperty explicitly defines the          support for different versions of IP 
 that this          IPProtocolEndpoint has.          More implementation exper
 ience is needed in order to          correctly model mixed IPv4/IPv6 networks
 ; therefore, this          version (2.2) of the Network Common Model will not
  support          mixed IPv4/IPv6 environments. This will be looked at       
    further in a future version.          Values are "Unknown", "IPv4 Only", "
 IPv6 Only".' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.18 NAME 'dlmBiometric' DESC 'Biometr
 ic information used to identify a person.              The property value is 
 left null or set to "N/A" for            non-human user or a user not using b
 iometric            information for authentication.  Values are 0="N/A",     
        1="Other", 2="Facial", 3="Retina", 4="Mark",            5="Finger", 6=
 "Voice", 7="DNA-RNA", 8="EEG".' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.27 )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.19 NAME 'dlmElementID' DESC 'The Ele
 mentID property uniquely specifies the            ManagedElement object insta
 nce that is the user            represented by the UsersAccess object instanc
 e.  The            ElementID is formatted similarly to a model path          
   except that the property-value pairs are ordered in            alphabetical
  order (US ASCII lexical order).' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.41 NAME 'dlmElementAsUserAntecedentR
 ef' DESC 'The ManagedElement that has UsersAccess. The value             of t
 his attribute points to an entry of class            dlm1ManagedElement.' EQU
 ALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.42 NAME 'dlmElementAsUserDependentRe
 f' DESC 'The "owned" UsersAccess. Values of this            attribute point t
 o entries of class dlm1UsersAccess.' EQUALITY distinguishedNameMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.57 NAME 'dlmUsersCredentialAnteceden
 tRef' DESC 'The issued credential that may be used. Values            of this
  attribute point to entries of class            dlm1Credential.' EQUALITY dis
 tinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.58 NAME 'dlmUsersCredentialDependent
 Ref' DESC 'The UsersAccess that has use of a credential.            Values of
  this attribute point to entries of class             dlm1UsersAccess.' EQUAL
 ITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.26 NAME 'dlmRemoteID' DESC 'RemoteID
  is the name by which the user is known           at the KDC security service
 .' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.28 NAME 'dlmAlgorithm' DESC 'algorit
 hm names the transformation algorithm, if           any, used to protect pass
 words before use in the           protocol.  For instance, Kerberos doesn"t s
 tore           passwords as the shared secret, but rather, a hash of         
   the password.' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
 5 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.29 NAME 'dlmProtocol' DESC 'protocol
  names the protocol with which the           SharedSecret is used.' EQUALITY 
 caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.412.100.4.2.30 NAME 'dlmSecret' DESC 'secret is 
 the secret known by the Users Access.' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.15 NAME 'pcimRoles' DESC 'RFC 3703: Each value
  of this attribute represents a role-combination.' EQUALITY caseIgnoreMatch O
 RDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.6.2.3 NAME 'pcimKeywords' DESC 'RFC 3703: A set of
  keywords to assist directory clients in locating the policy objects applicab
 le to them.' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR
  caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.6.2.4 NAME 'pcimGroupName' DESC 'RFC 3703: The use
 r-friendly name of this policy group.' EQUALITY caseIgnoreMatch ORDERING case
 IgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.5 NAME 'pcimRuleName' DESC 'RFC 3703: The user
 -friendly name of this policy rule.' EQUALITY caseIgnoreMatch ORDERING caseIg
 noreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.6 NAME 'pcimRuleEnabled' DESC 'RFC 3703: An in
 teger indicating whether a policy rule is administratively enabled (value=1),
  disabled (value=2), or enabled for debug (value=3).' EQUALITY integerMatch O
 RDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.1.6.2.11 NAME 'pcimRuleUsage' DESC 'RFC 3703: This a
 ttribute is a free-form sting providing guidelines on how this policy should 
 be used.' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR ca
 seIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.13 NAME 'pcimRuleMandatory' DESC 'RFC 3703: If
  TRUE, indicates that for this policy rule, the evaluation of its conditions 
 and execution of its actions (if the condition is satisfied) is required.' EQ
 UALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.16 NAME 'pcimConditionGroupNumber' DESC 'RFC 3
 703: The number of the group to which a policy condition belongs.  This is us
 ed to form the DNF or CNF expression associated with a policy rule.' EQUALITY
  integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.17 NAME 'pcimConditionNegated' DESC 'RFC 3703:
  If TRUE (FALSE), it indicates that a policy condition IS (IS NOT) negated in
  the DNF or CNF expression associated with a policy rule.' EQUALITY booleanMa
 tch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.18 NAME 'pcimConditionName' DESC 'RFC 3703: A 
 user-friendly name for a policy condition.' EQUALITY caseIgnoreMatch ORDERING
  caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.19 NAME 'pcimConditionDN' DESC 'RFC 3703: A DN
  that references an instance of a reusable policy condition.' EQUALITY distin
 guishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.23 NAME 'pcimActionOrder' DESC 'RFC 3703: An i
 nteger indicating the relative order of an action in the context of a policy 
 rule.' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.22 NAME 'pcimActionName' DESC 'RFC 3703: A use
 r-friendly name for a policy action.' EQUALITY caseIgnoreMatch ORDERING caseI
 gnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.24 NAME 'pcimActionDN' DESC 'RFC 3703: A DN th
 at references a reusable policy action.' EQUALITY distinguishedNameMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.6.2.36 NAME 'pcimRepositoryName' DESC 'RFC 3703: T
 he user-friendly name of this policy repository.' EQUALITY caseIgnoreMatch OR
 DERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.1 NAME 'pcelsPolicySetName' DESC 'RFC 4104: Us
 er-friendly name of a policy set' EQUALITY caseIgnoreMatch ORDERING caseIgnor
 eOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.2 NAME 'pcelsDecisionStrategy' DESC 'RFC 4104:
  Evaluation method for the components of a pcelsPolicySet' EQUALITY integerMa
 tch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE
 -VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.3 NAME 'pcelsPolicySetList' DESC 'RFC 4104: Un
 ordered set of DNs of pcelsPolicySetAssociation entries' EQUALITY distinguish
 edNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.4 NAME 'pcelsPriority' DESC 'RFC 4104: Priorit
 y of a component' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.5 NAME 'pcelsPolicySetDN' DESC 'RFC 4104: DN o
 f a pcelsPolicySet entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.62 NAME 'pcelsRuleValidityPeriodList' DESC 'RF
 C 4104: Unordered set of DNs of pcimRuleValidityAssociation entries' EQUALITY
  distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.6 NAME 'pcelsConditionListType' DESC 'RFC 4104
 : Indicates the type of condition aggregation' EQUALITY integerMatch ORDERING
  integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.7 NAME 'pcelsConditionList' DESC 'RFC 4104: Un
 ordered set of DNs of pcelsConditionAssociation entries' EQUALITY distinguish
 edNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.8 NAME 'pcelsActionList' DESC 'RFC 4104: Unord
 ered set of DNs of pcelsActionAssociation entries' EQUALITY distinguishedName
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.9 NAME 'pcelsSequencedActions' DESC 'RFC 4104:
  Indicates the importance of action sequencing' EQUALITY integerMatch ORDERIN
 G integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.10 NAME 'pcelsExecutionStrategy' DESC 'RFC 410
 4: Indicates the action execution strategy' EQUALITY integerMatch ORDERING in
 tegerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.11 NAME 'pcelsVariableDN' DESC 'RFC 4104: DN o
 f a pcelsVariable entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.12 NAME 'pcelsValueDN' DESC 'RFC 4104: DN of a
  pcelsValueAuxClass entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.12 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.13 NAME 'pcelsIsMirrored' DESC 'RFC 4104: Indi
 cates whether the mirrored traffic matches' EQUALITY booleanMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.14 NAME 'pcelsVariableName' DESC 'RFC 4104: Th
 e user-friendly name of a variable.' EQUALITY caseIgnoreMatch ORDERING caseIg
 noreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.15 NAME 'pcelsExpectedValueList' DESC 'RFC 410
 4: Unordered set of DNs of pcelsValueAuxClass entries        representing exp
 ected values for a policy variable' EQUALITY distinguishedNameMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.16 NAME 'pcelsVariableModelClass' DESC 'RFC 41
 04: Identifies a CIM class' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.17 NAME 'pcelsVariableModelProperty' DESC 'RFC
  4104: Identifies the property of a CIM class.' EQUALITY caseIgnoreMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.18 NAME 'pcelsExpectedValueTypes' DESC 'RFC 41
 04: Identifies subclasses of pcelsValueAuxClass by name' EQUALITY caseIgnoreM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.9.2.19 NAME 'pcelsValueName' DESC 'RFC 4104: The u
 ser-friendly name of a value' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrd
 eringMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.20 NAME 'pcelsIPv4AddrList' DESC 'RFC 4104: Un
 ordered set of IPv4 addresses, IPv4 address ranges or        hosts' EQUALITY 
 caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.9.2.21 NAME 'pcelsIPv6AddrList' DESC 'RFC 4104: Un
 ordered set of IPv6 addresses, IPv6 address ranges or        hosts' EQUALITY 
 caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.9.2.22 NAME 'pcelsMACAddrList' DESC 'RFC 4104: Uno
 rdered set of MAC addresses or MAC address ranges' EQUALITY caseIgnoreMatch O
 RDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.9.2.23 NAME 'pcelsStringList' DESC 'RFC 4104: Unor
 dered set of strings with wildcards' EQUALITY caseIgnoreMatch ORDERING caseIg
 noreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.15 )
attributeTypes: ( 1.3.6.1.1.9.2.24 NAME 'pcelsBitStringList' DESC 'RFC 4104: U
 nordered set of bit strings or bit string ranges' EQUALITY caseIgnoreMatch OR
 DERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.9.2.25 NAME 'pcelsIntegerList' DESC 'RFC 4104: Uno
 rdered set of integers or integer ranges' EQUALITY caseIgnoreMatch ORDERING c
 aseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.15 )
attributeTypes: ( 1.3.6.1.1.9.2.26 NAME 'pcelsBoolean' DESC 'RFC 4104: Boolean
  value' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALU
 E )
attributeTypes: ( 1.3.6.1.1.9.2.27 NAME 'pcelsReusableContainerName' DESC 'RFC
  4104: User-friendly name of a reusable policy container' EQUALITY caseIgnore
 Match ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.28 NAME 'pcelsReusableContainerList' DESC 'RFC
  4104: Unordered set of DNs of pcelsReusableContainer entries' EQUALITY disti
 nguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.29 NAME 'pcelsRole' DESC 'RFC 4104: String rep
 resenting a role.' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch 
 SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.30 NAME 'pcelsRoleCollectionName' DESC 'RFC 41
 04: User-friendly name of a role collection' EQUALITY caseIgnoreMatch ORDERIN
 G caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.31 NAME 'pcelsElementList' DESC 'RFC 4104: Uno
 rdered set of managed elements' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.32 NAME 'pcelsFilterName' DESC 'RFC 4104: User
 -friendly name of a filter entry' EQUALITY caseIgnoreMatch ORDERING caseIgnor
 eOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.33 NAME 'pcelsFilterIsNegated' DESC 'RFC 4104:
  Indicates whether the filter is negated' EQUALITY booleanMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.7 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.34 NAME 'pcelsIPHdrVersion' DESC 'RFC 4104: IP
  version' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.35 NAME 'pcelsIPHdrSourceAddress' DESC 'RFC 41
 04: Source IP address' EQUALITY octetStringMatch ORDERING octetStringOrdering
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.36 NAME 'pcelsIPHdrSourceAddressEndOfRange' DE
 SC 'RFC 4104: End of a range of source IP addresses' EQUALITY octetStringMatc
 h ORDERING octetStringOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SING
 LE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.37 NAME 'pcelsIPHdrSourceMask' DESC 'RFC 4104:
  Mask to be used in comparing the source IP address' EQUALITY octetStringMatc
 h ORDERING octetStringOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SING
 LE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.38 NAME 'pcelsIPHdrDestAddress' DESC 'RFC 4104
 : Destination IP address' EQUALITY octetStringMatch ORDERING octetStringOrder
 ingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.39 NAME 'pcelsIPHdrDestAddressEndOfRange' DESC
  'RFC 4104: End of a range of destination IP addresses' EQUALITY octetStringM
 atch ORDERING octetStringOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.40 NAME 'pcelsIPHdrDestMask' DESC 'RFC 4104: M
 ask to be used in comparing the destination IP address' EQUALITY octetStringM
 atch ORDERING octetStringOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 S
 INGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.41 NAME 'pcelsIPHdrProtocolID' DESC 'RFC 4104:
  IP protocol type' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.42 NAME 'pcelsIPHdrSourcePortStart' DESC 'RFC 
 4104: Lower end of a range of UDP or TCP source ports' EQUALITY integerMatch 
 ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VAL
 UE )
attributeTypes: ( 1.3.6.1.1.9.2.43 NAME 'pcelsIPHdrSourcePortEnd' DESC 'RFC 41
 04: Upper end of a range of UDP or TCP source ports' EQUALITY integerMatch OR
 DERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE
  )
attributeTypes: ( 1.3.6.1.1.9.2.44 NAME 'pcelsIPHdrDestPortStart' DESC 'RFC 41
 04: Lower end of a range of UDP or TCP destination ports' EQUALITY integerMat
 ch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-
 VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.45 NAME 'pcelsIPHdrDestPortEnd' DESC 'RFC 4104
 : Upper end of a range of UDP or TCP destination ports' EQUALITY integerMatch
  ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VA
 LUE )
attributeTypes: ( 1.3.6.1.1.9.2.46 NAME 'pcelsIPHdrDSCPList' DESC 'RFC 4104: D
 SCP values' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.1.9.2.47 NAME 'pcelsIPHdrFlowLabel' DESC 'RFC 4104: 
 IP flow label' EQUALITY octetStringMatch ORDERING octetStringOrderingMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.48 NAME 'pcels8021HdrSourceMACAddress' DESC 'R
 FC 4104: Source MAC address' EQUALITY octetStringMatch ORDERING octetStringOr
 deringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.49 NAME 'pcels8021HdrSourceMACMask' DESC 'RFC 
 4104: Source MAC address mask' EQUALITY octetStringMatch ORDERING octetString
 OrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.50 NAME 'pcels8021HdrDestMACAddress' DESC 'RFC
  4104: Destination MAC address' EQUALITY octetStringMatch ORDERING octetStrin
 gOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.51 NAME 'pcels8021HdrDestMACMask' DESC 'RFC 41
 04: Destination MAC address mask' EQUALITY octetStringMatch ORDERING octetStr
 ingOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.52 NAME 'pcels8021HdrProtocolID' DESC 'RFC 410
 4: Ethernet protocol ID' EQUALITY integerMatch ORDERING integerOrderingMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.1.9.2.53 NAME 'pcels8021HdrPriority' DESC 'RFC 4104:
  802.1Q priority' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.1.9.2.54 NAME 'pcels8021HdrVLANID' DESC 'RFC 4104: 8
 02.1Q VLAN ID' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.1.9.2.55 NAME 'pcelsFilterListName' DESC 'RFC 4104: 
 User-friendly name of a FilterList' EQUALITY caseIgnoreMatch ORDERING caseIgn
 oreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.56 NAME 'pcelsFilterDirection' DESC 'RFC 4104:
  Direction to which this filter is applied' EQUALITY integerMatch ORDERING in
 tegerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.57 NAME 'pcelsFilterEntryList' DESC 'RFC 4104:
  Unordered set of DNs of pcelsFilterEntryBase entries' EQUALITY distinguished
 NameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes: ( 1.3.6.1.1.9.2.58 NAME 'pcelsVendorVariableData' DESC 'RFC 41
 04: Mechanism for representing variables that have not        been specifical
 ly modeled' EQUALITY octetStringMatch ORDERING octetStringOrderingMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.3.6.1.1.9.2.59 NAME 'pcelsVendorVariableEncoding' DESC 'RF
 C 4104: Identifies the format and semantics for policy variables' EQUALITY ob
 jectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.1.9.2.60 NAME 'pcelsVendorValueData' DESC 'RFC 4104:
  Mechanism for representing values that have not been        specifically mod
 eled' EQUALITY octetStringMatch ORDERING octetStringOrderingMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.40 )
attributeTypes: ( 1.3.6.1.1.9.2.61 NAME 'pcelsVendorValueEncoding' DESC 'RFC 4
 104: Identifies the format and semantics for policy values' EQUALITY objectId
 entifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.7924.2.1.1.1 NAME 'demailMaxAuthLevel' DESC 'des
 cribes the maximum authentification the person is capable of (NORMAL/HIGH/VER
 Y HIGH)' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.1 NAME 'sudoUser' DESC 'User(s) who ma
 y  run sudo' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.2 NAME 'sudoHost' DESC 'Host(s) who ma
 y run sudo' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYN
 TAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.3 NAME 'sudoCommand' DESC 'Command(s) 
 to be executed by sudo' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.4 NAME 'sudoRunAs' DESC 'User(s) imper
 sonated by sudo' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .26 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.5 NAME 'sudoOption' DESC 'Options(s) f
 ollowed by sudo' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .26 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.6 NAME 'sudoRunAsUser' DESC 'User(s) i
 mpersonated by sudo' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.26 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.7 NAME 'sudoRunAsGroup' DESC 'Group(s)
  impersonated by sudo' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.8 NAME 'sudoNotBefore' DESC 'Start of 
 time interval for which the entry is valid' EQUALITY generalizedTimeMatch ORD
 ERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.9 NAME 'sudoNotAfter' DESC 'End of tim
 e interval for which the entry is valid' EQUALITY generalizedTimeMatch ORDERI
 NG generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 )
attributeTypes: ( 1.3.6.1.4.1.15953.9.1.10 NAME 'sudoOrder' DESC 'an integer t
 o order the sudoRole entries' EQUALITY integerMatch ORDERING integerOrderingM
 atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes: ( 1.3.6.1.4.1.24552.500.1.1.1.13 NAME 'sshPublicKey' DESC 'MAN
 DATORY: OpenSSH Public key' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.40 )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.2 NAME 'dateOfBirth' DESC 'Date of 
 birth (format YYYY-MM-DD, see ISO 8601)' EQUALITY caseExactIA5Match SUBSTR ca
 seExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{10} SINGLE-VAL
 UE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.12 NAME 'birthPlace' DESC 'Place of
  birth' SUP l SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.14 NAME 'birthName' DESC 'Last name
  at time of birth, e.g. maiden name' SUP sn SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.7 NAME 'gender' DESC 'Representatio
 n of human sex (see ISO 5218)' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.27{1} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.9 NAME 'businessTitle' DESC 'Busine
 ss title describing the kind of job a person does' SUP title )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.15 NAME 'academicTitle' DESC 'Acade
 mic title a person is allowed to use' SUP title )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.10 NAME 'nickName' DESC 'A nick nam
 e of a person' SUP name )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.11 NAME 'euVATId' DESC 'value added
  tax ID of company within EU' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.26{20} )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.13 NAME 'labeledBICandIBAN' DESC 'i
 nternational bank arrangement consisting of BIC, IBAN and optional label (for
 mat: "BIC:<BIC>,IBAN:<IBAN>#<Label>")' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15{100} )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.17 NAME 'delegatesTo' DESC 'DN of e
 ntity to which tasks are delegated' SUP distinguishedName )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.666 NAME 'germanTaxId' DESC 'tax ID
  of person or company within Germany' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.15{20} )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.3 NAME 'musicalInstrument' DESC 'Co
 mmonly used name of a musical instrument.' SUP name )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.4 NAME 'musicalOrchestra' DESC 'Com
 monly used name of a musical orchestra or band.' SUP name )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.5 NAME 'musicalArtistName' DESC 'Co
 mmonly used artist name of this individual.' SUP name )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.661 NAME 'germanBankAccountNumber' 
 DESC 'The 8-digits number of a german bank account without spaces' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.36{10} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.662 NAME 'germanBankCode' DESC 'The
  8-digits number of a german bank code (BLZ) without spaces' SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.36{8} SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.663 NAME 'germanBankName' DESC 'The
  name of a german bank registered in the BLZ table published by Deutsche Bund
 esbank.' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.664 NAME 'germanBankAccountInfo' DE
 SC 'Composed field containing a one-line human-readable representation of all
  necessary information.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.665 NAME 'germanBankAccountHolder' 
 DESC 'The name of the holder of a german bank account commonly used as recipi
 ent name.' SUP name SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.330 NAME 'msPwdResetPasswordHash' D
 ESC 'Hashed temporary reset password as hex-bytes' EQUALITY caseIgnoreIA5Matc
 h SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{25
 6} )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.331 NAME 'msPwdResetTimestamp' DESC
  'Time at which the temporary password was set.' EQUALITY generalizedTimeMatc
 h ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 
 SINGLE-VALUE )
attributeTypes: ( 1.3.6.1.4.1.5427.1.389.4.332 NAME 'msPwdResetExpirationTime'
  DESC 'Time until the temporary password will be valid.' EQUALITY generalized
 TimeMatch ORDERING generalizedTimeOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.24 SINGLE-VALUE )
attributeTypes: ( 1.2.840.113556.1.4.221 NAME 'sAMAccountName' EQUALITY caseIg
 noreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
attributeTypes: ( 1.2.840.113556.1.4.656 NAME 'userPrincipalName' EQUALITY cas
 eIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
objectClasses: ( 2.5.6.0 NAME 'top' DESC 'top of the superclass chain' ABSTRAC
 T MUST objectClass )
objectClasses: ( 1.3.6.1.4.1.1466.101.120.111 NAME 'extensibleObject' DESC 'RF
 C4512: extensible object' SUP top AUXILIARY )
objectClasses: ( 2.5.6.1 NAME 'alias' DESC 'RFC4512: an alias' SUP top STRUCTU
 RAL MUST aliasedObjectName )
objectClasses: ( 2.16.840.1.113730.3.2.6 NAME 'referral' DESC 'namedref: named
  subordinate referral' SUP top STRUCTURAL MUST ref )
objectClasses: ( 1.3.6.1.4.1.4203.1.4.1 NAME ( 'OpenLDAProotDSE' 'LDAProotDSE'
  ) DESC 'OpenLDAP Root DSE object' SUP top STRUCTURAL MAY cn )
objectClasses: ( 2.5.17.0 NAME 'subentry' DESC 'RFC3672: subentry' SUP top STR
 UCTURAL MUST ( cn $ subtreeSpecification ) )
objectClasses: ( 2.5.20.1 NAME 'subschema' DESC 'RFC4512: controlling subschem
 a (sub)entry' AUXILIARY MAY ( dITStructureRules $ nameForms $ dITContentRules
  $ objectClasses $ attributeTypes $ matchingRules $ matchingRuleUse ) )
objectClasses: ( 1.3.6.1.4.1.1466.101.119.2 NAME 'dynamicObject' DESC 'RFC2589
 : Dynamic Object' SUP top AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.4 NAME 'glue' DESC 'Glue Entry' SUP to
 p STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.5 NAME 'syncConsumerSubentry' DESC 'Pe
 rsistent Info for SyncRepl Consumer' AUXILIARY MAY syncreplCookie )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.6 NAME 'syncProviderSubentry' DESC 'Pe
 rsistent Info for SyncRepl Producer' AUXILIARY MAY contextCSN )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.0 NAME 'olcConfig' DESC 'OpenLDAP
  configuration object' SUP top ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.1 NAME 'olcGlobal' DESC 'OpenLDAP
  Global configuration options' SUP olcConfig STRUCTURAL MAY ( cn $ olcConfigF
 ile $ olcConfigDir $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAuthI
 DRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcConcurrency $ olcConnMaxPendi
 ng $ olcConnMaxPendingAuth $ olcDisallows $ olcGentleHUP $ olcIdleTimeout $ o
 lcIndexSubstrIfMaxLen $ olcIndexSubstrIfMinLen $ olcIndexSubstrAnyLen $ olcIn
 dexSubstrAnyStep $ olcIndexIntLen $ olcLocalSSF $ olcLogFile $ olcLogLevel $ 
 olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPluginLogFile 
 $ olcReadOnly $ olcReferral $ olcReplogFile $ olcRequires $ olcRestrict $ olc
 ReverseLookup $ olcRootDSE $ olcSaslAuxprops $ olcSaslHost $ olcSaslRealm $ o
 lcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimit $ olcSockbufMaxInco
 ming $ olcSockbufMaxIncomingAuth $ olcTCPBuffer $ olcThreads $ olcTimeLimit $
  olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ 
 olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSRandFil
 e $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcTLSCRLFile $ olcToolThreads $
  olcWriteTimeout $ olcObjectIdentifier $ olcAttributeTypes $ olcObjectClasses
  $ olcDitContentRules $ olcLdapSyntaxes ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.2 NAME 'olcSchemaConfig' DESC 'Op
 enLDAP schema object' SUP olcConfig STRUCTURAL MAY ( cn $ olcObjectIdentifier
  $ olcLdapSyntaxes $ olcAttributeTypes $ olcObjectClasses $ olcDitContentRule
 s ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.3 NAME 'olcBackendConfig' DESC 'O
 penLDAP Backend-specific options' SUP olcConfig STRUCTURAL MUST olcBackend )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.4 NAME 'olcDatabaseConfig' DESC '
 OpenLDAP Database-specific options' SUP olcConfig STRUCTURAL MUST olcDatabase
  MAY ( olcHidden $ olcSuffix $ olcSubordinate $ olcAccess $ olcAddContentAcl 
 $ olcLastMod $ olcLimits $ olcMaxDerefDepth $ olcPlugin $ olcReadOnly $ olcRe
 plica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplicationInterval $ olc
 ReplogFile $ olcRequires $ olcRestrict $ olcRootDN $ olcRootPW $ olcSchemaDN 
 $ olcSecurity $ olcSizeLimit $ olcSyncUseSubentry $ olcSyncrepl $ olcTimeLimi
 t $ olcUpdateDN $ olcUpdateRef $ olcMirrorMode $ olcMonitoring $ olcExtraAttr
 s ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.5 NAME 'olcOverlayConfig' DESC 'O
 penLDAP Overlay-specific options' SUP olcConfig STRUCTURAL MUST olcOverlay )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.6 NAME 'olcIncludeFile' DESC 'Ope
 nLDAP configuration include file' SUP olcConfig STRUCTURAL MUST olcInclude MA
 Y ( cn $ olcRootDSE ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.7 NAME 'olcFrontendConfig' DESC '
 OpenLDAP frontend configuration' AUXILIARY MAY ( olcDefaultSearchBase $ olcPa
 sswordHash $ olcSortVals ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.0.8 NAME 'olcModuleList' DESC 'Open
 LDAP dynamic module info' SUP olcConfig STRUCTURAL MAY ( cn $ olcModulePath $
  olcModuleLoad ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.2.2.1 NAME 'olcLdifConfig' DESC 'LD
 IF backend configuration' SUP olcDatabaseConfig STRUCTURAL MUST olcDbDirector
 y )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.2.12.1 NAME 'olcMdbConfig' DESC 'MD
 B backend configuration' SUP olcDatabaseConfig STRUCTURAL MUST olcDbDirectory
  MAY ( olcDbCheckpoint $ olcDbNoSync $ olcDbIndex $ olcDbMaxReaders $ olcDbMa
 xsize $ olcDbMode $ olcDbSearchStack ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.2.1.2 NAME 'olcHdbConfig' DESC 'HDB
  backend configuration' SUP olcDatabaseConfig STRUCTURAL MUST olcDbDirectory 
 MAY ( olcDbCacheSize $ olcDbCheckpoint $ olcDbConfig $ olcDbCryptFile $ olcDb
 CryptKey $ olcDbNoSync $ olcDbDirtyRead $ olcDbIDLcacheSize $ olcDbIndex $ ol
 cDbLinearIndex $ olcDbLockDetect $ olcDbMode $ olcDbSearchStack $ olcDbShmKey
  $ olcDbCacheFree $ olcDbDNcacheSize $ olcDbPageSize ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.2.3.1 NAME 'olcLDAPConfig' DESC 'LD
 AP backend configuration' SUP olcDatabaseConfig STRUCTURAL MAY ( olcDbURI $ o
 lcDbStartTLS $ olcDbACLAuthcDn $ olcDbACLPasswd $ olcDbACLBind $ olcDbIDAsser
 tAuthcDn $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAssertMode $ olcD
 bIDAssertAuthzFrom $ olcDbIDAssertPassThru $ olcDbRebindAsUser $ olcDbChaseRe
 ferrals $ olcDbTFSupport $ olcDbProxyWhoAmI $ olcDbTimeout $ olcDbIdleTimeout
  $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbProtocolVersion $ olcDbSingleCon
 n $ olcDbCancel $ olcDbQuarantine $ olcDbUseTemporaryConn $ olcDbConnectionPo
 olMax $ olcDbSessionTrackingRequest $ olcDbNoRefs $ olcDbNoUndefFilter ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.3.1 NAME 'olcChainConfig' DESC 'C
 hain configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcChainingBehavior
  $ olcChainCacheURI $ olcChainMaxReferralDepth $ olcChainReturnError ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.3.2 NAME 'olcChainDatabase' DESC 
 'Chain remote server configuration' AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.3.3 NAME 'olcPBindConfig' DESC 'P
 roxy Bind configuration' SUP olcOverlayConfig STRUCTURAL MUST olcDbURI MAY ( 
 olcDbStartTLS $ olcDbNetworkTimeout $ olcDbQuarantine ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.7.1 NAME 'olcDistProcConfig' DESC
  'Distributed procedures <draft-sermersheim-ldap-distproc> configuration' SUP
  olcOverlayConfig STRUCTURAL MAY ( olcChainingBehavior $ olcChainCacheURI ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.7.2 NAME 'olcDistProcDatabase' DE
 SC 'Distributed procedure remote server configuration' AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.1 NAME 'monitor' DESC 'OpenLDAP sys
 tem monitoring' SUP top STRUCTURAL MUST cn MAY ( description $ seeAlso $ labe
 ledURI $ monitoredInfo $ managedInfo $ monitorOverlay ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.2 NAME 'monitorServer' DESC 'Server
  monitoring root entry' SUP monitor STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.3 NAME 'monitorContainer' DESC 'mon
 itor container class' SUP monitor STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.4 NAME 'monitorCounterObject' DESC 
 'monitor counter class' SUP monitor STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.5 NAME 'monitorOperation' DESC 'mon
 itor operation class' SUP monitor STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.6 NAME 'monitorConnection' DESC 'mo
 nitor connection class' SUP monitor STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.7 NAME 'managedObject' DESC 'monito
 r managed entity class' SUP monitor STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.8 NAME 'monitoredObject' DESC 'moni
 tor monitored entity class' SUP monitor STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.2.4.1 NAME 'olcMonitorConfig' DESC 
 'Monitor backend configuration' SUP olcDatabaseConfig STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.15.1 NAME 'olcAuditlogConfig' DES
 C 'Auditlog configuration' SUP olcOverlayConfig STRUCTURAL MAY olcAuditlogFil
 e )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.4.1 NAME 'olcAccessLogConfig' DES
 C 'Access log configuration' SUP olcOverlayConfig STRUCTURAL MUST olcAccessLo
 gDB MAY ( olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogSuccess $ olcAcce
 ssLogOld $ olcAccessLogOldAttr $ olcAccessLogBase ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.0 NAME 'auditContainer' DESC 'Aud
 itLog container' SUP top STRUCTURAL MAY ( cn $ reqStart $ reqEnd ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.1 NAME 'auditObject' DESC 'OpenLD
 AP request auditing' SUP top STRUCTURAL MUST ( reqStart $ reqType $ reqSessio
 n ) MAY ( reqDN $ reqAuthzID $ reqControls $ reqRespControls $ reqEnd $ reqRe
 sult $ reqMessage $ reqReferral $ reqEntryUUID ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.2 NAME 'auditReadObject' DESC 'Op
 enLDAP read request record' SUP auditObject STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.3 NAME 'auditWriteObject' DESC 'O
 penLDAP write request record' SUP auditObject STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.4 NAME 'auditAbandon' DESC 'Aband
 on operation' SUP auditObject STRUCTURAL MUST reqId )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.5 NAME 'auditAdd' DESC 'Add opera
 tion' SUP auditWriteObject STRUCTURAL MUST reqMod )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.6 NAME 'auditBind' DESC 'Bind ope
 ration' SUP auditObject STRUCTURAL MUST ( reqVersion $ reqMethod ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.7 NAME 'auditCompare' DESC 'Compa
 re operation' SUP auditReadObject STRUCTURAL MUST reqAssertion )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.8 NAME 'auditDelete' DESC 'Delete
  operation' SUP auditWriteObject STRUCTURAL MAY reqOld )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.9 NAME 'auditModify' DESC 'Modify
  operation' SUP auditWriteObject STRUCTURAL MUST reqMod MAY reqOld )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.10 NAME 'auditModRDN' DESC 'ModRD
 N operation' SUP auditWriteObject STRUCTURAL MUST ( reqNewRDN $ reqDeleteOldR
 DN ) MAY ( reqNewSuperior $ reqMod $ reqOld ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.11 NAME 'auditSearch' DESC 'Searc
 h operation' SUP auditReadObject STRUCTURAL MUST ( reqScope $ reqDerefAliases
  $ reqAttrsonly ) MAY ( reqFilter $ reqAttr $ reqEntries $ reqSizeLimit $ req
 TimeLimit ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.5.2.12 NAME 'auditExtended' DESC 'Ext
 ended operation' SUP auditObject STRUCTURAL MAY reqData )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.8.1 NAME 'olcDynamicList' DESC 'D
 ynamic list configuration' SUP olcOverlayConfig STRUCTURAL MAY olcDLattrSet )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.11.1 NAME 'olcRefintConfig' DESC 
 'Referential integrity configuration' SUP olcOverlayConfig STRUCTURAL MAY ( o
 lcRefintAttribute $ olcRefintNothing $ olcRefintModifiersName ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.18.1 NAME 'olcMemberOf' DESC 'Mem
 ber-of configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcMemberOfDN $ o
 lcMemberOfDangling $ olcMemberOfDanglingError $ olcMemberOfRefInt $ olcMember
 OfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMemberOfAD ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.4.3.0 NAME 'errAbsObject' SUP top ABS
 TRACT MUST errCode MAY ( cn $ description $ errOp $ errText $ errSleepTime $ 
 errMatchedDN $ errUnsolicitedOID $ errUnsolicitedData $ errDisconnect ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.4.3.1 NAME 'errObject' SUP errAbsObje
 ct STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.4.3.2 NAME 'errAuxObject' SUP errAbsO
 bject AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.20.1 NAME 'olcRetcodeConfig' DESC
  'Retcode configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcRetcodePare
 nt $ olcRetcodeItem $ olcRetcodeInDir $ olcRetcodeSleep ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.1.1 NAME 'olcSyncProvConfig' DESC
  'SyncRepl Provider configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcS
 pCheckpoint $ olcSpSessionlog $ olcSpNoPresent $ olcSpReloadHint ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.14.1 NAME 'olcTranslucentConfig' 
 DESC 'Translucent configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcTra
 nslucentStrict $ olcTranslucentNoGlue $ olcTranslucentLocal $ olcTranslucentR
 emote $ olcTranslucentBindLocal $ olcTranslucentPwModLocal ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.14.2 NAME 'olcTranslucentDatabase
 ' DESC 'Translucent target database configuration' AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.10.1 NAME 'olcUniqueConfig' DESC 
 'Attribute value uniqueness configuration' SUP olcOverlayConfig STRUCTURAL MA
 Y ( olcUniqueBase $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueStrict $ 
 olcUniqueURI ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.5.1 NAME 'olcValSortConfig' DESC 
 'Value Sorting configuration' SUP olcOverlayConfig STRUCTURAL MUST olcValSort
 Attr )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.21.1 NAME 'olcSssVlvConfig' DESC 
 'SSS VLV configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcSssVlvMax $ 
 olcSssVlvMaxKeys ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.12.1 NAME 'olcPPolicyConfig' DESC
  'Password Policy configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcPPo
 licyDefault $ olcPPolicyHashCleartext $ olcPPolicyUseLockout $ olcPPolicyForw
 ardUpdates ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.3.9.1 NAME 'olcDDSConfig' DESC 'RFC
 2589 Dynamic directory services configuration' SUP olcOverlayConfig STRUCTURA
 L MAY ( olcDDSstate $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ olcDDS
 interval $ olcDDStolerance $ olcDDSmaxDynamicObjects ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.5.1 NAME 'olcLastBindConfig' DESC '
 Last Bind configuration' SUP olcOverlayConfig STRUCTURAL MAY olcLastBindPreci
 sion )
objectClasses: ( 1.3.6.1.4.1.4203.1.12.2.4.4.1.1 NAME 'olcSmbK5PwdConfig' DESC
  'smbk5pwd overlay configuration' SUP olcOverlayConfig STRUCTURAL MAY ( olcSm
 bK5PwdEnable $ olcSmbK5PwdMustChange $ olcSmbK5PwdCanChange ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.0.1.1.2 NAME 'olmMDBDatabase' SUP t
 op AUXILIARY MAY olmDbDirectory )
objectClasses: ( 1.3.6.1.4.1.4203.666.3.16.0.1.2.1 NAME 'olmLDAPDatabase' SUP 
 top AUXILIARY MAY olmDbURIList )
objectClasses: ( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP top STRU
 CTURAL MUST c MAY ( searchGuide $ description ) )
objectClasses: ( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SUP top ST
 RUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ description ) )
objectClasses: ( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an organization' S
 UP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ busines
 sCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferre
 dDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $
  internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox 
 $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ descript
 ion ) )
objectClasses: ( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an organizat
 ional unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide $ see
 Also $ businessCategory $ x121Address $ registeredAddress $ destinationIndica
 tor $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ tel
 ephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ 
 postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st 
 $ l $ description ) )
objectClasses: ( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top STRUCT
 URAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ descri
 ption ) )
objectClasses: ( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an organiz
 ational person' SUP person STRUCTURAL MAY ( title $ x121Address $ registeredA
 ddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ telet
 exTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileT
 elephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physic
 alDeliveryOfficeName $ ou $ st $ l ) )
objectClasses: ( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an organizat
 ional role' SUP top STRUCTURAL MUST cn MAY ( x121Address $ registeredAddress 
 $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTermi
 nalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephon
 eNumber $ seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ postOff
 iceBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ 
 l $ description ) )
objectClasses: ( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of names (
 DNs)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $ seeAls
 o $ owner $ ou $ o $ description ) )
objectClasses: ( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an residenti
 al person' SUP person STRUCTURAL MUST l MAY ( businessCategory $ x121Address 
 $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexN
 umber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber
  $ facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ postOfficeBo
 x $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l ) )
objectClasses: ( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an applicat
 ion process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ description 
 ) )
objectClasses: ( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an applicati
 on entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY ( support
 edApplicationContext $ seeAlso $ ou $ o $ l $ description ) )
objectClasses: ( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory system agent (
 a server)' SUP applicationEntity STRUCTURAL MAY knowledgeInformation )
objectClasses: ( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP top STRUC
 TURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description
  ) )
objectClasses: ( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC2256: a str
 ong authentication user' SUP top AUXILIARY MUST userCertificate )
objectClasses: ( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256: a certi
 ficate authority' SUP top AUXILIARY MUST ( authorityRevocationList $ certific
 ateRevocationList $ cACertificate ) MAY crossCertificatePair )
objectClasses: ( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a group of 
 unique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST ( uniqueMemb
 er $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )
objectClasses: ( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC2256: a user
  security information' SUP top AUXILIARY MAY supportedAlgorithms )
objectClasses: ( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP certification
 Authority AUXILIARY MAY deltaRevocationList )
objectClasses: ( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTURAL MUST 
 cn MAY ( certificateRevocationList $ authorityRevocationList $ deltaRevocatio
 nList ) )
objectClasses: ( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST dmdName MAY ( use
 rPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ register
 edAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ te
 letexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimi
 leTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ phy
 sicalDeliveryOfficeName $ st $ l $ description ) )
objectClasses: ( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' SUP top AU
 XILIARY MAY userCertificate )
objectClasses: ( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate authorit
 y' SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRevocationLis
 t $ cACertificate $ crossCertificatePair ) )
objectClasses: ( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SUP top AUX
 ILIARY MAY deltaRevocationList )
objectClasses: ( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' DESC 'RFC2079: o
 bject that contains the URI attribute type' SUP top AUXILIARY MAY labeledURI 
 )
objectClasses: ( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject' DESC '
 RFC1274: simple security object' SUP top AUXILIARY MUST userPassword )
objectClasses: ( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247: domain co
 mponent object' SUP top AUXILIARY MUST dc )
objectClasses: ( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid object' SUP
  top AUXILIARY MUST uid )
objectClasses: ( 0.9.2342.19200300.100.4.4 NAME ( 'pilotPerson' 'newPilotPerso
 n' ) SUP person STRUCTURAL MAY ( userid $ textEncodedORAddress $ rfc822Mailbo
 x $ favouriteDrink $ roomNumber $ userClass $ homeTelephoneNumber $ homePosta
 lAddress $ secretary $ personalTitle $ preferredDeliveryMethod $ businessCate
 gory $ janetMailbox $ otherMailbox $ mobileTelephoneNumber $ pagerTelephoneNu
 mber $ organizationalStatus $ mailPreferenceOption $ personalSignature ) )
objectClasses: ( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top STRUCTURAL M
 UST userid MAY ( description $ seeAlso $ localityName $ organizationName $ or
 ganizationalUnitName $ host ) )
objectClasses: ( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top STRUCTURAL 
 MUST documentIdentifier MAY ( commonName $ description $ seeAlso $ localityNa
 me $ organizationName $ organizationalUnitName $ documentTitle $ documentVers
 ion $ documentAuthor $ documentLocation $ documentPublisher ) )
objectClasses: ( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top STRUCTURAL MUST
  commonName MAY ( roomNumber $ description $ seeAlso $ telephoneNumber ) )
objectClasses: ( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP top STRUC
 TURAL MUST commonName MAY ( description $ seeAlso $ telephonenumber $ localit
 yName $ organizationName $ organizationalUnitName ) )
objectClasses: ( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top STRUCTURAL M
 UST domainComponent MAY ( associatedName $ organizationName $ description $ b
 usinessCategory $ seeAlso $ searchGuide $ userPassword $ localityName $ state
 OrProvinceName $ streetAddress $ physicalDeliveryOfficeName $ postalAddress $
  postalCode $ postOfficeBox $ streetAddress $ facsimileTelephoneNumber $ inte
 rnationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $ telexNumb
 er $ preferredDeliveryMethod $ destinationIndicator $ registeredAddress $ x12
 1Address ) )
objectClasses: ( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP domain 
 STRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $ telephoneNumb
 er $ physicalDeliveryOfficeName $ postalAddress $ postalCode $ postOfficeBox 
 $ streetAddress $ facsimileTelephoneNumber $ internationalISDNNumber $ teleph
 oneNumber $ teletexTerminalIdentifier $ telexNumber $ preferredDeliveryMethod
  $ destinationIndicator $ registeredAddress $ x121Address ) )
objectClasses: ( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP domain STRUCT
 URAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $ CNAMERecord
  ) )
objectClasses: ( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject' DESC 'R
 FC1274: an object related to an domain' SUP top AUXILIARY MUST associatedDoma
 in )
objectClasses: ( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP country
  STRUCTURAL MUST friendlyCountryName )
objectClasses: ( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SUP ( org
 anization $ organizationalUnit ) STRUCTURAL MAY buildingName )
objectClasses: ( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa STRUCTURAL
  MAY dSAQuality )
objectClasses: ( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData' SUP top
  AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $ subtreeMaximumQualit
 y ) )
objectClasses: ( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC 'RFC2798: I
 nternet Organizational Person' SUP organizationalPerson STRUCTURAL MAY ( audi
 o $ businessCategory $ carLicense $ departmentNumber $ displayName $ employee
 Number $ employeeType $ givenName $ homePhone $ homePostalAddress $ initials 
 $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $ photo $ room
 Number $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $ preferred
 Language $ userSMIMECertificate $ userPKCS12 ) )
objectClasses: ( 2.16.840.1.113730.3.2.147 NAME 'inetLocalMailRecipient' DESC 
 'Internet local mail recipient' SUP top AUXILIARY MAY ( mailLocalAddress $ ma
 ilHost $ mailRoutingAddress ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.1.2.5 NAME 'nisMailAlias' DESC 'NIS mail 
 alias' SUP top STRUCTURAL MUST cn MAY rfc822MailMember )
objectClasses: ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC 'Abstraction of an a
 ccount with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $ uidNumber $
  gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $ gecos $ descri
 ption ) )
objectClasses: ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC 'Additional attribu
 tes for shadow passwords' SUP top AUXILIARY MUST uid MAY ( userPassword $ sha
 dowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shad
 owExpire $ shadowFlag $ description ) )
objectClasses: ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' DESC 'Abstraction of a grou
 p of accounts' SUP top STRUCTURAL MUST ( cn $ gidNumber ) MAY ( userPassword 
 $ memberUid $ description ) )
objectClasses: ( 1.3.6.1.1.1.2.3 NAME 'ipService' DESC 'Abstraction an Interne
 t Protocol service' SUP top STRUCTURAL MUST ( cn $ ipServicePort $ ipServiceP
 rotocol ) MAY description )
objectClasses: ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' DESC 'Abstraction of an IP 
 protocol' SUP top STRUCTURAL MUST ( cn $ ipProtocolNumber $ description ) MAY
  description )
objectClasses: ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' DESC 'Abstraction of an ONC/RPC
  binding' SUP top STRUCTURAL MUST ( cn $ oncRpcNumber $ description ) MAY des
 cription )
objectClasses: ( 1.3.6.1.1.1.2.6 NAME 'ipHost' DESC 'Abstraction of a host, an
  IP device' SUP top AUXILIARY MUST ( cn $ ipHostNumber ) MAY ( l $ descriptio
 n $ manager ) )
objectClasses: ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' DESC 'Abstraction of an IP n
 etwork' SUP top STRUCTURAL MUST ( cn $ ipNetworkNumber ) MAY ( ipNetmaskNumbe
 r $ l $ description $ manager ) )
objectClasses: ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' DESC 'Abstraction of a net
 group' SUP top STRUCTURAL MUST cn MAY ( nisNetgroupTriple $ memberNisNetgroup
  $ description ) )
objectClasses: ( 1.3.6.1.1.1.2.9 NAME 'nisMap' DESC 'A generic abstraction of 
 a NIS map' SUP top STRUCTURAL MUST nisMapName MAY description )
objectClasses: ( 1.3.6.1.1.1.2.10 NAME 'nisObject' DESC 'An entry in a NIS map
 ' SUP top STRUCTURAL MUST ( cn $ nisMapEntry $ nisMapName ) MAY description )
objectClasses: ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' DESC 'A device with a M
 AC address' SUP top AUXILIARY MAY macAddress )
objectClasses: ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' DESC 'A device with bo
 ot parameters' SUP top AUXILIARY MAY ( bootFile $ bootParameter ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.1 NAME 'javaContainer' DESC 'Containe
 r for a Java object' SUP top STRUCTURAL MUST cn )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.4 NAME 'javaObject' DESC 'Java object
  representation' SUP top ABSTRACT MUST javaClassName MAY ( javaClassNames $ j
 avaCodebase $ javaDoc $ description ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.5 NAME 'javaSerializedObject' DESC 'J
 ava serialized object' SUP javaObject AUXILIARY MUST javaSerializedData )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.8 NAME 'javaMarshalledObject' DESC 'J
 ava marshalled object' SUP javaObject AUXILIARY MUST javaSerializedData )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.7 NAME 'javaNamingReference' DESC 'JN
 DI reference' SUP javaObject AUXILIARY MAY ( javaReferenceAddress $ javaFacto
 ry ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.10 NAME 'corbaContainer' DESC 'Contai
 ner for a CORBA object' SUP top STRUCTURAL MUST cn )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.9 NAME 'corbaObject' DESC 'CORBA obje
 ct representation' SUP top ABSTRACT MAY ( corbaRepositoryId $ description ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.4.2.11 NAME 'corbaObjectReference' DESC '
 CORBA interoperable object reference' SUP corbaObject AUXILIARY MUST corbaIor
  )
objectClasses: ( 2.16.840.1.113730.3.2.33 NAME 'groupOfURLs' SUP top STRUCTURA
 L MUST cn MAY ( memberURL $ businessCategory $ description $ o $ ou $ owner $
  seeAlso ) )
objectClasses: ( 1.3.6.1.4.1.4203.666.11.8.2.1 NAME 'dgIdentityAux' SUP top AU
 XILIARY MAY ( dgIdentity $ dgAuthz ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.4.3 NAME 'OpenLDAPorg' DESC 'OpenLDAP Orga
 nizational Object' SUP organization STRUCTURAL MAY ( buildingName $ displayNa
 me $ labeledURI ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.4.4 NAME 'OpenLDAPou' DESC 'OpenLDAP Organ
 izational Unit Object' SUP organizationalUnit STRUCTURAL MAY ( buildingName $
  displayName $ labeledURI $ o ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.4.5 NAME 'OpenLDAPperson' DESC 'OpenLDAP P
 erson' SUP ( pilotPerson $ inetOrgPerson ) STRUCTURAL MUST ( uid $ cn ) MAY (
  givenName $ labeledURI $ o ) )
objectClasses: ( 1.3.6.1.4.1.4203.1.4.6 NAME 'OpenLDAPdisplayableObject' DESC 
 'OpenLDAP Displayable Object' AUXILIARY MAY displayName )
objectClasses: ( 1.3.6.1.4.1.4754.2.99.1 NAME 'pwdPolicyChecker' SUP top AUXIL
 IARY MAY pwdCheckModule )
objectClasses: ( 1.3.6.1.4.1.42.2.27.8.2.1 NAME 'pwdPolicy' SUP top AUXILIARY 
 MUST pwdAttribute MAY ( pwdMinAge $ pwdMaxAge $ pwdInHistory $ pwdCheckQualit
 y $ pwdMinLength $ pwdExpireWarning $ pwdGraceAuthNLimit $ pwdLockout $ pwdLo
 ckoutDuration $ pwdMaxFailure $ pwdFailureCountInterval $ pwdMustChange $ pwd
 AllowUserChange $ pwdSafeModify ) )
objectClasses: ( 2.5.6.24 NAME 'pmiUser' DESC 'X.509 PMI user object class' SU
 P top AUXILIARY MAY attributeCertificateAttribute )
objectClasses: ( 2.5.6.25 NAME 'pmiAA' DESC 'X.509 PMI AA object class' SUP to
 p AUXILIARY MAY ( aACertificate $ attributeCertificateRevocationList $ attrib
 uteAuthorityRevocationList ) )
objectClasses: ( 2.5.6.26 NAME 'pmiSOA' DESC 'X.509 PMI SOA object class' SUP 
 top AUXILIARY MAY ( attributeCertificateRevocationList $ attributeAuthorityRe
 vocationList $ attributeDescriptorCertificate ) )
objectClasses: ( 2.5.6.27 NAME 'attCertCRLDistributionPt' DESC 'X.509 Attribut
 e certificate CRL distribution point object class' SUP top AUXILIARY MAY ( at
 tributeCertificateRevocationList $ attributeAuthorityRevocationList ) )
objectClasses: ( 2.5.6.33 NAME 'pmiDelegationPath' DESC 'X.509 PMI delegation 
 path' SUP top AUXILIARY MAY delegationPath )
objectClasses: ( 2.5.6.32 NAME 'privilegePolicy' DESC 'X.509 Privilege policy 
 object class' SUP top AUXILIARY MAY privPolicy )
objectClasses: ( 2.5.6.34 NAME 'protectedPrivilegePolicy' DESC 'X.509 Protecte
 d privilege policy object class' SUP top AUXILIARY MAY protPrivPolicy )
objectClasses: ( 1.3.6.1.4.1.11.1.3.1.2.5 NAME 'DUAConfigProfile' DESC 'Abstra
 ction of a base configuration for a DUA' SUP top STRUCTURAL MUST cn MAY ( def
 aultServerList $ preferredServerList $ defaultSearchBase $ defaultSearchScope
  $ searchTimeLimit $ bindTimeLimit $ credentialLevel $ authenticationMethod $
  followReferrals $ dereferenceAliases $ serviceSearchDescriptor $ serviceCred
 entialLevel $ serviceAuthenticationMethod $ objectclassMap $ attributeMap $ p
 rofileTTL ) )
objectClasses: ( 1.2.840.113533.7.67.9 NAME 'emailAddressUser' SUP top AUXILIA
 RY MAY email )
objectClasses: ( 1.2.840.113533.7.67.1 NAME 'entrustCA' SUP top AUXILIARY MAY 
 ( cACertificate $ certificateRevocationList $ authorityRevocationList $ delta
 RevocationList $ crossCertificatePair $ userPassword $ attributeCertificate )
  )
objectClasses: ( 1.2.840.113533.7.67.14 NAME 'entrustDNQualifierUser' SUP top 
 AUXILIARY MAY dnQualifier )
objectClasses: ( 1.2.840.113533.7.67.15 NAME 'entrustNamedObject' SUP top AUXI
 LIARY MAY ( name $ cn $ sn $ givenName $ initials $ generationQualifier $ c $
  l $ st $ o $ ou $ title ) )
objectClasses: ( 1.2.840.113533.7.67.17 NAME 'entrustPolicyObject' SUP top AUX
 ILIARY MAY entrustPolicyCertificate )
objectClasses: ( 1.2.840.113533.7.67.13 NAME 'entrustRoamingUser' SUP top AUXI
 LIARY MAY ( entrustRoamFileEncInfo $ entrustRoamingProfile $ entrustRoamingPA
 B $ entrustRoamingRecipList $ entrustRoamingSLA $ entrustRoamingPRV $ entrust
 RoamingEOP $ entrustRoamingCAPAB $ uid ) )
objectClasses: ( 1.2.840.113533.7.67.0 NAME 'entrustUser' SUP top AUXILIARY MA
 Y userCertificate )
objectClasses: ( 1.2.840.113533.7.67.18 NAME 'entrustRoamingDataUser' SUP top 
 AUXILIARY MAY ( entrustRoamFileEncInfo $ entrustRoamingProfile $ entrustRoami
 ngPAB $ entrustRoamingRecipList $ entrustRoamingSLA $ entrustRoamingPRV $ ent
 rustRoamingEOP $ entrustRoamingCAPAB $ entrustRoamingID ) )
objectClasses: ( 1.3.6.1.4.1.5923.1.1.2 NAME 'eduPerson' AUXILIARY MAY ( eduPe
 rsonAffiliation $ eduPersonNickname $ eduPersonOrgDN $ eduPersonOrgUnitDN $ e
 duPersonPrimaryAffiliation $ eduPersonPrincipalName $ eduPersonEntitlement $ 
 eduPersonPrimaryOrgUnitDN $ eduPersonScopedAffiliation ) )
objectClasses: ( 1.3.6.1.4.1.5923.1.2.2 NAME 'eduOrg' AUXILIARY MAY ( cn $ edu
 OrgHomePageURI $ eduOrgIdentityAuthNPolicyURI $ eduOrgLegalName $ eduOrgSuper
 iorURI $ eduOrgWhitePagesURI ) )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.1 NAME 'schacPersonalCharacteristics' D
 ESC 'Personal characteristics describe the individual person represented by t
 he entry' AUXILIARY MAY ( schacMotherTongue $ schacGender $ schacDateOfBirth 
 $ schacPlaceOfBirth $ schacCountryOfCitizenship $ schacSn1 $ schacSn2 $ schac
 PersonalTitle ) )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.2 NAME 'schacContactLocation' DESC 'Pri
 mary means of locating and contacting potential collaborators and other perso
 ns-of-interest at peer institutions' AUXILIARY MAY ( schacHomeOrganization $ 
 schacHomeOrganizationType $ schacCountryOfResidence $ schacUserPresenceID ) )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.3 NAME 'schacEmployeeInfo' DESC 'Employ
 ee information includes attributes that have relevance to the employee role, 
 such as position, office hours, and job title' AUXILIARY MAY schacPersonalPos
 ition )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.4 NAME 'schacLinkageIdentifiers' DESC '
 Used to link a directory entry with records in external data stores or other 
 directory entries' AUXILIARY MAY ( schacPersonalUniqueCode $ schacPersonalUni
 queID ) )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.5 NAME 'schacEntryMetadata' DESC 'Used 
 to contain information about the entry itself, often its status, birth, and d
 eath' AUXILIARY MAY schacExpiryDate )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.6 NAME 'schacEntryConfidentiality' DESC
  'Used to indicate whether an entry is visible publicly, visible only to affi
 liates of the institution, or not visible at all' AUXILIARY MAY schacUserPriv
 ateAttribute )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.7 NAME 'schacUserEntitlements' DESC 'Au
 thorization for services' AUXILIARY MAY schacUserStatus )
objectClasses: ( 1.3.6.1.4.1.25178.1.1.8 NAME 'schacGroupMembership' DESC 'Gro
 ups used to provide/restrict authorization to entries and attributes' AUXILIA
 RY MAY ( schacProjectMembership $ schacProjectSpecificRole ) )
objectClasses: ( 1.3.6.1.4.1.25178.1.0.1.1 NAME 'schacExperimentalOC' DESC 'Ex
 perimental Object Class' AUXILIARY MAY schacYearOfBirth )
objectClasses: ( 1.3.6.1.4.1.2428.20.2 NAME 'dNSDomain2' SUP dNSDomain STRUCTU
 RAL MAY ( DNSTTL $ DNSClass $ PTRRecord $ HINFORecord $ MINFORecord $ TXTReco
 rd $ SIGRecord $ KEYRecord $ AAAARecord $ LOCRecord $ NXTRecord $ SRVRecord $
  NAPTRRecord $ KXRecord $ CERTRecord $ A6Record $ DNAMERecord ) )
objectClasses: ( 1.3.6.1.1.1.2.14 NAME 'NisKeyObject' DESC 'NisKeyObject' SUP 
 top STRUCTURAL MUST ( cn $ nisPublickey $ nisSecretkey ) MAY ( uidNumber $ de
 scription ) )
objectClasses: ( 1.3.1.6.1.1.1.2.15 NAME 'nisDomainObject' DESC 'nisDomainObje
 ct' SUP top AUXILIARY MUST nisDomain )
objectClasses: ( 2.16.840.1.113730.3.2.4 NAME 'mailGroup' DESC 'mailGroup' SUP
  top STRUCTURAL MUST mail MAY ( cn $ mgrpRFC822MailMember ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.1.2.6 NAME 'nisNetId' DESC 'nisNetId' SUP
  top STRUCTURAL MUST cn MAY ( nisNetIdUser $ nisNetIdGroup $ nisNetIdHost ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.5.2.7 NAME 'SolarisNamingProfile' DESC 'S
 olaris LDAP NSS Profile' SUP top AUXILIARY MUST ( cn $ SolarisLDAPServers ) M
 AY ( SolarisBindDN $ SolarisBindPassword $ SolarisSearchBaseDN $ SolarisAuthM
 ethod $ SolarisTransportSecurity $ SolarisSearchReferral $ SolarisDataSearchD
 N $ SolarisSearchScope $ SolarisSearchTimeLimit $ SolarisCacheTTL ) )
objectClasses: ( 1.3.6.1.4.1.1466.154.151.160.1 NAME 'liPerson' SUP person STR
 UCTURAL MAY ( rfc822Mailbox $ userCertificate $ labeledURI $ givenName $ gene
 rationQualifier $ o $ l $ c $ personalTitle $ initials $ middleName $ uniqueI
 dentifier $ homeTelephoneNumber $ homeFax $ homePostalAddress $ thumbnailPhot
 o $ title $ facsimileTelephoneNumber $ mobileTelephoneNumber $ pagerTelephone
 Number $ postalAddress $ ou $ roomNumber $ otherMailbox $ telexNumber $ thumb
 nailLogo $ secretary $ manager $ description $ telephoneNumber $ userPassword
  ) )
objectClasses: ( 1.3.6.1.4.1.1466.154.151.160.2 NAME 'liOrganization' SUP orga
 nization STRUCTURAL MAY ( rfc822Mailbox $ labeledURI $ c $ uniqueIdentifier $
  otherMailbox $ thumbnailLogo $ manager ) )
objectClasses: ( 1.3.6.1.4.1.13769.2.2.1 NAME 'mozillaAbPersonObsolete' SUP in
 etOrgPerson STRUCTURAL MAY ( mozillaNickname $ mozillaUseHtmlMail $ mozillaSe
 condEmail $ mozillaPostalAddress2 $ mozillaHomePostalAddress2 $ mozillaHomeLo
 calityName $ mozillaHomeState $ mozillaHomePostalCode $ mozillaHomeCountryNam
 e $ mozillaHomeFriendlyCountryName $ mozillaHomeUrl $ mozillaWorkUrl $ mozill
 aCustom1 $ mozillaCustom2 $ mozillaCustom3 $ mozillaCustom4 $ nsAIMid $ c $ c
 o ) )
objectClasses: ( 1.3.6.1.4.1.3317.4.3.2.1 NAME 'radiusprofile' DESC '' SUP top
  AUXILIARY MUST cn MAY ( radiusArapFeatures $ radiusArapSecurity $ radiusArap
 ZoneAccess $ radiusAuthType $ radiusCallbackId $ radiusCallbackNumber $ radiu
 sCalledStationId $ radiusCallingStationId $ radiusClass $ radiusClientIPAddre
 ss $ radiusFilterId $ radiusFramedAppleTalkLink $ radiusFramedAppleTalkNetwor
 k $ radiusFramedAppleTalkZone $ radiusFramedCompression $ radiusFramedIPAddre
 ss $ radiusFramedIPNetmask $ radiusFramedIPXNetwork $ radiusFramedMTU $ radiu
 sFramedProtocol $ radiusCheckItem $ radiusReplyItem $ radiusFramedRoute $ rad
 iusFramedRouting $ radiusIdleTimeout $ radiusGroupName $ radiusHint $ radiusH
 untgroupName $ radiusLoginIPHost $ radiusLoginLATGroup $ radiusLoginLATNode $
  radiusLoginLATPort $ radiusLoginLATService $ radiusLoginService $ radiusLogi
 nTCPPort $ radiusLoginTime $ radiusPasswordRetry $ radiusPortLimit $ radiusPr
 ompt $ radiusProxyToRealm $ radiusRealm $ radiusReplicateToRealm $ radiusServ
 iceType $ radiusSessionTimeout $ radiusStripUserName $ radiusTerminationActio
 n $ radiusTunnelClientEndpoint $ radiusProfileDn $ radiusSimultaneousUse $ ra
 diusTunnelAssignmentId $ radiusTunnelMediumType $ radiusTunnelPassword $ radi
 usTunnelPreference $ radiusTunnelPrivateGroupId $ radiusTunnelServerEndpoint 
 $ radiusTunnelType $ radiusUserCategory $ radiusVSA $ radiusExpiration $ dial
 upAccess ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.6 NAME 'sambaSamAccount' DESC 'Samba 3.0
  Auxilary SAM Account' SUP top AUXILIARY MUST ( uid $ sambaSID ) MAY ( cn $ s
 ambaLMPassword $ sambaNTPassword $ sambaPwdLastSet $ sambaLogonTime $ sambaLo
 goffTime $ sambaKickoffTime $ sambaPwdCanChange $ sambaPwdMustChange $ sambaA
 cctFlags $ displayName $ sambaHomePath $ sambaHomeDrive $ sambaLogonScript $ 
 sambaProfilePath $ description $ sambaUserWorkstations $ sambaPrimaryGroupSID
  $ sambaDomainName $ sambaMungedDial $ sambaBadPasswordCount $ sambaBadPasswo
 rdTime $ sambaPasswordHistory $ sambaLogonHours ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.4 NAME 'sambaGroupMapping' DESC 'Samba G
 roup Mapping' SUP top AUXILIARY MUST ( gidNumber $ sambaSID $ sambaGroupType 
 ) MAY ( displayName $ description $ sambaSIDList ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.14 NAME 'sambaTrustPassword' DESC 'Samba
  Trust Password' SUP top STRUCTURAL MUST ( sambaDomainName $ sambaNTPassword 
 $ sambaTrustFlags ) MAY ( sambaSID $ sambaPwdLastSet ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.15 NAME 'sambaTrustedDomainPassword' DES
 C 'Samba Trusted Domain Password' SUP top STRUCTURAL MUST ( sambaDomainName $
  sambaSID $ sambaClearTextPassword $ sambaPwdLastSet ) MAY sambaPreviousClear
 TextPassword )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.5 NAME 'sambaDomain' DESC 'Samba Domain 
 Information' SUP top STRUCTURAL MUST ( sambaDomainName $ sambaSID ) MAY ( sam
 baNextRid $ sambaNextGroupRid $ sambaNextUserRid $ sambaAlgorithmicRidBase $ 
 sambaMinPwdLength $ sambaPwdHistoryLength $ sambaLogonToChgPwd $ sambaMaxPwdA
 ge $ sambaMinPwdAge $ sambaLockoutDuration $ sambaLockoutObservationWindow $ 
 sambaLockoutThreshold $ sambaForceLogoff $ sambaRefuseMachinePwdChange ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.7 NAME 'sambaUnixIdPool' DESC 'Pool for 
 allocating UNIX uids/gids' SUP top AUXILIARY MUST ( uidNumber $ gidNumber ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.8 NAME 'sambaIdmapEntry' DESC 'Mapping f
 rom a SID to an ID' SUP top AUXILIARY MUST sambaSID MAY ( uidNumber $ gidNumb
 er ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.9 NAME 'sambaSidEntry' DESC 'Structural 
 Class for a SID' SUP top STRUCTURAL MUST sambaSID )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.10 NAME 'sambaConfig' DESC 'Samba Config
 uration Section' SUP top AUXILIARY MAY description )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.11 NAME 'sambaShare' DESC 'Samba Share S
 ection' SUP top STRUCTURAL MUST sambaShareName MAY description )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.12 NAME 'sambaConfigOption' DESC 'Samba 
 Configuration Option' SUP top STRUCTURAL MUST sambaOptionName MAY ( sambaBool
 Option $ sambaIntegerOption $ sambaStringOption $ sambaStringListoption $ des
 cription ) )
objectClasses: ( 1.3.6.1.4.1.7165.2.2.16 NAME 'sambaTrustedDomain' DESC 'Samba
  Trusted Domain Object' SUP top STRUCTURAL MUST cn MAY ( sambaTrustType $ sam
 baTrustAttributes $ sambaTrustDirection $ sambaTrustPartner $ sambaFlatName $
  sambaTrustAuthOutgoing $ sambaTrustAuthIncoming $ sambaSecurityIdentifier $ 
 sambaTrustForestTrustInfo $ sambaTrustPosixOffset $ sambaSupportedEncryptionT
 ypes ) )
objectClasses: ( 1.3.6.1.4.1.5322.10.2.1 NAME 'krb5Principal' SUP top AUXILIAR
 Y MUST krb5PrincipalName MAY ( cn $ krb5PrincipalRealm ) )
objectClasses: ( 1.3.6.1.4.1.5322.10.2.2 NAME 'krb5KDCEntry' SUP krb5Principal
  AUXILIARY MUST krb5KeyVersionNumber MAY ( krb5ValidStart $ krb5ValidEnd $ kr
 b5PasswordEnd $ krb5MaxLife $ krb5MaxRenew $ krb5KDCFlags $ krb5EncryptionTyp
 e $ krb5Key ) )
objectClasses: ( 1.3.6.1.4.1.5322.10.2.3 NAME 'krb5Realm' SUP top AUXILIARY MU
 ST krb5RealmName )
objectClasses: ( 2.16.840.1.113719.1.301.6.1.1 NAME 'krbContainer' SUP top STR
 UCTURAL MUST cn )
objectClasses: ( 2.16.840.1.113719.1.301.6.2.1 NAME 'krbRealmContainer' SUP to
 p STRUCTURAL MUST cn MAY ( krbMKey $ krbUPEnabled $ krbSubTrees $ krbSearchSc
 ope $ krbLdapServers $ krbSupportedEncSaltTypes $ krbDefaultEncSaltTypes $ kr
 bTicketPolicyReference $ krbKdcServers $ krbPwdServers $ krbAdmServers $ krbP
 rincNamingAttr $ krbPwdPolicyReference $ krbPrincContainerRef ) )
objectClasses: ( 2.16.840.1.113719.1.301.6.3.1 NAME 'krbService' SUP top ABSTR
 ACT MUST cn MAY ( krbHostServer $ krbRealmReferences ) )
objectClasses: ( 2.16.840.1.113719.1.301.6.4.1 NAME 'krbKdcService' SUP krbSer
 vice STRUCTURAL )
objectClasses: ( 2.16.840.1.113719.1.301.6.5.1 NAME 'krbPwdService' SUP krbSer
 vice STRUCTURAL )
objectClasses: ( 2.16.840.1.113719.1.301.6.8.1 NAME 'krbPrincipalAux' SUP top 
 AUXILIARY MAY ( krbPrincipalName $ krbCanonicalName $ krbUPEnabled $ krbPrinc
 ipalKey $ krbTicketPolicyReference $ krbPrincipalExpiration $ krbPasswordExpi
 ration $ krbPwdPolicyReference $ krbPrincipalType $ krbPwdHistory $ krbLastPw
 dChange $ krbPrincipalAliases $ krbLastSuccessfulAuth $ krbLastFailedAuth $ k
 rbLoginFailedCount $ krbExtraData $ krbAllowedToDelegateTo ) )
objectClasses: ( 2.16.840.1.113719.1.301.6.9.1 NAME 'krbPrincipal' SUP top STR
 UCTURAL MUST krbPrincipalName MAY krbObjectReferences )
objectClasses: ( 2.16.840.1.113719.1.301.6.11.1 NAME 'krbPrincRefAux' SUP top 
 AUXILIARY MAY krbPrincipalReferences )
objectClasses: ( 2.16.840.1.113719.1.301.6.13.1 NAME 'krbAdmService' SUP krbSe
 rvice STRUCTURAL )
objectClasses: ( 2.16.840.1.113719.1.301.6.14.1 NAME 'krbPwdPolicy' SUP top ST
 RUCTURAL MUST cn MAY ( krbMaxPwdLife $ krbMinPwdLife $ krbPwdMinDiffChars $ k
 rbPwdMinLength $ krbPwdHistoryLength $ krbPwdMaxFailure $ krbPwdFailureCountI
 nterval $ krbPwdLockoutDuration ) )
objectClasses: ( 2.16.840.1.113719.1.301.6.16.1 NAME 'krbTicketPolicyAux' SUP 
 top AUXILIARY MAY ( krbTicketFlags $ krbMaxTicketLife $ krbMaxRenewableAge ) 
 )
objectClasses: ( 2.16.840.1.113719.1.301.6.17.1 NAME 'krbTicketPolicy' SUP top
  STRUCTURAL MUST cn )
objectClasses: ( 1.3.6.1.4.1.2428.70.2.1 NAME 'esg' SUP top STRUCTURAL MUST ( 
 esgSid $ esgSN $ esgFormat $ esgAlwaysOn $ esgSource ) MAY ( esgInfo $ esgInf
 oUri $ esgFirstShown $ esgFinalEnd $ esgDuration $ esgTotalDuration $ esgInte
 rvalOffset $ esgRepeatInterval $ esgStreamUri $ esgSdp $ esgSdpUri $ esgTool 
 $ esgCategory $ esgContact $ esgContactMail $ esgContactPhone $ esgContactDN 
 ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.1 NAME 'dhcpService' DESC 'Service 
 object that represents the actual DHCP Service configuration. This is a conta
 iner object.' SUP top STRUCTURAL MUST ( cn $ dhcpPrimaryDN ) MAY ( dhcpSecond
 aryDN $ dhcpSharedNetworkDN $ dhcpSubnetDN $ dhcpGroupDN $ dhcpHostDN $ dhcpC
 lassesDN $ dhcpOptionsDN $ dhcpStatements ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.2 NAME 'dhcpSharedNetwork' DESC 'Th
 is stores configuration information for a shared network.' SUP top STRUCTURAL
  MUST cn MAY ( dhcpSubnetDN $ dhcpPoolDN $ dhcpOptionsDN $ dhcpStatements ) X
 -NDS_CONTAINMENT 'dhcpService' )
objectClasses: ( 2.16.840.1.113719.1.203.6.3 NAME 'dhcpSubnet' DESC 'This clas
 s defines a subnet. This is a container object.' SUP top STRUCTURAL MUST ( cn
  $ dhcpNetMask ) MAY ( dhcpRange $ dhcpPoolDN $ dhcpGroupDN $ dhcpHostDN $ dh
 cpClassesDN $ dhcpLeasesDN $ dhcpOptionsDN $ dhcpStatements ) X-NDS_CONTAINME
 NT ( 'dhcpService' 'dhcpSharedNetwork' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.4 NAME 'dhcpPool' DESC 'This stores
  configuration information about a pool.' SUP top STRUCTURAL MUST ( cn $ dhcp
 Range ) MAY ( dhcpClassesDN $ dhcpPermitList $ dhcpLeasesDN $ dhcpOptionsDN $
  dhcpStatements ) X-NDS_CONTAINMENT ( 'dhcpSubnet' 'dhcpSharedNetwork' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.5 NAME 'dhcpGroup' DESC 'Group obje
 ct that lists host DNs and parameters. This is a container object.' SUP top S
 TRUCTURAL MUST cn MAY ( dhcpHostDN $ dhcpOptionsDN $ dhcpStatements ) X-NDS_C
 ONTAINMENT ( 'dhcpSubnet' 'dhcpService' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.6 NAME 'dhcpHost' DESC 'This repres
 ents information about a particular client' SUP top STRUCTURAL MUST cn MAY ( 
 dhcpLeaseDN $ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements ) X-NDS_CONTAINM
 ENT ( 'dhcpService' 'dhcpSubnet' 'dhcpGroup' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.7 NAME 'dhcpClass' DESC 'Represents
  information about a collection of related clients.' SUP top STRUCTURAL MUST 
 cn MAY ( dhcpSubClassesDN $ dhcpOptionsDN $ dhcpStatements ) X-NDS_CONTAINMEN
 T ( 'dhcpService' 'dhcpSubnet' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.8 NAME 'dhcpSubClass' DESC 'Represe
 nts information about a collection of related classes.' SUP top STRUCTURAL MU
 ST cn MAY ( dhcpClassData $ dhcpOptionsDN $ dhcpStatements ) X-NDS_CONTAINMEN
 T 'dhcpClass' )
objectClasses: ( 2.16.840.1.113719.1.203.6.9 NAME 'dhcpOptions' DESC 'Represen
 ts information about a collection of options defined.' SUP top AUXILIARY MUST
  cn MAY dhcpOption X-NDS_CONTAINMENT ( 'dhcpService' 'dhcpSharedNetwork' 'dhc
 pSubnet' 'dhcpPool' 'dhcpGroup' 'dhcpHost' 'dhcpClass' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.10 NAME 'dhcpLeases' DESC 'This cla
 ss represents an IP Address, which may or may not have been leased.' SUP top 
 STRUCTURAL MUST ( cn $ dhcpAddressState ) MAY ( dhcpExpirationTime $ dhcpStar
 tTimeOfState $ dhcpLastTransactionTime $ dhcpBootpFlag $ dhcpDomainName $ dhc
 pDnsStatus $ dhcpRequestedHostName $ dhcpAssignedHostName $ dhcpReservedForCl
 ient $ dhcpAssignedToClient $ dhcpRelayAgentInfo $ dhcpHWAddress ) X-NDS_CONT
 AINMENT ( 'dhcpService' 'dhcpSubnet' 'dhcpPool' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.11 NAME 'dhcpLog' DESC 'This is the
  object that holds past information about the IP address. The cn is the time/
 date stamp when the address was assigned or released, the address state at th
 e time, if the address was assigned or released.' SUP top STRUCTURAL MUST cn 
 MAY ( dhcpAddressState $ dhcpExpirationTime $ dhcpStartTimeOfState $ dhcpLast
 TransactionTime $ dhcpBootpFlag $ dhcpDomainName $ dhcpDnsStatus $ dhcpReques
 tedHostName $ dhcpAssignedHostName $ dhcpReservedForClient $ dhcpAssignedToCl
 ient $ dhcpRelayAgentInfo $ dhcpHWAddress $ dhcpErrorLog ) X-NDS_CONTAINMENT 
 ( 'dhcpLeases' 'dhcpPool' 'dhcpSubnet' 'dhcpSharedNetwork' 'dhcpService' ) )
objectClasses: ( 2.16.840.1.113719.1.203.6.12 NAME 'dhcpServer' DESC 'DHCP Ser
 ver Object' SUP top STRUCTURAL MUST ( cn $ dhcpServiceDN ) MAY ( dhcpVersion 
 $ dhcpImplementation $ dhcpHashBucketAssignment $ dhcpDelayedServiceParameter
  $ dhcpMaxClientLeadTime $ dhcpFailOverEndpointState $ dhcpStatements ) X-NDS
 _CONTAINMENT ( 'o' 'ou' 'dc' ) )
objectClasses: ( 1.3.6.1.1.1.1.9 NAME 'automount' DESC 'An entry in an automou
 nter map' SUP top STRUCTURAL MUST ( cn $ automountInformation $ objectclass )
  MAY description )
objectClasses: ( 1.3.6.1.4.1.2312.4.2.2 NAME 'automountMap' DESC 'An group of 
 related automount objects' SUP top STRUCTURAL MUST ou )
objectClasses: ( 1.2.826.0.1.3344810.1.0.13 NAME 'x509base' ABSTRACT MAY x509v
 ersion )
objectClasses: ( 1.2.826.0.1.3344810.1.0.14 NAME 'x509CRL' SUP x509base ABSTRA
 CT MUST ( x509CRLThisUpdate $ x509signatureAlgorithm $ x509issuer ) MAY ( x50
 9CRLNextUpdate $ x509serialNumber $ x509authorityKeyIdentifier $ x509authorit
 yCertIssuer $ x509authorityCertSerialNumber $ x509issuerRfc822Name $ x509issu
 erDNSName $ x509issuerDirectoryName $ x509issuerUniformResourceIdentifier $ x
 509issuerIPAddress $ x509issuerRegisteredID $ x509CRLNumber $ x509CRLDPRfc822
 Name $ x509CRLDPDNSName $ x509CRLDPDN $ x509CRLDPURI $ x509CRLDPIPAddress $ x
 509CRLDPRegisteredID $ x509CRLDPOnlyUserCerts $ x509CRLDPOnlyCACerts $ x509CR
 LDPOnlySomeReasons $ x509CRLDPOnlyAttCerts $ x509CRLDPindirect $ x509CRLDelta
 Indicator ) )
objectClasses: ( 1.2.826.0.1.3344810.1.0.19 NAME 'x509certificateRevocationLis
 t' SUP x509CRL STRUCTURAL MUST certificateRevocationList )
objectClasses: ( 1.2.826.0.1.3344810.1.0.20 NAME 'x509authorityRevocationList'
  SUP x509CRL STRUCTURAL MUST authorityRevocationList )
objectClasses: ( 1.2.826.0.1.3344810.1.0.21 NAME 'x509deltaRevocationList' SUP
  x509CRL STRUCTURAL MUST deltaRevocationList )
objectClasses: ( 1.2.826.0.1.3344810.1.0.15 NAME 'x509CRLentry' SUP x509base S
 TRUCTURAL MUST ( x509serialNumber $ x509CRLCertRevocationDate ) MAY ( x509CRL
 CertInvalidityDate $ x509CRLCertReasonCode $ x509CRLCertHoldInstructionCode $
  x509CRLCertIssuerRfc822Name $ x509CRLCertIssuerDnsName $ x509CRLCertIssuerDN
  $ x509CRLCertIssuerURI $ x509CRLCertIssuerIpAddress $ x509CRLCertIssuerRegis
 teredID ) )
objectClasses: ( 1.3.6.1.4.1.10126.1.5.4.2.3 NAME 'x509PKC' SUP x509base ABSTR
 ACT MUST ( x509serialNumber $ x509validityNotBefore $ x509signatureAlgorithm 
 $ x509issuer $ x509validityNotAfter $ x509subjectPublicKeyInfoAlgorithm ) MAY
  ( x509authorityKeyIdentifier $ x509authorityCertIssuer $ x509authorityCertSe
 rialNumber $ x509subjectKeyIdentifier $ x509keyUsage $ x509policyInformationI
 dentifier $ x509subjectRfc822Name $ x509subjectDnsName $ x509subjectDirectory
 Name $ x509subjectUniformResourceIdentifier $ x509subjectIpAddress $ x509subj
 ectRegisteredID $ x509issuerRfc822Name $ x509issuerDnsName $ x509issuerDirect
 oryName $ x509issuerUniformResourceIdentifier $ x509issuerIpAddress $ x509iss
 uerRegisteredID $ x509extKeyUsage $ x509FullcRLDistributionPointURI $ x509cer
 tHolder $ x509issuerSerial $ x509basicConstraintsCa ) )
objectClasses: ( 1.3.6.1.4.1.10126.1.5.4.2.4 NAME 'x509userCertificate' SUP x5
 09PKC STRUCTURAL MUST userCertificate MAY x509subject )
objectClasses: ( 1.3.6.1.4.1.10126.1.5.4.2.5 NAME 'x509caCertificate' SUP x509
 PKC STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.10126.1.5.4.2.2 NAME 'x509certificateHolder' AUXI
 LIARY MAY x509certLocation )
objectClasses: ( 1.2.826.0.1.3344810.1.0.16 NAME 'x509AC' SUP x509base ABSTRAC
 T MUST ( x509version $ x509signatureAlgorithm $ x509issuer $ x509serialNumber
  $ x509validityNotBefore $ x509validityNotAfter ) MAY ( x509ACHolderPKCSerial
 Number $ x509ACHolderPKCissuerDN $ x509ACHolderRfc822Name $ x509ACHolderDNSNa
 me $ x509ACHolderDN $ x509ACHolderURI $ x509ACHolderIPAddress $ x509ACHolderR
 egisteredID $ x509authorityCertIssuer $ x509authorityCertSerialNumber $ x509a
 uthorityKeyIdentifier $ x509ACObjectDigest $ x509ACDigestAlgorithm $ x509ACDi
 gestedObjectType $ x509issuerSerial ) )
objectClasses: ( 1.2.826.0.1.3344810.1.0.17 NAME 'x509attributeCertificate' SU
 P x509AC STRUCTURAL )
objectClasses: ( 1.2.826.0.1.3344810.1.0.18 NAME 'x509aACertificate' SUP x509A
 C STRUCTURAL )
objectClasses: ( 1.2.826.0.1.3344810.1.0.22 NAME 'x509ACext' AUXILIARY MAY ( x
 509issuerRfc822Name $ x509issuerDNSName $ x509issuerUniformResourceIdentifier
  $ x509issuerIPAddress $ x509issuerRegisteredID $ x509authorityCertIssuer $ x
 509authorityCertSerialNumber $ x509authorityKeyIdentifier $ x509ACAuditID $ x
 509ACTargetRfc822Name $ x509ACTargetDNSName $ x509ACTargetDN $ x509ACTargetUR
 I $ x509ACTargetIPAddress $ x509ACTargetRegisteredID $ x509ACTargetGroupRfc82
 2Name $ x509ACTargetGroupDNSName $ x509ACTargetGroupDN $ x509ACTargetGroupURI
  $ x509ACTargetGroupIPAddress $ x509ACTargetGroupRegisteredID $ x509DPRfc822N
 ame $ x509DPDNSName $ x509DPDN $ x509DPURI $ x509DPIPAddress $ x509DPRegister
 edID $ x509DPrelativeToIssuer $ x509DPissuerRfc822Name $ x509DPissuerDNSName 
 $ x509DPissuerDN $ x509DPissuerURI $ x509DPissuerIPAddress $ x509DPissuerRegi
 steredID $ x509DPReasonCodes $ x509ACNoRevocation ) )
objectClasses: ( 1.3.6.1.1.11.1.1 NAME 'vPIMUser' DESC 'draft-ietf-vpim-vpimdi
 r: vPIMUser object contains about the dialed telephone number' SUP top AUXILI
 ARY MUST ( vPIMRfc822Mailbox $ vPIMTelephoneNumber ) MAY ( vPIMSpokenName $ v
 PIMSupportedUABehaviors $ vPIMSupportedAudioMediaTypes $ vPIMSupportedMessage
 Context $ vPIMTextName $ vPIMExtendedAbsenceStatus $ vPIMMaxMessageSize $ vPI
 MSubMailboxes ) )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.1 NAME 'astSipGeneric' DESC '' SUP 
 top ABSTRACT MUST astContext MAY ( astSecret $ astPermit $ astDeny $ astMd5Se
 cret $ astDtmfmode $ astCanreinvite $ astNat $ astCallgroup $ astPickupgroup 
 $ astAllow $ astDisallow $ astInsecure $ astTrustrpid $ astProgressinband $ a
 stPromiscredir $ astReghost $ astRegport $ astRegseconds ) )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.2 NAME 'astSipPeer' DESC '' SUP ast
 SipGeneric AUXILIARY MUST ( astUsername $ astName ) MAY ( astMailbox $ astTem
 plate $ astFromdomain $ astRegexten $ astFromuser $ astHost $ astMask $ astPo
 rt $ astQualify $ astDefaultip $ astRtptimeout $ astRtpholdtimeout ) )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.3 NAME 'astSipUser' DESC '' SUP ast
 SipGeneric AUXILIARY MAY ( AstCallerid $ astAccountcode $ astAmaflags $ astIn
 cominglimit $ astRestrictcid ) )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.4 NAME 'astSipFriend' DESC '' SUP a
 stSipPeer AUXILIARY MAY ( astCallerid $ astAccountcode $ astAmaflags $ astInc
 ominglimit $ astRestrictcid ) )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.5 NAME 'astIaxGeneric' DESC '' SUP 
 top ABSTRACT MUST astContext MAY ( astSecret $ astTrunk $ astAuth $ astNotran
 sfer $ astJitterbuffer $ astHost $ astDefaultip $ astPermit $ astRegexten $ a
 stPort $ astUsername $ astAllow $ astDisallow $ astCallerid $ astSendani $ as
 tInkeys $ astQualify ) )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.6 NAME 'astIaxPeer' STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.7 NAME 'astIaxUser' STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.23935.5.2.1.2.8 NAME 'astIaxFriend' STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.3401.8.2.23 NAME 'pgpServerInfo' DESC 'PGP define
 d objectclass to maintain information about PGP key space store' SUP top STRU
 CTURAL MUST ( cn $ pgpBaseKeySpaceDN ) MAY ( pgpSoftware $ pgpVersion ) X-ORI
 GIN 'Pretty Good Privacy (PGP)' )
objectClasses: ( 1.3.6.1.4.1.3401.8.2.24 NAME 'pgpKeyInfo' DESC 'PGP defined o
 bjectclass to maintain information about a PGP key' SUP top STRUCTURAL MUST (
  pgpCertID $ pgpKey ) MAY ( pgpDisabled $ pgpKeyID $ pgpKeyType $ pgpUserID $
  pgpKeyCreateTime $ pgpSignerID $ pgpRevoked $ pgpSubKeyID $ pgpKeySize $ pgp
 KeyExpireTime ) X-ORIGIN 'Pretty Good Privacy (PGP)' )
objectClasses: ( 1.3.6.1.4.1.3401.8.2.5 NAME 'pgpReconElement' DESC 'PGP defin
 ed objectclass of a reconstruction data object' STRUCTURAL MUST objectClass M
 AY ( pgpReconCertID $ pgpReconData $ owner ) X-ORIGIN 'Pretty Good Privacy (P
 GP)' )
objectClasses: ( 1.3.6.1.4.1.3401.8.2.4 NAME 'pgpProfile' DESC 'PGP defined ob
 jectclass of a collection admin prefs' SUP top STRUCTURAL MUST objectClass MA
 Y ( cn $ owner ) X-ORIGIN 'Pretty Good Privacy (PGP)' )
objectClasses: ( 1.3.6.1.4.1.3401.8.2.1 NAME 'pgpElement' DESC 'PGP defined ob
 jectclass of a single admin pref object' SUP top STRUCTURAL MUST objectClass 
 MAY ( pgpElementType $ pgpData $ owner ) X-ORIGIN 'Pretty Good Privacy (PGP)'
  )
objectClasses: ( 1.2.840.113556.1.5.87 NAME 'calEntry' DESC 'Calendering and f
 ree/busy information' SUP top AUXILIARY MAY ( calCalURI $ calFBURL $ calCAPUR
 I $ calCalAdrURI $ calOtherCAPURIs $ calOtherCalURIs $ calOtherFBURLs $ calOt
 herCalAdrURIs ) )
objectClasses: ( 1.3.6.1.4.1.13040.2.2.1 NAME 'hordePerson' DESC 'Horde Prefer
 ences' SUP top AUXILIARY MAY ( mail $ hordePrefs $ impPrefs $ turbaPrefs $ go
 llemPrefs $ kronolithPrefs $ mnemoPrefs $ trollPrefs $ nagPrefs $ klutzPrefs 
 $ jonahPrefs $ hermesPrefs $ junoPrefs $ treanPrefs $ whupsPrefs $ ingoPrefs 
 $ geniePrefs $ scryPrefs $ anselPrefs $ wickedPrefs $ choraPrefs $ agoraPrefs
  $ goopsPrefs $ merkPrefs $ volosPrefs $ mimpPrefs $ mottlePrefs $ nicPrefs $
  occamPrefs $ odinPrefs $ rakimPrefs $ seshaPrefs $ swooshPrefs $ thorPrefs $
  ulaformPrefs ) )
objectClasses: ( 1.3.6.1.4.1.13040.2.2.2 NAME 'hordeGroup' DESC 'Horde Group' 
 SUP top AUXILIARY MAY mail )
objectClasses: ( 1.3.6.1.4.1.13040.4.2.1 NAME 'turbaContact' DESC 'Turba Conta
 ct' SUP top AUXILIARY MAY ( turbaType $ turbaMembers $ calFBURL ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.92 NAME 'dlmOtherIdentifyingInfoIns
 tance' DESC 'helper class to tie indexed arrays in core model together' SUP t
 op STRUCTURAL MUST arrayIndex MAY ( dlmOtherIdentifyingInfo $ dlmIdentifyingD
 escription ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.1 NAME 'dlm1ManagedElement' DESC 'M
 anagedElement is an abstract class that provides             a common supercl
 ass (or top of the inheritance tree)            for the non-association class
 es in the CIM Schema.' SUP top ABSTRACT MAY ( dlmCaption $ dlmDescription $ o
 rderedCimModelPath $ orderedCimKeys ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.2 NAME 'dlm1ManagedSystemElement' D
 ESC 'ManagedSystemElement is the base class for the            System Element
  hierarchy. Membership Criteria: Any            distinguishable component of 
 a System is a candidate            for inclusion in this class. Examples: sof
 tware            components, such as files; and devices, such as disk        
     drives and controllers, and physical components such            as chips 
 and cards.' SUP dlm1ManagedElement ABSTRACT MAY ( dlmInstallDate $ dlmName $ 
 dlmStatus ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.10 NAME 'dlm1Collection' DESC 'Coll
 ection is an abstract class that provides a            common superclass for 
 data elements that represent            collections of ManagedElements and it
 s subclasses.' SUP dlm1ManagedElement ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.4 NAME 'dlm1LogicalElement' DESC 'L
 ogicalElement is a base class for all the            components of a System t
 hat represent abstract system            components, such as Files, Processes
 , or system            capabilities in the form of Logical Devices.' SUP dlm1
 ManagedSystemElement ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.5 NAME 'dlm1System' DESC 'A System 
 is a LogicalElement that aggregates an            enumerable set of Managed S
 ystem Elements. The            aggregation operates as a functional whole. Wi
 thin any             particular subclass of System, there is a well-defined  
           list of Managed System Element classes whose instances             
 must be aggregated.' SUP dlm1LogicalElement ABSTRACT MAY ( dlmCreationClassNa
 me $ dlmName $ dlmNameFormat $ dlmPrimaryOwnerContact $ dlmPrimaryOwnerName $
  dlmRoles ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.6 NAME 'dlm1ComputerSystem' DESC 'A
  class derived from System that is a special            collection of Managed
 SystemElements. This collection            provides compute capabilities and 
 serves as            aggregation point to associate one or more of the       
      following elements: FileSystem, OperatingSystem,            Processor an
 d Memory (Volatile and/or NonVolatile            Storage).' SUP dlm1System AB
 STRACT MAY ( dlmDedicated $ dlmNameFormat ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.93 NAME 'dlm1AdminDomain' DESC 'Thi
 s is a special grouping of            ManagedSystemElements. The grouping is 
 viewed as a            single entity, reflecting that all of its components  
           are administered similarly - either by the same user,            gr
 oup of users or policy. It serves as an aggregation            point to assoc
 iate one or more of the following            elements: network devices, such 
 as routers and            switches, servers, and other resources that can be 
            accessed by end systems. This grouping of devices            plays
  an essential role in ensuring that the same            administrative policy
  and actions are applied to all            of the devices in the grouping. Th
 e specific behavior            and/or semantics of the AdminDomain can be ide
 ntified            through its aggregated and associated entities. The       
      System class and its subclasses provide the scope for            numerou
 s types of managed objects. As such, these            classes must have the a
 bility to create unique keys.            This attribute is used by the System
  class and its            subclasses to define a unique Name, independent of 
 the             specific discovery protocol used. Use of the heuristic       
      is optional, but recommended. AdminDomain is a part of             the C
 ore model, which has frequently been used in the            Networks Model to
  group together various network            resources that must be administere
 d the same way,            perhaps using the same policies. Viewed in this li
 ght,             its principal subclass is AutonomousSystem.' SUP dlm1System 
 ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.94 NAME 'dlm1AdminDomainAuxClass' D
 ESC 'This is a special grouping of            ManagedSystemElements. The grou
 ping is viewed as a            single entity, reflecting that all of its comp
 onents            are administered similarly - either by the same user,      
       group of users or policy. It serves as an aggregation            point 
 to associate one or more of the following            elements: network device
 s, such as routers and            switches, servers, and other resources that
  can be            accessed by end systems. This grouping of devices         
    plays an essential role in ensuring that the same            administrativ
 e policy and actions are applied to all            of the devices in the grou
 ping. The specific behavior            and/or semantics of the AdminDomain ca
 n be identified            through its aggregated and associated entities. Th
 e            System class and its subclasses provide the scope for           
  numerous types of managed objects. As such, these            classes must ha
 ve the ability to create unique keys.            This attribute is used by th
 e System class and its            subclasses to define a unique Name, indepen
 dent of the             specific discovery protocol used. Use of the heuristi
 c            is optional, but recommended. AdminDomain is a part of          
    the Core model, which has frequently been used in the            Networks 
 Model to group together various network            resources that must be adm
 inistered the same way,            perhaps using the same policies. Viewed in
  this light,             its principal subclass is AutonomousSystem.' SUP dlm
 1AdminDomain AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.95 NAME 'dlm1AdminDomainInstance' D
 ESC 'This is a special grouping of            ManagedSystemElements. The grou
 ping is viewed as a            single entity, reflecting that all of its comp
 onents            are administered similarly - either by the same user,      
       group of users or policy. It serves as an aggregation            point 
 to associate one or more of the following            elements: network device
 s, such as routers and            switches, servers, and other resources that
  can be            accessed by end systems. This grouping of devices         
    plays an essential role in ensuring that the same            administrativ
 e policy and actions are applied to all            of the devices in the grou
 ping. The specific behavior            and/or semantics of the AdminDomain ca
 n be identified            through its aggregated and associated entities. Th
 e            System class and its subclasses provide the scope for           
  numerous types of managed objects. As such, these            classes must ha
 ve the ability to create unique keys.            This attribute is used by th
 e System class and its            subclasses to define a unique Name, indepen
 dent of the             specific discovery protocol used. Use of the heuristi
 c            is optional, but recommended. AdminDomain is a part of          
    the Core model, which has frequently been used in the            Networks 
 Model to group together various network            resources that must be adm
 inistered the same way,            perhaps using the same policies. Viewed in
  this light,             its principal subclass is AutonomousSystem.' SUP dlm
 1AdminDomain STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.8 NAME 'dlm1Service' DESC 'A Servic
 e is a Logical Element that contains the            information necessary to 
 represent and manage the            functionality provided by a Device and/or
             SoftwareFeature. A Service is a general-purpose object           
   to configure and manage the implementation of            functionality.  It
  is not the functionality itself.' SUP dlm1LogicalElement ABSTRACT MAY ( dlmC
 reationClassName $ dlmName $ dlmStartMode $ dlmStarted ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.9 NAME 'dlm1ServiceAccessPoint' DES
 C 'ServiceAccessPoint represents the ability to            utilize or invoke 
 a Service.  Access points represent            that a Service is made availab
 le to other entities for             use.' SUP dlm1LogicalElement ABSTRACT MA
 Y ( dlmCreationClassName $ dlmName ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.15 NAME 'dlm1Setting' DESC 'The Set
 ting class represents            configuration-related and operational parame
 ters for            one or more ManagedSystem Element(s). A            Manage
 dSystemElement may have multiple Setting objects             associated with 
 it. The current operational values for            an Element"s parameters are
  reflected by properties in             the Element itself or by properties i
 n its            associations. These properties do not have to be the        
     same values present in the Setting object. For            example, a mode
 m may have a Setting baud rate of            56Kb/sec but be operating at 19.
 2Kb/sec.' SUP dlm1ManagedElement ABSTRACT MAY dlmSettingID )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.42 NAME 'dlm1Dependency' DESC 'Depe
 ndency is a generic association used to            establish dependency relat
 ionships between            ManagedElements.' SUP top ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.34 NAME 'dlm1ElementSetting' DESC '
 ElementSetting represents the association between             Managed SystemE
 lements and the Setting class(es)            defined for them.' SUP top ABSTR
 ACT )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.35 NAME 'dlm1ElementSettingAuxClass
 ' DESC 'ElementSetting represents the association between             Managed
  SystemElements and the Setting class(es)            defined for them.' SUP d
 lm1ElementSetting AUXILIARY MAY ( dlmElementSettingElementRef $ dlmElementSet
 tingSettingRef ) )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.60 NAME 'dlm1MemberOfCollection' DE
 SC 'MemberOfCollection is an aggregation used to            establish members
 hip of ManagedElements in a            Collection.' SUP top ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.2.1.3.61 NAME 'dlm1MemberOfCollectionAuxC
 lass' DESC 'MemberOfCollection is an aggregation used to            establish
  membership of ManagedElements in a            Collection.' SUP dlm1MemberOfC
 ollection AUXILIARY MAY ( dlmMemberOfCollectionCollectionRef $ dlmMemberOfCol
 lectionMemberRef ) )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.8 NAME 'dlm1FilterList' DESC 'A Fil
 terList is used by network devices to identify routes          by aggregating
  a set of FilterEntries into a unit, called a          FilterList. FilterList
 s can also be used to accept or deny          routing updates.          A Fil
 terList is weak to the network device (e.g., the          ComputerSystem) tha
 t contains it. Hence, the ComputerSystem          keys are propagated to this
  class.' SUP dlm1LogicalElement STRUCTURAL MAY ( dlmName $ dlm1FilterListDire
 ction ) )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.1 NAME 'dlm1FilterEntryBase' DESC '
 FilterEntryBase is an abstract class to define the naming          of all fil
 ter entries, and to allow their common          aggregation into FilterLists.
  The FilterEntry subclass          represents packet filtering. Other types o
 f Entries are          possible - for example, to filter security credentials
 .          FilterEntryBase is weak to the network device (e.g., the          
 ComputerSystem) that contains it. Hence, the ComputerSystem          keys are
  propagated to this class.' SUP dlm1LogicalElement ABSTRACT MAY ( dlmCreation
 ClassName $ dlmName $ dlm1FilterEntryBaseIsNegated ) )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.2 NAME 'dlm1FilterEntryBaseAuxClass
 ' SUP dlm1FilterEntryBase AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.3 NAME 'dlm1FilterEntryBaseInstance
 ' SUP dlm1FilterEntryBase STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.4 NAME 'dlm1ProtocolEndpoint' DESC 
 'A communication point from which data may be sent or          received. Prot
 ocolEndpoints link router interfaces and          switch ports to LogicalNetw
 orks.' SUP dlm1ServiceAccessPoint ABSTRACT MAY ( dlmName $ dlmProtocolType $ 
 dlmOtherTypeDescription ) )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.5 NAME 'dlm1IPProtocolEndpoint' DES
 C 'The IP address that this ProtocolEndpoint represents,          formatted a
 ccording to the appropriate convention as          defined in the AddressType
  property of this class          (e.g., 171.79.6.40).' SUP dlm1ProtocolEndpoi
 nt ABSTRACT MAY ( dlmIPAddress $ dlmIPSubnetMask $ dlmIPAddressType $ dlmIPVe
 rsionSupport ) )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.6 NAME 'dlm1IPProtocolEndpointAuxCl
 ass' DESC 'Auxilary Class for this IPProtocolEndpoint.' SUP dlm1IPProtocolEnd
 point AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.10126.7.1.4.1.7 NAME 'dlm1IPProtocolEndpointInsta
 nce' DESC 'A structural class for an IPProtocolEndpoint.' SUP dlm1IPProtocolE
 ndpoint STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.47 NAME 'dlm1OrganizationalEntity' 
 DESC 'OrganizationalEntity is an abstract class from            which classes
  that fit into an organizational            structure are derived.' SUP dlm1M
 anagedElement ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.48 NAME 'dlm1UserEntity' DESC 'User
 Entity is an abstract class that represents            users.' SUP dlm1Organi
 zationalEntity ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.49 NAME 'dlm1UsersAccess' DESC 'The
  UsersAccess object class is used to specify a             system user that p
 ermitted access to system resources.              The ManagedElement that has
  access to system resources            (represented in the model in the Eleme
 ntAsUser            association) may be a person, a service, a service       
      access point or any collection thereof. Whereas the            Account c
 lass represents the user"s relationship to a            system from the persp
 ective of the security services            of the system, the UserAccess clas
 s represents the            relationships to the systems independent of a    
         particular system or service.' SUP dlm1UserEntity ABSTRACT MAY ( dlmB
 iometric $ dlmCreationClassName $ dlmElementID $ dlmName ) )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.4 NAME 'dlm1SecurityService' DESC '
 SecurityService ...' SUP dlm1Service ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.8 NAME 'dlm1AuthenticationService' 
 DESC 'AuthenticationService verifies users" identities           through some
  means.  These services are decomposed           into a subclass that provide
 s credentials to users and            a subclass that provides for the verifi
 cation of the           validity of a credential and, perhaps, the           
 appropriateness of its use for access to target           resources. The pers
 istent state information used from           one such verification to another
  is maintained in an           Account for that Users Access on that         
   AuthenticationService.' SUP dlm1SecurityService ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.9 NAME 'dlm1AuthenticationServiceAu
 xClass' DESC 'AuthenticationService verifies users" identities           thro
 ugh some means.  These services are decomposed           into a subclass that
  provides credentials to users and            a subclass that provides for th
 e verification of the           validity of a credential and, perhaps, the   
         appropriateness of its use for access to target           resources. 
 The persistent state information used from           one such verification to
  another is maintained in an           Account for that Users Access on that 
           AuthenticationService.' SUP dlm1AuthenticationService AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.10 NAME 'dlm1AuthenticationServiceI
 nstance' DESC 'AuthenticationService verifies users" identities           thr
 ough some means.  These services are decomposed           into a subclass tha
 t provides credentials to users and            a subclass that provides for t
 he verification of the           validity of a credential and, perhaps, the  
          appropriateness of its use for access to target           resources.
  The persistent state information used from           one such verification t
 o another is maintained in an           Account for that Users Access on that
            AuthenticationService.' SUP dlm1AuthenticationService STRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.14 NAME 'dlm1CredentialManagementSe
 rvice' DESC 'CredentialManagementService issues credentials           and man
 ages the credential lifecycle.' SUP dlm1AuthenticationService ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.15 NAME 'dlm1CredentialManagementSe
 rviceAuxClass' DESC 'CredentialManagementService issues credentials          
  and manages the credential lifecycle.' SUP dlm1CredentialManagementService A
 UXILIARY )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.16 NAME 'dlm1CredentialManagementSe
 rviceInstance' DESC 'CredentialManagementService issues credentials          
  and manages the credential lifecycle.' SUP dlm1CredentialManagementService S
 TRUCTURAL )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.50 NAME 'dlm1UsersAccessAuxClass' D
 ESC 'The UsersAccess object class is used to specify a             system use
 r that permitted access to system resources.              The ManagedElement 
 that has access to system resources            (represented in the model in t
 he ElementAsUser            association) may be a person, a service, a servic
 e            access point or any collection thereof. Whereas the            A
 ccount class represents the user"s relationship to a            system from t
 he perspective of the security services            of the system, the UserAcc
 ess class represents the            relationships to the systems independent 
 of a            particular system or service.' SUP dlm1UsersAccess AUXILIARY 
 )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.51 NAME 'dlm1UsersAccessInstance' D
 ESC 'The UsersAccess object class is used to specify a             system use
 r that permitted access to system resources.              The ManagedElement 
 that has access to system resources            (represented in the model in t
 he ElementAsUser            association) may be a person, a service, a servic
 e            access point or any collection thereof. Whereas the            A
 ccount class represents the user"s relationship to a            system from t
 he perspective of the security services            of the system, the UserAcc
 ess class represents the            relationships to the systems independent 
 of a            particular system or service.' SUP dlm1UsersAccess STRUCTURAL
  )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.75 NAME 'dlm1ElementAsUser' DESC 'E
 lementAsUser is an association used to establish             the "ownership" 
 of UsersAccess object instances.  That            is, the ManagedElement may 
 have UsersAccess to systems             and, therefore, be "users" on those s
 ystems.             UsersAccess instances must have an "owning"            Ma
 nagedElement.  Typically, the ManagedElements will            be limited to C
 ollection, Person, Service and            ServiceAccessPoint. Other non-human
  ManagedElements            that might be thought of as having UsersAccess (e
 .g.,            a device or system) have services that have the            Us
 ersAccess.' SUP dlm1Dependency ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.76 NAME 'dlm1ElementAsUserAuxClass'
  DESC 'ElementAsUser is an association used to establish             the "own
 ership" of UsersAccess object instances.  That            is, the ManagedElem
 ent may have UsersAccess to systems             and, therefore, be "users" on
  those systems.             UsersAccess instances must have an "owning"      
       ManagedElement.  Typically, the ManagedElements will            be limi
 ted to Collection, Person, Service and            ServiceAccessPoint. Other n
 on-human ManagedElements            that might be thought of as having UsersA
 ccess (e.g.,            a device or system) have services that have the      
       UsersAccess.' SUP dlm1ElementAsUser AUXILIARY MAY ( dlmElementAsUserAnt
 ecedentRef $ dlmElementAsUserDependentRef ) )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.91 NAME 'dlm1UsersCredential' DESC 
 'UsersCredential is an association used to            establish the credentia
 ls that may be used for a            UsersAccess to a system or set of system
 s. ' SUP dlm1Dependency ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.92 NAME 'dlm1UsersCredentialAuxClas
 s' DESC 'UsersCredential is an association used to            establish the c
 redentials that may be used for a            UsersAccess to a system or set o
 f systems. ' SUP dlm1UsersCredential AUXILIARY MAY ( dlmUsersCredentialAntece
 dentRef $ dlmUsersCredentialDependentRef ) )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.52 NAME 'dlm1Credential' DESC 'Subc
 lasses of Credential define materials,           information, or other data w
 hich are used to prove the            identity of a UsersAccess to a particul
 ar           SecurityService.  Generally, there may be some shared           
 information, or credential material which is used to           identify and a
 uthenticate ones self in the process of           gaining access to, or permi
 ssion to use, an Account.           Such credential material may be used to a
 uthenticate a            users access identity  initially, as done by a      
      AuthenticationService (see later), and additionally on            an ong
 oing basis during the course of a connection or           other  security ass
 ociation, as proof that each           received message or communication came
  from the owning            user access of that credential material.' SUP dlm
 1ManagedElement ABSTRACT )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.62 NAME 'dlm1SharedSecret' DESC 'Sh
 aredSecret is the secret shared between a Users            Access and a parti
 cular SharedSecret security service.             Secrets may be in the form o
 f a password used for           initial authentication, or as with a session 
 key, used            as part of a message authentication code to verify that 
            a message originated by the pricinpal with whom the           secr
 et is shared. It is important to note that           SharedSecret is not just
  the password, but rather is           the password used with a particular se
 curity service.' SUP dlm1Credential ABSTRACT MAY ( dlmRemoteID $ dlmAlgorithm
  $ dlmProtocol $ dlmSecret ) )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.63 NAME 'dlm1SharedSecretAuxClass' 
 DESC 'SharedSecret is the secret shared between a Users            Access and
  a particular SharedSecret security service.             Secrets may be in th
 e form of a password used for           initial authentication, or as with a 
 session key, used            as part of a message authentication code to veri
 fy that            a message originated by the pricinpal with whom the       
     secret is shared. It is important to note that           SharedSecret is 
 not just the password, but rather is           the password used with a parti
 cular security service.' SUP dlm1SharedSecret AUXILIARY )
objectClasses: ( 1.3.6.1.4.1.412.100.4.1.1.64 NAME 'dlm1SharedSecretInstance' 
 DESC 'SharedSecret is the secret shared between a Users            Access and
  a particular SharedSecret security service.             Secrets may be in th
 e form of a password used for           initial authentication, or as with a 
 session key, used            as part of a message authentication code to veri
 fy that            a message originated by the pricinpal with whom the       
     secret is shared. It is important to note that           SharedSecret is 
 not just the password, but rather is           the password used with a parti
 cular security service.' SUP dlm1SharedSecret STRUCTURAL )
objectClasses: ( 1.3.6.1.1.6.1.1 NAME 'pcimPolicy' DESC 'RFC 3703: An abstract
  class that is the base class for all classes that describe policy-related in
 stances.' SUP dlm1ManagedElement ABSTRACT MAY ( cn $ dlmCaption $ dlmDescript
 ion $ orderedCimKeys $ pcimKeywords ) )
objectClasses: ( 1.3.6.1.1.6.1.8 NAME 'pcimRuleConditionAssociation' DESC 'RFC
  3703: This class contains attributes characterizing the relationship between
  a policy rule and one of its policy conditions.' SUP pcimPolicy STRUCTURAL M
 UST ( pcimConditionGroupNumber $ pcimConditionNegated ) MAY ( pcimConditionNa
 me $ pcimConditionDN ) )
objectClasses: ( 1.3.6.1.1.6.1.10 NAME 'pcimRuleActionAssociation' DESC 'RFC 3
 703: This class contains attributes characterizing the relationship between a
  policy rule and one of its policy actions.' SUP pcimPolicy STRUCTURAL MUST p
 cimActionOrder MAY ( pcimActionName $ pcimActionDN ) )
objectClasses: ( 1.3.6.1.1.6.1.11 NAME 'pcimConditionAuxClass' DESC 'RFC 3703:
  A class representing a condition to be evaluated in conjunction with a polic
 y rule.' SUP top AUXILIARY )
objectClasses: ( 1.3.6.1.1.6.1.14 NAME 'pcimActionAuxClass' DESC 'RFC 3703: A 
 class representing an action to be performed as a result of a policy rule.' S
 UP top AUXILIARY )
objectClasses: ( 1.3.6.1.1.6.1.18 NAME 'pcimRepository' DESC 'RFC 3703: A cont
 ainer for reusable policy information.' SUP dlm1AdminDomain ABSTRACT MAY pcim
 RepositoryName )
objectClasses: ( 1.3.6.1.1.9.1.1 NAME 'pcelsPolicySet' DESC 'RFC 4104: Set of 
 policies' SUP pcimPolicy ABSTRACT MAY ( pcelsPolicySetName $ pcelsDecisionStr
 ategy $ pcimRoles $ pcelsPolicySetList ) )
objectClasses: ( 1.3.6.1.1.9.1.2 NAME 'pcelsPolicySetAssociation' DESC 'RFC 41
 04: Associates a policy set to an aggregating entry' SUP pcimPolicy STRUCTURA
 L MUST pcelsPriority MAY ( pcelsPolicySetName $ pcelsPolicySetDN ) )
objectClasses: ( 1.3.6.1.1.9.1.3 NAME 'pcelsGroup' DESC 'RFC 4104: Base class 
 for representing a policy group' SUP pcelsPolicySet ABSTRACT MAY pcimGroupNam
 e )
objectClasses: ( 1.3.6.1.1.9.1.4 NAME 'pcelsGroupAuxClass' DESC 'RFC 4104: Aux
 iliary class for representing a policy group' SUP pcelsGroup AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.5 NAME 'pcelsGroupInstance' DESC 'RFC 4104: Str
 uctural class for representing a policy group' SUP pcelsGroup STRUCTURAL )
objectClasses: ( 1.3.6.1.1.9.1.6 NAME 'pcelsRule' DESC 'RFC 4104: Base class f
 or representing a policy rule' SUP pcelsPolicySet ABSTRACT MAY ( pcimRuleName
  $ pcimRuleEnabled $ pcimRuleUsage $ pcimRuleMandatory $ pcelsRuleValidityPer
 iodList $ pcelsConditionListType $ pcelsConditionList $ pcelsActionList $ pce
 lsSequencedActions $ pcelsExecutionStrategy ) )
objectClasses: ( 1.3.6.1.1.9.1.7 NAME 'pcelsRuleAuxClass' DESC 'RFC 4104: Auxi
 liary class for representing a policy rule' SUP pcelsRule AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.8 NAME 'pcelsRuleInstance' DESC 'RFC 4104: Stru
 ctural class for representing a policy rule' SUP pcelsRule STRUCTURAL )
objectClasses: ( 1.3.6.1.1.9.1.9 NAME 'pcelsConditionAssociation' DESC 'RFC 41
 04: Associates a policy conditions to an aggregating entry' SUP pcimRuleCondi
 tionAssociation STRUCTURAL )
objectClasses: ( 1.3.6.1.1.9.1.10 NAME 'pcelsActionAssociation' DESC 'RFC 4104
 : Associates a policy conditions to an aggregating entry' SUP pcimRuleActionA
 ssociation STRUCTURAL )
objectClasses: ( 1.3.6.1.1.9.1.11 NAME 'pcelsSimpleConditionAuxClass' DESC 'RF
 C 4104: Value matching condition for a policy variable' SUP pcimConditionAuxC
 lass AUXILIARY MAY ( pcelsVariableDN $ pcelsValueDN ) )
objectClasses: ( 1.3.6.1.1.9.1.12 NAME 'pcelsCompoundConditionAuxClass' DESC '
 RFC 4104: Boolean combination of simpler conditions' SUP pcimConditionAuxClas
 s AUXILIARY MAY ( pcelsConditionListType $ pcelsConditionList ) )
objectClasses: ( 1.3.6.1.1.9.1.13 NAME 'pcelsCompoundFilterConditionAuxClass' 
 DESC 'RFC 4104: A compound condition with mirroring capabilities' SUP pcelsCo
 mpoundConditionAuxClass AUXILIARY MAY pcelsIsMirrored )
objectClasses: ( 1.3.6.1.1.9.1.14 NAME 'pcelsSimpleActionAuxClass' DESC 'RFC 4
 104: Value assignment action for a policy variable' SUP pcimActionAuxClass AU
 XILIARY MAY ( pcelsVariableDN $ pcelsValueDN ) )
objectClasses: ( 1.3.6.1.1.9.1.15 NAME 'pcelsCompoundActionAuxClass' DESC 'RFC
  4104: Sequence of actions with specific execution strategy' SUP pcimActionAu
 xClass AUXILIARY MAY ( pcelsActionList $ pcelsSequencedActions $ pcelsExecuti
 onStrategy ) )
objectClasses: ( 1.3.6.1.1.9.1.16 NAME 'pcelsVariable' DESC 'RFC 4104: Base cl
 ass for representing a policy variable' SUP top ABSTRACT MAY ( pcelsVariableN
 ame $ pcelsExpectedValueList ) )
objectClasses: ( 1.3.6.1.1.9.1.17 NAME 'pcelsExplicitVariableAuxClass' DESC 'R
 FC 4104: Explicitly defined policy variable' SUP pcelsVariable AUXILIARY MUST
  ( pcelsVariableModelClass $ pcelsVariableModelProperty ) )
objectClasses: ( 1.3.6.1.1.9.1.18 NAME 'pcelsImplicitVariableAuxClass' DESC 'R
 FC 4104: Implicitly defined policy variable' SUP pcelsVariable AUXILIARY MAY 
 pcelsExpectedValueTypes )
objectClasses: ( 1.3.6.1.1.9.1.19 NAME 'pcelsSourceIPv4VariableAuxClass' DESC 
 'RFC 4104: Source IP v4 address' SUP pcelsImplicitVariableAuxClass AUXILIARY 
 )
objectClasses: ( 1.3.6.1.1.9.1.20 NAME 'pcelsSourceIPv6VariableAuxClass' DESC 
 'RFC 4104: Source IP v6 address' SUP pcelsImplicitVariableAuxClass AUXILIARY 
 )
objectClasses: ( 1.3.6.1.1.9.1.21 NAME 'pcelsDestinationIPv4VariableAuxClass' 
 DESC 'RFC 4104: Destination IP v4 address' SUP pcelsImplicitVariableAuxClass 
 AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.22 NAME 'pcelsDestinationIPv6VariableAuxClass' 
 DESC 'RFC 4104: Destination IP v6 address' SUP pcelsImplicitVariableAuxClass 
 AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.23 NAME 'pcelsSourcePortVariableAuxClass' DESC 
 'RFC 4104: Source port' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.24 NAME 'pcelsDestinationPortVariableAuxClass' 
 DESC 'RFC 4104: Destination port' SUP pcelsImplicitVariableAuxClass AUXILIARY
  )
objectClasses: ( 1.3.6.1.1.9.1.25 NAME 'pcelsIPProtocolVariableAuxClass' DESC 
 'RFC 4104: IP protocol number' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.26 NAME 'pcelsIPVersionVariableAuxClass' DESC '
 RFC 4104: IP version number' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.27 NAME 'pcelsIPToSVariableAuxClass' DESC 'RFC 
 4104: IP ToS octet' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.28 NAME 'pcelsDSCPVariableAuxClass' DESC 'RFC 4
 104: DiffServ code point' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.29 NAME 'pcelsFlowIdVariableAuxClass' DESC 'RFC
  4104: Flow Identifier' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.30 NAME 'pcelsSourceMACVariableAuxClass' DESC '
 RFC 4104: Source MAC address' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.31 NAME 'pcelsDestinationMACVariableAuxClass' D
 ESC 'RFC 4104: Destination MAC address' SUP pcelsImplicitVariableAuxClass AUX
 ILIARY )
objectClasses: ( 1.3.6.1.1.9.1.32 NAME 'pcelsVLANVariableAuxClass' DESC 'RFC 4
 104: VLAN' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.33 NAME 'pcelsCoSVariableAuxClass' DESC 'RFC 41
 04: Class of service' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.34 NAME 'pcelsEthertypeVariableAuxClass' DESC '
 RFC 4104: Ethertype' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.35 NAME 'pcelsSourceSAPVariableAuxClass' DESC '
 RFC 4104: Source SAP' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.36 NAME 'pcelsDestinationSAPVariableAuxClass' D
 ESC 'RFC 4104: Destination SAP' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.37 NAME 'pcelsSNAPOUIVariableAuxClass' DESC 'RF
 C 4104: SNAP OUI' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.38 NAME 'pcelsSNAPTypeVariableAuxClass' DESC 'R
 FC 4104: SNAP type' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.39 NAME 'pcelsFlowDirectionVariableAuxClass' DE
 SC 'RFC 4104: Flow direction' SUP pcelsImplicitVariableAuxClass AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.40 NAME 'pcelsValueAuxClass' DESC 'RFC 4104: Ba
 se class for representing a policy value' SUP top AUXILIARY MAY pcelsValueNam
 e )
objectClasses: ( 1.3.6.1.1.9.1.41 NAME 'pcelsIPv4AddrValueAuxClass' DESC 'RFC 
 4104: Provides IPv4 addresses' SUP pcelsValueAuxClass AUXILIARY MUST pcelsIPv
 4AddrList )
objectClasses: ( 1.3.6.1.1.9.1.42 NAME 'pcelsIPv6AddrValueAuxClass' DESC 'RFC 
 4104: Provides IPv6 addresses' SUP pcelsValueAuxClass AUXILIARY MUST pcelsIPv
 6AddrList )
objectClasses: ( 1.3.6.1.1.9.1.43 NAME 'pcelsMACAddrValueAuxClass' DESC 'RFC 4
 104: Provides MAC addresses' SUP pcelsValueAuxClass AUXILIARY MUST pcelsMACAd
 drList )
objectClasses: ( 1.3.6.1.1.9.1.44 NAME 'pcelsStringValueAuxClass' DESC 'RFC 41
 04: Provides string values' SUP pcelsValueAuxClass AUXILIARY MUST pcelsString
 List )
objectClasses: ( 1.3.6.1.1.9.1.45 NAME 'pcelsBitStringValueAuxClass' DESC 'RFC
  4104: Provides bit strings' SUP pcelsValueAuxClass AUXILIARY MUST pcelsBitSt
 ringList )
objectClasses: ( 1.3.6.1.1.9.1.46 NAME 'pcelsIntegerValueAuxClass' DESC 'RFC 4
 104: Provides integer values' SUP pcelsValueAuxClass AUXILIARY MUST pcelsInte
 gerList )
objectClasses: ( 1.3.6.1.1.9.1.47 NAME 'pcelsBooleanValueAuxClass' DESC 'RFC 4
 104: Provides a boolean value.' SUP pcelsValueAuxClass AUXILIARY MUST pcelsBo
 olean )
objectClasses: ( 1.3.6.1.1.9.1.48 NAME 'pcelsReusableContainer' DESC 'RFC 4104
 : Container for reusable policy information' SUP pcimRepository ABSTRACT MAY 
 ( pcelsReusableContainerName $ pcelsReusableContainerList ) )
objectClasses: ( 1.3.6.1.1.9.1.49 NAME 'pcelsReusableContainerAuxClass' DESC '
 RFC 4104: Container for reusable policy information' SUP pcelsReusableContain
 er AUXILIARY )
objectClasses: ( 1.3.6.1.1.9.1.50 NAME 'pcelsReusableContainerInstance' DESC '
 RFC 4104: Container for reusable policy information' SUP pcelsReusableContain
 er STRUCTURAL )
objectClasses: ( 1.3.6.1.1.9.1.51 NAME 'pcelsRoleCollection' DESC 'RFC 4104: C
 ollection of managed elements that share a common role' SUP pcimPolicy STRUCT
 URAL MUST pcelsRole MAY ( pcelsRoleCollectionName $ pcelsElementList ) )
objectClasses: ( 1.3.6.1.1.9.1.52 NAME 'pcelsFilterEntryBase' DESC 'RFC 4104: 
 Base class for message or packet filters' SUP pcimPolicy ABSTRACT MAY ( pcels
 FilterName $ pcelsFilterIsNegated ) )
objectClasses: ( 1.3.6.1.1.9.1.53 NAME 'pcelsIPHeadersFilter' DESC 'RFC 4104: 
 IP header filter' SUP pcelsFilterEntryBase STRUCTURAL MAY ( pcelsIPHdrVersion
  $ pcelsIPHdrSourceAddress $ pcelsIPHdrSourceAddressEndOfRange $ pcelsIPHdrSo
 urceMask $ pcelsIPHdrDestAddress $ pcelsIPHdrDestAddressEndOfRange $ pcelsIPH
 drDestMask $ pcelsIPHdrProtocolID $ pcelsIPHdrSourcePortStart $ pcelsIPHdrSou
 rcePortEnd $ pcelsIPHdrDestPortStart $ pcelsIPHdrDestPortEnd $ pcelsIPHdrDSCP
 List $ pcelsIPHdrFlowLabel ) )
objectClasses: ( 1.3.6.1.1.9.1.54 NAME 'pcels8021Filter' DESC 'RFC 4104: 802.1
  header filter' SUP pcelsFilterEntryBase STRUCTURAL MAY ( pcels8021HdrSourceM
 ACAddress $ pcels8021HdrSourceMACMask $ pcels8021HdrDestMACAddress $ pcels802
 1HdrDestMACMask $ pcels8021HdrProtocolID $ pcels8021HdrPriority $ pcels8021Hd
 rVLANID ) )
objectClasses: ( 1.3.6.1.1.9.1.55 NAME 'pcelsFilterListAuxClass' DESC 'RFC 410
 4: Collection of pcelsFilterEntryBase filters' SUP pcimConditionAuxClass AUXI
 LIARY MAY ( pcelsFilterListName $ pcelsFilterDirection $ pcelsFilterEntryList
  ) )
objectClasses: ( 1.3.6.1.1.9.1.56 NAME 'pcelsVendorVariableAuxClass' DESC 'RFC
  4104: Defines registered means to describe a policy variable' SUP pcelsVaria
 ble AUXILIARY MAY ( pcelsVendorVariableData $ pcelsVendorVariableEncoding ) )
objectClasses: ( 1.3.6.1.1.9.1.57 NAME 'pcelsVendorValueAuxClass' DESC 'RFC 41
 04: Defines registered means to describe a policy value' SUP pcelsValueAuxCla
 ss AUXILIARY MAY ( pcelsVendorValueData $ pcelsVendorValueEncoding ) )
objectClasses: ( 1.3.6.1.4.1.7924.2.1.2.1 NAME 'demailBaseObject' DESC '' SUP 
 top AUXILIARY MUST mail MAY c )
objectClasses: ( 1.3.6.1.4.1.7924.2.1.2.2 NAME 'demailSecurityObject' DESC '' 
 SUP demailBaseObject AUXILIARY MUST demailMaxAuthLevel )
objectClasses: ( 1.3.6.1.4.1.7924.2.1.2.3 NAME 'demailPersonObject' DESC '' SU
 P demailSecurityObject AUXILIARY MAY personalTitle )
objectClasses: ( 1.3.6.1.4.1.7924.2.1.2.4 NAME 'demailLegalPersonObject' DESC 
 '' SUP demailSecurityObject AUXILIARY MUST displayName )
objectClasses: ( 1.3.6.1.4.1.7924.2.1.2.5 NAME 'demailLegalPersonUserObject' D
 ESC '' SUP demailSecurityObject AUXILIARY MUST ( displayName $ o ) )
objectClasses: ( 1.3.6.1.4.1.15953.9.2.1 NAME 'sudoRole' DESC 'Sudoer Entries'
  SUP top STRUCTURAL MUST cn MAY ( sudoUser $ sudoHost $ sudoCommand $ sudoRun
 As $ sudoRunAsUser $ sudoRunAsGroup $ sudoOption $ sudoNotBefore $ sudoNotAft
 er $ sudoOrder $ description ) )
objectClasses: ( 1.3.6.1.4.1.24552.500.1.1.2.0 NAME 'ldapPublicKey' DESC 'MAND
 ATORY: OpenSSH LPK objectclass' SUP top AUXILIARY MAY ( sshPublicKey $ uid ) 
 )
objectClasses: ( 1.3.6.1.4.1.5427.1.389.6.1 NAME 'msPerson' DESC 'Supplement c
 lass for person entries' AUXILIARY MAY ( c $ gender $ businessTitle $ persona
 lTitle $ dateOfBirth $ uniqueIdentifier $ nickName $ organizationalStatus $ u
 serClass $ buildingName $ houseIdentifier $ labeledBICandIBAN $ employeeType 
 $ birthName $ birthPlace $ euVATId $ delegatesTo $ serialNumber ) )
objectClasses: ( 1.3.6.1.4.1.5427.1.389.6.8 NAME 'msOrganization' DESC 'Supple
 ment class for organizations/companies' AUXILIARY MAY ( c $ mail $ labeledURI
  $ euVATId $ labeledBICandIBAN $ displayName ) )
objectClasses: ( 1.3.6.1.4.1.5427.1.389.6.9 NAME 'mailboxRelatedObject' DESC '
 For pointing to an associated RFC822 (functional) mailbox from any entry' AUX
 ILIARY MAY ( mail $ displayName ) )
objectClasses: ( 1.3.6.1.4.1.5427.1.389.6.6 NAME 'musician' DESC 'Musician' AU
 XILIARY MAY ( musicalInstrument $ musicalOrchestra $ musicalArtistName ) )
objectClasses: ( 1.3.6.1.4.1.5427.1.389.6.660 NAME 'germanBankArrangement' DES
 C 'German bank account information' AUXILIARY MUST ( germanBankAccountNumber 
 $ germanBankCode ) MAY ( germanBankAccountHolder $ germanBankName $ germanBan
 kAccountInfo ) )
objectClasses: ( 1.3.6.1.4.1.5427.1.389.6.330 NAME 'msPwdResetObject' DESC 'En
 try for which a temporary password was set' AUXILIARY MUST ( msPwdResetPasswo
 rdHash $ msPwdResetTimestamp $ msPwdResetExpirationTime ) )
objectClasses: ( 1.3.6.1.4.1.5322.13.1.1 NAME 'namedObject' SUP top STRUCTURAL
  MAY cn )

