Nsroledn; Nsrolefilter; Nsschemacsn - Red Hat DIRECTORY SERVER 8.1 - SCHEMA Reference

Chapter 4. Operational Attributes and Object Classes

4.31. nsRoleDn

This attribute contains the distinguished name of all roles that apply to an entry. Membership of a
managed role is granted upon an entry by adding the role's DN to the entry's nsRoleDn attribute. For
example:
dn: cn=staff,ou=employees,dc=example,dc=com
objectclass: LDAPsubentry
objectclass: nsRoleDefinition
objectclass: nsSimpleRoleDefinition
objectclass: nsManagedRoleDefinition
dn: cn=userA,ou=users,ou=employees,dc=example,dc=com
objectclass: top
objectclass: person
sn: uA
userPassword: secret
nsroledn: cn=staff,ou=employees,dc=example,dc=com
A nested role specifies containment of one or more roles of any type. In that case, nsRoleDn defines
the DN of the contained roles. For example:
dn: cn=everybody,ou=employees,dc=example,dc=com
objectclass: LDAPsubentry
objectclass: nsRoleDefinition
objectclass: nsComplexRoleDefinition
objectclass: nsNestedRoleDefinition
nsroledn: cn=manager,ou=employees,dc=example,dc=com
nsroledn: cn=staff,ou=employees,dc=example,dc=com
OID
Syntax
Multi- or Single-Valued
Defined in

4.32. nsRoleFilter

This attribute sets the filter identifies entries which belong to the role.
OID
Syntax
Multi- or Single-Valued
Defined in

4.33. nsSchemaCSN

This attribute is one of the subschema DSE attribute types.
OID
Syntax
Multi- or Single-Valued
Defined in
194
2.16.840.1.113730.3.1.575
DN
Multi-valued
Directory Server
2.16.840.1.113730.3.1.576
IA5String
Single-valued
15
RFC 2252
2.5.21.82.16.840.1.113730.3.1.804
DirectoryString
Single-valued
Directory Server