Red Hat DIRECTORY SERVER 8.1 - SCHEMA Reference page 207

Chapter 4.
Operational Attributes and Object
Classes
Operational attributes are attributes used to perform directory operations and are available for
every entry in the directory, regardless of whether they are defined for the object class of the entry.
Operational attributes are only returned in an ldapsearch operation if specifically requested.
Operational attributes are created and managed by Directory Server on entries, such as the time
the entry is created or modified and the creator's name. These attributes can be set on any entry,
regardless of other attributes or object classes on the entry.
This chapter contains information about attributes object classes that are operational. However, this
reference does not cover core schema used to configure the Directory Server itself. The directory
service is also configured as directory entries within the cn=config subtree. For descriptions of those
configuration attributes, see the Configuration, Command, and File Reference.
4.1. accountUnlockTime
This refers to the amount of time that must pass after an account lockout before the user can bind to
the directory again.
OID
Syntax
Multi- or Single-Valued
Defined in
4.2. aci
This attribute is used by the Directory Server to evaluate what rights are granted or denied when it
receives an LDAP request from a client.
OID
Syntax
Multi- or Single-Valued
Defined in
4.3. altServer
The values of this attribute are URLs of other servers which may be contacted when this server
becomes unavailable. If the server does not know of any other servers which could be used, this
attribute is absent. This information can be cached in case the preferred LDAP server later becomes
unavailable.
OID
Syntax
Multi- or Single-Valued
Defined in
2.16.840.1.113730.3.1.95
DirectoryString
Multi-valued
Directory Server
2.16.840.1.113730.3.1.55
IA5String
Multi-valued
Directory Server
1.3.6.1.4.1.1466.101.120.6
IA5String
Multi-valued
1
RFC 2252
187