Member; Membercertificatedescription - Netscape DIRECTORY SERVER 6.2 - SCHEMA Reference

OID
0.9.2342.19200300.100.1.10

member

Definition
Identifies the distinguished names for each member of the group.
For example:
member: cn=John Doe, o=example.com
This attribute is defined in RFC 2256.
Syntax
DN, multi-valued.
OID
2.5.4.31

memberCertificateDescription

Definition
This attribute is a multivalued attribute, where each value is a description, a
pattern, or a filter matching the subject DN of a certificate (usually certificates used
for SSL client authentication).
memberCertificateDescription matches any certificate that contains a subject DN
with the same AVAs as the description. The description may contain multiple
"ou=" AVAs. A matching DN must contain those same "ou=" AVAs, in the same
order, although it may contain other AVAs (including other "ou=" AVAs)
interspersed. For any other attribute type (not ou), there should be at most one
AVA of that type in the description. If there are several, all but the last are ignored.
A matching DN must contain that same AVA, but no other AVA of the same type
nearer the root (later, syntactically).
AVAs are considered the same if they contain the same attribute description
(case-insensitive comparison) and the same attribute value (case-insensitive
comparison, leading and trailing whitespace ignored, and consecutive whitespace
characters treated as a single SP).
112 Netscape Directory Server Schema Reference • December 2003