1
-- Module InformationFramework (X.501:08/1997)
2
InformationFramework {joint-iso-itu-t ds(5) module(1) informationFramework(1)
7
-- The types and values defined in this module are exported for use in the other ASN.1 modules contained
8
-- within the Directory Specifications, and for the use of other applications which will use them to access
9
-- Directory services. Other applications may use them for their own purposes, but this will not constrain
10
-- extensions and modifications needed to maintain or improve the Directory service.
12
id-oc, id-at, id-mr, id-oa, id-sc, id-ar, id-nf, selectedAttributeTypes,
13
directoryAbstractService, upperBounds
14
FROM UsefulDefinitions {joint-iso-itu-t ds(5) module(1)
15
usefulDefinitions(0) 3}
16
commonName, generalizedTimeMatch, generalizedTimeOrderingMatch, booleanMatch,
17
integerMatch, integerOrderingMatch, objectIdentifierFirstComponentMatch,
18
integerFirstComponentMatch, DirectoryString{}
19
FROM SelectedAttributeTypes selectedAttributeTypes
20
TypeAndContextAssertion, ServiceControlOptions, SearchControlOptions,
21
HierarchySelections, FamilyGrouping, FamilyReturn
22
FROM DirectoryAbstractService directoryAbstractService
24
FROM UpperBounds upperBounds;
26
-- attribute data types
27
Attribute ::= SEQUENCE {
28
type ATTRIBUTE.&id({SupportedAttributes}),
30
SET SIZE (0..MAX) OF ATTRIBUTE.&Type({SupportedAttributes}{@type}),
33
SEQUENCE {value ATTRIBUTE.&Type({SupportedAttributes}{@type}),
34
contextList SET SIZE (1..MAX) OF Context} OPTIONAL
37
AttributeType ::= ATTRIBUTE.&id
39
AttributeValue ::= ATTRIBUTE.&Type
41
Context ::= SEQUENCE {
42
contextType CONTEXT.&id({SupportedContexts}),
44
SET SIZE (1..MAX) OF CONTEXT.&Type({SupportedContexts}{@contextType}),
45
fallback BOOLEAN DEFAULT FALSE
48
AttributeValueAssertion ::= SEQUENCE {
49
type ATTRIBUTE.&id({SupportedAttributes}),
51
ATTRIBUTE.&equality-match.&AssertionType({SupportedAttributes}{@type}),
53
CHOICE {allContexts [0] NULL,
54
selectedContexts [1] SET SIZE (1..MAX) OF ContextAssertion
58
ContextAssertion ::= SEQUENCE {
59
contextType CONTEXT.&id({SupportedContexts}),
61
SET SIZE (1..MAX) OF CONTEXT.&Assertion({SupportedContexts}{@contextType})
64
AttributeTypeAssertion ::= SEQUENCE {
65
type ATTRIBUTE.&id({SupportedAttributes}),
66
assertedContexts SEQUENCE SIZE (1..MAX) OF ContextAssertion OPTIONAL
69
-- Definition of the following information object set is deferred, perhaps to standardized
70
-- profiles or to protocol implementation conformance statements. The set is required to
71
-- specify a table constraint on the values component of Attribute, the value component
72
-- of AttributeTypeAndValue, and the assertion component of AttributeValueAssertion.
73
SupportedAttributes ATTRIBUTE ::=
74
{objectClass | aliasedEntryName, ...}
76
-- Definition of the following information object set is deferred, perhaps to standardized
77
-- profiles or to protocol implementation conformance statements. The set is required to
78
-- specify a table constraint on the context specifications
79
SupportedContexts CONTEXT ::=
83
Name ::= CHOICE { -- only one possibility for now --rdnSequence RDNSequence
86
RDNSequence ::= SEQUENCE OF RelativeDistinguishedName
88
DistinguishedName ::= RDNSequence
90
RelativeDistinguishedName ::=
91
SET SIZE (1..MAX) OF AttributeTypeAndDistinguishedValue
93
AttributeTypeAndDistinguishedValue ::= SEQUENCE {
94
type ATTRIBUTE.&id({SupportedAttributes}),
95
value ATTRIBUTE.&Type({SupportedAttributes}{@type}),
96
primaryDistinguished BOOLEAN DEFAULT TRUE,
99
SEQUENCE {distingAttrValue
100
[0] ATTRIBUTE.&Type({SupportedAttributes}{@type}) OPTIONAL,
101
contextList SET SIZE (1..MAX) OF Context} OPTIONAL
104
-- subtree data types
105
SubtreeSpecification ::= SEQUENCE {
106
base [0] LocalName DEFAULT {},
107
COMPONENTS OF ChopSpecification,
108
specificationFilter [4] Refinement OPTIONAL
111
-- empty sequence specifies whole administrative area
112
LocalName ::= RDNSequence
114
ChopSpecification ::= SEQUENCE {
116
[1] SET SIZE (1..MAX) OF
117
CHOICE {chopBefore [0] LocalName,
118
chopAfter [1] LocalName} OPTIONAL,
119
minimum [2] BaseDistance DEFAULT 0,
120
maximum [3] BaseDistance OPTIONAL
123
BaseDistance ::= INTEGER(0..MAX)
125
Refinement ::= CHOICE {
126
item [0] OBJECT-CLASS.&id,
127
and [1] SET OF Refinement,
128
or [2] SET OF Refinement,
132
-- OBJECT-CLASS information object class specification
133
OBJECT-CLASS ::= CLASS {
134
&Superclasses OBJECT-CLASS OPTIONAL,
135
&kind ObjectClassKind DEFAULT structural,
136
&MandatoryAttributes ATTRIBUTE OPTIONAL,
137
&OptionalAttributes ATTRIBUTE OPTIONAL,
138
&id OBJECT IDENTIFIER UNIQUE
141
[SUBCLASS OF &Superclasses]
143
[MUST CONTAIN &MandatoryAttributes]
144
[MAY CONTAIN &OptionalAttributes]
148
ObjectClassKind ::= ENUMERATED {abstract(0), structural(1), auxiliary(2)}
151
top OBJECT-CLASS ::= {
153
MUST CONTAIN {objectClass}
157
alias OBJECT-CLASS ::= {
159
MUST CONTAIN {aliasedEntryName}
163
parent OBJECT-CLASS ::= {KIND abstract
167
child OBJECT-CLASS ::= {KIND auxiliary
171
-- ATTRIBUTE information object class specification
172
ATTRIBUTE ::= CLASS {
173
&derivation ATTRIBUTE OPTIONAL,
174
&Type OPTIONAL, -- either &Type or &derivation required
175
&equality-match MATCHING-RULE OPTIONAL,
176
&ordering-match MATCHING-RULE OPTIONAL,
177
&substrings-match MATCHING-RULE OPTIONAL,
178
&single-valued BOOLEAN DEFAULT FALSE,
179
&collective BOOLEAN DEFAULT FALSE,
180
-- operational extensions
181
&no-user-modification BOOLEAN DEFAULT FALSE,
182
&usage AttributeUsage DEFAULT userApplications,
183
&id OBJECT IDENTIFIER UNIQUE
186
[SUBTYPE OF &derivation]
188
[EQUALITY MATCHING RULE &equality-match]
189
[ORDERING MATCHING RULE &ordering-match]
190
[SUBSTRINGS MATCHING RULE &substrings-match]
191
[SINGLE VALUE &single-valued]
192
[COLLECTIVE &collective]
193
[NO USER MODIFICATION &no-user-modification]
198
AttributeUsage ::= ENUMERATED {
199
userApplications(0), directoryOperation(1), distributedOperation(2),
203
objectClass ATTRIBUTE ::= {
204
WITH SYNTAX OBJECT IDENTIFIER
205
EQUALITY MATCHING RULE objectIdentifierMatch
209
aliasedEntryName ATTRIBUTE ::= {
210
WITH SYNTAX DistinguishedName
211
EQUALITY MATCHING RULE distinguishedNameMatch
213
ID id-at-aliasedEntryName
216
-- MATCHING-RULE information object class specification
217
MATCHING-RULE ::= CLASS {
218
&ParentMatchingRules MATCHING-RULE.&id OPTIONAL,
219
&AssertionType OPTIONAL,
220
&uniqueMatchIndicator ATTRIBUTE.&id OPTIONAL,
221
&id OBJECT IDENTIFIER UNIQUE
224
[PARENT &ParentMatchingRules]
225
[SYNTAX &AssertionType]
226
[UNIQUE-MATCH-INDICATOR &uniqueMatchIndicator]
231
objectIdentifierMatch MATCHING-RULE ::= {
232
SYNTAX OBJECT IDENTIFIER
233
ID id-mr-objectIdentifierMatch
236
distinguishedNameMatch MATCHING-RULE ::= {
237
SYNTAX DistinguishedName
238
ID id-mr-distinguishedNameMatch
241
MAPPING-BASED-MATCHING{SelectedBy, BOOLEAN:combinable, MappingResult,
242
OBJECT IDENTIFIER:matchingRule} ::= CLASS {
243
&selectBy SelectedBy OPTIONAL,
244
&ApplicableTo ATTRIBUTE,
245
&subtypesIncluded BOOLEAN DEFAULT TRUE,
246
&combinable BOOLEAN(combinable),
247
&mappingResults MappingResult OPTIONAL,
248
&userControl BOOLEAN DEFAULT FALSE,
249
&exclusive BOOLEAN DEFAULT TRUE,
250
&matching-rule MATCHING-RULE.&id(matchingRule),
251
&id OBJECT IDENTIFIER UNIQUE
254
[SELECT BY &selectBy]
255
APPLICABLE TO &ApplicableTo
256
[SUBTYPES INCLUDED &subtypesIncluded]
257
COMBINABLE &combinable
258
[MAPPING RESULTS &mappingResults]
259
[USER CONTROL &userControl]
260
[EXCLUSIVE &exclusive]
261
MATCHING RULE &matching-rule
265
-- NAME-FORM information object class specification
266
NAME-FORM ::= CLASS {
267
&namedObjectClass OBJECT-CLASS,
268
&MandatoryAttributes ATTRIBUTE,
269
&OptionalAttributes ATTRIBUTE OPTIONAL,
270
&id OBJECT IDENTIFIER UNIQUE
273
NAMES &namedObjectClass
274
WITH ATTRIBUTES &MandatoryAttributes
275
[AND OPTIONALLY &OptionalAttributes]
279
-- STRUCTURE-RULE class and DIT structure rule data types
280
STRUCTURE-RULE ::= CLASS {
282
&SuperiorStructureRules STRUCTURE-RULE OPTIONAL,
287
[SUPERIOR RULES &SuperiorStructureRules]
291
DITStructureRule ::= SEQUENCE {
292
ruleIdentifier RuleIdentifier,
293
-- must be unique within the scope of the subschema
294
nameForm NAME-FORM.&id,
295
superiorStructureRules SET SIZE (1..MAX) OF RuleIdentifier OPTIONAL
298
RuleIdentifier ::= INTEGER
300
-- CONTENT-RULE class and DIT content rule data types
301
CONTENT-RULE ::= CLASS {
302
&structuralClass OBJECT-CLASS.&id UNIQUE,
303
&Auxiliaries OBJECT-CLASS OPTIONAL,
304
&Mandatory ATTRIBUTE OPTIONAL,
305
&Optional ATTRIBUTE OPTIONAL,
306
&Precluded ATTRIBUTE OPTIONAL
309
STRUCTURAL OBJECT-CLASS &structuralClass
310
[AUXILIARY OBJECT-CLASSES &Auxiliaries]
311
[MUST CONTAIN &Mandatory]
312
[MAY CONTAIN &Optional]
313
[MUST-NOT CONTAIN &Precluded]
316
DITContentRule ::= SEQUENCE {
317
structuralObjectClass OBJECT-CLASS.&id,
318
auxiliaries SET SIZE (1..MAX) OF OBJECT-CLASS.&id OPTIONAL,
319
mandatory [1] SET SIZE (1..MAX) OF ATTRIBUTE.&id OPTIONAL,
320
optional [2] SET SIZE (1..MAX) OF ATTRIBUTE.&id OPTIONAL,
321
precluded [3] SET SIZE (1..MAX) OF ATTRIBUTE.&id OPTIONAL
327
&id OBJECT IDENTIFIER UNIQUE
328
}WITH SYNTAX {WITH SYNTAX &Type
329
[ASSERTED AS &Assertion]
333
DITContextUse ::= SEQUENCE {
334
attributeType ATTRIBUTE.&id,
335
mandatoryContexts [1] SET SIZE (1..MAX) OF CONTEXT.&id OPTIONAL,
336
optionalContexts [2] SET SIZE (1..MAX) OF CONTEXT.&id OPTIONAL
339
DIT-CONTEXT-USE-RULE ::= CLASS {
340
&attributeType ATTRIBUTE.&id UNIQUE,
341
&Mandatory CONTEXT OPTIONAL,
342
&Optional CONTEXT OPTIONAL
345
ATTRIBUTE TYPE &attributeType
346
[MANDATORY CONTEXTS &Mandatory]
347
[OPTIONAL CONTEXTS &Optional]
350
-- system schema information objects
352
subentry OBJECT-CLASS ::= {
355
MUST CONTAIN {commonName | subtreeSpecification}
359
subentryNameForm NAME-FORM ::= {
361
WITH ATTRIBUTES {commonName}
362
ID id-nf-subentryNameForm
365
accessControlSubentry OBJECT-CLASS ::= {
367
ID id-sc-accessControlSubentry
370
collectiveAttributeSubentry OBJECT-CLASS ::= {
372
ID id-sc-collectiveAttributeSubentry
375
contextAssertionSubentry OBJECT-CLASS ::= {
377
MUST CONTAIN {contextAssertionDefaults}
378
ID id-sc-contextAssertionSubentry
381
serviceAdminSubentry OBJECT-CLASS ::= {
383
MUST CONTAIN {searchRules}
384
ID id-sc-serviceAdminSubentry
388
createTimestamp ATTRIBUTE ::= {
389
WITH SYNTAX GeneralizedTime
390
-- as per 41.3 b) or c) of ITU-T Rec. X.680 | ISO/IEC 8824-1
391
EQUALITY MATCHING RULE generalizedTimeMatch
392
ORDERING MATCHING RULE generalizedTimeOrderingMatch
394
NO USER MODIFICATION TRUE
395
USAGE directoryOperation
396
ID id-oa-createTimestamp
399
modifyTimestamp ATTRIBUTE ::= {
400
WITH SYNTAX GeneralizedTime
401
-- as per 41.3 b) or c) of ITU-T Rec. X.680 | ISO/IEC 8824-1
402
EQUALITY MATCHING RULE generalizedTimeMatch
403
ORDERING MATCHING RULE generalizedTimeOrderingMatch
405
NO USER MODIFICATION TRUE
406
USAGE directoryOperation
407
ID id-oa-modifyTimestamp
410
subschemaTimestamp ATTRIBUTE ::= {
411
WITH SYNTAX GeneralizedTime
412
-- as per 41.3 b) or c) of ITU-T Rec.X. 680 | ISO/IEC 8824-1
413
EQUALITY MATCHING RULE generalizedTimeMatch
414
ORDERING MATCHING RULE generalizedTimeOrderingMatch
416
NO USER MODIFICATION TRUE
417
USAGE directoryOperation
418
ID id-oa-subschemaTimestamp
421
creatorsName ATTRIBUTE ::= {
422
WITH SYNTAX DistinguishedName
423
EQUALITY MATCHING RULE distinguishedNameMatch
425
NO USER MODIFICATION TRUE
426
USAGE directoryOperation
427
ID id-oa-creatorsName
430
modifiersName ATTRIBUTE ::= {
431
WITH SYNTAX DistinguishedName
432
EQUALITY MATCHING RULE distinguishedNameMatch
434
NO USER MODIFICATION TRUE
435
USAGE directoryOperation
436
ID id-oa-modifiersName
439
subschemaSubentryList ATTRIBUTE ::= {
440
WITH SYNTAX DistinguishedName
441
EQUALITY MATCHING RULE distinguishedNameMatch
443
NO USER MODIFICATION TRUE
444
USAGE directoryOperation
445
ID id-oa-subschemaSubentryList
448
accessControlSubentryList ATTRIBUTE ::= {
449
WITH SYNTAX DistinguishedName
450
EQUALITY MATCHING RULE distinguishedNameMatch
451
NO USER MODIFICATION TRUE
452
USAGE directoryOperation
453
ID id-oa-accessControlSubentryList
456
collectiveAttributeSubentryList ATTRIBUTE ::= {
457
WITH SYNTAX DistinguishedName
458
EQUALITY MATCHING RULE distinguishedNameMatch
459
NO USER MODIFICATION TRUE
460
USAGE directoryOperation
461
ID id-oa-collectiveAttributeSubentryList
464
contextDefaultSubentryList ATTRIBUTE ::= {
465
WITH SYNTAX DistinguishedName
466
EQUALITY MATCHING RULE distinguishedNameMatch
467
NO USER MODIFICATION TRUE
468
USAGE directoryOperation
469
ID id-oa-contextDefaultSubentryList
472
serviceAdminSubentryList ATTRIBUTE ::= {
473
WITH SYNTAX DistinguishedName
474
EQUALITY MATCHING RULE distinguishedNameMatch
475
NO USER MODIFICATION TRUE
476
USAGE directoryOperation
477
ID id-oa-serviceAdminSubentryList
480
hasSubordinates ATTRIBUTE ::= {
482
EQUALITY MATCHING RULE booleanMatch
484
NO USER MODIFICATION TRUE
485
USAGE directoryOperation
486
ID id-oa-hasSubordinates
489
administrativeRole ATTRIBUTE ::= {
490
WITH SYNTAX OBJECT-CLASS.&id
491
EQUALITY MATCHING RULE objectIdentifierMatch
492
USAGE directoryOperation
493
ID id-oa-administrativeRole
496
subtreeSpecification ATTRIBUTE ::= {
497
WITH SYNTAX SubtreeSpecification
498
USAGE directoryOperation
499
ID id-oa-subtreeSpecification
502
collectiveExclusions ATTRIBUTE ::= {
503
WITH SYNTAX OBJECT IDENTIFIER
504
EQUALITY MATCHING RULE objectIdentifierMatch
505
USAGE directoryOperation
506
ID id-oa-collectiveExclusions
509
contextAssertionDefaults ATTRIBUTE ::= {
510
WITH SYNTAX TypeAndContextAssertion
511
EQUALITY MATCHING RULE objectIdentifierFirstComponentMatch
512
USAGE directoryOperation
513
ID id-oa-contextAssertionDefault
516
searchRules ATTRIBUTE ::= {
517
WITH SYNTAX SearchRuleDescription
518
EQUALITY MATCHING RULE integerFirstComponentMatch
519
USAGE directoryOperation
523
SearchRuleDescription ::= SEQUENCE {
524
COMPONENTS OF SearchRule,
525
name [28] SET SIZE (1..MAX) OF DirectoryString{ub-search} OPTIONAL,
526
description [29] DirectoryString{ub-search} OPTIONAL,
527
obsolete [30] BOOLEAN DEFAULT FALSE
530
hierarchyLevel ATTRIBUTE ::= {
532
EQUALITY MATCHING RULE integerMatch
533
ORDERING MATCHING RULE integerOrderingMatch
535
NO USER MODIFICATION TRUE
536
USAGE directoryOperation
537
ID id-oa-hierarchyLevel
540
hierarchyBelow ATTRIBUTE ::= {
542
EQUALITY MATCHING RULE booleanMatch
544
NO USER MODIFICATION TRUE
545
USAGE directoryOperation
546
ID id-oa-hierarchyBelow
549
hierarchyParent ATTRIBUTE ::= {
550
WITH SYNTAX DistinguishedName
551
EQUALITY MATCHING RULE distinguishedNameMatch
553
USAGE directoryOperation
554
ID id-oa-hierarchyParent
557
SearchRule ::= SEQUENCE {
558
COMPONENTS OF SearchRuleId,
559
serviceType [1] OBJECT IDENTIFIER OPTIONAL,
560
userClass [2] INTEGER OPTIONAL,
562
[3] SEQUENCE SIZE (1..MAX) OF RequestAttribute OPTIONAL,
563
attributeCombination [4] AttributeCombination DEFAULT and:{},
564
outputAttributeTypes [5] SEQUENCE SIZE (1..MAX) OF ResultAttribute OPTIONAL,
565
defaultControls [6] ControlOptions OPTIONAL,
566
mandatoryControls [7] ControlOptions OPTIONAL,
567
searchRuleControls [8] ControlOptions OPTIONAL,
568
familyGrouping [9] FamilyGrouping OPTIONAL,
569
familyReturn [10] FamilyReturn OPTIONAL,
570
relaxation [11] RelaxationPolicy OPTIONAL,
571
additionalControl [12] SEQUENCE SIZE (1..MAX) OF AttributeType OPTIONAL,
572
allowedSubset [13] AllowedSubset DEFAULT '111'B,
573
imposedSubset [14] ImposedSubset OPTIONAL,
574
entryLimit [15] EntryLimit OPTIONAL
577
SearchRuleId ::= SEQUENCE {id INTEGER,
578
dmdId [0] OBJECT IDENTIFIER
581
AllowedSubset ::= BIT STRING {baseObject(0), oneLevel(1), wholeSubtree(2)}
583
ImposedSubset ::= ENUMERATED {baseObject(0), oneLevel(1), wholeSubtree(2)}
585
RequestAttribute ::= SEQUENCE {
586
attributeType ATTRIBUTE.&id({SupportedAttributes}),
587
includeSubtypes [0] BOOLEAN DEFAULT FALSE,
589
[1] SEQUENCE SIZE (0..MAX) OF
590
ATTRIBUTE.&Type({SupportedAttributes}{@attributeType}) OPTIONAL,
592
[2] SEQUENCE SIZE (0..MAX) OF
593
SEQUENCE {entryType OBJECT-CLASS.&id OPTIONAL,
596
ATTRIBUTE.&Type({SupportedAttributes}{@attributeType})
598
contexts [3] SEQUENCE SIZE (0..MAX) OF ContextProfile OPTIONAL,
599
contextCombination [4] ContextCombination DEFAULT and:{},
600
matchingUse [5] SEQUENCE SIZE (1..MAX) OF MatchingUse OPTIONAL
603
ContextProfile ::= SEQUENCE {
604
contextType CONTEXT.&id({SupportedContexts}),
606
SEQUENCE SIZE (1..MAX) OF
607
CONTEXT.&Assertion({SupportedContexts}{@contextType}) OPTIONAL
610
ContextCombination ::= CHOICE {
611
context [0] CONTEXT.&id,
612
and [1] SEQUENCE OF ContextCombination,
613
or [2] SEQUENCE OF ContextCombination,
614
not [3] ContextCombination
617
MatchingUse ::= SEQUENCE {
618
restrictionType MATCHING-RESTRICTION.&id({SupportedMatchingRestrictions}),
620
MATCHING-RESTRICTION.&Restriction
621
({SupportedMatchingRestrictions}{@restrictionType})
624
-- Definition of the following information object set is deferred, perhaps to standardized
625
-- profiles or to protocol implementation conformance statements. The set is required to
626
-- specify a table constraint on the components of SupportedMatchingRestrictions
627
SupportedMatchingRestrictions MATCHING-RESTRICTION ::=
630
AttributeCombination ::= CHOICE {
631
attribute [0] AttributeType,
632
and [1] SEQUENCE OF AttributeCombination,
633
or [2] SEQUENCE OF AttributeCombination,
634
not [3] AttributeCombination
637
ResultAttribute ::= SEQUENCE {
638
attributeType ATTRIBUTE.&id({SupportedAttributes}),
640
CHOICE {selectedValues
641
SEQUENCE SIZE (1..MAX) OF
642
ATTRIBUTE.&Type({SupportedAttributes}{@attributeType}),
643
matchedValuesOnly NULL} OPTIONAL,
644
contexts [0] SEQUENCE SIZE (1..MAX) OF ContextProfile OPTIONAL
647
OutputValues ::= CHOICE {
649
SEQUENCE SIZE (1..MAX) OF ATTRIBUTE.&Type({SupportedAttributes}),
650
matchedValuesOnly NULL
653
ControlOptions ::= SEQUENCE {
654
serviceControls [0] ServiceControlOptions DEFAULT {},
655
searchOptions [1] SearchControlOptions DEFAULT {searchAliases},
656
hierarchyOptions [2] HierarchySelections OPTIONAL
659
EntryLimit ::= SEQUENCE {default INTEGER,
663
RelaxationPolicy ::= SEQUENCE {
664
basic [0] MRMapping DEFAULT {},
665
tightenings [1] SEQUENCE SIZE (1..MAX) OF MRMapping OPTIONAL,
666
relaxations [2] SEQUENCE SIZE (1..MAX) OF MRMapping OPTIONAL,
667
maximum [3] INTEGER OPTIONAL, -- mandatory if tightenings is present
668
minimum [4] INTEGER DEFAULT 1
671
MRMapping ::= SEQUENCE {
672
mapping [0] SEQUENCE SIZE (1..MAX) OF Mapping OPTIONAL,
673
substitution [1] SEQUENCE SIZE (1..MAX) OF MRSubstitution OPTIONAL
676
Mapping ::= SEQUENCE {
679
(CONSTRAINED BY {-- shall be an--
681
-- object identifier of a mapping-based matching algorithm -- }),
682
level INTEGER DEFAULT 0
685
MRSubstitution ::= SEQUENCE {
686
attribute AttributeType,
687
oldMatchingRule [0] MATCHING-RULE.&id OPTIONAL,
688
newMatchingRule [1] MATCHING-RULE.&id OPTIONAL
691
SEARCH-RULE ::= CLASS {
692
&dmdId OBJECT IDENTIFIER,
693
&serviceType OBJECT IDENTIFIER OPTIONAL,
694
&userClass INTEGER OPTIONAL,
695
&InputAttributeTypes REQUEST-ATTRIBUTE OPTIONAL,
696
&combination AttributeCombination OPTIONAL,
697
&OutputAttributeTypes RESULT-ATTRIBUTE OPTIONAL,
698
&defaultControls ControlOptions OPTIONAL,
699
&mandatoryControls ControlOptions OPTIONAL,
700
&searchRuleControls ControlOptions OPTIONAL,
701
&familyGrouping FamilyGrouping OPTIONAL,
702
&familyReturn FamilyReturn OPTIONAL,
703
&additionalControl AttributeType OPTIONAL,
704
&relaxation RelaxationPolicy OPTIONAL,
705
&entryLimit EntryLimit OPTIONAL,
706
&allowedSubset AllowedSubset DEFAULT '111'B,
707
&imposedSubset ImposedSubset OPTIONAL,
712
[SERVICE-TYPE &serviceType]
713
[USER-CLASS &userClass]
714
[INPUT ATTRIBUTES &InputAttributeTypes]
715
[COMBINATION &combination]
716
[OUTPUT ATTRIBUTES &OutputAttributeTypes]
717
[DEFAULT CONTROL &defaultControls]
718
[MANDATORY CONTROL &mandatoryControls]
719
[SEARCH-RULE CONTROL &searchRuleControls]
720
[FAMILY-GROUPING &familyGrouping]
721
[FAMILY-RETURN &familyReturn]
722
[ADDITIONAL CONTROL &additionalControl]
723
[RELAXATION &relaxation]
724
[ALLOWED SUBSET &allowedSubset]
725
[IMPOSED SUBSET &imposedSubset]
726
[ENTRY LIMIT &entryLimit]
730
REQUEST-ATTRIBUTE ::= CLASS {
731
&attributeType ATTRIBUTE.&id,
732
&SelectedValues ATTRIBUTE.&Type OPTIONAL,
733
&DefaultValues SEQUENCE {entryType OBJECT-CLASS.&id OPTIONAL,
734
values SEQUENCE OF ATTRIBUTE.&Type
736
&contexts SEQUENCE OF ContextProfile OPTIONAL,
737
&contextCombination ContextCombination OPTIONAL,
738
&MatchingUse MatchingUse OPTIONAL,
739
&includeSubtypes BOOLEAN DEFAULT FALSE
742
ATTRIBUTE TYPE &attributeType
743
[SELECTED VALUES &SelectedValues]
744
[DEFAULT VALUES &DefaultValues]
746
[CONTEXT COMBINATION &contextCombination]
747
[MATCHING USE &MatchingUse]
748
[INCLUDE SUBTYPES &includeSubtypes]
751
RESULT-ATTRIBUTE ::= CLASS {
752
&attributeType ATTRIBUTE.&id,
753
&outputValues OutputValues OPTIONAL,
754
&contexts ContextProfile OPTIONAL
757
ATTRIBUTE TYPE &attributeType
758
[OUTPUT VALUES &outputValues]
762
MATCHING-RESTRICTION ::= CLASS {
764
&Rules MATCHING-RULE.&id,
765
&id OBJECT IDENTIFIER UNIQUE
766
}WITH SYNTAX {RESTRICTION &Restriction
771
-- object identifier assignments
773
id-oc-top OBJECT IDENTIFIER ::=
776
id-oc-alias OBJECT IDENTIFIER ::= {id-oc 1}
778
id-oc-parent OBJECT IDENTIFIER ::= {id-oc 28}
780
id-oc-child OBJECT IDENTIFIER ::= {id-oc 29}
783
id-at-objectClass OBJECT IDENTIFIER ::= {id-at 0}
785
id-at-aliasedEntryName OBJECT IDENTIFIER ::= {id-at 1}
788
id-mr-objectIdentifierMatch OBJECT IDENTIFIER ::= {id-mr 0}
790
id-mr-distinguishedNameMatch OBJECT IDENTIFIER ::= {id-mr 1}
792
-- operational attributes
793
id-oa-excludeAllCollectiveAttributes OBJECT IDENTIFIER ::=
796
id-oa-createTimestamp OBJECT IDENTIFIER ::= {id-oa 1}
798
id-oa-modifyTimestamp OBJECT IDENTIFIER ::= {id-oa 2}
800
id-oa-creatorsName OBJECT IDENTIFIER ::= {id-oa 3}
802
id-oa-modifiersName OBJECT IDENTIFIER ::= {id-oa 4}
804
id-oa-administrativeRole OBJECT IDENTIFIER ::= {id-oa 5}
806
id-oa-subtreeSpecification OBJECT IDENTIFIER ::= {id-oa 6}
808
id-oa-collectiveExclusions OBJECT IDENTIFIER ::= {id-oa 7}
810
id-oa-subschemaTimestamp OBJECT IDENTIFIER ::= {id-oa 8}
812
id-oa-hasSubordinates OBJECT IDENTIFIER ::= {id-oa 9}
814
id-oa-subschemaSubentryList OBJECT IDENTIFIER ::= {id-oa 10}
816
id-oa-accessControlSubentryList OBJECT IDENTIFIER ::= {id-oa 11}
818
id-oa-collectiveAttributeSubentryList OBJECT IDENTIFIER ::= {id-oa 12}
820
id-oa-contextDefaultSubentryList OBJECT IDENTIFIER ::= {id-oa 13}
822
id-oa-contextAssertionDefault OBJECT IDENTIFIER ::= {id-oa 14}
824
id-oa-serviceAdminSubentryList OBJECT IDENTIFIER ::= {id-oa 15}
826
id-oa-searchRules OBJECT IDENTIFIER ::= {id-oa 16}
828
id-oa-hierarchyLevel OBJECT IDENTIFIER ::= {id-oa 17}
830
id-oa-hierarchyBelow OBJECT IDENTIFIER ::= {id-oa 18}
832
id-oa-hierarchyParent OBJECT IDENTIFIER ::= {id-oa 19}
835
id-sc-subentry OBJECT IDENTIFIER ::= {id-sc 0}
837
id-sc-accessControlSubentry OBJECT IDENTIFIER ::= {id-sc 1}
839
id-sc-collectiveAttributeSubentry OBJECT IDENTIFIER ::= {id-sc 2}
841
id-sc-contextAssertionSubentry OBJECT IDENTIFIER ::= {id-sc 3}
843
id-sc-serviceAdminSubentry OBJECT IDENTIFIER ::= {id-sc 4}
846
id-nf-subentryNameForm OBJECT IDENTIFIER ::= {id-nf 16}
848
-- administrative roles
849
id-ar-autonomousArea OBJECT IDENTIFIER ::= {id-ar 1}
851
id-ar-accessControlSpecificArea OBJECT IDENTIFIER ::= {id-ar 2}
853
id-ar-accessControlInnerArea OBJECT IDENTIFIER ::= {id-ar 3}
855
id-ar-subschemaAdminSpecificArea OBJECT IDENTIFIER ::= {id-ar 4}
857
id-ar-collectiveAttributeSpecificArea OBJECT IDENTIFIER ::= {id-ar 5}
859
id-ar-collectiveAttributeInnerArea OBJECT IDENTIFIER ::= {id-ar 6}
861
id-ar-contextDefaultSpecificArea OBJECT IDENTIFIER ::= {id-ar 7}
863
id-ar-serviceSpecificArea OBJECT IDENTIFIER ::= {id-ar 8}
865
END -- InformationFramework
867
-- Generated by Asnp, the ASN.1 pretty-printer of France Telecom R&D