[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ActiveDirectory schema

At 09:29 AM 6/13/99 -0700, Rob Weltman wrote:
>  RFC 2252 (Lightweight Directory Access Protocol (v3): Attribute Syntax
>Definitions) says: 4.4. Object Classes    The format for representation of
>object classes is defined in X.501 
>   [3]. In general every entry will contain an abstract class ("top" or 
>   "alias"), at least one structural object class, and zero or more 
>    Whether an object class is abstract, 
>   structural or auxiliary is defined when the object class identifier ...

The other difference is that the structural object classes for the entry
don't change, while the entry's auxiliary object classes may change over
time.  For example, if an entry is given an X.509 certificate, then the
entry will be modified by the addition of a userCertificate attribute, and
additionally the entry's objectClass attribute is modified by the addition
of the strongAuthenticationUser object class.  Simlarly, if later on the
certificate is removed from the user, then the objectClass attribute is
modified once again by removing the strongAuthenticationUser object class...

Bruce