# eduPersonAffiliation
# Specifies a person's relationship(s) to the institution in
# broad categories such as student, faculty, staff, alum, etc.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.1
        NAME 'eduPersonAffiliation'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonNickname
# Specifies a person's nickname, or the informal name by which
# they are accustomed to be hailed.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.2
        NAME 'eduPersonNickname'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonOrgDN
# The distinguished name (DN) of the directory entry
# representing the institution with which the person
# is associated.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.3
        NAME 'eduPersonOrgDN'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY distinguishedNameMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' SINGLE-VALUE )

# eduPersonOrgUnitDN
# The distinguished name (DN) of the directory entries representing
# the person's Organizational Unit(s).
attributetype ( 1.3.6.1.4.1.5923.1.1.1.4
        NAME 'eduPersonOrgUnitDN'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY distinguishedNameMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )

# eduPersonPrimaryAffiliation
# Specifies a person's PRIMARY relationship to the institution
# in broad categories such as student, faculty, staff, alum, etc.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.5
        NAME 'eduPersonPrimaryAffiliation'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPersonPrincipalName
# The "NetID" of the person for the purposes of inter-institutional
# authentication.  Should be stored in the form of user@univ.edu,
# where univ.edu is the name of the local security domain.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.6
    NAME 'eduPersonPrincipalName'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseIgnoreMatch
    SUBSTR caseIgnoreSubstringsMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPersonEntitlement
attributetype ( 1.3.6.1.4.1.5923.1.1.1.7
    NAME 'eduPersonEntitlement'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseExactMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonPrimaryOrgUnitDN
attributetype ( 1.3.6.1.4.1.5923.1.1.1.8
    NAME 'eduPersonPrimaryOrgUnitDN'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY distinguishedNameMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' SINGLE-VALUE )

# eduPersonScopedAffiliation
attributetype ( 1.3.6.1.4.1.5923.1.1.1.9
    NAME 'eduPersonScopedAffiliation'
    DESC 'eduPerson per Internet2 and EDUCAUSE'
    EQUALITY caseIgnoreMatch
    SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPerson
# The eduPerson objectclass is used to represent people who are
# associated with a university/school in some way.  It is derived
# from the inetOrgPerson objectclass.
objectclass ( 1.3.6.1.4.1.5923.1.1.2
    NAME 'eduPerson'
    AUXILIARY
    MAY ( eduPersonAffiliation $
        eduPersonNickname $
        eduPersonOrgDN $
        eduPersonOrgUnitDN $
        eduPersonPrimaryAffiliation $
        eduPersonPrincipalName $
        eduPersonEntitlement $
        eduPersonPrimaryOrgUnitDN $
        eduPersonScopedAffiliation )
    )