1# OpenLDAP X.509 PMI schema
2# $OpenLDAP$
3## This work is part of OpenLDAP Software <http://www.openldap.org/>.
4##
5## Copyright 1998-2021 The OpenLDAP Foundation.
6## All rights reserved.
7##
8## Redistribution and use in source and binary forms, with or without
9## modification, are permitted only as authorized by the OpenLDAP
10## Public License.
11##
12## A copy of this license is available in the file LICENSE in the
13## top-level directory of the distribution or, alternatively, at
14## <http://www.OpenLDAP.org/license.html>.
15#
16## Portions Copyright (C) The Internet Society (1997-2006).
17## All Rights Reserved.
18#
19# Includes LDAPv3 schema items from:
20# ITU X.509 (08/2005)
21#
22# This file was automatically generated from pmi.schema; see that file
23# for complete references.
24#
25dn: cn=pmi,cn=schema,cn=config
26objectClass: olcSchemaConfig
27cn: pmi
28olcObjectIdentifier: {0}id-oc-pmiUser 2.5.6.24
29olcObjectIdentifier: {1}id-oc-pmiAA 2.5.6.25
30olcObjectIdentifier: {2}id-oc-pmiSOA 2.5.6.26
31olcObjectIdentifier: {3}id-oc-attCertCRLDistributionPts 2.5.6.27
32olcObjectIdentifier: {4}id-oc-privilegePolicy 2.5.6.32
33olcObjectIdentifier: {5}id-oc-pmiDelegationPath 2.5.6.33
34olcObjectIdentifier: {6}id-oc-protectedPrivilegePolicy 2.5.6.34
35olcObjectIdentifier: {7}id-at-attributeCertificate 2.5.4.58
36olcObjectIdentifier: {8}id-at-attributeCertificateRevocationList 2.5.4.59
37olcObjectIdentifier: {9}id-at-aACertificate 2.5.4.61
38olcObjectIdentifier: {10}id-at-attributeDescriptorCertificate 2.5.4.62
39olcObjectIdentifier: {11}id-at-attributeAuthorityRevocationList 2.5.4.63
40olcObjectIdentifier: {12}id-at-privPolicy 2.5.4.71
41olcObjectIdentifier: {13}id-at-role 2.5.4.72
42olcObjectIdentifier: {14}id-at-delegationPath 2.5.4.73
43olcObjectIdentifier: {15}id-at-protPrivPolicy 2.5.4.74
44olcObjectIdentifier: {16}id-at-xMLPrivilegeInfo 2.5.4.75
45olcObjectIdentifier: {17}id-at-xMLPprotPrivPolicy 2.5.4.76
46olcObjectIdentifier: {18}id-mr 2.5.13
47olcObjectIdentifier: {19}id-mr-attributeCertificateMatch id-mr:42
48olcObjectIdentifier: {20}id-mr-attributeCertificateExactMatch id-mr:45
49olcObjectIdentifier: {21}id-mr-holderIssuerMatch id-mr:46
50olcObjectIdentifier: {22}id-mr-authAttIdMatch id-mr:53
51olcObjectIdentifier: {23}id-mr-roleSpecCertIdMatch id-mr:54
52olcObjectIdentifier: {24}id-mr-basicAttConstraintsMatch id-mr:55
53olcObjectIdentifier: {25}id-mr-delegatedNameConstraintsMatch id-mr:56
54olcObjectIdentifier: {26}id-mr-timeSpecMatch id-mr:57
55olcObjectIdentifier: {27}id-mr-attDescriptorMatch id-mr:58
56olcObjectIdentifier: {28}id-mr-acceptableCertPoliciesMatch id-mr:59
57olcObjectIdentifier: {29}id-mr-delegationPathMatch id-mr:61
58olcObjectIdentifier: {30}id-mr-sOAIdentifierMatch id-mr:66
59olcObjectIdentifier: {31}id-mr-indirectIssuerMatch id-mr:67
60olcObjectIdentifier: {32}AttributeCertificate 1.3.6.1.4.1.4203.666.11.10.2.1
61olcObjectIdentifier: {33}CertificateList 1.3.6.1.4.1.1466.115.121.1.9
62olcObjectIdentifier: {34}AttCertPath 1.3.6.1.4.1.4203.666.11.10.2.4
63olcObjectIdentifier: {35}PolicySyntax 1.3.6.1.4.1.4203.666.11.10.2.5
64olcObjectIdentifier: {36}RoleSyntax 1.3.6.1.4.1.4203.666.11.10.2.6
65olcLdapSyntaxes: {0}( 1.3.6.1.4.1.4203.666.11.10.2.4 DESC 'X.509 PMI attribute
66  certificate path: SEQUENCE OF AttributeCertificate' X-SUBST '1.3.6.1.4.1.146
67 6.115.121.1.15' )
68olcLdapSyntaxes: {1}( 1.3.6.1.4.1.4203.666.11.10.2.5 DESC 'X.509 PMI policy sy
69 ntax' X-SUBST '1.3.6.1.4.1.1466.115.121.1.15' )
70olcLdapSyntaxes: {2}( 1.3.6.1.4.1.4203.666.11.10.2.6 DESC 'X.509 PMI role synt
71 ax' X-SUBST '1.3.6.1.4.1.1466.115.121.1.15' )
72olcAttributeTypes: {0}( id-at-role NAME 'role' DESC 'X.509 Role attribute, use
73  ;binary' SYNTAX RoleSyntax )
74olcAttributeTypes: {1}( id-at-xMLPrivilegeInfo NAME 'xmlPrivilegeInfo' DESC 'X
75 .509 XML privilege information attribute' SYNTAX 1.3.6.1.4.1.1466.115.121.1.1
76 5 )
77olcAttributeTypes: {2}( id-at-attributeCertificate NAME 'attributeCertificateA
78 ttribute' DESC 'X.509 Attribute certificate attribute, use ;binary' EQUALITY 
79 attributeCertificateExactMatch SYNTAX AttributeCertificate )
80olcAttributeTypes: {3}( id-at-aACertificate NAME 'aACertificate' DESC 'X.509 A
81 A certificate attribute, use ;binary' EQUALITY attributeCertificateExactMatch
82  SYNTAX AttributeCertificate )
83olcAttributeTypes: {4}( id-at-attributeDescriptorCertificate NAME 'attributeDe
84 scriptorCertificate' DESC 'X.509 Attribute descriptor certificate attribute, 
85 use ;binary' EQUALITY attributeCertificateExactMatch SYNTAX AttributeCertific
86 ate )
87olcAttributeTypes: {5}( id-at-attributeCertificateRevocationList NAME 'attribu
88 teCertificateRevocationList' DESC 'X.509 Attribute certificate revocation lis
89 t attribute, use ;binary' SYNTAX CertificateList X-EQUALITY 'certificateListE
90 xactMatch, not implemented yet' )
91olcAttributeTypes: {6}( id-at-attributeAuthorityRevocationList NAME 'attribute
92 AuthorityRevocationList' DESC 'X.509 AA certificate revocation list attribute
93 , use ;binary' SYNTAX CertificateList X-EQUALITY 'certificateListExactMatch, 
94 not implemented yet' )
95olcAttributeTypes: {7}( id-at-delegationPath NAME 'delegationPath' DESC 'X.509
96  Delegation path attribute, use ;binary' SYNTAX AttCertPath )
97olcAttributeTypes: {8}( id-at-privPolicy NAME 'privPolicy' DESC 'X.509 Privile
98 ge policy attribute, use ;binary' SYNTAX PolicySyntax )
99olcAttributeTypes: {9}( id-at-protPrivPolicy NAME 'protPrivPolicy' DESC 'X.509
100  Protected privilege policy attribute, use ;binary' EQUALITY attributeCertifi
101 cateExactMatch SYNTAX AttributeCertificate )
102olcAttributeTypes: {10}( id-at-xMLPprotPrivPolicy NAME 'xmlPrivPolicy' DESC 'X
103 .509 XML Protected privilege policy attribute' SYNTAX 1.3.6.1.4.1.1466.115.12
104 1.1.15 )
105olcObjectClasses: {0}( id-oc-pmiUser NAME 'pmiUser' DESC 'X.509 PMI user objec
106 t class' SUP top AUXILIARY MAY attributeCertificateAttribute )
107olcObjectClasses: {1}( id-oc-pmiAA NAME 'pmiAA' DESC 'X.509 PMI AA object clas
108 s' SUP top AUXILIARY MAY ( aACertificate $ attributeCertificateRevocationList
109  $ attributeAuthorityRevocationList ) )
110olcObjectClasses: {2}( id-oc-pmiSOA NAME 'pmiSOA' DESC 'X.509 PMI SOA object c
111 lass' SUP top AUXILIARY MAY ( attributeCertificateRevocationList $ attributeA
112 uthorityRevocationList $ attributeDescriptorCertificate ) )
113olcObjectClasses: {3}( id-oc-attCertCRLDistributionPts NAME 'attCertCRLDistrib
114 utionPt' DESC 'X.509 Attribute certificate CRL distribution point object clas
115 s' SUP top AUXILIARY MAY ( attributeCertificateRevocationList $ attributeAuth
116 orityRevocationList ) )
117olcObjectClasses: {4}( id-oc-pmiDelegationPath NAME 'pmiDelegationPath' DESC '
118 X.509 PMI delegation path' SUP top AUXILIARY MAY delegationPath )
119olcObjectClasses: {5}( id-oc-privilegePolicy NAME 'privilegePolicy' DESC 'X.50
120 9 Privilege policy object class' SUP top AUXILIARY MAY privPolicy )
121olcObjectClasses: {6}( id-oc-protectedPrivilegePolicy NAME 'protectedPrivilege
122 Policy' DESC 'X.509 Protected privilege policy object class' SUP top AUXILIAR
123 Y MAY protPrivPolicy )
124