#  Licensed to the Apache Software Foundation (ASF) under one
#  or more contributor license agreements.  See the NOTICE file
#  distributed with this work for additional information
#  regarding copyright ownership.  The ASF licenses this file
#  to you under the Apache License, Version 2.0 (the
#  "License"); you may not use this file except in compliance
#  with the License.  You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing,
#  software distributed under the License is distributed on an
#  "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
#  KIND, either express or implied.  See the License for the
#  specific language governing permissions and limitations
#  under the License.
#
dn:cn=Browser Default Schema
objectClass:top
objectClass:subentry
objectClass:subschema
objectClass:extensibleObject
createTimestamp:00000000000000Z
modifyTimestamp:00000000000000Z
#
# Dummy Objectclass
objectClasses:( 1.3.6.1.1.1.2.12 NAME 'DEFAULTSCHEMA' DESC 'This is the 
 Default Schema' OBSOLETE )
#
#
ldapSyntaxes:( 1.3.6.1.1.1.0.1 DESC 'RFC2307 Boot Parameter' )
ldapSyntaxes:( 1.3.6.1.1.1.0.0 DESC 'RFC2307 NIS Netgroup Triple' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.52 DESC 'Telex Number' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.50 DESC 'Telephone Number' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.49 DESC 'Supported Algorithm' X-BINA
 RY-TRANSFER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.45 DESC 'SubtreeSpecification' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.44 DESC 'Printable String' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.41 DESC 'Postal Address' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.40 DESC 'Octet String' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.39 DESC 'Other Mailbox' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.38 DESC 'OID' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.36 DESC 'Numeric String' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.34 DESC 'Name And Optional UID' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.28 DESC 'JPEG' X-NOT-HUMAN-READABLE 
 'TRUE' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.27 DESC 'Integer' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.26 DESC 'IA5 String' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.24 DESC 'Generalized Time' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.22 DESC 'Facsimile Telephone Number'
  )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.15 DESC 'Directory String' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.14 DESC 'Delivery Method' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.12 DESC 'Distinguished Name' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.11 DESC 'Country String' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.10 DESC 'Certificate Pair' X-BINARY-
 TRANSFER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.9 DESC 'Certificate List' X-BINARY-T
 RANSFER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.8 DESC 'Certificate' X-BINARY-TRANSF
 ER-REQUIRED 'TRUE' X-NOT-HUMAN-READABLE 'TRUE' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.7 DESC 'Boolean' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.6 DESC 'Bit String' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.5 DESC 'Binary' X-NOT-HUMAN-READABLE
  'TRUE' )
ldapSyntaxes:( 1.3.6.1.4.1.1466.115.121.1.4 DESC 'Audio' X-NOT-HUMAN-READABLE 
 'TRUE' )
attributeTypes:( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC 'RFC2798: pe
 rsonal identity information, a PKCS #12 PFX' SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.5 )
attributeTypes:( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate' DESC 'RF
 C2798: PKCS#7 SignedData used to support S/MIME' SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.5 )
attributeTypes:( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage' DESC 'RFC27
 98: preferred written or spoken language for a person' EQUALITY caseIgnoreMat
 ch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SING
 LE-VALUE )
attributeTypes:( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC 'RFC2798: a 
 JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 )
attributeTypes:( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC 'RFC2798: ty
 pe of employment for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubs
 tringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes:( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC 'RFC2798: 
 numerically identifies an employee within an organization' EQUALITY caseIgnor
 eMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
 SINGLE-VALUE )
attributeTypes:( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC 'RFC2798: p
 referred name to be used when displaying entries' EQUALITY caseIgnoreMatch SU
 BSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VA
 LUE )
attributeTypes:( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber' DESC 'RFC2798
 : identifies a department within an organization' EQUALITY caseIgnoreMatch SU
 BSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes:( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC 'RFC2798: vehi
 cle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR caseIgnore
 SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes:( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY caseExactIA5Matc
 h SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{102
 4} SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name )
attributeTypes:( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image name' EQUAL
 ITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC 'rpc.bootparamd pa
 rameter' SYNTAX 1.3.6.1.1.1.0.1 )
attributeTypes:( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address' EQUALIT
 Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
attributeTypes:( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP netmask' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VAL
 UE )
attributeTypes:( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP network' EQU
 ALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VAL
 UE )
attributeTypes:( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP address' EQUALI
 TY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )
attributeTypes:( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY integerMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY integerMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP name )
attributeTypes:( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY integerMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgroup trip
 le' SYNTAX 1.3.6.1.1.1.0.0 )
attributeTypes:( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY caseExactI
 A5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 26 )
attributeTypes:( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY caseExactIA5Match 
 SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY integerMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY integerMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY integerMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY integerMatch SY
 NTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY integerMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY integerMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY integerMatch
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to the login
  shell' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGL
 E-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The absolute path 
 to the home directory' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.26 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field; the commo
 n name' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.1 NAME 'gidNumber' DESC 'An integer uniquely id
 entifying a group in an administrative domain' EQUALITY integerMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.1.1.1.0 NAME 'uidNumber' DESC 'An integer uniquely id
 entifying a user in an administrative domain' EQUALITY integerMatch SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
attributeTypes:( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher' DESC 'RFC
 1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstr
 ingsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes:( 0.9.2342.19200300.100.1.55 NAME 'audio' DESC 'RFC1274: audio 
 (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} )
attributeTypes:( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect' DESC 'RFC1274: 
 DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.12 )
attributeTypes:( 0.9.2342.19200300.100.1.53 NAME 'personalSignature' DESC 'RFC
 1274: Personal Signature (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23 )
attributeTypes:( 0.9.2342.19200300.100.1.52 NAME 'subtreeMaximumQuality' DESC 
 'RFC1274: Subtree Maximun Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGL
 E-VALUE )
attributeTypes:( 0.9.2342.19200300.100.1.51 NAME 'subtreeMinimumQuality' DESC 
 'RFC1274: Subtree Mininum Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGL
 E-VALUE )
attributeTypes:( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality' DESC 'RF
 C1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALU
 E )
attributeTypes:( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality' DESC 'RFC1274: D
 SA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19 SINGLE-VALUE )
attributeTypes:( 0.9.2342.19200300.100.1.48 NAME 'buildingName' DESC 'RFC1274:
  name of building' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch 
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.47 NAME 'mailPreferenceOption' DESC '
 RFC1274: mail preference option' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )
attributeTypes:( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox' DESC 'RFC1274:
  Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMat
 ch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributeTypes:( 0.9.2342.19200300.100.1.45 NAME 'organizationalStatus' DESC '
 RFC1274: organizational status' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSub
 stringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier' DESC 'RFC1
 274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.1
 21.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.43 NAME ( 'co' 'friendlyCountryName' 
 ) DESC 'RFC1274: friendly country name' EQUALITY caseIgnoreMatch SUBSTR caseI
 gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
attributeTypes:( 0.9.2342.19200300.100.1.42 NAME ( 'pager' 'pagerTelephoneNumb
 er' ) DESC 'RFC1274: pager telephone number' EQUALITY telephoneNumberMatch SU
 BSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributeTypes:( 0.9.2342.19200300.100.1.41 NAME ( 'mobile' 'mobileTelephoneNu
 mber' ) DESC 'RFC1274: mobile telephone number' EQUALITY telephoneNumberMatch
  SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributeTypes:( 0.9.2342.19200300.100.1.40 NAME 'personalTitle' DESC 'RFC1274
 : personal title' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch S
 YNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress' DESC 'RFC
 1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreList
 SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributeTypes:( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC 'RFC127
 4: DN of entry associated with domain' EQUALITY distinguishedNameMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.12 )
attributeTypes:( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALITY caseIg
 noreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY caseIgno
 reIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY caseIgnor
 eIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY caseIgnor
 eIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY caseIgnor
 eIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY caseIgnore
 IA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.39 )
attributeTypes:( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC1274: DN
  of secretary' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.12 )
attributeTypes:( 0.9.2342.19200300.100.1.20 NAME ( 'homePhone' 'homeTelephoneN
 umber' ) DESC 'RFC1274: home telephone number' EQUALITY telephoneNumberMatch 
 SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )
attributeTypes:( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DESC 'RFC1
 274: location of document original' EQUALITY caseIgnoreMatch SUBSTR caseIgnor
 eSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC 'RFC127
 4: DN of author of document' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.12 )
attributeTypes:( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DESC 'RFC12
 74: version of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstrings
 Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC 'RFC1274
 : title of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier' DESC 'RF
 C1274: unique identifier of document' EQUALITY caseIgnoreMatch SUBSTR caseIgn
 oreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC 'RFC1274: DN o
 f manager' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.
 12 )
attributeTypes:( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274: host com
 puter' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC 'RFC1274: cat
 egory of user' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274: photo (
 G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )
attributeTypes:( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC 'RFC1274: ro
 om number' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.5 NAME ( 'drink' 'favouriteDrink' ) D
 ESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubst
 ringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274: general 
 information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX
  1.3.6.1.4.1.1466.115.121.1.15{2048} )
attributeTypes:( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress' EQUALIT
 Y caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.15{256} )
attributeTypes:( 1.2.840.113549.1.9.1 NAME ( 'email' 'emailAddress' 'pkcs9emai
 l' ) DESC 'RFC2459: legacy attribute for email addresses in DNs' EQUALITY cas
 eIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.26{128} )
attributeTypes:( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain' DESC 'RFC1
 274: domain associated with object' EQUALITY caseIgnoreIA5Match SUBSTR caseIg
 noreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes:( 0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domainComponent' ) DE
 SC 'RFC1274/2247: domain component' EQUALITY caseIgnoreIA5Match SUBSTR caseIg
 noreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
attributeTypes:( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mailbox' ) DES
 C 'RFC1274: RFC822 Mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5S
 ubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )
attributeTypes:( 0.9.2342.19200300.100.1.1 NAME ( 'uid' 'userid' ) DESC 'RFC12
 74: user identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatc
 h SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )
attributeTypes:( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD' SUP name 
 )
attributeTypes:( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256: delta revo
 cation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )
attributeTypes:( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256: supported 
 algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 )
attributeTypes:( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC2256: house identifi
 er' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.15{32768} )
attributeTypes:( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique member of 
 a group' EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 )
attributeTypes:( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256: protocol i
 nformation' EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.42 )
attributeTypes:( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256: enhanced s
 earch guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 )
attributeTypes:( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN qualifier' EQUA
 LITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstr
 ingsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 )
attributeTypes:( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256: X.500 uni
 que identifier' EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 )
attributeTypes:( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256: name quali
 fier indicating a generation' SUP name )
attributeTypes:( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of some or a
 ll of names, but not the surname(s).' SUP name )
attributeTypes:( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256: first name(
 s) for which the entity is known by' SUP name )
attributeTypes:( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256: X.509 cro
 ss certificate pair, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.10 )
attributeTypes:( 2.5.4.39 NAME 'certificateRevocationList' DESC 'RFC2256: X.50
 9 certificate revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1
 .9 )
attributeTypes:( 2.5.4.38 NAME 'authorityRevocationList' DESC 'RFC2256: X.509 
 authority revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )
attributeTypes:( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA certifi
 cate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.8 )
attributeTypes:( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.509 user cer
 tificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.8 )
attributeTypes:( 2.5.4.34 NAME 'seeAlso' DESC 'RFC2256: DN of related object' 
 SUP distinguishedName )
attributeTypes:( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupant of role'
  SUP distinguishedName )
attributeTypes:( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the object)' S
 UP distinguishedName )
attributeTypes:( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a group' SUP 
 distinguishedName )
attributeTypes:( 2.5.4.30 NAME 'supportedApplicationContext' DESC 'RFC2256: su
 pported application context' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.
 1.1466.115.121.1.38 )
attributeTypes:( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256: presentati
 on address' EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.43 SINGLE-VALUE )
attributeTypes:( 2.5.4.28 NAME 'preferredDeliveryMethod' DESC 'RFC2256: prefer
 red delivery method' SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE )
attributeTypes:( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: destinati
 on indicator' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.44{128} )
attributeTypes:( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: registered p
 ostal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )
attributeTypes:( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC2256: intern
 ational ISDN number' EQUALITY numericStringMatch SUBSTR numericStringSubstrin
 gsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} )
attributeTypes:( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Address' EQU
 ALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.36{15} )
attributeTypes:( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DESC 'RFC2
 256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 )
attributeTypes:( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC2256: Tele
 tex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )
attributeTypes:( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Number' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.52 )
attributeTypes:( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Telephone Numb
 er' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTA
 X 1.3.6.1.4.1.1466.115.121.1.50{32} )
attributeTypes:( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RFC2256: Phy
 sical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstri
 ngsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
attributeTypes:( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post Office Box'
  EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.15{40} )
attributeTypes:( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal code' EQUALI
 TY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.1
 15.121.1.15{40} )
attributeTypes:( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal address' 
 EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.41 )
attributeTypes:( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: business cate
 gory' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.15{128} )
attributeTypes:( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search guide, obso
 leted by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 )
attributeTypes:( 2.5.4.13 NAME 'description' DESC 'RFC2256: descriptive inform
 ation' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6
 .1.4.1.1466.115.121.1.15{1024} )
attributeTypes:( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated with th
 e entity' SUP name )
attributeTypes:( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC 'RFC2256
 : organizational unit this object belongs to' SUP name )
attributeTypes:( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC2256: organ
 ization this object belongs to' SUP name )
attributeTypes:( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC2256: stre
 et address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstrin
 gsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )
attributeTypes:( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2256: st
 ate or province which this object resides in' SUP name )
attributeTypes:( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: locality w
 hich this object resides in' SUP name )
attributeTypes:( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256: ISO-3166 co
 untry 2-letter code' SUP name SINGLE-VALUE )
attributeTypes:( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial number of t
 he entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1
 .3.6.1.4.1.1466.115.121.1.44{64} )
attributeTypes:( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (family) 
 name(s) for which the entity is known by' SUP name )
attributeTypes:( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: knowledge 
 information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32
 768} )
attributeTypes:( 1.3.6.1.4.1.4203.666.1.12 NAME 'queryid' DESC 'list of querie
 s the entry belongs to' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.40{64} NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes:( 1.3.6.1.4.1.250.1.57 NAME 'labeledURI' DESC 'RFC2079: Uniform
  Resource Identifier with optional label' EQUALITY caseExactMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.15 )
attributeTypes:( 2.5.4.35 NAME 'userPassword' DESC 'RFC2256/2307: password of 
 user' EQUALITY octetStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128} )
attributeTypes:( 2.5.4.3 NAME ( 'cn' 'commonName' ) DESC 'RFC2256: common name
 (s) for which the entity is known by' SUP name )
attributeTypes:( 2.5.4.41 NAME 'name' DESC 'RFC2256: common supertype of name 
 attributes' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
 1.3.6.1.4.1.1466.115.121.1.15{32768} )
attributeTypes:( 2.5.4.49 NAME 'distinguishedName' DESC 'RFC2256: common super
 type of DN attributes' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.12 )
attributeTypes:( 2.16.840.1.113730.3.1.34 NAME 'ref' DESC 'namedref: subordina
 te referral URL' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
  USAGE distributedOperation )
attributeTypes:( 2.5.4.1 NAME ( 'aliasedObjectName' 'aliasedEntryName' ) DESC 
 'RFC2256: name of aliased object' EQUALITY distinguishedNameMatch SYNTAX 1.3.
 6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
attributeTypes:( 1.3.6.1.4.1.1466.101.120.16 NAME 'ldapSyntaxes' DESC 'RFC2252
 : LDAP syntaxes' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.
 4.1.1466.115.121.1.54 USAGE directoryOperation )
attributeTypes:( 2.5.21.8 NAME 'matchingRuleUse' DESC 'RFC2252: matching rule 
 uses' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.11
 5.121.1.31 USAGE directoryOperation )
attributeTypes:( 2.5.21.6 NAME 'objectClasses' DESC 'RFC2252: object classes' 
 EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.37 USAGE directoryOperation )
attributeTypes:( 2.5.21.5 NAME 'attributeTypes' DESC 'RFC2252: attribute types
 ' EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.3 USAGE directoryOperation )
attributeTypes:( 2.5.21.4 NAME 'matchingRules' DESC 'RFC2252: matching rules' 
 EQUALITY objectIdentifierFirstComponentMatch SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.30 USAGE directoryOperation )
attributeTypes:( 1.3.6.1.1.5 NAME 'vendorVersion' DESC 'RFC3045: version of im
 plementation' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SI
 NGLE-VALUE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes:( 1.3.6.1.1.4 NAME 'vendorName' DESC 'RFC3045: name of implemen
 tation vendor' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 S
 INGLE-VALUE NO-USER-MODIFICATION USAGE dSAOperation )
attributeTypes:( 1.3.6.1.4.1.4203.1.3.5 NAME 'supportedFeatures' DESC 'feature
 s supported by the server' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.38 USAGE dSAOperation )
attributeTypes:( 1.3.6.1.4.1.1466.101.120.14 NAME 'supportedSASLMechanisms' DE
 SC 'RFC2252: supported SASL mechanisms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
 USAGE dSAOperation )
attributeTypes:( 1.3.6.1.4.1.1466.101.120.15 NAME 'supportedLDAPVersion' DESC 
 'RFC2252: supported LDAP versions' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 USAGE
  dSAOperation )
attributeTypes:( 1.3.6.1.4.1.1466.101.120.7 NAME 'supportedExtension' DESC 'RF
 C2252: supported extended operations' SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 US
 AGE dSAOperation )
attributeTypes:( 1.3.6.1.4.1.1466.101.120.13 NAME 'supportedControl' DESC 'RFC
 2252: supported controls' SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 USAGE dSAOpera
 tion )
attributeTypes:( 1.3.6.1.4.1.1466.101.120.5 NAME 'namingContexts' DESC 'RFC225
 2: naming contexts' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 USAGE dSAOperation )
attributeTypes:( 1.3.6.1.4.1.1466.101.120.6 NAME 'altServer' DESC 'RFC2252: al
 ternative servers' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 USAGE dSAOperation )
attributeTypes:( 2.5.18.10 NAME 'subschemaSubentry' DESC 'RFC2252: name of con
 trolling subschema entry' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.12 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation 
 )
attributeTypes:( 2.5.18.9 NAME 'hasSubordinates' DESC 'X.501: entry has childr
 en' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE NO
 -USER-MODIFICATION USAGE directoryOperation )
attributeTypes:( 2.5.18.4 NAME 'modifiersName' DESC 'RFC2252: name of last mod
 ifier' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 S
 INGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes:( 2.5.18.3 NAME 'creatorsName' DESC 'RFC2252: name of creator' 
 EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-V
 ALUE NO-USER-MODIFICATION USAGE directoryOperation )
attributeTypes:( 2.5.18.2 NAME 'modifyTimestamp' DESC 'RFC2252: time which obj
 ect was last modified' EQUALITY generalizedTimeMatch ORDERING generalizedTime
 OrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIF
 ICATION USAGE directoryOperation )
attributeTypes:( 2.5.18.1 NAME 'createTimestamp' DESC 'RFC2252: time which obj
 ect was created' EQUALITY generalizedTimeMatch ORDERING generalizedTimeOrderi
 ngMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE NO-USER-MODIFICATIO
 N USAGE directoryOperation )
attributeTypes:( 2.5.21.9 NAME 'structuralObjectClass' DESC 'X.500(93): struct
 ural object class of entry' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.38 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation
  )
attributeTypes:( 2.5.4.0 NAME 'objectClass' DESC 'RFC2256: object classes of t
 he entity' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.3
 8 )
objectClasses:( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC 'RFC2798: In
 ternet Organizational Person' SUP organizationalPerson STRUCTURAL MAY ( audio
  $ businessCategory $ carLicense $ departmentNumber $ displayName $ employeeN
 umber $ employeeType $ givenName $ homePhone $ homePostalAddress $ initials $
  jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $ photo $ roomN
 umber $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $ preferredL
 anguage $ userSMIMECertificate $ userPKCS12 ) )
objectClasses:( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' DESC 'A device with boo
 t parameters' SUP top AUXILIARY MAY ( bootFile $ bootParameter ) )
objectClasses:( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' DESC 'A device with a MA
 C address' SUP top AUXILIARY MAY macAddress )
objectClasses:( 1.3.6.1.1.1.2.10 NAME 'nisObject' DESC 'An entry in a NIS map'
  SUP top STRUCTURAL MUST ( cn $ nisMapEntry $ nisMapName ) MAY description )
objectClasses:( 1.3.6.1.1.1.2.9 NAME 'nisMap' DESC 'A generic abstraction of a
  NIS map' SUP top STRUCTURAL MUST nisMapName MAY description )
objectClasses:( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' DESC 'Abstraction of a netg
 roup' SUP top STRUCTURAL MUST cn MAY ( nisNetgroupTriple $ memberNisNetgroup 
 $ description ) )
objectClasses:( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' DESC 'Abstraction of an IP ne
 twork' SUP top STRUCTURAL MUST ( cn $ ipNetworkNumber ) MAY ( ipNetmaskNumber
  $ l $ description $ manager ) )
objectClasses:( 1.3.6.1.1.1.2.6 NAME 'ipHost' DESC 'Abstraction of a host, an 
 IP device' SUP top AUXILIARY MUST ( cn $ ipHostNumber ) MAY ( l $ description
  $ manager ) )
objectClasses:( 1.3.6.1.1.1.2.5 NAME 'oncRpc' DESC 'Abstraction of an ONC/RPC 
 binding' SUP top STRUCTURAL MUST ( cn $ oncRpcNumber $ description ) MAY desc
 ription )
objectClasses:( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' DESC 'Abstraction of an IP p
 rotocol' SUP top STRUCTURAL MUST ( cn $ ipProtocolNumber $ description ) MAY 
 description )
objectClasses:( 1.3.6.1.1.1.2.3 NAME 'ipService' DESC 'Abstraction an Internet
  Protocol service' SUP top STRUCTURAL MUST ( cn $ ipServicePort $ ipServicePr
 otocol ) MAY description )
objectClasses:( 1.3.6.1.1.1.2.2 NAME 'posixGroup' DESC 'Abstraction of a group
  of accounts' SUP top STRUCTURAL MUST ( cn $ gidNumber ) MAY ( userPassword $
  memberUid $ description ) )
objectClasses:( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' DESC 'Additional attribut
 es for shadow passwords' SUP top AUXILIARY MUST uid MAY ( userPassword $ shad
 owLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shado
 wExpire $ shadowFlag $ description ) )
objectClasses:( 1.3.6.1.1.1.2.0 NAME 'posixAccount' DESC 'Abstraction of an ac
 count with POSIX attributes' SUP top AUXILIARY MUST ( cn $ uid $ uidNumber $ 
 gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $ gecos $ descrip
 tion ) )
objectClasses:( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData' SUP top 
 AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $ subtreeMaximumQuality
  ) )
objectClasses:( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa STRUCTURAL 
 MAY dSAQuality )
objectClasses:( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SUP ( orga
 nization $ organizationalUnit ) STRUCTURAL MAY buildingName )
objectClasses:( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP country 
 STRUCTURAL MUST friendlyCountryName )
objectClasses:( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject' DESC 'RF
 C1274: an object related to an domain' SUP top AUXILIARY MUST associatedDomai
 n )
objectClasses:( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP domain STRUCTU
 RAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $ CNAMERecord 
 ) )
objectClasses:( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP domain S
 TRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $ telephoneNumbe
 r $ physicalDeliveryOfficeName $ postalAddress $ postalCode $ postOfficeBox $
  streetAddress $ facsimileTelephoneNumber $ internationalISDNNumber $ telepho
 neNumber $ teletexTerminalIdentifier $ telexNumber $ preferredDeliveryMethod 
 $ destinationIndicator $ registeredAddress $ x121Address ) )
objectClasses:( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top STRUCTURAL MU
 ST domainComponent MAY ( associatedName $ organizationName $ description $ bu
 sinessCategory $ seeAlso $ searchGuide $ userPassword $ localityName $ stateO
 rProvinceName $ streetAddress $ physicalDeliveryOfficeName $ postalAddress $ 
 postalCode $ postOfficeBox $ streetAddress $ facsimileTelephoneNumber $ inter
 nationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $ telexNumbe
 r $ preferredDeliveryMethod $ destinationIndicator $ registeredAddress $ x121
 Address ) )
objectClasses:( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP top STRUCT
 URAL MUST commonName MAY ( description $ seeAlso $ telephonenumber $ locality
 Name $ organizationName $ organizationalUnitName ) )
objectClasses:( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top STRUCTURAL MUST 
 commonName MAY ( roomNumber $ description $ seeAlso $ telephoneNumber ) )
objectClasses:( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top STRUCTURAL M
 UST documentIdentifier MAY ( commonName $ description $ seeAlso $ localityNam
 e $ organizationName $ organizationalUnitName $ documentTitle $ documentVersi
 on $ documentAuthor $ documentLocation $ documentPublisher ) )
objectClasses:( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top STRUCTURAL MU
 ST userid MAY ( description $ seeAlso $ localityName $ organizationName $ org
 anizationalUnitName $ host ) )
objectClasses:( 0.9.2342.19200300.100.4.4 NAME ( 'pilotPerson' 'newPilotPerson
 ' ) SUP person STRUCTURAL MAY ( userid $ textEncodedORAddress $ rfc822Mailbox
  $ favouriteDrink $ roomNumber $ userClass $ homeTelephoneNumber $ homePostal
 Address $ secretary $ personalTitle $ preferredDeliveryMethod $ businessCateg
 ory $ janetMailbox $ otherMailbox $ mobileTelephoneNumber $ pagerTelephoneNum
 ber $ organizationalStatus $ mailPreferenceOption $ personalSignature ) )
objectClasses:( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid object' SUP 
 top AUXILIARY MUST uid )
objectClasses:( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247: domain com
 ponent object' SUP top AUXILIARY MUST dc )
objectClasses:( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject' DESC 'R
 FC1274: simple security object' SUP top AUXILIARY MUST userPassword )
objectClasses:( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' DESC 'RFC2079: ob
 ject that contains the URI attribute type' SUP top AUXILIARY MAY labeledURI )
objectClasses:( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SUP top AUXI
 LIARY MAY deltaRevocationList )
objectClasses:( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate authority
 ' SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRevocationList
  $ cACertificate $ crossCertificatePair ) )
objectClasses:( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' SUP top AUX
 ILIARY MAY userCertificate )
objectClasses:( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST dmdName MAY ( user
 Password $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registere
 dAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ tel
 etexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimil
 eTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ phys
 icalDeliveryOfficeName $ st $ l $ description ) )
objectClasses:( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTURAL MUST c
 n MAY ( certificateRevocationList $ authorityRevocationList $ deltaRevocation
 List ) )
objectClasses:( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP certificationA
 uthority AUXILIARY MAY deltaRevocationList )
objectClasses:( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC2256: a user 
 security information' SUP top AUXILIARY MAY supportedAlgorithms )
objectClasses:( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a group of u
 nique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST ( uniqueMembe
 r $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )
objectClasses:( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256: a certif
 icate authority' SUP top AUXILIARY MUST ( authorityRevocationList $ certifica
 teRevocationList $ cACertificate ) MAY crossCertificatePair )
objectClasses:( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC2256: a stro
 ng authentication user' SUP top AUXILIARY MUST userCertificate )
objectClasses:( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP top STRUCT
 URAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description 
 ) )
objectClasses:( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory system agent (a
  server)' SUP applicationEntity STRUCTURAL MAY knowledgeInformation )
objectClasses:( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an applicatio
 n entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY ( supporte
 dApplicationContext $ seeAlso $ ou $ o $ l $ description ) )
objectClasses:( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an applicati
 on process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ description )
  )
objectClasses:( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an residentia
 l person' SUP person STRUCTURAL MUST l MAY ( businessCategory $ x121Address $
  registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNu
 mber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber 
 $ facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ postOfficeBox
  $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l ) )
objectClasses:( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of names (D
 Ns)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $ seeAlso
  $ owner $ ou $ o $ description ) )
objectClasses:( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an organizati
 onal role' SUP top STRUCTURAL MUST cn MAY ( x121Address $ registeredAddress $
  destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTermin
 alIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephone
 Number $ seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ postOffi
 ceBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l
  $ description ) )
objectClasses:( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an organiza
 tional person' SUP person STRUCTURAL MAY ( title $ x121Address $ registeredAd
 dress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ telete
 xTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTe
 lephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physica
 lDeliveryOfficeName $ ou $ st $ l ) )
objectClasses:( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top STRUCTU
 RAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ descrip
 tion ) )
objectClasses:( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an organizati
 onal unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide $ seeA
 lso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicat
 or $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ tele
 phoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ p
 ostOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $
  l $ description ) )
objectClasses:( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an organization' SU
 P top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ business
 Category $ x121Address $ registeredAddress $ destinationIndicator $ preferred
 DeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ 
 internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $
  postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ descripti
 on ) )
objectClasses:( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SUP top STR
 UCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ description ) )
objectClasses:( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP top STRUC
 TURAL MUST c MAY ( searchGuide $ description ) )
objectClasses:( 2.5.20.1 NAME 'subschema' DESC 'RFC2252: controlling subschema
  (sub)entry' AUXILIARY MAY ( dITStructureRules $ nameForms $ ditContentRules 
 $ objectClasses $ attributeTypes $ matchingRules $ matchingRuleUse ) )
objectClasses:( 2.5.17.0 NAME 'subentry' SUP top STRUCTURAL MUST ( cn $ subtre
 eSpecification ) )
objectClasses:( 1.3.6.1.4.1.4203.1.4.1 NAME ( 'OpenLDAProotDSE' 'LDAProotDSE' 
 ) DESC 'OpenLDAP Root DSE object' SUP top STRUCTURAL MAY cn )
objectClasses:( 2.16.840.1.113730.3.2.6 NAME 'referral' DESC 'namedref: named 
 subordinate referral' SUP top STRUCTURAL MUST ref )
objectClasses:( 2.5.6.1 NAME 'alias' DESC 'RFC2256: an alias' SUP top STRUCTUR
 AL MUST aliasedObjectName )
objectClasses:( 1.3.6.1.4.1.1466.101.120.111 NAME 'extensibleObject' DESC 'RFC
 2252: extensible object' SUP top AUXILIARY )
objectClasses:( 2.5.6.0 NAME 'top' DESC 'top of the superclass chain' ABSTRACT
  MUST objectClass )
cn:Subschema
matchingRules:( 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.27 )
matchingRules:( 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' SYNTAX 1.3.6.
 1.4.1.1466.115.121.1.27 )
matchingRules:( 1.3.6.1.4.1.4203.1.2.1 NAME 'caseExactIA5SubstringsMatch' SYNT
 AX 1.3.6.1.4.1.1466.115.121.1.26 )
matchingRules:( 1.3.6.1.4.1.1466.109.114.3 NAME 'caseIgnoreIA5SubstringsMatch'
  SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
matchingRules:( 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.26 )
matchingRules:( 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' SYNTAX 1.3
 .6.1.4.1.1466.115.121.1.26 )
matchingRules:( 2.5.13.35 NAME 'certificateMatch' SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.8 )
matchingRules:( 2.5.13.34 NAME 'certificateExactMatch' SYNTAX 1.2.826.0.1.3344
 810.7.1 )
matchingRules:( 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' SYNTAX 1.
 3.6.1.4.1.1466.115.121.1.38 )
matchingRules:( 2.5.13.29 NAME 'integerFirstComponentMatch' SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.27 )
matchingRules:( 2.5.13.28 NAME 'generalizedTimeOrderingMatch' SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.24 )
matchingRules:( 2.5.13.27 NAME 'generalizedTimeMatch' SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.24 )
matchingRules:( 2.5.13.23 NAME 'uniqueMemberMatch' SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.34 )
matchingRules:( 2.5.13.21 NAME 'telephoneNumberSubstringsMatch' SYNTAX 1.3.6.1
 .4.1.1466.115.121.1.58 )
matchingRules:( 2.5.13.20 NAME 'telephoneNumberMatch' SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.50 )
matchingRules:( 2.5.13.19 NAME 'octetStringSubstringsMatch' SYNTAX 1.3.6.1.4.1
 .1466.115.121.1.40 )
matchingRules:( 2.5.13.18 NAME 'octetStringOrderingMatch' SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.40 )
matchingRules:( 2.5.13.17 NAME 'octetStringMatch' SYNTAX 1.3.6.1.4.1.1466.115.
 121.1.40 )
matchingRules:( 2.5.13.16 NAME 'bitStringMatch' SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.6 )
matchingRules:( 2.5.13.15 NAME 'integerOrderingMatch' SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.27 )
matchingRules:( 2.5.13.14 NAME 'integerMatch' SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.27 )
matchingRules:( 2.5.13.13 NAME 'booleanMatch' SYNTAX 1.3.6.1.4.1.1466.115.121.
 1.7 )
matchingRules:( 2.5.13.10 NAME 'numericStringSubstringsMatch' SYNTAX 1.3.6.1.4
 .1.1466.115.121.1.58 )
matchingRules:( 2.5.13.9 NAME 'numericStringOrderingMatch' SYNTAX 1.3.6.1.4.1.
 1466.115.121.1.36 )
matchingRules:( 2.5.13.8 NAME 'numericStringMatch' SYNTAX 1.3.6.1.4.1.1466.115
 .121.1.36 )
matchingRules:( 2.5.13.7 NAME 'caseExactSubstringsMatch' SYNTAX 1.3.6.1.4.1.14
 66.115.121.1.58 )
matchingRules:( 2.5.13.6 NAME 'caseExactOrderingMatch' SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.15 )
matchingRules:( 2.5.13.5 NAME 'caseExactMatch' SYNTAX 1.3.6.1.4.1.1466.115.121
 .1.15 )
matchingRules:( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch' SYNTAX 1.3.6.1.4.1.1
 466.115.121.1.58 )
matchingRules:( 2.5.13.3 NAME 'caseIgnoreOrderingMatch' SYNTAX 1.3.6.1.4.1.146
 6.115.121.1.15 )
matchingRules:( 2.5.13.2 NAME 'caseIgnoreMatch' SYNTAX 1.3.6.1.4.1.1466.115.12
 1.1.15 )
matchingRules:( 2.5.13.1 NAME 'distinguishedNameMatch' SYNTAX 1.3.6.1.4.1.1466
 .115.121.1.12 )
matchingRules:( 2.5.13.0 NAME 'objectIdentifierMatch' SYNTAX 1.3.6.1.4.1.1466.
 115.121.1.38 )
matchingRuleUse:( 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES ( on
 cRpcNumber $ ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ s
 hadowInactive $ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $ gi
 dNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) )
matchingRuleUse:( 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES ( o
 ncRpcNumber $ ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ 
 shadowInactive $ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $ g
 idNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) )
matchingRuleUse:( 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIES
  ( nisMapEntry $ bootFile $ macAddress $ ipNetmaskNumber $ ipNetworkNumber $ 
 ipHostNumber $ memberNisNetgroup $ memberUid $ loginShell $ homeDirectory $ g
 ecos $ janetMailbox $ cNAMERecord $ sOARecord $ nSRecord $ mXRecord $ mDRecor
 d $ aRecord $ email $ associatedDomain $ dc $ mail $ altServer ) )
matchingRuleUse:( 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES 
 ( nisMapEntry $ bootFile $ macAddress $ ipNetmaskNumber $ ipNetworkNumber $ i
 pHostNumber $ memberNisNetgroup $ memberUid $ loginShell $ homeDirectory $ ge
 cos $ janetMailbox $ cNAMERecord $ sOARecord $ nSRecord $ mXRecord $ mDRecord
  $ aRecord $ email $ associatedDomain $ dc $ mail $ altServer ) )
matchingRuleUse:( 2.5.13.35 NAME 'certificateMatch' APPLIES ( cACertificate $ 
 userCertificate ) )
matchingRuleUse:( 2.5.13.34 NAME 'certificateExactMatch' APPLIES ( cACertifica
 te $ userCertificate ) )
matchingRuleUse:( 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIES
  ( supportedApplicationContext $ ldapSyntaxes $ supportedFeatures $ supported
 Extension $ supportedControl ) )
matchingRuleUse:( 2.5.13.29 NAME 'integerFirstComponentMatch' APPLIES ( oncRpc
 Number $ ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shado
 wInactive $ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $ gidNum
 ber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) )
matchingRuleUse:( 2.5.13.27 NAME 'generalizedTimeMatch' APPLIES ( modifyTimest
 amp $ createTimestamp ) )
matchingRuleUse:( 2.5.13.24 NAME 'protocolInformationMatch' APPLIES protocolIn
 formation )
matchingRuleUse:( 2.5.13.23 NAME 'uniqueMemberMatch' APPLIES uniqueMember )
matchingRuleUse:( 2.5.13.22 NAME 'presentationAddressMatch' APPLIES presentati
 onAddress )
matchingRuleUse:( 2.5.13.20 NAME 'telephoneNumberMatch' APPLIES ( pager $ mobi
 le $ homePhone $ telephoneNumber ) )
matchingRuleUse:( 2.5.13.17 NAME 'octetStringMatch' APPLIES ( queryid $ userPa
 ssword ) )
matchingRuleUse:( 2.5.13.16 NAME 'bitStringMatch' APPLIES x500UniqueIdentifier
  )
matchingRuleUse:( 2.5.13.14 NAME 'integerMatch' APPLIES ( oncRpcNumber $ ipPro
 tocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive $ sh
 adowWarning $ shadowMax $ shadowMin $ shadowLastChange $ gidNumber $ uidNumbe
 r $ mailPreferenceOption $ supportedLDAPVersion ) )
matchingRuleUse:( 2.5.13.13 NAME 'booleanMatch' APPLIES hasSubordinates )
matchingRuleUse:( 2.5.13.11 NAME 'caseIgnoreListMatch' APPLIES ( homePostalAdd
 ress $ registeredAddress $ postalAddress ) )
matchingRuleUse:( 2.5.13.8 NAME 'numericStringMatch' APPLIES ( internationaliS
 DNNumber $ x121Address ) )
matchingRuleUse:( 2.5.13.7 NAME 'caseExactSubstringsMatch' APPLIES ( dnQualifi
 er $ destinationIndicator $ serialNumber ) )
matchingRuleUse:( 2.5.13.6 NAME 'caseExactOrderingMatch' APPLIES ( dnQualifier
  $ destinationIndicator $ serialNumber ) )
matchingRuleUse:( 2.5.13.5 NAME 'caseExactMatch' APPLIES ( preferredLanguage $
  employeeType $ employeeNumber $ displayName $ departmentNumber $ carLicense 
 $ nisMapName $ ipServiceProtocol $ documentPublisher $ buildingName $ organiz
 ationalStatus $ uniqueIdentifier $ co $ personalTitle $ documentLocation $ do
 cumentVersion $ documentTitle $ documentIdentifier $ host $ userClass $ roomN
 umber $ drink $ info $ textEncodedORAddress $ uid $ dmdName $ houseIdentifier
  $ dnQualifier $ generationQualifier $ initials $ givenName $ destinationIndi
 cator $ physicalDeliveryOfficeName $ postOfficeBox $ postalCode $ businessCat
 egory $ description $ title $ ou $ o $ street $ st $ l $ c $ serialNumber $ s
 n $ knowledgeInformation $ labeledURI $ cn $ name $ ref $ vendorVersion $ ven
 dorName $ supportedSASLMechanisms ) )
matchingRuleUse:( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch' APPLIES ( dnQualif
 ier $ destinationIndicator $ serialNumber ) )
matchingRuleUse:( 2.5.13.3 NAME 'caseIgnoreOrderingMatch' APPLIES ( dnQualifie
 r $ destinationIndicator $ serialNumber ) )
matchingRuleUse:( 2.5.13.2 NAME 'caseIgnoreMatch' APPLIES ( preferredLanguage 
 $ employeeType $ employeeNumber $ displayName $ departmentNumber $ carLicense
  $ nisMapName $ ipServiceProtocol $ documentPublisher $ buildingName $ organi
 zationalStatus $ uniqueIdentifier $ co $ personalTitle $ documentLocation $ d
 ocumentVersion $ documentTitle $ documentIdentifier $ host $ userClass $ room
 Number $ drink $ info $ textEncodedORAddress $ uid $ dmdName $ houseIdentifie
 r $ dnQualifier $ generationQualifier $ initials $ givenName $ destinationInd
 icator $ physicalDeliveryOfficeName $ postOfficeBox $ postalCode $ businessCa
 tegory $ description $ title $ ou $ o $ street $ st $ l $ c $ serialNumber $ 
 sn $ knowledgeInformation $ labeledURI $ cn $ name $ ref $ vendorVersion $ ve
 ndorName $ supportedSASLMechanisms ) )
matchingRuleUse:( 2.5.13.1 NAME 'distinguishedNameMatch' APPLIES ( dITRedirect
  $ associatedName $ secretary $ documentAuthor $ manager $ seeAlso $ roleOccu
 pant $ owner $ member $ distinguishedName $ aliasedObjectName $ namingContext
 s $ subschemaSubentry $ modifiersName $ creatorsName ) )
matchingRuleUse:( 2.5.13.0 NAME 'objectIdentifierMatch' APPLIES ( supportedApp
 licationContext $ supportedFeatures $ supportedExtension $ supportedControl )
  )
subschemaSubentry:cn=Subschema
structuralObjectClass:subentry

