Novell Doc: NDK: Novell eDirectory Schema Reference

ASN.1 ID

2.16.840.1.113719.1.48.6.1.2

Class Flags

Class Flags	Setting
Container	Off
Effective	On
Nonremovable	Off
Ambiguous Naming	Off
Ambiguous Container	Off
Auxiliary Class	Off

Class Structure

Rule	Class/Attribute	Defined For
Super Classes	Top	NDSPKI:Key Material
Containment	Organization Organizational Unit SAS:Security	NDSPKI:Key Material NDSPKI:Key Material NDSPKI:Key Material
Named By	CN (Common Name)	NDSPKI:Key Material

Rule

Class/Attribute

Defined For

Super Classes

Top

NDSPKI:Key Material

Containment

Organization

Organizational Unit

SAS:Security

NDSPKI:Key Material

Named By

CN (Common Name)

NDSPKI:Key Material

Mandatory Attributes

NDSPKI:Key Material	Inherited from Top
CN (Common Name)	Object Class

Optional Attributes

NDSPKI:Key Material
Host Server NDSPKI:Certificate Chain NDSPKI:Given Name NDSPKI:Key File	NDSPKI:Private Key NDSPKI:Public Key NDSPKI:Public Key Certificate NDSPKI:Subject Name

Inherited from Top
ACL Audit:File Link Authority Revocation auxClassCompatibility Back Link Bindery Property CA Private Key CA Public Key Certificate Revocation Certificate Validity Interval creatorsName Cross Certificate Pair DirXML-Associations Equivalent To Me	GUID Last Referenced Time masvAuthorizedRange masvDefaultRange masvProposedLabel modifiersName Obituary objectVersion Other GUID Reference Revision rbsAssignedRoles rbsOwnedCollections Used By

Default ACL Template

Object Name	Default Rights	Affected Attributes	Class Defined For
[Creator]	Supervisor	[Entry Rights]	Top

Remarks

For help in understanding the class definition template, see Reading Class Definitions.

An NCP Server object can have multiple NDSPKI:Key Material objects. One should be created for each service that needs one. Each service should have its own so that if the key pair is broken for one service, the other service is not compromised.

The service that is using a NDSPKI:Key Material object must run on the same NCP server that created the NDSPKI:Key Material object. NDSPKI:Key Material objects cannot be shared across servers.

The Host Server attribute identifies the NCP Server object to which the NDSPKI:Key Material object belongs.

For LDAP clients to access this class, the LDAP server must map this class to a name that contains no spaces or colons.