Netscape NETSCAPE DIRECTORY SERVER 6.0 Service manual

Schema Reference
Netscape Directory Server
Version6.0
December 2001

Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to the software programs offered by
Netscape (referred to herein as "Software") and related documentation. Use of the Software and related documentation is governed
by the license agreement for the Software and applicable copyright law.
Your right to copy this documentation is limited by copyright law. Making unauthorized copies, adaptations or compilation works is
prohibited and constitutes a punishable violation of the law. Netscape may revise this documentation from time to time without
notice.
THIS DOCUMENTATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL NETSCAPE BE
LIABLE FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND ARISING FROM ANY
ERROR IN THIS DOCUMENTATION, INCLUDING WITHOUT LIMITATION ANY LOSS OR INTERRUPTION OF BUSINESS,
PROFITS, USE, OR DATA.
The Software and documentation are copyright © 2001 Sun Microsystems, Inc. Portions copyright 1999, 2001 Netscape
Communications Corporation. All rights reserved.
Portions of the Software copyright © 1995 PEER Networks, Inc. All rights reserved. The Software contains the Taligent International
Classes from Taligent, Inc. and IBM Corp. Portions of the Software copyright ©1992-1998 Regents of the University of Michigan. All
rights reserved. The software contains encryption software from RSA Security Inc. Copyright © 1994 RSA Data Security, Inc. All
rights reserved.
Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation in the United States and
other countries. Other Netscape logos, product names, and service names are also trademarks of Netscape Communications
Corporation, which may be registered in other countries. Other product and brand names are the exclusive property of their
respective owners.
The downloading, exporting, or reexporting of Netscape software or any underlying information or technology must be in full
compliance with all United States and other applicable laws and regulations. Any provision of Netscape software or documentation
to the U.S. government is with restricted rights as described in the license agreement for that Software.

3
Contents
PurposeofThisGuide ................................................................... 9
DirectoryServerOverview .............................................................. 10
ContentsofThisGuide ................................................................. 10
PrerequisiteReading ................................................................... 10
ConventionsUsedinThisBook .......................................................... 11
RelatedInformation .................................................................... 11
Chapter 1 AboutSchema ......................................................13
SchemaDefinition...................................................................... 13
ObjectClasses....................................................................... 14
RequiredandAllowedAttributes ................................................... 14
ObjectClassInheritance ........................................................... 14
Attributes .......................................................................... 15
AttributeSyntax .................................................................. 15
Single-ValuedandMulti-ValuedAttributes .......................................... 17
SchemaSupportedbyDirectoryServer6.0 ................................................ 17
ObjectIdentifiers(OIDs) ................................................................ 19
ExtendingServerSchema ............................................................... 20
SchemaChecking ...................................................................... 20
Chapter 2 ObjectClassReference...............................................21
account ............................................................................... 21
alias .................................................................................. 22
country ............................................................................... 23
dcObject .............................................................................. 24
device ................................................................................ 25
document ............................................................................. 26
documentSeries........................................................................ 28
domain ............................................................................... 29
domainRelatedObject................................................................... 31

4 Netscape Directory Server Schema Reference • December 2001
dSA .................................................................................. 32
extensibleObject ....................................................................... 33
friendlyCountry ....................................................................... 34
groupOfCertificates .................................................................... 35
groupOfNames ........................................................................ 36
groupOfUniqueNames.................................................................. 37
groupOfURLs ......................................................................... 38
inetOrgPerson ......................................................................... 39
labeledURIObject ...................................................................... 42
locality ............................................................................... 43
newPilotPerson ........................................................................ 44
nsLicenseUser ......................................................................... 46
organization........................................................................... 47
organizationalPerson ................................................................... 49
organizationalRole ..................................................................... 51
organizationalUnit ..................................................................... 53
person ................................................................................ 55
pilotObject ............................................................................ 56
pilotOrganization ...................................................................... 57
residentialPerson....................................................................... 59
RFC822LocalPart....................................................................... 61
room ................................................................................. 63
strongAuthenticationUser ............................................................... 64
simpleSecurityObject ................................................................... 65
Chapter 3 AttributeReference ................................................. 67
abstract ............................................................................... 67
aliasedObjectName..................................................................... 67
associatedDomain...................................................................... 68
associatedName........................................................................ 68
audio ................................................................................. 69
authorCn ............................................................................. 69
authorSn .............................................................................. 70
authorityRevocationList................................................................. 70
buildingName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
businessCategory ...................................................................... 71
c(countryName) ....................................................................... 71
cACertificate .......................................................................... 72
carLicense............................................................................. 72
certificateRevocationList ................................................................ 73
cn(commonName) ..................................................................... 73
co(friendlyCountryName) .............................................................. 74
crossCertificatePair..................................................................... 74

5
dc(domainComponent)................................................................. 75
deltaRevocationList .................................................................... 75
departmentNumber .................................................................... 76
description ............................................................................ 76
destinationIndicator .................................................................... 76
displayName .......................................................................... 77
dITRedirect ........................................................................... 77
dmdName ............................................................................ 78
dn(distinguishedName) ................................................................ 78
dNSRecord............................................................................ 79
documentAuthor....................................................................... 79
documentIdentifier..................................................................... 79
documentLocation ..................................................................... 80
documentPublisher..................................................................... 80
documentStore ........................................................................ 81
documentTitle ......................................................................... 81
documentVersion ...................................................................... 82
drink(favouriteDrink) .................................................................. 82
dSAQuality ........................................................................... 83
employeeNumber ...................................................................... 83
employeeType ......................................................................... 83
enhancedSearchGuide .................................................................. 84
fax(fascimileTelephoneNumber)......................................................... 84
generationQualifier..................................................................... 85
givenName............................................................................ 85
homePhone ........................................................................... 86
homePostalAddress .................................................................... 86
host .................................................................................. 87
houseIdentifier ........................................................................ 87
info .................................................................................. 88
initials ................................................................................ 88
internationalISDNNumber .............................................................. 89
janetMailbox .......................................................................... 89
jpegPhoto ............................................................................. 89
keyWords ............................................................................. 90
knowledgeInformation ................................................................. 90
l(localityName)........................................................................ 91
labeledURI ............................................................................ 91
lastModifiedBy ........................................................................ 92
lastModifiedTime ...................................................................... 92
mail .................................................................................. 92
mailPreferenceOption .................................................................. 93
manager .............................................................................. 94

6 Netscape Directory Server Schema Reference • December 2001
member............................................................................... 94
memberCertificateDescription ........................................................... 94
memberURL........................................................................... 95
mobile ................................................................................ 96
name ................................................................................. 96
nsLicensedFor ......................................................................... 97
nsLicenseEndTime ..................................................................... 97
nsLicenseStartTime..................................................................... 98
o(organizationName) .................................................................. 98
objectClass ............................................................................ 98
obsoletedByDocument .................................................................. 99
obsoletesDocument..................................................................... 99
organizationalStatus................................................................... 100
otherMailbox ......................................................................... 100
ou(organizationUnitName) ............................................................ 100
owner ............................................................................... 101
pager ................................................................................ 101
personalSignature..................................................................... 102
personalTitle ......................................................................... 102
photo................................................................................ 103
physicalDeliveryOfficeName ........................................................... 103
postalAddress ........................................................................ 104
postalCode ........................................................................... 104
postOfficeBox......................................................................... 105
preferredDeliveryMethod .............................................................. 105
preferredLanguage .................................................................... 105
presentationAddress .................................................................. 106
protocolInformation ................................................................... 106
reciprocalNamingLink ................................................................. 107
registeredAddress..................................................................... 107
roleOccupant ......................................................................... 107
roomNumber......................................................................... 108
searchGuide.......................................................................... 108
secretary ............................................................................. 109
seeAlso .............................................................................. 109
serialNumber......................................................................... 109
singleLevelQuality .................................................................... 110
sn(surname) ......................................................................... 110
st(stateOrProvinceName) .............................................................. 111
street ................................................................................ 111
subject ............................................................................... 112
subtreeMaximumQuality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
subtreeMinimumQuality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

7
supportedAlgorithms.................................................................. 113
supportedApplicationContext .......................................................... 113
telephoneNumber..................................................................... 114
teletexTerminalIdentifier ............................................................... 114
telexNumber ......................................................................... 115
textEncodedORAddress................................................................ 115
title.................................................................................. 116
ttl(timeToLive) ....................................................................... 116
uid(userID) .......................................................................... 117
uniqueIdentifier ...................................................................... 117
uniqueMember . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
updatedByDocument .................................................................. 118
updatesDocument..................................................................... 118
userCertificate ........................................................................ 119
userClass ............................................................................ 119
userPassword ........................................................................ 120
userPKCS12 .......................................................................... 120
userSMIMECertificate ................................................................. 121
x121Address ......................................................................... 121
x500UniqueIdentifier .................................................................. 121
Chapter 4 Operational Attributes, Special Attributes, and Special Object Classes . . . . . . 123
OperationalAttributes ................................................................. 123
accountUnlockTime ................................................................... 123
aci .................................................................................. 124
altServer ............................................................................. 124
attributeTypes ........................................................................ 125
copiedFrom .......................................................................... 125
copyingFrom ......................................................................... 125
dITContentRules...................................................................... 126
dITStructureRules..................................................................... 126
matchingRules........................................................................ 127
matchingRuleUse ..................................................................... 127
nameForms .......................................................................... 127
namingContexts ...................................................................... 128
nsds5replconflict ...................................................................... 128
nsRole ............................................................................... 129
nsRoleDn ............................................................................ 129
objectClasses ......................................................................... 130
passwordAllowChangeTime ........................................................... 130
passwordExpirationTime .............................................................. 131
passwordExpWarned.................................................................. 131
passwordHistory...................................................................... 131

8 Netscape Directory Server Schema Reference • December 2001
passwordRetryCount .................................................................. 132
retryCountResetTime .................................................................. 132
subschemaSubentry ................................................................... 132
supportedControl ..................................................................... 133
supportedExtension ................................................................... 133
supportedLDAPVersion ............................................................... 134
supportedSASLMechanisms ............................................................ 134
SpecialAttributes ..................................................................... 134
changes .............................................................................. 134
changeLog ........................................................................... 135
changeNumber ....................................................................... 135
changeTime .......................................................................... 136
changeType .......................................................................... 136
deleteOldRdn......................................................................... 136
newRdn ............................................................................. 137
newSuperior.......................................................................... 137
targetDn ............................................................................. 137
SpecialObjectClasses.................................................................. 138
changeLogEntry ...................................................................... 138
subschema ........................................................................... 139
Index ....................................................................... 141

9
About This Reference Guide
Netscape Directory Server (Directory Server) 6.0 is a powerful and scalable
distributed directory server based on the industry-standard Lightweight Directory
Access Protocol (LDAP). Directory Server is the cornerstone for building a
centralized and distributed data repository that can be used in your intranet, over
your extranet with your trading partners, or over the public Internet to reach your
customers.
This preface contains the following sections:
• Purpose of This Guide (page 9)
• Directory Server Overview (page 10)
• Contents of This Guide (page 10)
• Prerequisite Reading (page 10)
• Conventions Used in This Book (page 11)
• Related Information (page 11)
Purpose of This Guide
This Schema Reference guide describes the standard directory schema for Directory
Server, and lists all the object classes and attributes defined by the standard
schema. The information provided here is intended for the administrator who
manages and maintains the schema.

Directory Server Overview
10 Netscape Directory Server Schema Reference • December 2001
Directory Server Overview
The major components of Directory Server include:
• An LDAP server—The core of the directory service, provided by thens-slapd
daemon, and compliant with the LDAP v3 Internet standards.
• Directory Server Console—An improved management console that
dramatically reduces the effort of setting up and maintaining your directory
service. The Directory Server Console is part of Netscape Console, the common
management framework for Netscape servers.
• SNMP Agent—Permits you to monitor your directory server in real time using
the Simple Network Management Protocol (SNMP).
• Online backup and restore—Allows you to create backups and restore from
backups while the server is running.
Contents of This Guide
Chapter 1, “About Schema” provides an overview of some of the basic concepts of
the directory schema, and lists the files in which the schema is described. It
describes object classes, attributes and Object Identifiers (OIDs), and briefly
discusses schema checking and extending server schema.
Chapter 2, “Object Class Reference” contains an alphabetical list of the object
classes accepted by the default schema. It gives a definition of each object class, and
gives the list of required and allowed attributes specific to the particular object
class. However, any mandatory and optional attributes inherited from superior
object classes are not listed.
Chapter 3, “Attribute Reference” contains an alphabetic list of the standard
attributes. It gives a definition of each attribute, and gives the attribute syntax.
Prerequisite Reading
This guide describes the standard schema and the standard object classes and
attributes. However, this guide does not describe how to design, customize or
maintain your schema, nor does it give any information on replication. Those
concepts are described in the Netscape Directory Server Deployment Guide.You
should read that book before continuing with this manual.

Conventions Used in This Book
About This Reference Guide 11
When you are familiar with directory server schema concepts, and have done some
preliminary planning for your directory service, you can install the Directory
Server. The instructions for installing the various Directory Server components are
contained in the Netscape Directory Server Installation Guide.
Preliminary planning includes deciding how to represent the data you store. You
should chose predefined schema elements to meet as many of your needs as
possible. These predefined schema elements are listed in this guide.
Conventions Used in This Book
This section explains the conventions used in this book.
Monospaced font—Thistypefaceisusedforanytextthatappearsonthecomputer
screen or text that you should type. It is also used for filenames, functions, and
examples.
Throughout this book you will see path references of the form:
/usr/netscape/servers/slapd- serverID /...
The /usr/netscape/servers directory is the default installation directory. If you
have installed the Directory Server in a different location, you should adapt the
path accordingly. serverID represents the server identifier you gave the server
when you installed it. For example, if you gave the server an identifier of
phonebook, then the actual path would be:
/usr/netscape/servers/slapd-phonebook/. . .
Schema files are stored in the /usr/netscape/servers/slapd- serverID /config
directory.
All paths specified in this manual are in UNIX format. If you are using a Windows
NT-based directory server, use equivalent paths.
Related Information
The document set for Directory Server also contains the following guides:
•Netscape Directory Server Installation Guide. Procedures for installing your
Directory Server as well as procedures for migrating your Directory Server.
•Netscape Directory Server Deployment Guide. Provides an overview for planning
your deployment of the Directory Server. Includes deployment examples.

Related Information
12 Netscape Directory Server Schema Reference • December 2001
•Netscape Directory Server Administrator’s Guide. Procedures for the day-to-day
maintenance of your directory server. Includes information on configuring
server-side plug-ins.
•Netscape Directory Server Configuration, Command, and File Reference.
Information about the command-line scripts, configuration attributes, and log
files shipped with Directory Server.
For a list of documentation installed with Directory Server, open the
<server_root>/manual/en/slapd/index.htm file, where <server_root> is the
directory in which you installed Directory Server.
For the latest information about Directory Server, including current release notes,
complete product documentation, technical notes, and deployment information,
checkthissite:http://enterprise.netscape.com/docs

13
Chapter 1
About Schema
This chapter provides an overview of some of the basic concepts of the directory
schema, and lists the files in which the schema is described. It describes object
classes, attributes and object identifiers (OIDs), and briefly discusses extending
server schema and schema checking.
This chapter contains the following sections:
• Schema Definition (page 13)
• Schema Supported by Directory Server 6.0 (page 17)
• Object Identifiers (OIDs) (page 19)
• Extending Server Schema (page 20)
• Schema Checking (page 20)
Schema Definition
The directory schema is a set of rules that defines how the data can be stored in the
directory. The data is stored in the form of directory entries. Each entry is a set of
attributes and their values. Each entry must have an object class. The object class
specifies the kind of object the entry describes and defines the set of attributes it
contains.The schema defines the type of entries allowed, their attribute structure
and the syntax of the attributes.The schema can be modified and extended if it does
not meet your required needs.
To find detailed information about object classes, attributes, and how the Netscape
Directory Server (Directory Server) uses the schema, please refer to the Netscape
Directory Server Deployment Guide.

Schema Definition
14 Netscape Directory Server Schema Reference • December 2001
Object Classes
In LDAP, an object class defines the set of attributes that can be used to define an
entry. The LDAP standard provides some basic types of object classes, including:
• Groups, including unordered lists of individual objects or groups of objects.
• Locations, such as the country name and description.
• Organizations.
• People.
• Devices.
Required and Allowed Attributes
Every object class includes a number of required attributes and of allowed
attributes. Required attributes include the attributes that must be present in entries
using the object class. All entries require the objectClass attribute, which defines
the object classes assigned to the entry.
Allowed attributes include the attributes that may be present in entries using the
object class.
Example: Object Class = person
Required Attributes
object class
cn (common name)
sn (surname)
Allowed Attributes
description
seeAlso
telephoneNumber
userPassword
Object Class Inheritance
An entry can have more than one object class. For example, the entry for a person is
defined by the person object class, but may also be defined by attributes in the
inetOrgPerson, groupOfNames, and organization object classes.

Schema Definition
Chapter 1 About Schema 15
The server’s object class structure determines the list of required and allowed
attributes for a particular entry. For example, a person entry is usually defined
with the following object class structure:
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgperson
In this structure, the inetOrgperson inherits from the organizationalPerson and
person object classes. Therefore, when you assign the inetOrgperson object class to
an entry, it automatically inherits the required and allowed attributes from the
superior object class.
Attributes
Directory data is represented as attribute-value pairs. Any piece of information in
the directory is associated with a descriptive attribute.
For instance, the commonName,orcn, attribute is used to store a person’s name. A
person named Jonas Salk can be represented in the directory as
cn: Jonas Salk
Each person entered in the directory can be defined by the collection of attributes
in the inetorgperson object class. Other attributes used to define this entry could
include:
givenname: Jonas
surname: Salk
mail: [email protected]
Attribute Syntax
Each attribute has a syntax definition that describes the type of information
provided by the attribute.
Attribute syntax is used by the Directory Server to perform sorting and pattern
matching.
Table 1-1 lists the different syntax methods that can be applied to attributes, and
gives an OID and a definition for each syntax method.

Schema Definition
16 Netscape Directory Server Schema Reference • December 2001
Table 1-1 Attribute Syntax
Syntax Method OID Definition
Binary 1.3.6.1.4.1.1466.115.121.1.5 Indicates that values for this attribute are binary
Boolean 1.3.6.1.4.1.1466.115.121.1.7 Indicates that this attribute has one of only two
values: True or False
Country String 1.3.6.1.4.1.1466.115.121.1.11 Indicates that values for this attribute are
limited to exactly two printable string
characters, for example US
DN 1.3.6.1.4.1.1466.115.121.1.12 Indicates that values for this attribute are DNs.
DirectoryString 1.3.6.1.4.1.1466.115.121.1.15 Indicates that values for this attribute are not
case sensitive
GeneralizedTime 1.3.6.1.4.1.1466.115.121.1.24 Indicates that values for this attribute are
encoded as printable strings. The time zone
must be specified. It is strongly recommended
to use GMT time.
IA5String 1.3.6.1.4.1.1466.115.121.1.26 Indicates that values for this attribute are case
sensitive.
INTEGER 1.3.6.1.4.1.1466.115.121.1.27 Indicates that valid values for this attribute are
numbers.
OctetString 1.3.6.1.4.1.1466.115.121.1.40 Same behavior as binary
Postal Address 1.3.6.1.4.1.1466.115.121.1.41 Indicates that values for this attribute are
encoded according to
postal-address = dstring * (“$”
dstring)
where each dstring component is encoded as a
value of type DirectoryString syntax.
Backslashes and dollar characters, if they occur,
are quoted, so that they will not be mistaken for
line delimiters. Many servers limit the postal
address to 6 lines of up to thirty characters. For
example:
1234 Main St.$Anytown, TX 1234$USA
TelephoneNumber 1.3.6.1.4.1.1466.115.121.1.50 Indicates that values for this attribute are in the
form of telephone numbers. It is recommended
to use telephone numbers in international form

Schema Supported by Directory Server 6.0
Chapter 1 About Schema 17
Single-Valued and Multi-Valued Attributes
By default, most attributes are multi-valued. This means that an entry can contain
the same attribute with multiple values. For example, cn,tel and object class
are all attributes that can have more than one value. Attributes that are
single-valued—that is, only one instance of the attribute can be specified—are
noted as such. For example, uidNumber can only have one possible value.
Schema Supported by Directory Server 6.0
The schema provided with Directory Server 6.0 is described in a set of files stored
in the /usr/netscape/servers/slapd-serverID/config directory.
You can modify the schema by creating new object classes and attributes. These
modifications are stored in a separate file called 99user.ldif. You should not
modify the standard files provided with the Directory Server, because you incur
the risk of breaking compatibility with other Netscape products, or of causing
interoperability problems with directory servers from vendors other than Netscape
Communications Corporation.
For more information about how the Directory Server stores information and
suggestions for planning directory schema, refer to the Netscape Directory Server
Deployment Guide.
The following tables list the schema files that are provided with Directory Server.
Table 1-2 lists the schema files that are used by the Directory Server. Table 1-3 lists
the schema files that are used by other Netscape products.
Table 1-2 Schema Files used by Directory Server
URI indicates that the values for this attribute are in
the form of a URL, introduced by a string such
as http://, https://, ftp://, ldap://, ldaps://.
The URI has the same behavior as IA5String. See
RFC 2396.
Schema Filename Purpose
00core.ldif Recommended core schema from the X.500 and LDAP
standards (RFCs), and schema used by the Directory
Server itself
Syntax Method OID Definition

Schema Supported by Directory Server 6.0
18 Netscape Directory Server Schema Reference • December 2001
Table 1-3 Schema Files used by other Netscape Products
05rfc2247.ldif Schema from RFC 2247 and related pilot schema
"Using Domains in LDAP/X.500 Distinguished
Names"
05rfc2927.ldif Schema from RFC 2927 "MIME Directory Profile for
LDAP Schema"
10rfc2307.ldif Schema from RFC 2307 "An Approach for Using
LDAP as a Network Information Service"
20subscriber.ldif Common schema elements for Netscape-Nortel
subscriber interoperability
25java-object.ldif Schema from RFC 2713 "Schema for Representing
Java(tm) Objects in an LDAP Directory"
28pilot.ldif Schema from the pilot RFCs, especially RFC 1274, that
is no longer recommended by Netscape for use in new
deployments.
30ns-common.ldif Common Netscape schema
50ns-directory.ldif Additional schema used by Directory Server 4.x
50ns-value.ldif Netscape servers "value item" schema
99user.ldif Customer modifications to the schema
Schema Filenames Purpose
50netscape-servicemgt.ldif Netscape service management schema elements
50ns-admin.ldif Schema used by Netscape Administration Server
50ns-calendar.ldif Netscape Calendar Server schema
50ns-certificate.ldif Schema for Netscape Certificate Management System
50ns-compass.ldif Schema for the Netscape Compass Server
50ns-delegated-admin.ldif Schema for Netscape Delegated Administrator 4.5
50ns-legacy.ldif Legacy Netscape Schema
50ns-mail.ldif Schema for Netscape Messaging Server
50ns-mcd-browser.ldif Schema for Netscape Mission Control Desktop - Browser
50ns-mcd-config.ldif Schema for Netscape Mission Control Desktop -
Configuration
Schema Filename Purpose

Object Identifiers (OIDs)
Chapter 1 About Schema 19
Object Identifiers (OIDs)
Object identifiers (OIDs) are assigned to all attributes and object classes to conform
to the LDAP and X.500 standards. An OID is a sequence of integers, typically
written as a dot-separated string. When no OID is specified, the Directory Server
automatically uses ObjectClass_name-oid and attribute_name-oid.
TheNetscapebaseOIDis
2.16.840.1.113730
The base OID for the Directory Server is
2.16.840.1.113730.3
All Netscape-defined attributes have the base OID of
2.16.840.1.113370.3.1
All Netscape-defined object classes have the base OID of
2.16.840.1.113730.3.2
For more information about OIDs or to request a prefix for your enterprise, please
go to the Internet Assigned Number Authority (IANA) web site at
http://www.iana.org/.
50ns-mcd-li.ldif Schema for Netscape Mission Control Desktop - Location
Independence
50ns-mcd-mail.ldif Schema for Netscape Mission Control Desktop - Mail
50ns-media.ldif Schema for Netscape Media Server
50ns-mlm.ldif Schema for Netscape Mailing List Manager
50ns-msg.ldif Schema for Netscape Web Mail
50ns-netshare.ldif Schema for Netscape Netshare
50ns-news.ldif Schema for Netscape Collabra Server
50ns-proxy.ldif Schema for Netscape Proxy Server
50ns-wcal.ldif Schema for Netscape Web Calendaring
50ns-web.ldif Schema for Netscape Web Server

Extending Server Schema
20 Netscape Directory Server Schema Reference • December 2001
Extending Server Schema
The Directory Server schema includes hundreds of object classes and attributes that
can be used to meet most of your requirements. This schema can be extended with
new object classes and attributes that meet evolving requirements for the directory
service in the enterprise.
When adding new attributes to the schema, a new object class should be created to
contain them (adding a new attribute to an existing object class can compromise
the Directory Server’s compatibility with existing LDAP clients that rely on the
standard LDAP schema and may cause difficulties when upgrading the server).
For more information about extending server schema, refer to the Netscape
Directory Server Deployment Guide.
Schema Checking
You should run Directory Server with schema checking turned on.
The schema checking capability of Directory Server checks entries when you add
them to the directory or when you modify them, to verify that:
• Object classes and attributes used in the entry are defined in the directory
schema
• Attributes required for an object class are contained in the entry
• Only attributes allowed by the object class are contained in the entry
Schema checking also occurs when importing a database using LDIF. For more
information, refer to the Netscape Directory Server Administrator’s Guide.