Member; Membercertificatedescription - Netscape DIRECTORY SERVER 7.0 - SCHEMA Reference

member

Definition
Identifies the distinguished names for each member of the group.
For example:
member: cn=John Doe, o=example.com
This attribute is defined in RFC 2256.
Syntax
DN, multi-valued.
OID
2.5.4.31

memberCertificateDescription

Definition
This attribute is a multivalued attribute where each value is a description, a
pattern, or a filter matching the subject DN of a certificate (usually certificates
used for SSL client authentication).
memberCertificateDescription
DN with the same AVAs as the description. The description may contain multiple
" =" AVAs. A matching DN must contain those same "
ou
order, although it may contain other AVAs (including other "
interspersed. For any other attribute type (not
AVA of that type in the description. If there are several, all but the last are
ignored.
A matching DN must contain that same AVA but no other AVA of the same type
nearer the root (later, syntactically).
AVAs are considered the same if they contain the same attribute description
(case-insensitive comparison) and the same attribute value (case-insensitive
comparison, leading and trailing whitespace ignored, and consecutive whitespace
characters treated as a single SP).
In order to be considered a member of a group with the following
memberCertificateDescription
=A, and
ou
112 Netscape Directory Server Schema Reference • October 2004
=example, but not
o o
matches any certificate that contains a subject
), there should be at most one
ou
, a certificate would need to include
=company.
=" AVAs, in the same
ou
=" AVAs)
ou
=x,
ou