Novell Doc: NDK: Novell eDirectory Schema Reference

ASN.1 ID

2.16.840.1.113719.1.31.6.2.1

Class Flags

Class Flags	Setting
Container	Off
Effective	On
Nonremovable	Off
Ambiguous Naming	Off
Ambiguous Container	Off
Auxiliary Class	Off

Class Structure

Rule	Class/Attribute	Defined For
Super Classes	Top	MASV:Security Policy
Containment	SAS:Security	MASV:Security Policy
Named By	CN (Common Name)	MASV:Security Policy

Mandatory Attributes

MASV:Security Policy	Inherited from Top
CN (Common Name)	Object Class

Optional Attributes

MASV:Security Policy
Description	masvDomainPolicy

Inherited from Top
ACL Audit:File Link Authority Revocation auxClassCompatibility Back Link Bindery Property CA Private Key CA Public Key Certificate Revocation Certificate Validity Interval creatorsName Cross Certificate Pair DirXML-Associations Equivalent To Me	GUID Last Referenced Time masvAuthorizedRange masvDefaultRange masvProposedLabel modifiersName Obituary objectVersion Other GUID Reference Revision rbsAssignedRoles rbsOwnedCollections Used By

Default ACL Template

Object Name	Default Rights	Affected Attributes	Class Defined For
[Creator]	Supervisor	[Entry Rights]	Top

Remarks

For help in understanding the class definition template, see Reading Class Definitions.

Mandatory Access Control Service (MASV) uses access class labels. These labels represent the sensitivity of the information and the formal authorization of logged-in objects. Access class labels assigned to logged-in objects are called clearances or ranges. When these labels are assigned to resources (such as volumes or partitions), they are called classifications or security labels.

MASV makes use of both classifications and clearances to compute the access rights of a logged-in object to information stored in eDirectory objects and volumes. MASV works in conjunction with eDirectory ACLs and file system rights. All the security systems must allow access for an object to access the resource.

For LDAP clients to access this class, the LDAP server must map this class to a name that contains no spaces or colons.