# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
# 
#   http://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License. 

# =============================================================================
#                               System Schema
#
# Depends on no other schema!
# =============================================================================

attributetype ( 2.5.4.0 NAME 'objectClass'
    DESC 'RFC2256: object classes of the entity'
    EQUALITY objectIdentifierMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 )

attributetype ( 2.5.21.9 NAME 'structuralObjectClass'
    DESC 'X.500(93): structural object class of entry'
    EQUALITY objectIdentifierMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.38
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.1 NAME 'createTimestamp'
    DESC 'RFC2252: time which object was created'
    EQUALITY generalizedTimeMatch
    ORDERING generalizedTimeOrderingMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.2 NAME 'modifyTimestamp'
    DESC 'RFC2252: time which object was last modified'
    EQUALITY generalizedTimeMatch
    ORDERING generalizedTimeOrderingMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.3 NAME 'creatorsName'
    DESC 'RFC2252: name of creator'
    EQUALITY distinguishedNameMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.4 NAME 'modifiersName'
    DESC 'RFC2252: name of last modifier'
    EQUALITY distinguishedNameMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.9 NAME 'hasSubordinates'
    DESC 'X.501: entry has children'
    EQUALITY booleanMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.10 NAME 'subschemaSubentry'
    DESC 'RFC2252: name of controlling subschema entry'
    EQUALITY distinguishedNameMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.12 NAME 'collectiveAttributeSubentries'
    EQUALITY distinguishedNameMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
    NO-USER-MODIFICATION
    USAGE directoryOperation )

attributetype ( 2.5.18.7 NAME 'collectiveExclusions'
    EQUALITY objectIdentifierMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.38
    USAGE directoryOperation )

# root DSE attributes

attributetype ( 1.3.6.1.4.1.1466.101.120.6 NAME 'altServer'
    DESC 'RFC2252: alternative servers'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    USAGE dSAOperation )

attributetype ( 1.3.6.1.4.1.1466.101.120.5 NAME 'namingContexts'
    DESC 'RFC2252: naming contexts'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
    USAGE dSAOperation )

attributetype ( 1.3.6.1.4.1.1466.101.120.13 NAME 'supportedControl'
    DESC 'RFC2252: supported controls'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 USAGE dSAOperation )

attributetype ( 1.3.6.1.4.1.1466.101.120.7 NAME 'supportedExtension'
    DESC 'RFC2252: supported extended operations'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.38
    USAGE dSAOperation )

attributetype ( 1.3.6.1.4.1.1466.101.120.15 NAME 'supportedLDAPVersion'
    DESC 'RFC2252: supported LDAP versions'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
    USAGE dSAOperation )

attributetype ( 1.3.6.1.4.1.1466.101.120.14 NAME 'supportedSASLMechanisms'
    DESC 'RFC2252: supported SASL mechanisms'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
    USAGE dSAOperation )

attributetype ( 1.3.6.1.1.4 NAME 'vendorName'
    DESC 'RFC3045: name of implementation vendor'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE dSAOperation )

attributetype ( 1.3.6.1.1.5 NAME 'vendorVersion'
    DESC 'RFC3045: version of implementation'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
    SINGLE-VALUE NO-USER-MODIFICATION
    USAGE dSAOperation )

# ===================
# subentry attributes
# ===================

attributetype ( 2.5.18.5 NAME 'administrativeRole'
    EQUALITY objectIdentifierMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.38
    USAGE directoryOperation )

attributetype ( 2.5.18.6 NAME 'subtreeSpecification'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.45
    SINGLE-VALUE
    USAGE directoryOperation )

# =============================
# subschema subentry attributes
# =============================

attributetype ( 2.5.21.1 NAME 'dITStructureRules'
    DESC 'RFC2252: DIT structure rules'
    EQUALITY integerFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.17
    USAGE directoryOperation )

attributetype ( 2.5.21.2 NAME 'dITContentRules'
    DESC 'RFC2252: DIT content rules'
    EQUALITY objectIdentifierFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.16
    USAGE directoryOperation )

attributetype ( 2.5.21.4 NAME 'matchingRules'
    DESC 'RFC2252: matching rules'
    EQUALITY objectIdentifierFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.30
    USAGE directoryOperation )

attributetype ( 2.5.21.5 NAME 'attributeTypes'
    DESC 'RFC2252: attribute types'
    EQUALITY objectIdentifierFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.3
    USAGE directoryOperation )

attributetype ( 2.5.21.6 NAME 'objectClasses'
    DESC 'RFC2252: object classes'
    EQUALITY objectIdentifierFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.37
    USAGE directoryOperation )

attributetype ( 2.5.21.7 NAME 'nameForms'
    DESC 'RFC2252: name forms '
    EQUALITY objectIdentifierFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.35
    USAGE directoryOperation )

attributetype ( 2.5.21.8 NAME 'matchingRuleUse'
    DESC 'RFC2252: matching rule uses'
    EQUALITY objectIdentifierFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.31
    USAGE directoryOperation )

attributetype ( 1.3.6.1.4.1.1466.101.120.16 NAME 'ldapSyntaxes'
    DESC 'RFC2252: LDAP syntaxes'
    EQUALITY objectIdentifierFirstComponentMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.54
    USAGE directoryOperation )

# =====================
# knowledge information
# =====================

attributetype ( 2.5.4.1 NAME ( 'aliasedObjectName' 'aliasedEntryName' )
    DESC 'RFC2256: name of aliased object'
    EQUALITY distinguishedNameMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
    SINGLE-VALUE )

attributetype ( 2.16.840.1.113730.3.1.34 NAME 'ref'
    DESC 'namedref: subordinate referral URL'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
    USAGE distributedOperation )

attributetype ( 1.3.6.1.4.1.1466.101.119.3 NAME 'entryTtl'
    DESC 'RFC2589: entry time-to-live'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
    SINGLE-VALUE
    NO-USER-MODIFICATION
    USAGE dSAOperation )

attributetype ( 1.3.6.1.4.1.1466.101.119.4 NAME 'dynamicSubtrees'
    DESC 'RFC2589: dynamic subtrees'
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12
    NO-USER-MODIFICATION
    USAGE dSAOperation )

# =============================================================
# userApplication attributes (which system schema depends upon)
# =============================================================

attributetype ( 2.5.4.49 NAME 'distinguishedName'
    DESC 'RFC2256: common supertype of DN attributes'
    EQUALITY distinguishedNameMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )

attributetype ( 2.5.4.41 NAME 'name'
    DESC 'RFC2256: common supertype of name attributes'
    EQUALITY caseIgnoreMatch
    SUBSTR caseIgnoreSubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} )

attributetype ( 2.5.4.3 NAME ( 'cn' 'commonName' )
    DESC 'RFC2256: common name(s) for which the entity is known by'
    SUP name )

attributetype ( 2.5.4.35 NAME 'userPassword'
    DESC 'RFC2256/2307: password of user'
    EQUALITY octetStringMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )

attributetype (  1.3.6.1.4.1.250.1.57 NAME 'labeledURI'
    DESC 'RFC2079: Uniform Resource Identifier with optional label'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.4203.1.3.5 NAME 'supportedFeatures'
    EQUALITY objectIdentifierMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.38
    USAGE dSAOperation )

# ==============
# objectClasses
# ==============


objectclass ( 2.5.6.0 NAME 'top'
    DESC 'top of the superclass chain'
    ABSTRACT
    MUST objectClass )


objectclass ( 1.3.6.1.4.1.1466.101.120.111
    NAME 'extensibleObject'
    DESC 'RFC2252: extensible object'
    SUP top
    AUXILIARY )


objectclass ( 2.5.6.1 NAME 'alias'
    DESC 'RFC2256: an alias'
    SUP top
    STRUCTURAL
    MUST aliasedObjectName )


objectclass ( 2.16.840.1.113730.3.2.6 NAME 'referral'
    DESC 'namedref: named subordinate referral'
    SUP top
    STRUCTURAL
    MUST ref )


objectclass ( 1.3.6.1.4.1.4203.1.4.1
    NAME ( 'OpenLDAProotDSE' 'LDAProotDSE' )
    DESC 'OpenLDAP Root DSE object'
    SUP top
    STRUCTURAL
    MAY cn )


objectclass ( 2.5.17.0 NAME 'subentry'
    SUP top
    STRUCTURAL
    MUST ( cn $ subtreeSpecification ) )


objectclass ( 2.5.20.1 NAME 'subschema'
    DESC 'RFC2252: controlling subschema (sub)entry'
    AUXILIARY
    MAY ( dITStructureRules $ nameForms $ ditContentRules $
          objectClasses $ attributeTypes $ matchingRules $
          matchingRuleUse ) )


objectclass ( 2.5.17.2
    NAME 'collectiveAttributeSubentry'
    AUXILIARY )


objectclass ( 1.3.6.1.4.1.1466.101.119.2
    NAME 'dynamicObject'
    DESC 'RFC2589: Dynamic Object'
    SUP top
    AUXILIARY )