目录用户代理配置文件 (DUAProfile) 架构

DESC 'Default LDAP server host address used by a DUA'

            EQUALITY caseIgnoreMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.15

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.1 NAME 'defaultSearchBase'

            DESC 'Default LDAP base DN used by a DUA'

            EQUALITY distinguishedNameMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.12

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.2 NAME 'preferredServerList'

            DESC 'Preferred LDAP server host addresses to be used by a

            DUA'

            EQUALITY caseIgnoreMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.15

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.3 NAME 'searchTimeLimit'

            DESC 'Maximum time in seconds a DUA should allow for a

            search to complete'

            EQUALITY integerMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.27

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.4 NAME 'bindTimeLimit'

            DESC 'Maximum time in seconds a DUA should allow for the

            bind operation to complete'

            EQUALITY integerMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.27

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.5 NAME 'followReferrals'

            DESC 'Tells DUA if it should follow referrals

            returned by a DSA search result'

            EQUALITY caseIgnoreIA5Match

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.7

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.6 NAME 'authenticationMethod'

            DESC 'A keystring which identifies the type of

            authentication method used to contact the DSA'

            EQUALITY caseIgnoreMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.15

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.7 NAME 'profileTTL'

            DESC 'Time to live, in seconds, before a client DUA

            should re-read this configuration profile' 

				'serviceSearchDescriptor'

            DESC 'LDAP search descriptor list used by a DUA'

            EQUALITY caseExactMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )



          ( DUAConfSchemaOID.1.9 NAME 'attributeMap'

            DESC 'Attribute mappings used by a DUA'

            EQUALITY caseIgnoreIA5Match

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )



          ( DUAConfSchemaOID.1.10 NAME 'credentialLevel'

            DESC 'Identifies type of credentials a DUA should

            use when binding to the LDAP server'

            EQUALITY caseIgnoreIA5Match

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.26

            SINGLE-VALUE )



          ( DUAConfSchemaOID.1.11 NAME 'objectclassMap'

            DESC 'Objectclass mappings used by a DUA'

            EQUALITY caseIgnoreIA5Match

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )



          ( DUAConfSchemaOID.1.12 NAME 'defaultSearchScope' SINGLE-VALUE )



          ( DUAConfSchemaOID.1.13 NAME 'serviceCredentialLevel'

            DESC 'Identifies type of credentials a DUA

            should use when binding to the LDAP server for a

            specific service'

            EQUALITY caseIgnoreIA5Match

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )



          ( DUAConfSchemaOID.1.15 NAME 'serviceAuthenticationMethod'

            DESC 'Authentication Method used by a service of the DUA'

            EQUALITY caseIgnoreMatch

            SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )



			  ( DUAConfSchemaOID.2.4 NAME 'DUAConfigProfile'

			  	 SUP top STRUCTURAL

				 DESC 'Abstraction of a base configuration for a DUA'

				 MUST ( cn )

				 MAY ( defaultServerList $ preferredServerList $

                defaultSearchBase $ defaultSearchScope $

                searchTimeLimit $ bindTimeLimit $

                credentialLevel $ authenticationMethod $

                followReferrals $ serviceSearchDescriptor $

                serviceCredentialLevel $ serviceAuthenticationMethod $

                objectclassMap $ attributeMap $

                profileTTL ) )