Search The Internet     Search ypass.net


 UNIX / Solaris 8 Software Dictionary 3S Info LegoRacers Other Crap 

       yPass Home > UNIX/Solaris 8 Info > OpenLDAP with Solaris 8 > Solaris Schemas
Intro to LDAP
Security
Schema
Replication
Getting the Software
Configuring OpenLDAP
Populating OpenLDAP
Configuring Solaris
LDAP Cache Manager
LDAP Scripts
Solaris Schemas
Questions? Send me an email at eric@ypass.net and I'll try to help.

This is an OpenLDAP schema definition for important Solaris specific object classes.

For more information, visit docs.sun.com schemas

nis.schema
solaris.schema

nis.schema (updated 02/01/2003)


# $OpenLDAP: pkg/ldap/servers/slapd/schema/nis.schema,v 1.1.8.5
# 2000/09/28 17:35:12 kurt Exp $
# Definitions from RFC2307 (Experimental)
#    An Approach for Using LDAP as a Network Information Service

# Depends upon core.schema and cosine.schema

# Note: The definitions in RFC2307 are given in syntaxes closely related
# to those in RFC2252, however, some liberties are taken that are not
# supported by RFC2252.  This file has been written following RFC2252
# strictly.

# OID Base is iso(1) org(3) dod(6) internet(1) directory(1) nisSchema(1).
# i.e. nisSchema in RFC2307 is 1.3.6.1.1.1
#
# Syntaxes are under 1.3.6.1.1.1.0 (two new syntaxes are defined)
#    validaters for these syntaxes are incomplete, they only
#    implement printable string validation (which is good as the
#    common use of these syntaxes violates the specification).
# Attribute types are under 1.3.6.1.1.1.1
# Object classes are under 1.3.6.1.1.1.2

# Attribute Type Definitions

attributetype ( 1.3.6.1.1.1.1.0 NAME 'uidNumber'
    DESC 'An integer uniquely identifying a user
              in an administrative domain'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.1 NAME 'gidNumber'
    DESC 'An integer uniquely identifying a group
              in an administrative domain'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos'
    DESC 'The GECOS field; the common name'
    EQUALITY caseIgnoreIA5Match
    SUBSTR caseIgnoreIA5SubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory'
    DESC 'The absolute path to the home directory'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell'
    DESC 'The path to the login shell'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid'
    EQUALITY caseExactIA5Match
    SUBSTR caseExactIA5SubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup'
    EQUALITY caseExactIA5Match
    SUBSTR caseExactIA5SubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
    DESC 'Netgroup triple'
    SYNTAX 1.3.6.1.1.1.0.0 )

attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol'
    SUP name )

attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber'
    DESC 'IP address as a dotted decimal, eg.
              192.168.1.1, omitting leading zeros'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )

attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber'
    DESC 'IP network as a dotted decimal,
              eg. 192.168, omitting leading zeros'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber'
    DESC 'IP netmask as a dotted decimal, eg.
              255.255.255.0, omitting leading zeros'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress'
    DESC 'MAC address in maximal, colon separated
              hex notation, eg. 00:00:92:90:ee:e2'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )

attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter'
    DESC 'rpc.bootparamd parameter'
    SYNTAX 1.3.6.1.1.1.0.1 )

attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile'
    DESC 'Boot image name'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName'
    SUP name )

#
# From: <kuenne@rentec.com> on the openldap mailing list
# Tue, 15 Jan 2002 19:31:13 -0500 a bug in Sol8 requires nismapentry
# to be all lower case
#
attributetype ( 1.3.6.1.1.1.1.27 NAME 'nismapentry'
    EQUALITY caseExactIA5Match
    SUBSTR caseExactIA5SubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} SINGLE-VALUE )

attributetype ( 1.3.6.1.1.1.1.28 NAME 'nisPublicKey'
    DESC 'NIS public key'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.1.1.1.29 NAME 'nisSecretKey'
    DESC 'NIS secret key'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

# Added EQUALITY line 2/1/2003
# Fix sent in by Phil Mayers <p.mayers@imperial.ac.uk>
# Under later versions of OpenLDAP, if the EQUALITY specification is not
# specified, a search for the nisDomain will fail.
attributetype ( 1.3.6.1.1.1.1.30 NAME 'nisDomain'
    DESC 'NIS domain'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

# Object Class Definitions

objectclass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' SUP top AUXILIARY
    DESC 'Abstraction of an account with POSIX attributes'
    MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory )
    MAY ( userPassword $ loginShell $ gecos $ description ) )

objectclass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' SUP top AUXILIARY
    DESC 'Additional attributes for shadow passwords'
    MUST uid
    MAY ( userPassword $ shadowLastChange $ shadowMin $
          shadowMax $ shadowWarning $ shadowInactive $
          shadowExpire $ shadowFlag $ description ) )

objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' SUP top STRUCTURAL
    DESC 'Abstraction of a group of accounts'
    MUST ( cn $ gidNumber )
    MAY ( userPassword $ memberUid $ description ) )

objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService' SUP top STRUCTURAL
    DESC 'Abstraction an Internet Protocol service.
          Maps an IP port and protocol (such as tcp or udp)
          to one or more names; the distinguished value of
          the cn attribute denotes the service"s canonical
          name'
    MUST ( cn $ ipServicePort $ ipServiceProtocol )
    MAY ( description ) )

objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' SUP top STRUCTURAL
    DESC 'Abstraction of an IP protocol. Maps a protocol number
          to one or more names. The distinguished value of the cn
          attribute denotes the protocol"s canonical name'
    MUST ( cn $ ipProtocolNumber $ description )
    MAY description )

objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' SUP top STRUCTURAL
    DESC 'Abstraction of an Open Network Computing (ONC)
          [RFC1057] Remote Procedure Call (RPC) binding.
          This class maps an ONC RPC number to a name.
          The distinguished value of the cn attribute denotes
          the RPC service"s canonical name'
    MUST ( cn $ oncRpcNumber $ description )
    MAY description )

objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' SUP top AUXILIARY
    DESC 'Abstraction of a host, an IP device. The distinguished
          value of the cn attribute denotes the host"s canonical
          name. Device SHOULD be used as a structural class'
    MUST ( cn $ ipHostNumber )
    MAY ( l $ description $ manager ) )

objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' SUP top STRUCTURAL
    DESC 'Abstraction of a network. The distinguished value of
          the cn attribute denotes the network"s canonical name'
    MUST ( cn $ ipNetworkNumber )
    MAY ( ipNetmaskNumber $ l $ description $ manager ) )

objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL
    DESC 'Abstraction of a netgroup. May refer to other netgroups'
    MUST cn
    MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) )

objectclass ( 1.3.6.1.1.1.2.9 NAME 'nisMap' SUP top STRUCTURAL
    DESC 'A generic abstraction of a NIS map'
    MUST nisMapName
    MAY description )

objectclass ( 1.3.6.1.1.1.2.10 NAME 'nisObject' SUP top STRUCTURAL
    DESC 'An entry in a NIS map'
    MUST ( cn $ nisMapEntry $ nisMapName )
    MAY description )

objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' SUP top AUXILIARY
    DESC 'A device with a MAC address; device SHOULD be
          used as a structural class'
    MAY macAddress )

objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' SUP top AUXILIARY
    DESC 'A device with boot parameters; device SHOULD be
          used as a structural class'
    MAY ( bootFile $ bootParameter ) )

objectclass ( 1.3.6.1.1.1.2.14 NAME 'nisKeyObject' SUP top AUXILIARY
    DESC 'A object with a public and secret key'
    MAY ( cn $ nisPublicKey $ nisSecretKey ) )

objectclass ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top AUXILIARY
    DESC 'Associates a NIS domain with a naming context'
    MAY ( nisDomain ) )

solaris.schema (updated 10/08/2001)
# Solaris Schema - igor@ypass.net
# http://docs.sun.com/ab2/coll.786.2/LDAPCONFIG/@Ab2PageView/2344?Ab2Lang=C&Ab2Enc=iso-8859-1

# See user_attr(4)
attributetype ( 1.3.6.1.4.1.42.2.27.5.1.1 
    NAME 'SolarisProjectID'
    DESC 'Unique ID for a Solaris Project entry'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.2 
    NAME 'SolarisProjectName'
    DESC 'Name of a Solaris Project Entry'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.3 
    NAME 'SolarisProjectAttr'
    DESC 'Attributes of a Solaris Project entry'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.30 
    NAME 'memberGid'
    DESC 'Posix Group Name'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

# see user_attr(4)
attributetype ( 1.3.6.1.4.1.42.2.27.5.1.4 
    NAME 'SolarisAttrKeyValue'
    DESC 'Semi-colon separated key=value pairs of attributes'
    EQUALITY caseIgnoreIA5Match
    SUBSTR caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.7 
    NAME 'SolarisAttrShortDesc'
    DESC 'Short description about an entry, used by GUIs'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.8 
    NAME 'SolarisAttrLongDesc'
    DESC 'Detail description about an entry'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.9 
    NAME 'SolarisKernelSecurityPolicy'
    DESC 'Solaris kernel security policy'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.10 
    NAME 'SolarisProfileType'
    DESC 'Type of object defined in profile'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.11 
    NAME 'SolarisProfileId'
    DESC 'Identifier of object defined in profile'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.12 
    NAME 'SolarisUserQualifier'
    DESC 'Per-user login attributes'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.13 
    NAME 'SolarisAttrReserved1'
    DESC 'Reserved for future use'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.14 
    NAME 'SolarisAttrReserved2'
    DESC 'Reserved for future use'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

# See prof_attr(4)
attributetype ( 1.3.6.1.4.1.42.2.27.5.1.15 
    NAME 'SolarisLDAPServers'
    DESC 'LDAP Server address eg. 76.234.3.1:389'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.16 
    NAME 'SolarisSearchBaseDN'
    DESC 'Search Base Distinguished Name'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.17 
    NAME 'SolarisCacheTTL'
    DESC 'TTL value for the Domain information eg. 1w, 2d, 3h, 10m, or 5s'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.18 
    NAME 'SolarisBindDN'
    DESC 'DN to be used to bind to the directory as proxy'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.19 
    NAME 'SolarisBindPassword'
    DESC 'Password for bindDN to authenticate to the directory'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.20 
    NAME 'SolarisAuthMethod'
    DESC 'Authentication method to be used eg. "NS_LDAP_AUTH_NONE",
              "NS_LDAP_AUTH_SIMPLE" or "NS_LDAP_AUTH_SASL_CRAM_MD5"'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.21 
    NAME 'SolarisTransportSecurity'
    DESC 'Transport Level Security method to be used eg.
              "NS_LDAP_SEC_NONE" or "NS_LDAP_SEC_SASL_TLS"'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.22 
    NAME 'SolarisCertificatePath'
    DESC 'Path to certificate file/device'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.23 
    NAME 'SolarisCertificatePassword'
    DESC 'Password or PIN that grants access to certificate.'
    EQUALITY caseExactIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.24 
    NAME 'SolarisDataSearchDN'
    DESC 'Search DN for data lookup in
              ":(DN0),(DN1),..." format'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.25 
    NAME 'SolarisSearchScope'
    DESC 'Scope to be used for search operations eg.
              "NS_LDAP_SCOPE_BASE", "NS_LDAP_SCOPE_ONELEVEL" or
              "NS_LDAP_SCOPE_SUBTREE"'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.26 
    NAME 'SolarisSearchTimeLimit'
    DESC 'Time Limit in seconds for search operations'
    EQUALITY integerMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.27 
    NAME 'SolarisPreferredServer'
    DESC 'Preferred LDAP Server address or network number'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.28 
    NAME 'SolarisPreferredServerOnly'
    DESC 'Boolean flag for use of preferredServer or not'
    EQUALITY booleanMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.29 
    NAME 'SolarisSearchReferral'
    DESC 'referral chasing option eg. "NS_LDAP_NOREF" or "NS_LDAP_FOLLOWREF"'
    EQUALITY caseIgnoreIA5Match
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

# See user_attr(4)
objectclass ( 1.3.6.1.4.1.42.2.27.5.2.1 
    NAME 'SolarisProject' 
    SUP top STRUCTURAL
    MUST ( SolarisProjectID $ SolarisProjectName )
    MAY ( memberUid $ memberGid $ description $ SolarisProjectAttr ) )

objectclass ( 1.3.6.1.4.1.42.2.27.5.2.3 
    NAME 'SolarisUserAttr' 
    SUP top AUXILIARY
    DESC 'User attributes'
    MAY ( SolarisUserQualifier $ SolarisAttrReserved1 $
            SolarisAttrReserved2 $ SolarisAttrKeyValue ) )

objectclass ( 1.3.6.1.4.1.42.2.27.5.2.4 
    NAME 'SolarisAuthAttr' 
    SUP top STRUCTURAL
    DESC 'Authorizations data'
    MUST cn
    MAY ( SolarisAttrReserved1 $ SolarisAttrReserved2 $
            SolarisAttrShortDesc $ SolarisAttrLongDesc $
                SolarisAttrKeyValue ) )

objectclass ( 1.3.6.1.4.1.42.2.27.5.2.5 
    NAME 'SolarisProfAttr' 
    SUP top STRUCTURAL
    DESC 'Profiles data'
    MUST cn
    MAY ( SolarisAttrReserved1 $ SolarisAttrReserved2 $
            SolarisAttrLongDesc $ SolarisAttrKeyValue ) )

objectclass ( 1.3.6.1.4.1.42.2.27.5.2.6 
    NAME 'SolarisExecAttr' 
    SUP top AUXILIARY
    DESC 'Profiles execution attributes'
    MAY ( SolarisKernelSecurityPolicy $ SolarisProfileType $
            SolarisAttrReserved1 $ SolarisAttrReserved2 $
            SolarisProfileId $ SolarisAttrKeyValue ) )

objectclass ( 1.3.6.1.4.1.42.2.27.5.2.7 
    NAME 'SolarisNamingProfile' 
    SUP top STRUCTURAL
    DESC 'Solaris LDAP Naming client profile objectClass'
    MUST ( cn $ SolarisLDAPServers $ SolarisSearchBaseDN )
    MAY ( SolarisBindDN $ SolarisBindPassword $ SolarisAuthMethod $
        SolarisTransportSecurity $ SolarisCertificatePath $
        SolarisCertificatePassword $ SolarisDataSearchDN $
        SolarisSearchScope $ SolarisSearchTimeLimit $
        SolarisPreferredServer $ SolarisPreferredServerOnly $
        SolarisCacheTTL $ SolarisSearchReferral ) )