eduperson.schema

# eduPersonAffiliation
# Specifies a person's relationship(s) to the institution in
# broad categories such as student, faculty, staff, alum, etc.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.1
        NAME 'eduPersonAffiliation'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonNickname
# Specifies a person's nickname, or the informal name by which
# they are accustomed to be hailed.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.2
        NAME 'eduPersonNickname'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonOrgDN
# The distinguished name (DN) of the directory entry
# representing the institution with which the person
# is associated.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.3
        NAME 'eduPersonOrgDN'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY distinguishedNameMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' SINGLE-VALUE )

# eduPersonOrgUnitDN
# The distinguished name (DN) of the directory entries representing
# the person's Organizational Unit(s).
attributetype ( 1.3.6.1.4.1.5923.1.1.1.4
        NAME 'eduPersonOrgUnitDN'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY distinguishedNameMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )

# eduPersonPrimaryAffiliation
# Specifies a person's PRIMARY relationship to the institution
# in broad categories such as student, faculty, staff, alum, etc.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.5
        NAME 'eduPersonPrimaryAffiliation'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPersonPrincipalName
# The "NetID" of the person for the purposes of inter-institutional
# authentication.  Should be stored in the form of user@univ.edu,
# where univ.edu is the name of the local security domain.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.6
    NAME 'eduPersonPrincipalName'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseIgnoreMatch
    SUBSTR caseIgnoreSubstringsMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPersonEntitlement
# URI (either URN or URL) that indicates a set of rights to specific 
# resources.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.7
    NAME 'eduPersonEntitlement'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseExactMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonPrimaryOrgUnitDN
# The distinguished name (DN) of the directory entry representing the 
# person's primary Organizational Unit(s).
attributetype ( 1.3.6.1.4.1.5923.1.1.1.8
    NAME 'eduPersonPrimaryOrgUnitDN'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY distinguishedNameMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' SINGLE-VALUE )

# eduPersonScopedAffiliation
attributetype ( 1.3.6.1.4.1.5923.1.1.1.9
    NAME 'eduPersonScopedAffiliation'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseIgnoreMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPersonTargetedID
attributetype ( 1.3.6.1.4.1.5923.1.1.1.10
    NAME 'eduPersonTargetedID'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

# eduPersonAssurance
attributetype ( 1.3.6.1.4.1.5923.1.1.1.11
    NAME 'eduPersonAssurance'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

# eduPersonPrincipalNamePrior
attributetype ( 1.3.6.1.4.1.5923.1.1.1.12
    NAME 'eduPersonPrincipalNamePrior'
    DESC 'eduPersonPrincipalNamePrior per Internet2'
    EQUALITY caseIgnoreMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonUniqueId
attributetype ( 1.3.6.1.4.1.5923.1.1.1.13
    NAME 'eduPersonUniqueId'
    DESC 'eduPersonUniqueId per Internet2'
    EQUALITY caseIgnoreMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

# eduPersonOrcid
attributetype ( 1.3.6.1.4.1.5923.1.1.1.16
    NAME 'eduPersonOrcid'
    DESC 'ORCID researcher identifiers belonging to the principal'
    EQUALITY caseIgnoreMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

# eduPerson
# The eduPerson objectclass is used to represent people who are
# associated with a university/school in some way.  It is derived
# from the inetOrgPerson objectclass.

objectClass ( 1.3.6.1.4.1.5923.1.1.2
    NAME 'eduPerson'
    AUXILIARY
    MAY ( eduPersonAffiliation $  
        eduPersonNickname $
        eduPersonOrgDN $
        eduPersonOrgUnitDN $
        eduPersonPrimaryAffiliation $
        eduPersonPrincipalName $
        eduPersonEntitlement $
        eduPersonPrimaryOrgUnitDN $
        eduPersonScopedAffiliation $
        eduPersonTargetedID $
        eduPersonAssurance $
        eduPersonPrincipalNamePrior $
        eduPersonUniqueId $
        eduPersonOrcid )
    )