dn: cn=dyngroup,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: dyngroup
olcObjectIdentifier: NetscapeRoot 2.16.840.1.113730
olcObjectIdentifier: NetscapeLDAP NetscapeRoot:3
olcObjectIdentifier: NetscapeLDAPattributeType NetscapeLDAP:1
olcObjectIdentifier: NetscapeLDAPobjectClass NetscapeLDAP:2
olcObjectIdentifier: OpenLDAPExp11 1.3.6.1.4.1.4203.666.11
olcObjectIdentifier: DynGroupBase OpenLDAPExp11:8
olcObjectIdentifier: DynGroupAttr DynGroupBase:1
olcObjectIdentifier: DynGroupOC DynGroupBase:2
olcAttributeTypes: ( NetscapeLDAPattributeType:198
  NAME 'memberURL'
  DESC 'Identifies an URL associated with each member of a group. Any type of labeled URL can be used.'
  SUP labeledURI )
olcAttributeTypes: ( DynGroupAttr:1
  NAME 'dgIdentity'
  DESC 'Identity to use when processing the memberURL'
  SUP distinguishedName SINGLE-VALUE )
olcAttributeTypes: ( DynGroupAttr:2
  NAME 'dgAuthz'
  DESC 'Optional authorization rules that determine who is allowed to assume the dgIdentity'
  EQUALITY authzMatch
  SYNTAX 1.3.6.1.4.1.4203.666.2.7 X-ORDERED 'VALUES' )
olcObjectClasses: ( NetscapeLDAPobjectClass:33
  NAME 'groupOfURLs'
  SUP top
  STRUCTURAL
  MUST cn
  MAY ( memberURL $
    businessCategory $
    description $
    o $
    ou $
    owner $
    seeAlso ) )
olcObjectClasses: ( DynGroupOC:1
  NAME 'dgIdentityAux'
  SUP top
  AUXILIARY
  MAY ( dgIdentity $
   dgAuthz ) )