Novell Doc: NDK: Novell eDirectory Schema Reference

LDAP Name

residentialPerson

ASN.1 ID

2.5.6.10

Class Flags

Class Flags	Setting
Container	Off
Effective	On
Nonremovable	On
Ambiguous Naming	Off
Ambiguous Container	Off
Auxiliary Class	Off

Class Structure

Rule	Class	Defined For
Super Classes	Top ndsLoginProperties Person Organizational Person	ndsLoginProperties Person Organizational Person User
Containment	domain Organization Organizational Unit	Organizational Person Organizational Person Organizational Person
Named By	CN (Common Name) uniqueID OU (Organizational Unit Name)	Organizational Person Organizational Person Organizational Person

Rule

Class

Defined For

Super Classes

Top

ndsLoginProperties

Person

Organizational Person

ndsLoginProperties

Person

Organizational Person

User

Containment

domain

Organization

Organizational Unit

Organizational Person

Named By

CN (Common Name)

uniqueID

OU (Organizational Unit Name)

Organizational Person

Mandatory Attributes

User	Inherited from Top	Inherited from ndsLoginProperties	Inherited from Person	Inherited from Organizational Person
(None)	Object Class	(None)	CN (Common Name) Surname	(None)

User

Inherited from Top

Inherited from ndsLoginProperties

Inherited from Person

Inherited from Organizational Person

(None)

Object Class

(None)

CN (Common Name)

Surname

(None)

Optional Attributes Defined for User

User
Account Balance Allow Unlimited Credit audio businessCategory carLicense departmentNumber displayName Employee ID employeeType Entrust:User Group Membership Higher Privileges Home Directory homePhone homePostalAddress Internet EMail Address jpegPhoto labeledUri Language Last Login Time LDAP:ARL LDAP:caCertificate LDAP:CRL LDAP:crossCertificatePair ldapPhoto LDAPUserCertificate Locked By Intruder	Login Allowed Time Map Login Disabled Login Expiration Time Login Grace Limit Login Grace Remaining Login Intruder Address Login Intruder Attempts Login Intruder Reset Time Login Maximum Simultaneous Login Script Login Time manager Message Server Minimum Account Balance mobile NDSPKI:Keystore NDSPKI:userCertificateInfo Network Address Network Address Restriction NRD:Registry Data NRD:Registry Index NSCP:employeeNumber NSCP:mailAccessDomain NSCP:mailAlternateAddress NSCP:mailAutoReplyMode NSCP:mailAutoReplyText NSCP:mailDeliveryOption
NSCP:mailForwardingAddress NSCP:mailHost NSCP:mailMessageStore NSCP:mailProgramDeliveryInfo NSCP:mailQuota NSCP:nsLicenseEndTime NSCP:nsLicensedFor NSCP:nsLicenseStartTime pager Password Allow Change Password Expiration Interval Password Expiration Time Password Minimum Length Password Required Password Unique Required Passwords Used preferredLanguage	Print Job Configuration Printer Control Private Key Profile Profile Membership Public Key roomNumber secretary Security Equals Security Flags Server Holds Timezone Type Creator Map UID (User ID) userCertificate userSMIMECertificate x500UniqueIdentifier

User

Optional Attributes from inetOrgPerson*
audio businessCategory carLicense departmentNumber displayName employeeType Given Name homePhone homePostalAddress Initials Internet EMail Address jpegPhoto labeledUri	ldapPhoto manager mobile NSCP:employeeNumber pager preferredLanguage roomNumber secretary uniqueID userCertificate userSMIMECertificate x500UniqueIdentifier

*The inetOrgPerson attributes are not added automatically to User. See Remarks for more information.

Inherited from Top
ACL Audit:File Link Authority Revocation auxClassCompatibility Back Link Bindery Property CA Private Key CA Public Key Certificate Revocation Certificate Validity Interval creatorsName Cross Certificate Pair DirXML-Associations Equivalent To Me	GUID Last Referenced Time masvAuthorizedRange masvDefaultRange masvProposedLabel modifiersName Obituary objectVersion Other GUID Reference Revision rbsAssignedRoles rbsOwnedCollections Used By

Inherited from ndsLoginProperties
Account Balance Allow Unlimited Credit Group Membership Higher Privileges Language Last Login Time Locked By Intruder Login Allowed Time Map Login Disabled Login Expiration Time Login Grace Limit Login Grace Remaining Login Intruder Address Login Intruder Attempts Login Intruder Reset Time Login Maximum Simultaneous Login Script Login Time	Minimum Account Balance Network Address Network Address Restriction Password Allow Change Password Expiration Interval Password Expiration Time Password Minimum Length Password Required Password Unique Required Passwords Used Private Key Profile Profile Membership Public Key Security Equals Security Flags Server Holds Timezone

Inherited from Person
accessCardNumber assistant assistantPhone city co company costCenter costCenterDescription departmentNumber Description directReports employeeStatus employeeType Full Name Generational Qualifier Given Name Initials instantMessagingID isManager jackNumber	jobCode mailstop manager mobile otherPhoneNumber pager personalTitle photo preferredName roomNumber See Also siteLocation S (State or Province Name) Surname Telephone Number tollFreePhoneNumber uniqueID vehicleInformation workforceID

Inherited from Organizational Person
destinationIndicator EMail Address Facsimile Telephone Number internationaliSDNNumber L (Locality Name) Mailbox ID Mailbox Location OU (Organizational Unit Name) Physical Delivery Office Name Postal Address	Postal Code Postal Office Box preferredDeliveryMethod registeredAddress S (State or Province Name) SA (Street Address) telexNumber telexTerminalIdentifier Title x121Address

Default ACL Template Defined for User

Object Name	Default Rights	Affected Attributes	Class Defined For
[Creator]	Supervisor	[Entry Rights]	Top
[Public]	Read	Message Server	User
[Root]	Browse	[Entry Rights]	User
[Root]	Read	Group Membership	User
[Root]	Read	Network Address	User
[Self]	Read	[All Attributes]	User
[Self]	Read/Write	Login Script	User
[Self]	Read/Write	Print Job Configuration	User

Remarks

For help in understanding the class definition template, see Reading Class Definitions.

The User class includes both clients and service providers. In this context, Private Key stores the object’s private key encrypted by the object’s password.

The X.500 standard defines two subclasses of person: Organizational Person and Residential Person. The operational schema does not defined Residential Person, but the division of Person from Organizational Person has been maintained for compatibility with X.500.

In NDS 8, the User class inherits the eDirectory login attributes from the ndsLoginProperties class. For backwards compatibility with previous versions of NDS, they have not been removed from the list of optional attributes in the User class definition.

The LDAP server ships with an optional nov_inet.sch file. This file, when executed, adds inetOrgPerson attributes to the User class. To add these attributes and allow LDAP applications to use the User class as if it were the inetOrgPerson class, run nwconfig.nlm and run the sys:system\schema\nov_inet.sch file. For information on setting up a separate class for inetOrgPerson, see inetOrgPerson.