DESS/AUTH Schema Extensions

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznAllowAccess—single-value integer; not currently used.
  
  
• CiscoAznPrivileges—multivalue Distinguished Name (dn); not currently used.
  
  
• CiscoAznResourceName—single-value case-ignore string; not currently used.
  
  
• CiscoAznRoleList—multivalue Distinguished Name (dn) containing a list of roles to be associated with the resource
  
  

OID:

1.2.840.113548.3.2.6.3

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznCreatorsName—single-value Distinguished Name (dn) that contains the name of the user that created the entry (can be user name, role name, or group name)
  
  

OID:

1.2.840.113548.3.2.6.2

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznFilterAction—single-value case-ignore string; if true filter action is on, if false filter action is off
  
  

OID:

1.2.840.113548.3.2.6.4

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznOperator—single-value case-ignore string that specifies the relationship between the CiscoAznVariableName and CiscoAznValue attributes; can be one of the following values (definition in parentheses):
  
  

EQ (equals) LE (less than or equal to) LT (less than) GE (greater than or equal to) GT (greater than) NE (not equal to)

• CiscoAznVariableName—single-value case-ignore string that specifies the variable part of the condition; can be one of the following (description in parentheses):
  
  

AuthenticationLevel
(in systems which recognize multiple levels of authentication, specifies the security level used when establishing the session; valid operators are EQ, LT, LE, GT, GE, and NE)
ResourceClass
(the objectClass value of the object being accessed; any class in the class hierarchy may be specified; the only valid operator is EQ)

• CiscoAznValue—single-value case-ignore string that specifies the value part of the condition; can be high, medium, or low if the attribute CiscoAznVariableName is equal to AuthenticationLevel, or any valid class name defined in the LDAP schema if the attribute CiscoAznVariableName is equal to ResourceClass.
  
  
• description—multivalue string that describes the condition
  
  

OID:

1.2.840.113548.3.2.6.5

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznApplicableResources—multivalue Distinguished Name (dn) that lists the resources of a policyRule
  
  

OID:

1.2.840.113548.3.2.6.1

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznSubordinateSubjects—multivalue Distinguished Name (dn) which contains a list of subordinate subjects
  
  

OID:

1.2.840.113548.3.2.6.8

Type:

Structural

Superior Class:

top

Naming:

Common Name (cn)

Containment:

Organization (o)

Organizational Unit (ou)

Attributes:

• CiscoAznPrivileges—multivalue case-ignore string containing a list of valid privileges
  
  
• CiscoAznRoleOccupants—multivalue Distinguished Name (dn) which lists the occupants of the role (either users or groups)
  
  
• CiscoAznDynamicRoleOccupants—a Cisco schema extension object which specifies occupants which are identified by special names, such as [SELF], [PARENT], [PUBLIC], [CREATOR]
  
  
• CiscoAznRoleOccupancyCondition—single-value case-ignore string which specifies a condition (filter) determining role occupancy; not currently used.
  
  
• CiscoAznDenyRoleOccupancy—multivalue Distinguished Name (dn) which lists users or groups to be denied occupancy; not currently used.
  
  
• CiscoAznSuperiorRole—single-value Distinguished Name (dn) which specifies the role object that is superior to this role (and from which privileges and occupants are inherited)
  
  
• CiscoAznSubordinateRoles—multivalue Distinguished Name (dn) which specifies roles that are subordinate to this role; not currently used.
  
  

OID:

1.2.840.113548.3.2.6.6

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznRoleList—multivalue Distinguished Name (dn) which lists the roles occupied by this object
  
  
• CiscoAznBlockedRoleList—multivalue Distinguished Name (dn) which lists the roles that have been blocked for this object
  
  
• groupMembership—multivalue Distinguished Name (dn) which lists the user groups that the user belongs to
  
  

OID:

1.2.840.113548.3.2.6.7

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoAznParentSubject—single-value Distinguished Name (dn) which identifies the parent subject
  
  

OID:

1.2.840.113548.3.2.6.9

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoDESSciscoAVPair—specifies additional service configuration parameters, as name/value pairs (may contain inACL and outACL parameters); in the following XML format:
  
  

<CISCOAVPAIR>
<ATTRIBUTENAME>attribute name</ATTRIBUTENAME> <VALUE>value</value>
</CISCOAVPAIR>

• CiscoDESSapplicableClassACL—the class to which the ACL applies; case-ignore string
  
  

OID:

1.2.840.113548.3.2.7.1

Type:

Structural

Superior Class:

top

Naming:

Common Name (cn)

Containment:

Organization (o)

Organization Unit (ou)

Attributes:

• CiscoDESSnextHopGatewayEntry—multivalue case-ignore string which associates next-hop gateway keys with IP addresses; XML format as follows:
  
  

<NEXTHOPGATEWAYENTRY>
<KEY>key</KEY>
</NEXTHOPGATEWAYENTRY>

The DESS RADIUS translator will encode this attribute (if needed) in the following format:

Gkey;ip-address

OID:

1.2.840.113548.3.2.7.2

Type:

Structural

Superior Class:

top

Naming:

Common Name (cn)

Containment:

Organization (o)

Organization Unit (ou)

OID:

1.2.840.113548.3.2.7.4

Type:

Auxiliary

Superior Class:

top

Containment:

Organization (o)

Organization Unit (ou)

Attributes:

• C—single-value string that specifies the ISO 3166 two-character country code of the user
  
  
• CiscoDESSGender—single-value integer (0 male; 1 female)
  
  
• CiscoDESSHobbies—multivalue case-ignore string
  
  
• CiscoDESShomeURL—single-value string that specifies the home URL of the user
  
  
• CiscoDESSageGroup—single-value string that specifies the age group of the user
  
  
• CiscoDESStimeZone—single-value string that specifies the time zone of the user
  
  
• Initials—multivalue case-ignore string that specifies the initials of the user
  
  
• DisplayName—multivalue case-ignore string that specifies the preferred name to be used when displaying the user's name
  
  
• Language—single-value string that specifies the ISO 639 two-character language code for the user
  
  

OID:

1.2.840.113548.3.2.7.10

Type:

Structural

Superior Class:

CiscoDESSpassthroughService

Naming:

Common Name (cn)

Attributes:

• CiscoDESSradiusServer—multivalue string
  
  

OID:

1.2.840.113548.3.2.7.5

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoDESSapplicableClassRADIUS—single-value case-ignore string which specifies the applicable class for RADIUS attributes
  
  
• CiscoDESSidleTimeout—single-value case-ignore string which specifies, in seconds, the maximum time a connection can remain idle
  
  
• CiscoDESSsessionTimeout—single-value case-ignore string which specifies, in seconds, the maximum length of a user's session
  
  
• CiscoDESSradiusAttr—multivalue case-ignore string which specifies RADIUS name/value-pair attributes in XML format, as follows:
  
  

<RADIUS ATTRIBUTE>      <ATTRIBUTENAME>name</ATTRIBUTENAME>      <VALUE>value</VALUE> </RADIUS ATTRIBUTE>

OID:

1.2.840.113548.3.2.7.6

Type:

Abstract

Superior Class:

top

Naming:

Common Name (cn)

Containment:

Organization (o)

Organization Unit (ou)

Attributes:

• CiscoDESSserviceRoute—(required) multivalue case-ignore string that specifies the IP address and subnet mask of the networks or the hosts where the service is located; XML format is as follows:
  
  

<SERVICEROUTE>      <IPADDRESS>address</IPADDRESS>      <MASK>mask</MASK> </SERVICEROUTE>

The DESS RADIUS translator will encode this attribute (if needed) in the following format:

Raddress;mask

• CiscoDESSnextHopGatewayKey—single-value case-ignore string that specifics the next-hop key for this service. The DESS RADIUS translator will encode this attribute, if needed, as follows:
  
  

Gkey

• CiscoDESSaccessMode—single-value case-ignore string; can be one of the following values:
  
  

Concurrent Sequential

The DESS RADIUS translator will encode this attribute, if needed, as follows:

MS or MC

• CiscoDESSdomainName—multivalue case-ignore string that specifies domain names to be resolved by the specified DNS server
  
  
• CiscoDESSpoolName—single-value string which specifies the name of the local address pool for the service
  
  
• CiscoDESSprimaryDNSServer—multivalue case-ignore string that specifies the primary DNS servers for this service. The DESS RADIUS translator will encode this attribute, if needed, in the following format:
  
  

Dprimary;secondary;secondary

• CiscoDESSserviceType—single-value case-ignore string which specifies the level of service; must have the following value:
  
  

outbound

• CiscoDESSserviceURL—single-value string which specifies the URL for the service
  
  
• CiscoDESSsecondaryDNSServer—multivalue case-ignore string which specifies the secondary DNS servers for this service
  
  

OID:

1.2.840.113548.3.2.7.3

Type:

Structural

Superior Class:

top

Naming:

Common Name (cn)

Containment:

Organization (o)

Organization (ou)

Attributes:

• CiscoDESSconnectMutex—single-value integer (0 false; 1 true) that specifies whether the service group is a mutually-exclusive connection group in which the user can connect to only one service in the group at a time
  
  
• CiscoDESSsubscribeMutex—single-value integer (0 false; 1 true) that specifies whether the service group is a mutually-exclusive subscription group in which the user can subscribe to only one service in the group at a time
  
  
• description—single-value case-ignore string that describes the object
  
  

OID:

1.2.840.113548.3.2.7.7

Type:

Auxiliary

Superior Class:

top

Attributes:

• CiscoDESSaccountActive—single-value integer (0 false; 1 true) that specifies whether the account is active
  
  
• CiscoDESSallowCreateSubAccounts—single-value integer that specifies whether a user can create sub-accounts
  
  
• CiscoDESSblockServiceInheritance—single-value integer (0 false; 1 true) that specifies whether subaccounts created by this user inherit service subscriptions from this user account (the parent account) or the container
  
  
• CiscoDESSautoLogonService—multivalue case-ignore string which specifies parameters for services that users will be logged on to automatically; XML format is as follows:
  
  

<AUTOLOGONSERVICE>      <SERVICENAME></SERVICENAME>      <USERNAME></USERNAME>      <PASSWORD></PASSWORD> </AUTOLOGONSERVICE>

• CiscoDESSenableSingleSignon—single-value integer; specifies whether the single sign-on feature is currently enabled for the subscriber
  
  
• CiscoDESSgenericAttribute—multivalue case-ignore string; can be used to store any application-specific information; DESS does not interpret this attribute
  
  
• CiscoDESShomeURL—single-value string that specifies the home URL of the user
  
  
• CiscoDESSmaxSubAccounts—single-value integer that specifies whether the maximum number of subaccounts allowed for this account is
  
  
• CiscoDESSpoolName—single-value case-ignore string; represents the name of the pool.
  
  
• CiscoDESSprimaryService—single-value Distinguished Name (dn); represents the primary service for the user
  
  
• CiscoDESSserviceFilter—multivalue Distinguished Name (dn) which lists the set of services that are blocked for (not inherited by) this user
  
  
• CiscoDESSsubscribedServices—multivalue Distinguished Name (dn) that specifies the services to which the user has subscribed (may be a service name, or service group name)
  
  
• CiscoDESSsubscriptionProperties—multivalue string that specifies subscription properties of the user
  
  
• CiscoDESStcpRedirect—multivalue string that specifies one or more vendor-specific RADIUS attributes related to TCP redirection
  
  
• CiscoDESSunsubscribedServices—multivalue Distinguished Name (dn) that specifies the services to which the user has unsubscribed (may be a service name, or service group name)
  
  

OID:

1.2.840.113548.3.2.7.8

Type:

Structural

Superior Class:

Service

Naming:

Common Name (cn)

Containment:

Organization (o)

Organization Unit (ou)

Attributes:

• CiscoDESStunnelID—single-value case-ignore string containing the tunnel ID
  
  
• CiscoDESStunnelType—single-value case-ignore string that contains the tunnel type (such as 12tp)
  
  
• CiscoDESStunnelIPAddress—single-value case-ignore string that contains the IP address of the tunnel
  
  
• CiscoDESStunnelPassword—single-value case-ignore string that contains the password for the tunnel
  
  

OID:

1.2.840.113548.3.2.7.9

Type:

single-value integer

OID:

1.2.840.113548.3.1.6.1

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.2

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.17

Type:

single-value dn

OID:

1.2.840.113548.3.1.6.3

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.11

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.12

Type:

single-value IA5 string

OID:

1.2.840.113548.3.1.6.16

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.6.9

Type:

single-value directory string

OID:

1.2.840.113548.3.1.6.22

Type:

single-value directory string

OID:

1.2.840.113548.3.1.6.4

Type:

single-value dn

OID:

1.2.840.113548.3.1.6.18

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.6.7

Type:

single-value directory string

OID:

1.2.840.113548.3.1.6.6

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.5

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.8

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.6.10

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.13

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.15

Type:

multivalue dn

OID:

1.2.840.113548.3.1.6.19

Type:

single-value dn

OID:

1.2.840.113548.3.1.6.14

Type:

single-value directory string

OID:

1.2.840.113548.3.1.6.20

Type:

single-value directory string

OID:

1.2.840.113548.3.1.6.21

Type:

single-value case-ignore string

OID:

1.2.840.113548.3.1.7.1

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.39

Type:

single-value case-ignore string

OID:

1.2.840.113548.3.1.7.34

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.31

Type:

single-value case-ignore string

OID:

1.2.840.113548.3.1.7.2

Type:

single-value case-ignore string

OID:

1.2.840.113548.3.1.7.3

Type:

multivalue case-ignore string

OID:

1.2.840.113548.3.1.7.4

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.5

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.7.6

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.7

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.44

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.7.8

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.27

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.32

Type:

multivalue string

OID:

1.2.840.113548.3.1.7.30

Type:

multivalue string

OID:

1.2.840.113548.3.1.7.33

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.36

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.9

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.40

Type:

single-value dn

OID:

1.2.840.113548.3.1.7.10

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.7.11

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.12

Type:

single-value string

OID:

1.2.840.113548.3.1.7.29

Type:

single-value dn

OID:

1.2.840.113548.3.1.7.28

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.7.13

Type:

multivalue directory string

OID:

1.2.840.1135548.3.1.7.14

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.7.15

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.7.16

Type:

multivalue dn

OID:

1.2.840.113548.3.1.7.17

Type:

multivalue directory string

OID:

1.2.840.113548.3.1.7.18

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.19

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.20

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.21

Type:

multivalue dn

OID:

1.2.840.113548.3.1.7.22

Type:

single-value integer

OID:

1.2.840.113548.3.1.7.43

Type:

multivalue string

OID:

1.2.840.113548.3.1.7.41

Type:

multivalue string

OID:

1.2.840.113548.3.1.7.42

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.38

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.23

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.24

Type:

single-value case-ignore string

OID:

1.2.840.113548.3.1.7.25

Type:

single-value directory string

OID:

1.2.840.113548.3.1.7.26

Type:

multivalue dn

OID:

1.2.840.113548.3.1.7.35

Type:

Abstract

Superior Class:

cim23ManagedElement

Attributes:

• cn—single-value string, containing a user-friendly name of a policy-related object
  
  
• policyKeywords—multivalue case-exact string containing a set of keywords to assist directory clients in locating policy objects applicable to them. Each value of the multivalue attribute contains a single keyword.
  
  
• cimCaption—string containing a one-line description of this policy-related object
  
  
• cimDescription—string containing a long description of this policy-related object
  
  

OID:

1.2.840.113548.2.2.1

Type:

Auxiliary

Superior Class:

top

OID:

1.2.840.113548.2.2.2

Type:

Structural

Superior Class:

policyInstance

Attributes:

• policyActionName—single-value case-ignore string naming the policy action
  
  

OID:

1.2.840.113548.2.2.3

Type:

Auxiliary

Superior Class:

top

OID:

1.2.840.113548.2.2.4

Type:

Structural

Superior Class:

policyInstance

Attributes:

• policyConditionName—single-value case-ignore string naming the policy condition
  
  

OID:

1.2.840.113548.2.2.5

Type:

Auxiliary

Superior Class:

policy

OID:

1.2.840.113548.2.2.6

Type:

Structural

Superior Class:

policyGroupName

Attributes:

• policyGroupName—(required) single-value case-ignore string naming the policy group
  
  

OID:

1.2.840.113548.2.2.7

Type:

Auxiliary

Superior Class:

top

Attributes:

• policySubtreesAuxContainedSet—an unordered set of Distinguished Name (dn) pointers to one or more policyRule objects associated with the instance of the class
  
  

OID:

1.2.840.113548.2.2.8

Type:

Structural

Superior Class:

policy

Attributes:

• policyInstanceName—single-value case-ignore string naming the policy instance
  
  

OID:

1.2.840.113548.2.2.9

Type:

Structural

Superior Class:

cim23AdminDomain

Attributes:

• policyRepositoryName—(required) single-value case-ignore string naming the policy repository
  
  

OID:

1.2.840.113548.2.2.10

Type:

Structural

Superior Class:

policy

Attributes:

• policyRuleName—(required) case-ignore string containing the name of this policy rule
  
  
• policyRuleEnabled—enumeration, one of the following (meaning is in parentheses):
  
  

enabled (policy rule administratively enabled) disabled (policy rule administratively disabled) enabledForDebug (policy rule disabled for debug mode)

• policyRuleConditionListType—enumeration, can be one of the following (meaning is in parentheses):
  
  

DNF (policy rule is in disjunctive normal form) CNF (policy rule is in conjunctive normal form)

• policyRuleConditionList—unordered set of Distinguished Names (dn) representing associations between this policy rule and its conditions
  
  
• policyRuleActionList—unordered set of Distinguished Names (dn) representing associations between this policy rule and its actions
  
  
• policyRuleValidityPeriodList—unordered set of Distinguished Names (dn) of policyTimePeriodCondition objects that determine when the policy rule is scheduled to be active or inactive
  
  
• policyRuleUsage—single-value case-ignore string providing guidelines on how the policy should be used
  
  
• policyRulePriority—integer (non-negative) which prioritizes this policy rule relative to other policy rules; the larger the value, the higher the priority
  
  
• policyRuleMandatory—boolean; if true, evaluation of the policy conditions and execution of policy actions is mandatory
  
  
• policyRuleSequencedActions—enumeration indicating how to interpret the action-ordering indicated by the policyRuleActionList attribute; can be one of the following:
  
  

mandatory recommended dontCare

• policyRoles—multivalue case-ignore string with the following form:
  
  

<RoleName>[&&<RoleName>]

Role names are alphabetized; each value represents a role combination, including the special case of a "combination" containing only one role.

OID:

1.2.840.113548.2.2.11

Type:

Structural

Superior Class:

policy

Attributes:

• policyActionOrder—(required) integer indicating the relative order of an action in the context of a policy rule
  
  
• policyActionName—(required) single-value case-ignore string containing the name of the policy action
  
  
• policyActionDN—single-value Distinguished Name (dn) pointing to a reusable policy action
  
  

OID:

1.2.840.113548.2.2.12

Type:

Structural

Superior Class:

policy

Attributes:

• policyConditionGroupNumber—boolean; if true, the policy condition is negated in the DNF or CNF expression associated with a policy rule
  
  
• policyConditionNegated—integer indicating the number of the group to which a policy condition belongs
  
  
• policyConditionName—single-value case-ignore string naming the policy condition
  
  
• policyConditionDN—single-value Distinguished Name (dn) pointing to a reusable policy condition
  
  

OID:

1.2.840.113548.2.2.13

Type:

Auxiliary

Superior Class:

top

Attributes:

• policyRulesAuxContainedSet—unordered set of Distinguished Names (dn) representing policy rules associated in some way with the instance to which this attribute has been appended
  
  

OID:

1.2.840.113548.2.2.14

Type:

Auxiliary

Superior Class:

top

Attributes:

• policySubtreesAuxContainedSet—unordered set of Distinguished Names (dn) of objects that serve as roots for DIT subtrees containing policy-related objects
  
  

OID:

1.2.840.113548.2.2.15

Type:

Auxiliary

Superior Class:

policyActionAuxClass

Attributes:

• vendorPolicyActionData—Octet string, used as an escape mechanism for actions that have not been modeled as specific attributes
  
  
• vendorPolicyActionEncoding—an OID identifying the format and semantics for this instance of the vendorPolicyActionData attribute
  
  

OID:

1.2.840.113548.2.2.17

Type:

Auxiliary

Superior Class:

top

Attributes:

• vendorPolicyConstraintData—Octet string used as an escape mechanism for representing constraints that have not been modeled as specific attributes
  
  
• vendorPolicyConstraintEncoding—an OID for identifying the format and semantics for this instance of the vendorPolicyConstraintData attribute
  
  

OID:

1.2.840.113548.2.2.18

Type:

single-value distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.1

Type:

single-value caseExactIA5Match IA5String

OID:

1.2.840.113548.2.1.2

Type:

single-value integerMatch integer

OID:

1.2.840.113548.2.1.3

Type:

single-value distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.4

Type:

single-value integerMatch integer

OID:

1.2.840.113548.2.1.5

Type:

single-value caseExactIA5Match IA5String

OID:

1.2.840.113548.2.1.6

Type:

single-value caseExactIA5Match IA5String

OID:

1.2.840.113548.2.1.7

Type:

caseExactMatch IA5String

OID:

1.2.840.113548.2.1.8

Type:

single-value booleanMatch boolean

OID:

1.2.840.113548.2.1.7

Type:

distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.9

Type:

single-value caseExactIA5Match IA5String

OID:

1.2.840.113548.2.1.10

Type:

caseExactMatch IA5String

OID:

1.2.840.113548.2.1.11

Type:

single-value caseExactIA5Match IA5String

OID:

1.2.840.113548.2.1.12

Type:

caseIgnoreMatch DirectoryString

OID:

1.2.840.113548.2.1.13

Type:

distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.14

Type:

distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.15

Type:

single-value integerMatch integer

OID:

1.2.840.113548.2.1.16

Type:

single-value integerMatch integer

OID:

1.2.840.113548.2.1.17

Type:

single-value booleanMatch boolean

OID:

1.2.840.113548.2.1.18

Type:

caseExactMatch IA5String

OID:

1.2.840.113548.2.1.19

Type:

single-value integerMatch integer

OID:

1.2.840.113548.2.1.20

Type:

distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.21

Type:

integerMatch integer

OID:

1.2.840.113548.2.1.22

Type:

single-value case-ignore DirectoryString

OID:

1.2.840.113548.2.1.23

Type:

distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.24

Type:

distinguishedNameMatch dn

OID:

1.2.840.113548.2.1.25

Type:

single-value bitStringMatch bit string

OID:

1.2.840.113548.2.1.26

Type:

single-value bitStringMatch bit string

OID:

1.2.840.113548.2.1.27

Type:

single-value integerMatch integer

OID:

1.2.840.113548.2.1.28

Type:

single-value bitStringMatch bit string

OID:

1.2.840.113548.2.1.29

Type:

single-value caseIgnoreMatch PrintableString

OID:

1.2.840.113548.2.1.30

Type:

single-value bitstringMatch bit string

OID:

1.2.840.113548.2.1.31

Type:

octetStringMatch OctetString

OID:

1.2.840.113548.2.1.32

Type:

single-value objectIdentifierMatch OID

OID:

1.2.840.113548.2.1.33

Type:

octetStringMatch OctetString

OID:

1.2.840.113548.2.1.34

Type:

single-value objectIdentifierMatch OID

OID:

1.2.840.113548.2.1.35

Type:

multivalue directory string

OID:

2.16.840.1.113719.1.8.4.4

Type:

multivalue directory string

OID:

2.5.4.3

Type:

multivalue directory string

OID:

2.5.4.13

Type:

multivalue facsimile telephone number

OID:

2.5.4.23

Type:

multivalue directory string

OID:

2.5.4.42

Type:

multivalue dn

OID:

2.16.840.1.113719.1.1.4.1.25

Type:

multivalue telephone number

OID:

0.9.2342.19200300.100.1.20

Type:

multivalue directory string

OID:

2.5.4.43

Type:

multivalue directory string

OID:

0.9.2342.19200300.100.1.3

Type:

multivalue telephone number

OID:

0.9.2342.19200300.100.1.41

Type:

multivalue telephone number

OID:

0.9.2342.19200300.100.1.42

Type:

multivalue postal address

OID:

2.5.4.16

Type:

multivalue directory string

OID:

2.5.4.8

Type:

multivalue directory string

OID:

2.5.4.9

Type:

multivalue telephone number

OID:

2.5.4.20

Type:

multivalue directory string

OID:

0.9.2342.19200300.100.1.1

Type:

multivalue dn

OID:

2.5.4.50