系统管理指南:名称和目录服务(DNS、NIS 和 LDAP)

RFC 2307 网络信息服务架构

必须对 LDAP 服务器进行配置,使其支持 修订后的 RFC 2307。

nisSchema OID 是 1.3.6.1.1。RFC 2307 属性如下所示:


( nisSchema.1.0 NAME 'uidNumber'

DESC 'An integer uniquely identifying a user in an

		administrative domain'

EQUALITY integerMatch SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.1 NAME 'gidNumber'

DESC 'An integer uniquely identifying a group in an

		administrative domain'

EQUALITY integerMatch SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.2 NAME 'gecos'

DESC 'The GECOS field; the common name'

EQUALITY caseIgnoreIA5Match

SUBSTRINGS caseIgnoreIA5SubstringsMatch

SYNTAX 'IA5String' SINGLE-VALUE )

 

( nisSchema.1.3 NAME 'homeDirectory'

DESC 'The absolute path to the home directory'

EQUALITY caseExactIA5Match

SYNTAX 'IA5String' SINGLE-VALUE )

 

( nisSchema.1.4 NAME 'loginShell'

DESC 'The path to the login shell'

EQUALITY caseExactIA5Match

SYNTAX 'IA5String' SINGLE-VALUE )

 

( nisSchema.1.5 NAME 'shadowLastChange'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.6 NAME 'shadowMin'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.7 NAME 'shadowMax'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.8 NAME 'shadowWarning'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.9 NAME 'shadowInactive'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.10 NAME 'shadowExpire'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.11 NAME 'shadowFlag'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.12 NAME 'memberUid'

EQUALITY caseExactIA5Match

SUBSTRINGS caseExactIA5SubstringsMatch

SYNTAX 'IA5String' )

 

( nisSchema.1.13 NAME 'memberNisNetgroup'

EQUALITY caseExactIA5Match

SUBSTRINGS caseExactIA5SubstringsMatch

SYNTAX 'IA5String' )

 

( nisSchema.1.14 NAME 'nisNetgroupTriple'

DESC 'Netgroup triple'

SYNTAX 'nisNetgroupTripleSyntax' )

 

( nisSchema.1.15 NAME 'ipServicePort'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.16 NAME 'ipServiceProtocol'

SUP name )

 

( nisSchema.1.17 NAME 'ipProtocolNumber'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )

 

( nisSchema.1.18 NAME 'oncRpcNumber'

EQUALITY integerMatch

SYNTAX 'INTEGER' SINGLE-VALUE )



( nisSchema.1.19 NAME 'ipHostNumber'

DESC 'IP address as a dotted decimal, eg. 192.168.1.1

	     omitting leading zeros'

SUP name )

 

( nisSchema.1.20 NAME 'ipNetworkNumber'

DESC 'IP network as a dotted decimal, eg. 192.168,

     	omitting leading zeros'

SUP name SINGLE-VALUE )

 

( nisSchema.1.21 NAME 'ipNetmaskNumber'

DESC 'IP netmask as a dotted decimal, eg. 255.255.255.0,

	      omitting leading zeros'

EQUALITY caseIgnoreIA5Match

SYNTAX 'IA5String{128}' SINGLE-VALUE )

 

( nisSchema.1.22 NAME 'macAddress'

DESC 'MAC address in maximal, colon separated hex

      notation, eg. 00:00:92:90:ee:e2'

EQUALITY caseIgnoreIA5Match

SYNTAX 'IA5String{128}' )

 

( nisSchema.1.23 NAME 'bootParameter'

DESC 'rpc.bootparamd parameter'

SYNTAX 'bootParameterSyntax' )

 

( nisSchema.1.24 NAME 'bootFile'

DESC 'Boot image name'

EQUALITY caseExactIA5Match

SYNTAX 'IA5String' )

 

( nisSchema.1.26 NAME 'nisMapName'

SUP name )

 

( nisSchema.1.27 NAME 'nisMapEntry'

EQUALITY caseExactIA5Match

SUBSTRINGS caseExactIA5SubstringsMatch

SYNTAX 'IA5String{1024}' SINGLE-VALUE )

 

( nisSchema.1.28 NAME 'nisPublicKey'

DESC 'NIS public key'

SYNTAX 'nisPublicKeySyntax' )

 

( nisSchema.1.29 NAME 'nisSecretKey'

DESC 'NIS secret key'

SYNTAX 'nisSecretKeySyntax' )

 

( nisSchema.1.30 NAME 'nisDomain'

DESC 'NIS domain'

SYNTAX 'IA5String' )



( nisSchema.1.31 NAME 'automountMapName'

DESC 'automount Map Name'

EQUALITY caseExactIA5Match

SUBSTR caseExactIA5SubstringsMatch

SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )



( nisSchema.1.32 NAME 'automountKey'

DESC 'Automount Key value'

EQUALITY caseExactIA5Match

SUBSTR caseExactIA5SubstringsMatch

SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )



( nisSchema.1.33 NAME 'automountInformation'

DESC 'Automount information'

EQUALITY caseExactIA5Match

SUBSTR caseExactIA5SubstringsMatch

SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

nisSchema OID 是 1.3.6.1.1。RFC 2307 objectClasses 如下所示:


( nisSchema.2.0 NAME 'posixAccount' SUP top AUXILIARY

  DESC 'Abstraction of an account with POSIX attributes'

  MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory )

  MAY ( userPassword $ loginShell $ gecos $ description ) )

 

( nisSchema.2.1 NAME 'shadowAccount' SUP top AUXILIARY

  DESC 'Additional attributes for shadow passwords'

  MUST uid

  MAY ( userPassword $ shadowLastChange $ shadowMin

        shadowMax $ shadowWarning $ shadowInactive $

        shadowExpire $ shadowFlag $ description ) )

 

( nisSchema.2.2 NAME 'posixGroup' SUP top STRUCTURAL

  DESC 'Abstraction of a group of accounts'

  MUST ( cn $ gidNumber )

  MAY ( userPassword $ memberUid $ description ) )

 

( nisSchema.2.3 NAME 'ipService' SUP top STRUCTURAL

  DESC 'Abstraction an Internet Protocol service.

        Maps an IP port and protocol (such as tcp or udp)

        to one or more names; the distinguished value of

        the cn attribute denotes the service's canonical

        name'

  MUST ( cn $ ipServicePort $ ipServiceProtocol )

  MAY ( description ) )

 

( nisSchema.2.4 NAME 'ipProtocol' SUP top STRUCTURAL

  DESC 'Abstraction of an IP protocol. Maps a protocol number

        to one or more names. The distinguished value of the cn

        attribute denotes the protocol's canonical name'

  MUST ( cn $ ipProtocolNumber )

  MAY  description )

 

( nisSchema.2.5 NAME 'oncRpc' SUP top STRUCTURAL

  DESC 'Abstraction of an Open Network Computing (ONC)

        [RFC1057] Remote Procedure Call (RPC) binding.

        This class maps an ONC RPC number to a name.

        The distinguished value of the cn attribute denotes

        the RPC service's canonical name'

  MUST ( cn $ oncRpcNumber $ description )

  MAY  description )

 

( nisSchema.2.6 NAME 'ipHost' SUP top AUXILIARY

  DESC 'Abstraction of a host, an IP device. The distinguished

        value of the cn attribute denotes the host's canonical

        name. Device SHOULD be used as a structural class'

  MUST ( cn $ ipHostNumber )

  MAY ( l $ description $ manager $ userPassword ) )

 

( nisSchema.2.7 NAME 'ipNetwork' SUP top STRUCTURAL

  DESC 'Abstraction of a network. The distinguished value of

        the cn attribute denotes the network's canonical name'

  MUST ipNetworkNumber

  MAY ( cn $ ipNetmaskNumber $ l $ description $ manager ) )

 

( nisSchema.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL

  DESC 'Abstraction of a netgroup. May refer to other netgroups'

  MUST cn

  MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) )



( nisSchema.2.9 NAME 'nisMap' SUP top STRUCTURAL

  DESC 'A generic abstraction of a NIS map'

  MUST nisMapName

  MAY description )

 

( nisSchema.2.10 NAME 'nisObject' SUP top STRUCTURAL

  DESC 'An entry in a NIS map'

  MUST ( cn $ nisMapEntry $ nisMapName )

  MAY description )



( nisSchema.2.11 NAME 'ieee802Device' SUP top AUXILIARY

  DESC 'A device with a MAC address; device SHOULD be

        used as a structural class'

  MAY macAddress )

 

( nisSchema.2.12 NAME 'bootableDevice' SUP top AUXILIARY

  DESC 'A device with boot parameters; device SHOULD be

  used as a structural class'

  MAY ( bootFile $ bootParameter ) )

 

( nisSchema.2.14 NAME 'nisKeyObject' SUP top AUXILIARY

  DESC 'An object with a public and secret key'

  MUST ( cn $ nisPublicKey $ nisSecretKey )

  MAY ( uidNumber $ description ) )

 

( nisSchema.2.15 NAME 'nisDomainObject' SUP top AUXILIARY

  DESC 'Associates a NIS domain with a naming context'

  MUST nisDomain )



( nisSchema.2.16 NAME 'automountMap' SUP top STRUCTURAL

  MUST ( automountMapName )

  MAY description )



( nisSchema.2.17 NAME 'automount' SUP top STRUCTURAL

  DESC 'Automount information'

  MUST ( automountKey $ automountInformation )

  MAY description )