Specifications

222 Appendix B Mac OS X Directory Data
Note: Apple might extend the Open Directory LDAP schema in the future; for example,
to support new versions of Mac OS X and Mac OS X Server. The latest schema is
available in text les on a computer with Mac OS X Server installed. The schema les
are in the /etc/openldap/schema/ directory. The apple.schema le contains the latest
schema extensions for Open Directory LDAP directories.
Object Classes in Open Directory LDAP Schema
This section denes the Open Directory LDAP object classes that extend the standard
LDAP schema.
Container Structural Object Class
Container is a structural object class used for top-level record containers such as
cn=users, cn=groups, and cn=mounts. There is no directory services analog to this
object class, but the container name is part of the search base for each record type.
#objectclass (
# 1.2.840.113556.1.3.23
# NAME 'container'
# SUP top
# STRUCTURAL
# MUST ( cn ) )
Time to Live Object Class
objectclass (
1.3.6.1.4.1.250.3.18
NAME 'cacheObject'
AUXILIARY
SUP top
DESC 'Auxiliary object class to hold TTL caching information'
MAY ( ttl ) )
User Object Class
The apple-user object class is an auxiliary class used to store Mac OS X attributes
that are not part of inetOrgPerson or posixAccount. This object class is used with
kDSStdRecordTypeUsers records.
objectclass (
1.3.6.1.4.1.63.1000.1.1.2.1
NAME 'apple-user'
SUP top
AUXILIARY
DESC 'apple user account'
MAY ( apple-user-homeurl $ apple-user-class $
apple-user-homequota $ apple-user-mailattribute $