...
Version: v1-14, March 02, 2009
History:
- 03/02/2009, Michael Hodges; redefine uhExpiration to format yyyymmdd, 'account expiration date'.
- 02/19/2009, Michael Hodges; revived uhDataOrigin and expanded to string(128); removed uhFileShareMaxQuota; uhSSN, uhDOB, and secret Q&As attributes
- 07/31/2002, Russell Tokuyama; Changed uhAllowedServices to uhAllowedService. Added allowed value of 'file sharing' to uhAllowedService.
- 07/09/2002, Russell Tokuyama; Added uhAllowedServices attribute and allowed values, notes to uhRestrict for usage and allowed values, and Change Log.
Object Identifiers
Per RFC 2578 a unique object identifier (OID) is assigned to each LDAP attribute. The LDAP attribute OIDs are based on the UH Enterprise OID assigned by IANA.
OIDs |
|
|
|
---|---|---|---|
| UH Enterprise Number | 2160 | Assigned by IANA, http://www.iana.org/ |
| X.500 | 0.9.2342.19200300 | Directory Access Protocol |
| UH OID | 1.3.6.1.4.1.2160 | UH OID, based on the IANA assigned UH Enterprise Number |
| UH LDAP OID | 1.3.6.1.4.1.2160.1.1.1 | Lightweight Directory Access Protocol |
| Internet2 eduPerson | 1.3.6.1.4.1.5923 | http://www.educause.edu/netatedu/groups/pki/eduperson/spec.doc |
Sample DN for looking up person information
Distinguished Name | Example |
---|---|
dn | uhUuid=2314231232,ou=people,dc=hawaii,dc=edu |
Table of LDAP Attributes
...
...
Attribute Name
...
OID
...
Format
...
Indexing
...
Required?
...
Syntax
...
MultiValued?
...
Example Raw Data
...
Privacy?
...
Manager
...
Usage
...
Identifiers, Access Control
...
...
...
...
...
...
...
...
...
...
...
...
...
uid
...
0.9.2342.19200300.100.1.1
...
string(8)
...
yes
...
no
...
{a..z}{0..9}{-_}
...
yes
...
jdoe
...
public
...
no
...
Unix account name, WebCT account name, ...
...
...
uhUuid
...
1.3.6.1.4.1.2160.1.1.1.1
...
string(10)
...
yes
...
no
...
{0..9}
...
no
...
810321, 1014353266
...
private
...
no
...
UNISON ID, employee ID, ...
...
...
uhRestrict
...
1.3.6.1.4.1.2160.1.1.1.30
...
string(32)
...
no
...
no
...
{a..z}{A..Z}{0..9}{-_}
...
yes
...
uhUnlisted, uhNoPhoto
...
private
...
no
...
indicates that this info is to be 'unlisted'; used for filtering search results
...
...
uhAllowedService
...
1.3.6.1.4.1.2160.1.1.1.32
...
string(32)
...
no
...
no
...
{a..z}{A..Z}{0..9}{-_}
...
yes
...
email, home page, shell
...
private
...
no
...
indicates services user is allowed to use
...
...
userPassword
...
2.5.4.35
...
binary
...
no
...
no
...
...
no
...
...
private
...
yes
...
({crypt}xxxxxxxxx)
...
Object Identifiers
Per RFC 2578 a unique object identifier (OID) is assigned to each LDAP attribute. The LDAP attribute OIDs are based on the UH Enterprise OID assigned by IANA.
OIDs |
|
|
| ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| UH Enterprise Number | 2160 | Assigned by IANA, http://www.iana.org/ | |||||||||||
|
|
| X.500 | 0.9.2342.19200300 | Directory Access Protocol | ||||||||||
|
| eduPersonAffiliation UH OID | 1.3.6.1.4.1.5923.1.1.1.1 | string(32) | yes | yes | {a..z}{0..9}{-_} | yes | student, faculty, staff, ... | optional | no | white pages |
| eduPersonOrgDN 2160 | UH OID, based on the IANA assigned UH Enterprise Number |
| UH LDAP OID | 1.3.6.1.4.1.2160.1.1.1 | Lightweight Directory Access Protocol | ||||||||||||
| Internet2 eduPerson | 1.3.6.1.4.1.5923 .1.1.1.3 | string(32) | yes | yes | {a..z}{0..9}{-_} | yes | kcc, lcc, ... | optional | no | white pages | ||||
| uhPrimaryOrgDN | 1.3.6.1.4.1.2160.1.1.1.21 | string(32) | no | no | {a..z}{0..9}{-_} | no | kcc, lcc, ... | optional | no | white pages | ||||
| uhOrgRole | 1.3.6.1.4.1.2160.1.1.1.22 | string(64) | no | no | {a..z}{0..9}{-_} | yes | uh.cc.kapcc.bus.clerical | optional | no | authorization | ||||
| uhOrgRoleLevel | 1.3.6.1.4.1.2160.1.1.1.23 | string(2) | no | no | {0..9} | yes | 90 | optional | no | authorization | ||||
| uhOrgAffiliation | http://www.educause.edu/netatedu/groups/pki/eduperson/spec.doc |
Sample DN for looking up person information
Distinguished Name | Example |
---|---|
dn | uhUuid=2314231232,ou=people,dc=hawaii,dc=edu |
Table of LDAP Attributes
| Attribute Name | OID | Format | Indexing | Required? | Syntax | MultiValued? | Example Raw Data | Privacy? | Manager | Usage | ||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Identifiers, Access Control |
|
|
|
|
|
|
|
|
|
|
| ||||||||||||||||
| uid | 0.9.2342.19200300.100.1.1 | string(8) | yes | no | {a..z}{0..9}{-_} | yes | jdoe | public | no | Unix account name, WebCT account name, ... | ||||||||||||||||
| uhUuid | 1.3.6.1.4.1.2160.1.1.1.28 1 | string(6410) | yes | no yes | {a..z} {0..9} {-_} | yes no | eduPersonOrgDn=kauaicc, eduPersonAffiliation=student | public 810321, 1014353266 | private | no authorization | , white pages UNISON ID, employee ID, ... | |||||||||||||||
| uhAggregatePersonAffiliation userPassword | 1.3.6.1.4.1.2160.1.1.1.30 | string(64) | no | no | {a..z} | yes | private | no | authorization |
| uhBU 2.5.4.35 | binary | no | no |
| no |
| private | yes | ({crypt}xxxxxxxxx) | ||||||
Organizational Identification |
|
|
|
|
|
|
|
|
|
|
| ||||||||||||||||
| eduPersonAffiliation | 1.3.6.1.4.1.21605923.1.1.1.40 1 | string(232) | yes | no | yes | {a..z}{0..9}{-_} | yes | 01 student, 02faculty, 03staff, ... | public optional | no | white pages , distribution list generation | |||||||||||||||
| uhPrimaryCampus eduPersonOrgDN | 1.3.6.1.4.1.21605923.1.1.1.41 3 | string(232) | yes | no yes | {a..z}{A..Z}{0..9}{-_} | no |
| public yes | kcc, lcc, ... | optional | no | white pages , distribution list generation | ||||||||||||||
| uhPrimaryEAC uhPrimaryOrgDN | 1.3.6.1.4.1.2160.1.1.1.42 21 | string(2032) | yes no | no | {a..z}{A..Zz}{0..9}{-_} | no |
| public kcc, lcc, ... | optional | no | white pages , distribution list generation | Authentication |||||||||||||||
|
|
|
|
|
|
|
|
|
|
|
| userCertificate | 2.5.4.36 | binary uhOrgRole | 1.3.6.1.4.1.2160.1.1.1.22 | string(64) | no | no binary | {a..z}{0..9}{-_} | yes |
| public | yes | authentication uh.cc.kapcc.bus.clerical | optional | no | authorization |
| userSMIMECertificate | 2.16.840 uhOrgRoleLevel | 1.3.6.1.4.1.2160.1.113730.31.1.40 binary 23 | string(2) | no | no binary | {0..9} | yes | 90 | optional | no | public authorization | |||||||||||||||
yes | authentication | ||||||||||||||||||||||||||
Names |
|
|
|
|
|
|
|
|
|
|
| ||||||||||||||||
| cn | 2.5.4.3 | string(50) | no | no | {a..z}{A..Z}{0..9}{-_.} | yes | jonathan m doe, jr | optional | no | white pages; Full name | ||||||||||||||||
| sn | 2.5.4.4 | string(30) | no uhOrgAffiliation | 1.3.6.1.4.1.2160.1.1.1.28 | string(64) | no | yes | {a..z}{0..9}{-_} | yes | eduPersonOrgDn=kauaicc, eduPersonAffiliation=student | public | no | authorization, white pages | |||||||||||||
| uhBU | 1.3.6.1.4.1.2160.1.1.1.40 | string(2) | yes | no | {0..9} | yes | 01, 02, 03, ... | public | no | white pages, distribution list generation | ||||||||||||||||
| uhPrimaryCampus | 1.3.6.1.4.1.2160.1.1.1.41 | string(2) | yes | no | {a..z}{A..Z}{0..9}{-_.} | yes no | doe | optional public | no | white pages; Last name , distribution list generation | ||||||||||||||||
| givenName | 2.5.4. uhPrimaryEAC | 1.3.6.1.4.1.2160.1.1.1.42 | string(3020) | no yes | no | {a..z}{A..Z}{0..9}{-_.} | yes no | jonathan | optional public | no | white pages; First name , distribution list generation | |||||||||||||||
Names |
| initials | 2.5.4.43 | string(8) | no | no | {a..z} | yes | jmd | optional | no
|
|
|
|
|
|
|
|
|
| |||||||
| displayName cn | 2.16.840.15.1137304.3 .1.241 | string(50) | no | no | {a..z}{A..Z}{0..9}{-_'.} | no yes | jonathan 'jon' morris doe m doe, jr | optional | no | white pages; Full name | ||||||||||||||||
| eduPersonNickname sn | 1 2.35.64.1.4 .1.5923.1.1.1.2 | string(1630) | no | no | {a..z}{A..Z}{0..9}{-_.} | yes | jon doe | optional | no | white pages; Last name | ||||||||||||||||
| jpegPhoto givenName | 0 2.95.2342.19200300.100.1.60 binary 4.42 | string(30) | no | no | binary | no | {a..z}{A..Z}{0..9}{-_.} | yes | jonathan | optional | no | white pages | Current Legal Name ; First name | |||||||||||||
|
|
|
|
|
|
|
|
| initials | 2.5.4.43 | string(8) | no | no | {a..z} | yes | jmd | optional | no |
| ||||||||
| uhOfficialSurname displayName | 1 2.316.6840.1.4113730.1.21603.1.1.1.90 241 | string(3050) | no | no | {a..z}{0..9}{-_'.} | no | jonathan 'jon' morris doe | optional | no Official | documents, ie: transcripts white pages | ||||||||||||||||
| uhOfficialGivenName eduPersonNickname | 1.3.6.1.4.1.21605923.1.1.1.91 2 | string(3016) | no | no | {a..z}{0..9}{-_.} | no yes | jonathan jon | optional | no Official documents, ie: transcripts | white pages | ||||||||||||||||
Current Legal Name |
|
|
|
|
|
|
|
|
|
|
| ||||||||||||||||
| uhOfficialMiddleName uhOfficialSurname | 1.3.6.1.4.1.2160.1.1.1.92 90 | string(1630) | no | no | {a..z}{0..9}{-_.} | no | morris doe | optional | no | Official documents, ie: transcripts | ||||||||||||||||
| uhOfficialNamePrefix uhOfficialGivenName | 1.3.6.1.4.1.2160.1.1.1.93 91 | string(1630) | no | no | {a..z}{0..9}{-_.} | no | dr jonathan | optional | no | Official documents, ie: transcripts | ||||||||||||||||
| uhOfficialNameSuffix uhOfficialMiddleName | 1.3.6.1.4.1.2160.1.1.1.94 92 | string(16) | no | no | {a..z}{0..9}{-_.} | no | jr morris | optional | no | Official documents, ie: transcripts | ||||||||||||||||
| uhOfficialSalutation uhOfficialNamePrefix | 1.3.6.1.4.1.2160.1.1.1.95 93 | string(16) | no | no | {a..z}{0..9}{-_.} | no | dear | optional | no | Official documents, ie: transcripts | ||||||||||||||||
Contact Info |
|
|
|
|
|
|
|
|
|
|
| ||||||||||||||||
| 0.9.2342.19200300.100.1.3 | string(50.} | no | dr | optional | no | Official documents, ie: transcripts | ||||||||||||||||||||
| uhOfficialNameSuffix | 1.3.6.1.4.1.2160.1.1.1.94 | string(16) | no | no | {a..z}{0..9}{-_@.} | yes no | jon@university.edu jr | optional | no UH assigned email address | Official documents, ie: transcripts | ||||||||||||||||
| uhPreferredMail uhOfficialSalutation | 1.3.6.1.4.1.2160.1.1.1.62 95 | string(5016) | no | no | {a..z}{0..9}{-_@.} | no | dear | jon01001@mymail.com optional | public | yes | White pages; Preferred email address no | Official documents, ie: transcripts | ||||||||||||||
Contact Info |
| homePhone | 0.9.2342.19200300.100.1.20 | string(16) | no | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages |
| homePostalAddress
|
|
|
|
|
|
|
|
|
| ||||
| 0.9.2342.19200300.100.1.39 3 | string(50) | no | no | {a..z}{0..9}{-_#@.} | no yes | jon@university.edu | optional | no Home | Mailing Address: address line UH assigned email address | |||||||||||||||||
| mobile | 0.9.2342.19200300.100 uhPreferredMail | 1.3.6.1.4.1.2160.1.1.1.41 62 | string(1650) | no | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages |
| pager {a..z}{0..9}{-_@.} | no | jon01001@mymail.com | public | yes | White pages; Preferred email address | ||||||||
| homePhone | 0.9.2342.19200300.100.1.42 20 | string(16) | no | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages | ||||||||||||||||
| st | 2.5.4.8 | string(30) | no | no | {a..z}{0..9}{-_.} | no |
| optional | no | White pages; Mailing Address: state |
| street | 2.5.4.9 homePostalAddress | 0.9.2342.19200300.100.1.39 | string(50) | no | no | {a..z}{0..9}{-_#.} | no |
| optional | no | White pages; Home Mailing Address: street address line | |||
| postalAddress | 2.5.4.16 mobile | 0.9.2342.19200300.100.1.41 | string(5016) | no | no | {a..z}{0..9}{-_#.} | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages ; Mailing Address: address line | |||||||||||||
| postalCode | 2.5.4.17 pager | 0.9.2342.19200300.100.1.42 | string(1516) | no | no | {a..z}{0..9}{-_#.} | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages ; Mailing Address: zip code | |||||||||||||
| postOfficeBox st | 2.5.4.18 8 | string(1530) | no | no | {a..z}{0..9}{-_#.} | no |
| optional | no | White pages; Mailing Address: post office box state | ||||||||||||||||
| title street | 2.5.4.12 9 | string(6450) | no | no | {a..z}{0..9}{-_#.} | yes | Assoc Clin Prof or Registered Architect, Facil Plan Ofc or Prof, Finance/Dir, Ctr for Japanese Global Investment & Finance } | no |
| optional | no | White pages; Job Title Mailing Address: street address | ||||||||||||||
| physicalDeliveryOfficeName postalAddress | 2.5.4.19 16 | string(6450) | no | no | {a..z}{0..9}{-_#.} | yes | Queen's POB I #614 or Manele 106, Kapiolani CC or Nat Energy Lab of Haw, 73-4460 Queen Kaahumanu Hwy, Kailua-Kona }{0..9}{-_#.} | no |
| optional | no | White pages; Office Location or Number Mailing Address: address line | ||||||||||||||
| ou postalCode | 2.5.4.11 17 | string(6415) | no | no | {a..z}{0..9}{-_#.} | yes | Surgery, University of Hawaii at Manoa or School-to-Work/Computing, Electronics & Ntwrk Tech (CENT) }{-_#.} | no |
| optional | no | White pages; Department, Campus Mailing Address: zip code | ||||||||||||||
| telephoneNumber postOfficeBox | 2.5.4.20 18 | string(1615) | no | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 {a..z}{0..9}{-_#.} | no |
| optional | no | White pages; Telephone number Mailing Address: post office box | ||||||||||||||
| facsimileTelephoneNumber title | 2.5.4.23 | string(16) | no | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages; FAX number | ||||||||||||||||
LDAP Data Management |
|
|
|
|
|
|
|
|
|
|
| ||||||||||||||||
| uhExpiration | 1.3.6.1.4.1.2160.1.1.1.60 | string(8) | yes | no | yyyymmdd | no | 20090302 | private | no | Visitor Internet Access: account expiration date | ||||||||||||||||
Information | uhDataOrigin | 1.3.6.1.4.1.2160.1.1.1.61 | string(12812 | string(64) | no | no | {a..z}{0..9}{-_#.} | yes | Assoc Clin Prof or Registered Architect, Facil Plan Ofc or Prof, Finance/Dir, Ctr for Japanese Global Investment & Finance | optional | no | White pages; Job Title | |||||||||||||||
| physicalDeliveryOfficeName | 2.5.4.19 | string(64) | no | no | {a..z}{0..9}{-_#.} | yes | Queen's POB I #614 or Manele 106, Kapiolani CC or Nat Energy Lab of Haw, 73-4460 Queen Kaahumanu Hwy, Kailua-Kona | optional | no | White pages; Office Location or Number | ||||||||||||||||
| ou | 2.5.4.11 | string(64) | no | no | {a..z}{0..9}{=-_,.?<>;[]{}()&$@} | yes | VIA example: "dataOriginType=application,dataOriginID=VIA,requesterID=mklinger" | private | no | Authoritative source indicator | ||||||||||||||||
UH Attribute Values | Attribute Name | Keyword Value | Description | ||||||||||||||||||||||||
| uhRestrict | uhUnlisted | this leaf is to be unlisted and will not be displayed in a normal interactive retrieval. | ||||||||||||||||||||||||
| uhRestrict | uhNoPhoto | the photo for this individual is not to be appear in normal interactive retrievals. | ||||||||||||||||||||||||
| uhRestrict | uhNoDisplay | indicates that a specific attribute is not to be displayed during a normal interactive retrieval. | ||||||||||||||||||||||||
| uhRestrict | uhFullProfile | indicates that this individual has access to all updatedable attributes via the Interactive Profile Manager. | ||||||||||||||||||||||||
| uhRestrict | null | indicates no restrictions #.} | yes | Surgery, University of Hawaii at Manoa or School-to-Work/Computing, Electronics & Ntwrk Tech (CENT) | optional | no | White pages; Department, Campus | |||||||||||||||||||
| telephoneNumber | 2.5.4.20 | string(16) | no | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages; Telephone number | ||||||||||||||||
| facsimileTelephoneNumber | 2.5.4.23 | string(16) | no | no | +cc aaa nnn nnnn and derivatives | yes | +1 202 687 2202, 687 2201 | optional | no | White pages; FAX number | ||||||||||||||||
LDAP Data Management |
|
|
|
|
| uhAllowedService
| User has full access to a personal email account |
| uhAllowedService | emailforwarding | User has forwarding of incoming email only. Implied if email value set for this attribute.
|
|
|
|
| ||||||||||||
uhAllowedService | shell | User has access to a personal shell account (doesn't mean that one has necessarily been enabled) | |||||||||||||||||||||||||
| uhAllowedService | softwaredownloads | User has access to ITS software downloads | ||||||||||||||||||||||||
| uhAllowedService | wireless | User can access campus wireless network | ||||||||||||||||||||||||
| uhAllowedService | homepage | User has home (Web) page (personal web pages) | ||||||||||||||||||||||||
| uhAllowedService | null | Indicates no limits, all services allowed | ||||||||||||||||||||||||
| uhAllowedService | -'service' | Negates access to a specific service | ||||||||||||||||||||||||
|
|
| uhExpiration | 1.3.6.1.4.1.2160.1.1.1.60 | string(8) | yes | no | yyyymmdd | no | 20090302 | private | no | Visitor Internet Access: account expiration date | ||||||||||||||
Information | uhDataOrigin | 1.3.6.1.4.1.2160.1.1.1.61 | string(128) | no | no | {a..z}{0..9}{=-_,.?<>;[]{}()&$@} | yes | VIA example: "dataOriginType=application,dataOriginID=VIA,requesterID=mklinger" | private | no | Authoritative source indicator |