B Oracle Internet Directory Schema Elements

B.3.1 Access Control Schema Elements

B.3.2 Audit Log Schema Elements

B.3.3 Attributes for Oracle Application Server Integration and Provisioning

In order to identify objects that are synchronized from Microsoft Active Directory, Oracle Internet Directory contains the schema elements listed in Table B-5, which correspond to Microsoft Active Directory-specific attributes.

B.3.4 Attribute Uniqueness Schema Elements

B.3.5 Configuration Set Entry Schema Elements

The following table lists and describes the entire set of configuration set entry attributes that are used to configure an instance of the directory server.

file:/home/my_dir/my_wallet

file:C:\my_dir\my_wallet

B.3.6 Debug Logging Schema Elements

B.3.7 Dynamic Groups Schema Elements

Table B-9 lists and describes the attributes of the orclDynamicGroup object class

B.3.8 Garbage Collection Schema Elements

Schema Elements for Predefined Garbage Collectors

Oracle Internet Directory provides several predefined garbage collectors that, together, clean up all unwanted data in the directory server. These predefined garbage collectors are:

• Audit Log Garbage Collector

• Change Log Garbage Collector

• General Statistics Garbage Collector

• Health Statistics Garbage Collector

• Security and Refresh Events Garbage Collector

• System Resource Events Garbage Collector

• Tombstone Garbage Collector

Audit Log Garbage Collector

Audit log garbage collector cleans up unwanted entries created for auditing the directory server.

Change Log Garbage Collector

Change log garbage collector cleans up the consumed change log entries in the directory.

General Statistics Garbage Collector

The General Statistics garbage collector cleans up unwanted general statistical entries created for the directory server.

Health Statistics Garbage Collector

The Health Statistics garbage collector cleans up unwanted health statistics entries created for the directory server.

Security and Refresh Events Garbage Collector

The Security and Refresh Events garbage collector cleans up the unwanted entries created for monitoring the security and refresh events of the directory server.

System Resource Events Garbage Collector

The System Resource Events garbage collector cleans up unwanted entries created for monitoring system resources events of the directory server.

Tombstone Garbage Collector

The Tombstone garbage collector cleans up unwanted entries marked as deleted.

Oracle Internet Directory Plug-In for Garbage Collection

The garbage collection framework relies on the Oracle Internet Directory plug-in framework to trigger the garbage collection engine. This section tells you the attribute value pairs that the garbage collection plug-in uses for various operations.

Attributes for Creating a Garbage Collector

To create a garbage collector, the garbage collection plug-in uses the attribute value pairs listed in Table B-18.

Attributes for Modifying a Garbage Collector

To modify a garbage collector, the garbage collection plug-in uses the attribute value pairs listed in Table B-19.

Attributes for Deleting a Garbage Collector

To delete a garbage collector, the garbage collection plug-in uses the attribute value pairs listed in Table B-20.

B.3.9 Optional Attributes of the orclUserV2 Object Class

The following are optional attributes from the orclUserV2 object class:

B.3.10 Oracle Internet Directory Configuration Schema Elements

B.3.11 Oracle Internet Directory Server Manageability Schema Elements

B.3.12 Password Policy Schema Elements

The pwdPolicy object class is an auxiliary object class containing the password policy information for a set of users in a given DIT. It contains attributes that define the password policy information for the entire directory.

Table B-24 lists and describes the attributes of the pwdPolicy object class. The default value for each of these attributes is 0 (zero). These attributes are single-valued, except orclpwdIllegalValues, which is multi-valued.

In addition to the pwdpolicysubentry mentioned earlier, the object class top contains these operational attributes to maintain the user-password state information for each user entry.

B.3.13 Password Verifier Schema Elements

Both the directory and Oracle components store the user password in the user entry, but in different attributes. Whereas the directory stores user passwords in the userPassword attribute, Oracle components store user password verifiers in the authPassword, orclPasswordVerifier, or orclpassword attribute. Table B-26 describes each of the attributes used by Oracle components.

Each of these attribute types has appID as an attribute subtype. This attribute subtype uniquely identifies a particular application. For example, the appID can be the ORCLGUID of the application entry. This attribute subtype is generated during application installation.

B.3.14 Plug-in Schema Elements

The orclPluginConfig object class is a structural object class that must be associated with all plug-in entries. Its superclass is top. Table B-27 lists and describes its attributes.

ldapcompare
ldapmodify
ldapbind
ldapadd
ldapdelete
ldapsearch

orclPluginSubscriberDNList=
dc=COM,c=us;
dc=us,dc=oracle,dc=com;
dc=org,dc=us; o=IMC,c=US

pre
when
post

operational

B.3.15 Resource Information Schema Elements

This section lists and describes the attributes for:

• Resource access descriptors (RADs)

• Resource type information

The resource access descriptor object contains the attributes listed and described in.

B.3.16 Replication Schema Elements

Replication Server Configuration Parameters

Table B-31 lists and describes the attributes of the replication server configuration set entry, which has the following DN: cn=configset0,cn=osdrepld,cn=subconfigsubentry.

Replica Subentry Attributes

Replication Agreement Entry Attributes

Replication Naming Context Objects

The container for replication naming context objects is an entry with the RDN cn=replication namecontext. It is created below the orclagreementID entry at installation. The cn=replication namecontext entry has the attributes listed and described in Table B-34.

B.3.17 SSL Schema Elements

The SSL attributes are: orclsslAuthentication, orclsslEnable, orclsslWalletURL, orclsslPort, orclsslVersion

B.3.18 System Operational Attributes

The following system operational attributes are modifiable.

ldapmodify -p port -D cn=orcladmin -w adminpassword << EOF
dn: cn=dsaconfig,cn=configsets,cn=oracle internet directory
changetype: modify
replace: orclecachemaxentrysize
orclecachemaxentrysize: new_integer_value
EOF

B.4.1 LDAP Syntax Enforced by Oracle Internet Directory

Oracle Internet Directory enforces LDAP syntax for the following:

• DN

• Facsimile Telephone Number

• OID (object identifier)

• Telephone Number

  
  

  Note: The values you specify for these attributes must conform to the syntax specified in RFC 2252.

  
  

B.4.2 Commonly Used LDAP Syntax Recognized by Oracle Internet Directory

The following LDAP syntax is more commonly used:

• Attribute Type Description

• Numeric String

• Boolean

• Object Class Description

• Certificate

• Octet String

• Directory String

• OID

• DN

• Presentation Address

• Facsimile Telephone Number

• Printable String

• INTEGER

• Telephone Number

• JPEG

• UTC Time

• Name And Optional UID

B.4.3 Additional LDAP Syntax Recognized by Oracle Internet Directory

In addition to the commonly used LDAP syntax defined in the previous section, Oracle Internet Directory recognizes LDAP syntax for the following:

• Access Point

• LDAP Schema Description

• ACI Item

• LDAP Syntax Description

• Audio

• Mail Preference

• Binary

• Master And Shadow Access Points

• Bit String

• Matching Rule

• Certificate List

• Matching Rule Use Description

• Certificate Pair

• MHS OR Address

• Country String

• Modify Rights

• Data Quality Syntax

• Name Form Description

• Delivery Method

• Object Class Description

• DIT Content Rule Description

• Octet String

• DIT Structure Rule Description

• Other Mailbox

• DL Submit Permission

• Postal Address

• DSA Quality Syntax

• Protocol Information

• DSE Type

• Substring Assertion

• Enhanced Guide

• Subtree Specification

• Fax

• Supplier And Consumer

• Generalized Time

• Supplier Information

• Guide

• Supplier Or Consumer

• IA5 String

• Supported Algorithm

• LDAP Schema Definition

• Teletex TerminalIdentifier

• Telex Number

B.4.4 Size of Attribute Values

Syntax does not put any specific size constraint on attribute values. You can, however, use syntax to specify the size of the attribute value. Oracle Internet Directory does not enforce the 'len' characteristics on the attribute.

For example, to limit an attribute foo to a size of 64, you would define the attribute as follows:

(object_identifier_of_attribute NAME 'foo' EQUALITY caseIgnoreMatch SYNTAX 'object_identifier_of_syntax{64}')

B.7.1 Password Policy Controls

Table B-38 lists and describes the password policy controls.

B.7.2 Controls for Dynamic Password Verifiers

The LDAP controls described in Table B-39 are used to create dynamic password verifiers and to transmit related error messages.