22.12.2012 Views

Front cover - IBM Redbooks

Front cover - IBM Redbooks

Front cover - IBM Redbooks

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

8.3.3 Attributes<br />

320 Lotus Security Handbook<br />

If you are interested in obtaining a private enterprise number (“arc”) for your own<br />

organization, you may apply for one (free of charge) at the Internet Assigned<br />

Numbers Authority Web site at:<br />

http://www.iana.org/cgi-bin/enterprise.pl<br />

For more information regarding OIDs, the trees of assigned numbers, and<br />

registration, we recommend starting at the ASN.1 frequently asked questions<br />

Web site at:<br />

http://asn1.elibel.tm.fr/oid/faq.htm<br />

All the object class does is define the attributes, or types of data items contained<br />

in that type of object. Some examples of typical attributes are “cn” (common<br />

name), “sn” (surname), “givenName”, “mail”, “uid”, and “userPassword”. Just as<br />

the object classes are defined with unique OIDs, each attribute also has a unique<br />

OID number assigned to it.<br />

LDAP V3 attributes follow a similar (ASN.1) notation to that of object classes.<br />

The following are examples of attribute definitions.<br />

attribute: name<br />

attributetypes=( 2.5.4.41 NAME 'name' DESC 'The name attribute type is the<br />

attribute supertype from which string attribute types typically used for<br />

naming may be formed. It is unlikely that values of this type itself will<br />

occur in an entry.' EQUALITY 1.3.6.1.4.1.1466.109.114.2 SUBSTR 2.5.13.4<br />

SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 USAGE userApplications )<br />

attribute: sn<br />

attributetypes=( 2.5.4.4 NAME ( 'sn' 'surName' ) DESC 'This is the X.500<br />

surname attribute, which contains the family name of a person.' SUP<br />

2.5.4.41 EQUALITY 2.5.13.2 ORDERING 2.5.13.3 SUBSTR 2.5.13.4 USAGE<br />

userApplications )<br />

attribute: mail<br />

attributetypes=( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822mailbox' )<br />

DESC 'Identifies a users primary email address (the email address retrieved<br />

and displayed by white-pages lookup applications).' EQUALITY 2.5.13.2<br />

SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 USAGE userApplications )<br />

Notice in the second example that the superior (SUP) of sn is the attribute<br />

“2.5.4.41”, which happens to be the “name” attribute (the first example listed).<br />

But then the “name” attribute description says “unlikely that values of this type<br />

itself will occur...”. This illustrates just one of the many peculiarities of the way the<br />

attributes have been defined. It merely provides a shorthand way of defining

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!