HP-UX Directory Server 8.1 schema reference

4 Operational attributes, special attributes, and special
object classes
This chapter provides definitions, syntax, and OIDs used by the HP-UX Directory Server.
Operational attributes are attributes used to perform directory operations and are available for
every entry in the directory, regardless of whether they are defined for the object class of the
entry. Operational attributes are only returned in an ldapsearch operation if specifically
requested.
This chapter also provides definitions, syntax, and OIDs for some special attributes and object
classes that are used by the server. The attributes are listed by section, then alphabetically.
4.1 Operational attributes
Operational attributes are created and managed by Directory Server on entries, such as the time
the entry is created or modified and the creator's name. These attributes can be set on any entry,
regardless of other attributes or object classes on the entry.
4.1.1 accountUnlockTime
This refers to the amount of time that must pass after an account lockout before the user can bind
to the directory again.
2.16.840.1.113730.3.1.95OID
DirectoryStringSyntax
MultivaluedMulti- or Single-Valued
Directory ServerDefined in
4.1.2 aci
This attribute is used by the Directory Server to evaluate what rights are granted or denied when
it receives an LDAP request from a client.
2.16.840.1.113730.3.1.55OID
IA5StringSyntax
MultivaluedMulti- or Single-Valued
Directory ServerDefined in
4.1.3 altServer
The values of this attribute are URLs of other servers which may be contacted when this server
becomes unavailable. If the server does not know of any other servers which could be used, this
attribute is absent. This information can be cached in case the preferred LDAP server later becomes
unavailable.
1.3.6.1.4.1.1466.101.120.6OID
IA5StringSyntax
MultivaluedMulti- or Single-Valued
RFC 2252Defined in
4.1 Operational attributes 93