-- =============================================================================
--               ITU-T Rec. X.530 (08/2005) | ISO/IEC 9594-10
-- =============================================================================
--<GDMO.Alias "ITU-T Rec. X.530 (08/2005) | ISO/IEC 9594-10"
--            "ITU-T Rec. X.530 (2005) | ISO/IEC 9594-10:2005",
--            "ITU-T Rec. X.530 (2005) | ISO/IEC 9594-10",
--            "Rec. X.530 (2005)">--
-- =========================================================
--<GDMO.Document "ITU-T Rec. X.530 (08/2005) | ISO/IEC 9594-10">--

--<GDMO.Alias    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992"
--               "CCITT Rec. X.721 | ISO/IEC 10165-2:1992",
--               "CCITT Rec. X.721 | ISO/IEC 10165-2",
--               "CCITT Rec. X.721(1992)",
--               "CCITT Rec. X.721">--

--<GDMO.Alias    "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5 : 1994"
--     "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994",
--               "Rec. X.723 | ISO/IEC 10165-5">--


dSA MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ;
  CHARACTERIZED BY dSAPackage ;
  CONDITIONAL PACKAGES
    readPackage PRESENT IF 'the DSA supports the read operation',
    comparePackage PRESENT IF 'the DSA supports the compare operation',
    abandonPackage PRESENT IF 'the DSA supports the abandon operation',
    searchPackage PRESENT IF 'the DSA supports the search operation',
    listPackage PRESENT IF 'the DSA supports the list operation',
    addEntryPackage PRESENT IF 'the DSA supports the addEntry operation',
    removeEntryPackage PRESENT IF 'the DSA supports the removeEntry operation',
    modifyEntryPackage PRESENT IF 'the DSA supports the modifyEntry operation',
    modifyDNPackage PRESENT IF 'the DSA supports the modifyDN operation',
    chainedReadPackage PRESENT IF 'the DSA supports the read operation',
    chainedComparePackage PRESENT IF 'the DSA supports the compare operation',
    chainedAbandonPackage PRESENT IF 'the DSA supports the abandon operation',
    chainedSearchPackage PRESENT IF 'the DSA supports the search operation',
    chainedListPackage PRESENT IF 'the DSA supports the list operation',
    chainedAddEntryPackage PRESENT IF 'the DSA supports the addEntry operation',
    chainedRemoveEntryPackage PRESENT IF 'the DSA supports the removeEntry operation',
    chainedModifyEntryPackage PRESENT IF 'the DSA supports the modifyEntry operation',
    chainedModifyDNPackage PRESENT IF 'the DSA supports the modifyDN operation';
REGISTERED AS {DirectoryManagement.id-moc-dsa} ;


dSANB NAME BINDING
  SUBORDINATE OBJECT CLASS dSA AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dMD AND SUBCLASSES;
  WITH ATTRIBUTE dirCommonName ;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-dsa-name-binding} ;


dSAPackage PACKAGE
  BEHAVIOUR dSABehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains the definitions that manage the DSA itself !; ,
    nameErrorNotificationBehaviour,
    serviceErrorNotificationBehaviour,
    attributeErrorNotificationBehaviour,
    updateErrorNotificationBehaviour,
    shadowErrorNotificationBehaviour,
    unavailableCriticalExtensionNotificationBehaviour,
    resourceExhaustedNotificationBehaviour,
    authenticationFailureNotificationBehaviour,
    accessControlFailureNotificationBehaviour,
    aliasProblemNotificationBehaviour,
    aliasDereferencingProblemNotificationBehaviour,
    unableToProceedNotificationBehaviour,
    invalidReferenceNotificationBehaviour,
    loopDetectedNotificationBehaviour,
    operationRequestNotificationBehaviour,
    operationResponseNotificationBehaviour,
    shadowUpdateCompleteNotificationBehaviour;
  ATTRIBUTES
    dirCommonName GET ,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":administrativeState GET-REPLACE,
    accessPoint GET-REPLACE ,
    masterEntries REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    copyEntries REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    loopsDetected REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    securityErrors REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    nameErrors REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    foundLocalEntries REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    referrals REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET,
    serviceErrors REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    aliasDereferences REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    chainings REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    invalidReferences REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    unableToProceed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    outOfScope REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    noSuchObject REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    aliasProblem REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    aliasDereferencingProblem REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    affectsMultipleDSAs REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    unavailableCriticalExtension REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    timeLimitExceeded REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    sizeLimitExceeded REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    adminLimitExceeded REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ,
    sizeLimit GET-REPLACE ,
    timeLimit GET-REPLACE ,
    prohibitChaining GET-REPLACE ,
    dSAScopeOfReferral GET-REPLACE ,
    dSAScopeOfChaining GET-REPLACE ,
    peerEntityAuthenticationPolicy GET-REPLACE ,
    requestAuthenticationPolicy GET-REPLACE ,
    resultAuthenticationPolicy GET-REPLACE ,
    dSPAssociationEstablishment GET-REPLACE ,
    dOPAssociationEstablishment GET-REPLACE ,
    dISPAssociationEstablishment GET-REPLACE ,
    maxDAPAssociations GET-REPLACE ,
    maxDSPAssociations GET-REPLACE ,
    maxDOPAssociations GET-REPLACE ,
    maxDISPAssociations GET-REPLACE ,
    dAPAssociationTimeout GET-REPLACE ,
    dSPAssociationTimeout GET-REPLACE ,
    dOPAssociationTimeout GET-REPLACE ,
    dISPAssociationTimeout GET-REPLACE ,
    dSAActiveAssociationsThreshold GET-REPLACE ,
    pagedResultsMaximumIdentifiers GET-REPLACE ,
    pagedResultsExpungeTimerInSeconds GET-REPLACE ,
    supportedApplicationContexts GET-REPLACE ADD-REMOVE;
  NOTIFICATIONS
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation
      entryName
      nameProblem
      traceInformation
      serviceProblem
      operation
    aliasedRDN
      aliasDereferenced
      attributeProblem
      attributeType
      attributeValue,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":processingErrorAlarm
      entryName
      operation
      extensions
      resource,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":
      securityServiceOrMechanismViolation
      entryName
      authenReason
      operation,
    "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation
      operationIdentifier
      operationIdentifierDN
      pDU;
REGISTERED AS {DirectoryManagement.id-mp-dsaPackage} ;

--A.1.1.3  DSA notification parameters
--The following parameter definitions are used with the notifications for DSAs.


nameProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.NameProblem ;
  BEHAVIOUR nameProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why a nameError has been detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-nameProblem};


traceInformation PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.TraceInformation ;
  BEHAVIOUR traceInfo-B BEHAVIOUR
    DEFINED AS
      ! The trace information associated with the operation ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-traceInformation};


serviceProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.ServiceProblem ;
  BEHAVIOUR serviceProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why a serviceError has been detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-serviceProblem};


entryName PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.Name ;
  BEHAVIOUR entryNameBehaviour BEHAVIOUR
    DEFINED AS
      ! The name of the entry associated with the operation that caused the
      notifications ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-entryName};


operation PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.MgtInteger ;
  BEHAVIOUR operationBehaviourBehaviour BEHAVIOUR
    DEFINED AS
      ! The operation code that caused the notification to be generated by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-operation};


attributeProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.AttributeProblem ;
  BEHAVIOUR attributeProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why an attributeError has been detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-attributeProblem};


attributeType PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.AttributeType ;
  BEHAVIOUR attributeTypeBehaviour BEHAVIOUR
    DEFINED AS
      ! The attribute type in error ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-attributeType};


attributeValue PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.AttributeValue;
  BEHAVIOUR attributeValueBehaviour BEHAVIOUR
    DEFINED AS
      ! The attribute value in error ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-attributeValue};


resource PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.ResourceSyntax ;
  BEHAVIOUR resourceBehaviour BEHAVIOUR
    DEFINED AS
      ! An identification of the resource that has become exhausted ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-resource};


authenReason PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.AuthenReasonSyntax ;
  BEHAVIOUR authenReasonBehaviour BEHAVIOUR
    DEFINED AS
      ! The reason why the authentications failed ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-authenReason};


extensions PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.MgtBitString ;
  BEHAVIOUR extensionsBehaviour BEHAVIOUR
    DEFINED AS
      ! The critical extensions not supported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-extensions};


aliasedRDNs PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.RDNSequence ;
  BEHAVIOUR aliasedRDNsBehaviour BEHAVIOUR
    DEFINED AS
      ! The aliased RDNs processed by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-aliasedRDNs};


aliasDereferenced PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.Name ;
  BEHAVIOUR aliaseDereferencedBehaviour BEHAVIOUR
    DEFINED AS
      ! The name of the dereferenced alias ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-aliasDereferenced};


referenceType PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.ReferenceType ;
  BEHAVIOUR referenceTypeBehaviour BEHAVIOUR
    DEFINED AS
      ! The reference type of the knowledge reference ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-referenceType};


operationProgress PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.OperationProgress ;
  BEHAVIOUR operationProgressBehaviour BEHAVIOUR
    DEFINED AS
      ! The operation progress when the error was detected ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-operationProgress};


pDU PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.MgtOctetString ;
  BEHAVIOUR pDUBehaviour BEHAVIOUR
    DEFINED AS
      ! The octets of a PDU sent or received by the entity ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-pDU};


operationIdentifier PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.MgtInteger ;
  BEHAVIOUR operationIdentifierBehaviour BEHAVIOUR
    DEFINED AS
      ! The operation identifier for the operation of response ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-opId};


operationIdentifierDN PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.Name ;
  BEHAVIOUR operationIdentifierDNBehaviour BEHAVIOUR
    DEFINED AS
      !  The distinguished name qualifying the operation identifier for the
      operation of response ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-opIdDN};

--A.1.1.4  DSA notification behaviours
--The following behaviour definitions are used with the notifications for DSAs.


nameErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    name error that it reports to the peer.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The nameProblem parameter indicates the problems that were detected and is
    conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


serviceErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    service error while processing an operation either as part of the name
    resolution phase, or as part of the operation evaluation phase.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The serviceProblem parameter contains an indication of the service error
    that was detected and is conveyed as a parameter in the
    additionalInformation field of the operationViolation notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


attributeErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects
    an attribute error while processing an operation either as part of the name
    resolution phase, or as part of the operation evaluation phase.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The attributeProblem parameter contains an indication of the attribute error
    that was detected and is conveyed as a parameter in the
    additionalInformation field of the operationViolation notification.

    The attributeType parameter contains the object identifier of the attribute
    that caused the error and is conveyed as a parameter in the
    additionalInformation field of the operationViolation notification.

    The attributeValue parameter contains the attribute value that caused the
    error and is conveyed as a parameter in the additionalInformation field of
    the operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


updateErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    update error while processing an operation either as part of the name
    resolution phase, or as part of the operation evaluation phase.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The updateProblem parameter contains an indication of the update error that
    was detected and is conveyed as a parameter in the additionalInformation
    field of the operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


aliasProblemNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects
    an alias problem.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The aliasedRDNs parameter contains the aliased RDNs if available and is
    conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The aliasDereferenced parameter contains the name of a dereferenced alias if
    available and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


aliasDereferencingProblemNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects
    an alias dereferencing problem.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The aliasedRDNs parameter contains the aliased RDNs if available and is
    conveyed as a parameter in the additionalInformation field of the
    operationViolation notification.

    The aliasDereferenced parameter contains the name of a dereferenced alias if
    available and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


unavailableCriticalExtensionNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    set extension bit it does not understand. This represents an
    unknown/unimplemented critical extension.

    The serviceUser field of the processingErrorAlarm notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the processingErrorAlarm notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the processingErrorAlarm notification contains
    any additional textual information to be conveyed in the notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    processingErrorAlarm notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The extensions parameter contains the critical extension bits that are
    unknown to the DSA and that are set in the requested operation and is
    conveyed as a parameter in the additionalInformation field of the
    processingErrorAlarm notification. ! ;


unableToProceedNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA is unable
    to proceed with name resolution or during operation evaluation.

    The serviceUser field of the processingErrorAlarm notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the processingErrorAlarm notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the processingErrorAlarm notification contains
    any additional textual information to be conveyed in the notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    processingErrorAlarm notification.

    The referenceType parameter contains the reference type of the knowledge
    reference and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The operationProgress parameter contains the operation progress information
    at the time that the error was detected and is conveyed as a parameter in
    the processingErrorAlarm field of the operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification. ! ;


invalidReferenceNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects
    an invalid reference.

    The serviceUser field of the processingErrorAlarm notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the processingErrorAlarm notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the processingErrorAlarm notification contains
    any additional textual information to be conveyed in the notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    processingErrorAlarm notification.

    The referenceType parameter contains the reference type of the knowledge
    reference and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The operationProgress parameter contains the operation progress information
    at the time that the error was detected and is conveyed as a parameter in
    the processingErrorAlarm field of the operationViolation notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification. ! ;


loopDetectedNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    loop in the configuration of the Directory distribution.

    The serviceUser field of the processingErrorAlarm notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the processingErrorAlarm notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the processingErrorAlarm notification contains
    any additional textual information to be conveyed in the notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    processingErrorAlarm notification.

    The referenceType parameter contains the reference type of the knowledge
    reference and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The traceInformation parameter holds the trace information from a chained
    operation and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification. ! ;


resourceExhaustedNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects
    an exhausted resource.

    The serviceUser field of the processingErrorAlarm notification contains the
    authenticated name of the user requesting the operation, or the peer DUA's AE-title.

    The serviceProvider field of the processingErrorAlarm notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the processingErrorAlarm notification contains
    any additional textual information to be conveyed in the notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    processingErrorAlarm notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification.

    The resource parameter contains an indication of the resource that is
    exhausted and is conveyed as a parameter in the additionalInformation field
    of the processingErrorAlarm notification. ! ;


authenticationFailureNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever an authentication
    failure occurs.

    The serviceUser field of the securityServiceOrMechanismViolation
    notification contains the authenticated name of the user requesting the
    operation, or the peer DUA's AE-title.

    The serviceProvider field of the securityServiceOrMechanismViolation
    notification contains the AE-title of the DSA executing the request.

    The additionalText field of the securityServiceOrMechanismViolation
    notification contains any additional textual information to be conveyed in
    the notification.

    The authenReason parameter contains an indication of the reason why the
    authentication failed and is conveyed as a parameter in the
    additionalInformation field of the securityServiceOrMechanismViolation
    notification. ! ;


accessControlFailureNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects
    an attempt to access an object prohibited by an access control, policy.

    The serviceUser field of the securityServiceOrMechanismViolation
    notification contains the authenticated name of the user requesting the
    operation, or the peer DUA's AE-title.

    The serviceProvider field of the securityServiceOrMechanismViolation
    notification contains the AE-title of the DSA executing the request.

    The additionalText field of the securityServiceOrMechanismViolation
    notification contains any additional textual information to be conveyed in
    the notification.

    The entryName parameter contains the Name of the base object for the entry
    and is conveyed as a parameter in the additionalInformation field of the
    securityServiceOrMechanismViolation notification.

    The operation parameter contains an indication of the operation that caused
    the error and is conveyed as a parameter in the additionalInformation field
    of the securityServiceOrMechanismViolation notification. ! ;


operationRequestNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA received
    an operation.

    The serviceUser field of the communicationsInformation notification contains
    the authenticated name of the DSA requesting the operation, or the peer
    DSA's AE-title.

    The serviceProvider field of the communicationsInformation notification
    contains the AE-title of the DSA executing the request.

    The additionalText field of the communicationsInformation notification
    contains any additional textual information to be conveyed in the notification.

    The pDU parameter contains the PDU received by the DSA for processing and is
    conveyed as a parameter in the additionalInformation field of the
    communicationsInformation notification.

    The operationIdentifier parameter contains the operation identification of
    the operation and is conveyed as a parameter in the additionalInformation
    field of the communicationsInformation notification.

    The operationIdentifierDN parameter contains the distinguished name
    qualifying the operation identifier and is conveyed as a parameter in the
    additionalInformation field of the communicationsInformation notification.
    For DAP operations, this is the distinguished name of the receiving DSA. For
    DSP operations, this is the distinguished name of the first element of the
    received trace information. ! ;


operationResponseNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA sends an
    operation response (including results and errors).

    The serviceUser field of the communicationsInformation notification contains
    the authenticated name of the DSA requesting the operation, or the peer
    DSA's AE-title.

    The serviceProvider field of the communicationsInformation notification
    contains the AE-title of the DSA executing the request.

    The additionalText field of the communicationsInformation notification
    contains any additional textual information to be conveyed in the notification.

    The pDU parameter contains the PDU being sent by the DSA and is conveyed as
    a parameter in the additionalInformation field of the
    communicationsInformation notification.

    The operationIdentifier parameter contains the operation identification of
    the operation for which this is the response and is conveyed as a parameter
    in the additionalInformation field of the communicationsInformation notification.

    The operationIdentifierDN parameter contains the distinguished name
    qualifying the operation identifier and is conveyed as a parameter in the
    additionalInformation field of the communicationsInformation notification.
    For DAP operations, this is the distinguished name of the DSA. For DSP
    operations, this is the distinguished name of the first element of the
    received trace information from the corresponding request. ! ;
--A.1.2  Directory Service Packages Management Package definitions The following
--definitions specify the systems management packages for the Directory Service
--Packages that may be included in the dSA managed object instance.


readPackage PACKAGE
  BEHAVIOUR readPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory read operation. ! ;;
  ATTRIBUTES
    readOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-readPackage} ;


comparePackage PACKAGE
  BEHAVIOUR comparePackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory compare operation. ! ;;
  ATTRIBUTES
    compareOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-comparePackage} ;


abandonPackage PACKAGE
  BEHAVIOUR abandonPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory Abandon operation. ! ;;
  ATTRIBUTES
    abandonOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-abandonPackage} ;


listPackage PACKAGE
  BEHAVIOUR listPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory list operation. ! ;;
  ATTRIBUTES
    listOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-listPackage} ;


searchPackage PACKAGE
  BEHAVIOUR searchPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory search operation. ! ;;
  ATTRIBUTES
    searchBaseOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    search1LevelOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    searchSubtreeOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-searchPackage} ;


addEntryPackage PACKAGE
  BEHAVIOUR addEntryPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory addEntry operation. ! ;;
  ATTRIBUTES
    addEntryOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-addPackage} ;


removeEntryPackage PACKAGE
  BEHAVIOUR removeEntryPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory removeEntry operation. ! ;;
  ATTRIBUTES
    removeEntryOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-removePackage} ;


modifyEntryPackage PACKAGE
  BEHAVIOUR modifyEntryPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory modifyEntry operation. ! ;;
  ATTRIBUTES
    modifyEntryOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-modifyPackage} ;


modifyDNPackage PACKAGE
  BEHAVIOUR modifyDNPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory modifyDN operation. ! ;;
  ATTRIBUTES
    modifyDNOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    modifyDNRenameOnlyOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-modifyDNPackage} ;


chainedReadPackage PACKAGE
  BEHAVIOUR chainedReadPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedRead operation. ! ;;
  ATTRIBUTES
    chainedReadOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedReadPackage} ;


chainedComparePackage PACKAGE
  BEHAVIOUR chainedComparePackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedCompare operation. ! ;;
  ATTRIBUTES
    chainedCompareOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedComparePackage} ;


chainedAbandonPackage PACKAGE
  BEHAVIOUR chainedAbandonPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedAbandon operation. ! ;;
  ATTRIBUTES
    chainedAbandonOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedAbandonPackage} ;


chainedListPackage PACKAGE
  BEHAVIOUR chainedListPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedList operation. ! ;;
  ATTRIBUTES
    chainedListOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedListPackage} ;


chainedSearchPackage PACKAGE
  BEHAVIOUR chainedSearchPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedSearch operation. ! ;;
  ATTRIBUTES
    chainedSearchBaseOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    chainedSearch1LevelOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ,
    chainedSearchSubtreeOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedSearchPackage} ;


chainedAddEntryPackage PACKAGE
  BEHAVIOUR chainedAddEntryPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedAddEntry operation. ! ;;
  ATTRIBUTES
    chainedAddEntryOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedAddPackage} ;


chainedRemoveEntryPackage PACKAGE
  BEHAVIOUR chainedEntryRemovePackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedRemoveEntry operation. ! ;;
  ATTRIBUTES
    chainedRemoveEntryOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedRemovePackage} ;


chainedModifyEntryPackage PACKAGE
  BEHAVIOUR chainedModifyEntryPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedModifyEntry operation. ! ;;
  ATTRIBUTES
    chainedModifyEntryOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedModifyPackage} ;


chainedModifyDNPackage PACKAGE
  BEHAVIOUR chainedModifyDNPackagebehaviour BEHAVIOUR
    DEFINED AS
      ! This package holds information about and provides management access to
      the Directory chainedModifyDN operation. ! ;;
  ATTRIBUTES
    chainedModifyDNOperationsProcessed REPLACE-WITH-DEFAULT
      DEFAULT VALUE DirectoryManagement.zero GET ;
REGISTERED AS {DirectoryManagement.id-mp-chainedModifyDNPackage} ;

--A.1.3  DSA Information Tree operational information definitions This subclause
--specifies the management definitions for a DSA's DSA Information Tree
--operational information. A.1.3.1  DSA Information Tree managed object class definition
--The following definition specifies the DSE managed objects that may be created
--to manage the necessary aspects of a DSA Information Tree. Each DSE in the DSA
--Information Tree may be created by the DSA as a managed object instance
--subordinate to the DSA managed object instance.


dseMO MANAGED OBJECT CLASS
  --  These managed object instances contain the name and operational
  --  information for each
    --  Directory managed entry in a naming context held in a DSA.
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ;
  CHARACTERIZED BY dsePackage ;
REGISTERED AS {DirectoryManagement.id-moc-dse} ;

--A.1.3.2  DSA Information Tree name binding definition
--The following definition specifies the name binding for the DSE managed
--objects that may be created to represent DSA Information Tree operational
--information in a DSA.


dseNB NAME BINDING
  SUBORDINATE OBJECT CLASS dseMO AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES;
  WITH ATTRIBUTE distinguishedName;
  BEHAVIOUR
    dseNBBehaviour BEHAVIOUR
      DEFINED AS
        ! Each DSE in a DSA Information Tree is named by the sequence of RDNs
        forming its Distinguished Name ! ;;
  CREATE WITH-REFERENCE-OBJECT;
  DELETE ;
REGISTERED AS {DirectoryManagement.id-mnb-dse-name-binding} ;

--A.1.3.3  DSE package definition
--The following definition specifies the packages for the DSE managed objects.


dsePackage PACKAGE
  BEHAVIOUR dsePackageBehaviour BEHAVIOUR
    DEFINED AS
      !The information and actions permitted for managing DSEs. ! ;;
  ATTRIBUTES
    distinguishedName GET ,
    specificKnowledge GET-REPLACE ADD-REMOVE,
    nonSpecificKnowledge GET-REPLACE ADD-REMOVE,
    administrativeRole GET-REPLACE ,
    dseType GET-REPLACE ,
    supplierKnowledge GET-REPLACE ,
    consumerKnowledge GET-REPLACE ,
    secondaryShadows GET-REPLACE ADD-REMOVE,
    createTimestamp GET-REPLACE ,
    modifyTimestamp GET-REPLACE ,
    creatorsName GET-REPLACE ,
    modifiersName GET-REPLACE ,
    aliasedEntryName GET-REPLACE ,
    subtreeSpecification GET-REPLACE ,
    accessPoint GET-REPLACE ;
REGISTERED AS {DirectoryManagement.id-mp-dsePackage} ;

--A.1.4  NHOB managed object definitions
--This subclause specifies the management definitions for a DSA's NHOBs.
--A.1.4.1  NHOB managed object class definition
--The following definition specifies the managed objects used to represent an
--NHOB held by a DSA.


nHOBMO MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ;
  CHARACTERIZED BY nHOBPackage ;
REGISTERED AS {DirectoryManagement.id-moc-nHOBMO} ;

--A.1.4.2  NHOB name binding definition
--The following definition specifies the name binding for the NHOB managed
--objects that may be created to represent the NHOBs of a DSA.


nHOBNB NAME BINDING
  SUBORDINATE OBJECT CLASS nHOBMO AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES;
  WITH ATTRIBUTE distinguishedName ;
  BEHAVIOUR
    nHOBNBBehaviour BEHAVIOUR
      DEFINED AS
        ! Each NHOB held by a DSA is named by the sequence of RDNs forming the
        Distinguished Name of the immediate superior entry of the subordinate
        naming context ! ;;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ;
REGISTERED AS {DirectoryManagement.id-mnb-nHOB-name-binding} ;

--A.1.4.3  NHOB package definition
--The following definition specifies the package for the NHOB managed object.


nHOBPackage PACKAGE
  BEHAVIOUR nHOBPackageBehaviour BEHAVIOUR
    DEFINED AS
      ! The information and actions permitted for managing NHOBs ! ;;
  ATTRIBUTES
    distinguishedName GET,
    agreementID GET,
    agreementVersion GET,
    useDOP GET-REPLACE,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET,
    remoteAccessPoint GET-REPLACE,
    hOBRole GET ;
  NOTIFICATIONS
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation
      operationalBindingID
      dOPProblem,
    "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation
      operationalBindingID;
REGISTERED AS {DirectoryManagement.id-mp-nHOBPackage} ;

--A.1.4.4  NHOB notification parameters
--The following parameter definitions are used with the notifications for NHOBs:


operationalBindingID PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.OperationalBindingID ;
  BEHAVIOUR operationalBindingIDBehaviour BEHAVIOUR
    DEFINED AS
      ! The operational binding ID associated with the notification ! ;;
REGISTERED AS { DirectoryManagement.id-mpa-nhob-bind-id} ;


dOPProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.OpBindingErrorParam;
  BEHAVIOUR dOPProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why a DOP Error has been detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-mhob-dop-prob} ;

--A.1.4.5  NHOB notification behaviours
--The following behaviour definitions are used with the notifications for NHOBs:


dOPErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    DOP error while maintaining the NHOB.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the DSA requesting the operation, or the peer DSA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The operationalBindingID parameter contains the operation binding ID of the
    NHOB for which the error has been detected and is conveyed as a parameter in
    the additionalInformation field of the operationViolation notification.

    The DOPProblem parameter contains an indication of the DOP error that was
    detected and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


dOPCompleteNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA
    successfully completes a DOP operation.

    The serviceUser field of the communicationsInformation notification contains
    the authenticated name of the DSA requesting the operation, or the peer
    DSA's AE-title.

    The serviceProvider field of the communicationsInformation notification
    contains the AE-title of the DSA executing the request.

    The additionalText field of the communicationsInformation notification
    contains any additional textual information to be conveyed in the notification.

    The operationalBindingID parameter contains the operational binding ID of
    the NHOB for which the operation has been completed and is conveyed as a
    parameter in the additionalInformation field of the
    communicationsInformation notification. ! ;
--A.1.5  HOB managed object definitions
--This subclause specifies the management definitions for a DSA's HOBs. A.1.5.1
--HOB managed object class definition
--The following definition specifies the managed objects used to represent a HOB
--held by a DSA.


hOBMO MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ;
  CHARACTERIZED BY hOBPackage ;
REGISTERED AS {DirectoryManagement.id-moc-hOBMO} ;

--A.1.5.2  HOB name binding definition
--The following definition specifies the name binding for the HOB managed
--objects that may be created to represent the HOBs of a DSA.


hOBNB NAME BINDING
  SUBORDINATE OBJECT CLASS hOBMO AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES;
  WITH ATTRIBUTE distinguishedName ;
  BEHAVIOUR
    hOBNBBehaviour BEHAVIOUR
      DEFINED AS
        ! Each HOB held by a DSA is named by the sequence of RDNs forming the
        Distinguished Name of the root entry of the subordinate naming context ! ;;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ;
REGISTERED AS {DirectoryManagement.id-mnb-hOB-name-binding} ;

--A.1.5.3  HOB package definition
--The following definition specifies the package for the HOB managed object.


hOBPackage PACKAGE
  BEHAVIOUR hOBPackageBehaviour BEHAVIOUR
    DEFINED AS
      ! The information and actions permitted for managing HOBs ! ;;
  ATTRIBUTES
    distinguishedName GET,
    agreementID GET,
    agreementVersion GET,
    useDOP GET-REPLACE,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET,
    remoteAccessPoint GET-REPLACE,
    hOBRole GET ;
  NOTIFICATIONS
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation
      hOBOperationalBindingID
      hOBDOPProblem,
    "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation
      hOBOperationalBindingID;
REGISTERED AS {DirectoryManagement.id-mp-hOBPackage} ;

--A.1.5.4  HOB notification parameters
--The following parameter definitions are used with the notifications for HOBs:


hOBOperationalBindingID PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.OperationalBindingID;
  BEHAVIOUR hOBOperationalBindingIDBehaviour BEHAVIOUR
    DEFINED AS
      ! The operational binding ID associated with the notification ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-hob-bind-id} ;


hOBDOPProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.OpBindingErrorParam ;
  BEHAVIOUR hOBDOPProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why a DOP Error has been detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-hob-dop-prob} ;

--A.1.5.5  HOB notification behaviours
--The following behaviour definitions are used with the notifications for HOBs:


hOBDOPErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    DOP error while maintaining the HOB.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the DSA requesting the operation, or the peer DSA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The operationalBindingID parameter contains the operation binding ID of the
    HOB for which the error has been detected and is conveyed as a parameter in
    the additionalInformation field of the operationViolation notification.

    The DOPProblem parameter contains an indication of the DOP error that was
    detected and is conveyed as a parameter in the additionalInformation field
    of the operationViolation notification. ! ;


hOBDOPCompleteNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA
    successfully completes a DOP operation.

    The serviceUser field of the communicationsInformation notification contains
    the authenticated name of the DSA requesting the operation, or the peer
    DSA's AE-title.

    The serviceProvider field of the communicationsInformation notification
    contains the AE-title of the DSA executing the request.

    The additionalText field of the communicationsInformation notification
    contains any additional textual information to be conveyed in the notification.

    The operationalBindingID parameter contains the operational binding ID of
    the HOB for which the operation has been completed and is conveyed as a
    parameter in the additionalInformation field of the
    communicationsInformation notification. ! ;
--A.1.6  Shadowing Agreement managed object definitions
--This subclause specifies the management definitions for a DSA's shadowing
--agreements. A.1.6.1  Shadowing Agreement managed object class definition
--The following definition specifies the managed objects used to represent a
--shadowing agreement held by a DSA.


shadowingAgreementMO MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ;
  CHARACTERIZED BY shadowingAgreementPackage ;
REGISTERED AS {DirectoryManagement.id-moc-shadowingAgreement} ;

--A.1.6.2  Shadowing Agreement name binding definition
--The following definition specifies the name binding for the Shadowing
--Agreement managed objects that may be created to represent the shadowing
--agreements of a DSA.


shadowingAgreementNB NAME BINDING
  SUBORDINATE OBJECT CLASS shadowingAgreementMO AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES;
  WITH ATTRIBUTE distinguishedName ;
  BEHAVIOUR
    shadowingAgreementNBBehaviour BEHAVIOUR
      DEFINED AS
        ! Each shadowing agreement held by a DSA is named by the sequence of
        RDNs forming the Distinguished Name of the root entry of the naming
        context containing the unit of replication ! ;;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ;
REGISTERED AS {DirectoryManagement.id-mnb-shadowingAgreement-nb} ;

--A.1.6.3  Shadowing Agreement package definition
--The following definition specifies the package for the HOB managed object.


shadowingAgreementPackage PACKAGE
  BEHAVIOUR shadowingAgreementPackageBehaviour BEHAVIOUR
    DEFINED AS
      ! The information and actions permitted for managing shadowing agreements ! ;;
  ATTRIBUTES
    distinguishedName GET,
    agreementID GET,
    agreementVersion GET,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET,
    shadowingSubject GET-REPLACE,
    updateMode GET-REPLACE,
    masterAccessPoint GET,
    secondaryShadows GET-REPLACE ADD-REMOVE,
    useDOP GET-REPLACE,
    remoteAccessPoint GET-REPLACE,
    shadowingRole GET,
    lastUpdateTime GET-REPLACE,
    shadowingSchedule GET-REPLACE,
    nextUpdateTime GET-REPLACE ;
  ACTIONS
    updateShadow ;
  NOTIFICATIONS
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange,
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation
      shadDOPProblem
      notificationsAgreementID
      shadowProblem
      updateProblem
      notificationLastUpdateTime,
    "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation
      notificationsAgreementID ;
REGISTERED AS {DirectoryManagement.id-mp-shadowingAgreementPackage} ;

--A.1.6.4  Shadowing Agreement notification parameters
--The following parameter definitions are used with the notifications for
--shadowing agreements.


shadDOPProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.OpBindingErrorParam ;
  BEHAVIOUR shadDOPProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why a DOP Error has been detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-shadowing-dop-prob} ;


shadowProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.ShadowProblem ;
  BEHAVIOUR shadowProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why the shadow operation failed ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-shadowProblem} ;


updateProblem PARAMETER
  CONTEXT EVENT-INFO;
  WITH SYNTAX DirectoryManagement.ShadowProblem ;
  BEHAVIOUR updateProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! Reason why an updateError has been detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mpa-updateProblem} ;


notificationsAgreementID PARAMETER
  CONTEXT EVENT-INFO;
  ATTRIBUTE agreementID ;
  BEHAVIOUR notificationAgreementIDBehaviour BEHAVIOUR
    DEFINED AS
      ! The agreement identification associated with the notification ! ;;;


notificationLastUpdateTime PARAMETER
  CONTEXT EVENT-INFO;
  ATTRIBUTE lastUpdateTime ;
  BEHAVIOUR notificationLastUpdateTimeBehaviour BEHAVIOUR
    DEFINED AS
      ! The last update time associated with a shadowing agreement ! ;;;
--A.1.6.5  Shadowing Agreement notification behaviours
--The following behaviour definitions are used with the notifications for
--shadowing agreements:


shadowUpdateCompleteNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA
    successfully completes a shadow update sequence.

    The serviceUser field of the communicationsInformation notification contains
    the authenticated name of the DSA requesting the operation, or the peer
    DSA's AE-title.

    The serviceProvider field of the communicationsInformation notification
    contains the AE-title of the DSA executing the request.

    The additionalText field of the communicationsInformation notification
    contains any additional textual information to be conveyed in the notification.

    The notificationsAgreementID parameter contains the agreement ID of the
    shadowingAgreement for which the update has been completed and is conveyed
    as a parameter in the additionalInformation  field of the
    communicationsInformation notification. ! ;


shadowErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    shadow error while performing a shadowing operation.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the DSA requesting the operation, or the peer DSA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The notificationsAgreementID parameter contains the agreement ID of the
    shadowingAgreement for which the error has been detected and is conveyed as
    a parameter in the additionalInformation field of the operationViolation
    notification.

    The shadowProblem parameter contains an indication of the shadow error that
    was detected and is conveyed as a parameter in the additionalInformation
    field of the operationViolation notification.

    The notificationLastUpdateTime parameter contains an indication of the time
    of last update for the DSA for the agreement identified in the
    notificationsAgreementID parameter. The lastUpdateTime parameter is conveyed
    as a parameter in the additionalInformation field of the operationViolation
    notification. ! ;


shadowDOPErrorNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA detects a
    DOP error while maintaining the shadowing agreement.

    The serviceUser field of the operationViolation notification contains the
    authenticated name of the DSA requesting the operation, or the peer DSA's AE-title.

    The serviceProvider field of the operationViolation notification contains
    the AE-title of the DSA executing the request.

    The additionalText field of the operationViolation notification contains any
    additional textual information to be conveyed in the notification.

    The notificationsAgreementID parameter contains the agreement ID of the
    shadowing agreement for which the error has been detected and is conveyed as
    a parameter in the additionalInformation field of the operationViolation
    notification.

    The shadDOPProblem parameter contains an indication of the DOP error that
    was detected and is conveyed as a parameter in the additionalInformation
    field of the operationViolation notification. ! ;


shadowDOPCompleteNotificationBehaviour BEHAVIOUR
  DEFINED AS
    ! Notifications with this behaviour are generated whenever the DSA
    successfully completes a DOP operation.

    The serviceUser field of the communicationsInformation notification contains
    the authenticated name of the DSA requesting the operation, or the peer
    DSA's AE-title.

    The serviceProvider field of the communicationsInformation notification
    contains the AE-title of the DSA executing the request.

    The additionalText field of the communicationsInformation notification
    contains any additional textual information to be conveyed in the notification.

    The notificationsAgreementID parameter contains the agreement ID of the
    shadowing agreement for which the operation has been completed and is
    conveyed as a parameter in the additionalInformation  field of the
    communicationsInformation notification. ! ;
--A.1.6.6  Shadowing Agreement Actions
--The following actions are used for shadowing agreements:


updateShadow ACTION
  BEHAVIOUR updateBehaviour BEHAVIOUR
    DEFINED AS
      ! The action causes an out-of-band shadow update sequence to be initiated
      using the DISP protocol. !;;
REGISTERED AS {DirectoryManagement.id-mac-update};

--A.2  Management of a Known DSA
--The Known DSA is represented in the OSI Environment as an application process
--with application entities representing its communications capabilities. The
--Known DSA represents another DSA application entity with which the local
--Directory component interacts. This subclause identifies the managed objects
--used to represent and manage the Known DSA, its application entity
--invocations, application associations and operations. A.2.1  Known DSA managed
--object definition The following definition specifies the managed objects used
--to represent a Known DSA in an end system.


knownDSA MANAGED OBJECT CLASS
  DERIVED FROM "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsEntity ;
  CHARACTERIZED BY knownDSAPackage ;
REGISTERED AS {DirectoryManagement.id-moc-knownDSA} ;

--A.2.2  Known DSA name binding definitions
--The following definitions specify the naming relationship of Known DSAs to
--other managed objects. Known DSAs are named subordinate to DSA and DUA managed
--objects.


knownDSA-dSA NAME BINDING
  SUBORDINATE OBJECT CLASS knownDSA AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES;
  WITH ATTRIBUTE dirCommonName ;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-knownDSA-dSA-name-binding} ;


knownDSA-dUA NAME BINDING
  SUBORDINATE OBJECT CLASS knownDSA AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dUA AND SUBCLASSES;
  WITH ATTRIBUTE dirCommonName ;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-knownDSA-dUA-name-binding} ;

--A.2.3  Known DSA package definition
--The following definition specifies the package for Known DSAs.


knownDSAPackage PACKAGE
  BEHAVIOUR knownDSABehaviour BEHAVIOUR
    DEFINED AS
      ! This managed object class describes the information required to
      establish an association to a neighbouring DSA, and contains
      association-related statistics for the neighbour DSA. The
      CommunicationsAlarm notification is sent when there is an abnormal
      termination of an association.!;;
  ATTRIBUTES
    dirCommonName GET,
    remoteAccessPoint GET-REPLACE,
    supportedApplicationContexts GET,
    credentials GET-REPLACE,
    reverseCredentials GET-REPLACE,
    dIRQOP GET-REPLACE,
    maxInboundAssocs GET-REPLACE,
    maxOutboundAssocs GET-REPLACE,
    timeOfLastAttempt GET,
    timeOfLastSuccess GET,
    currentActiveInboundAssocs GET,
    currentActiveOutboundAssocs GET,
    accumInboundAssocs GET,
    accumOutboundAssocs GET,
    accumFailedInboundAssocs GET,
    accumFailedOutboundAssocs GET,
    requestCounter GET,
    replyCounter GET,
    requestsFailedCounter GET ;
  NOTIFICATIONS
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":communicationsAlarm ;
REGISTERED AS {DirectoryManagement.id-mp-knownDSAPackage} ;

--A.3  Management of a Known DUA
--The Known DUA is represented in the OSI Environment as an application process
--with application entities representing its communications capabilities. The
--Known DUA represents a DUA application entity with which the DSA interacts.
--This subclause identifies the managed objects used to represent and manage the
--Known DUA, its application entity invocations, application associations and
--operations. A.3.1  Known DUA managed object definition The following
--definition specifies the managed objects used to represent a Known DUA in an
--end system.


knownDUA MANAGED OBJECT CLASS
  DERIVED FROM "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsEntity ;
  CHARACTERIZED BY knownDUAPackage ;
REGISTERED AS {DirectoryManagement.id-moc-knownDUA} ;

--A.3.2  Known DUA name binding definition
--The following definition specifies the naming relationship of Known DUAs to
--other managed objects. Known DUAs are named subordinate to a DSA.


knownDUA-dSA NAME BINDING
  SUBORDINATE OBJECT CLASS knownDUA AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES;
  WITH ATTRIBUTE dirCommonName ;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-knownDUA-dSA-name-binding} ;

--A.3.3  Known DUA package definition
--The following definition specifies the package for Known DUAs.


knownDUAPackage PACKAGE
  BEHAVIOUR knownDUABehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains the definitions that manage the view of DUAs as
      viewed from the (local) DSA. The Communications Alarm notification is sent
      when there is an abnormal termination of a DUA's association.!;;
  ATTRIBUTES
    dirCommonName GET,
    remoteAccessPoint GET,
    supportedApplicationContexts GET,
    credentials GET,
    reverseCredentials GET,
    timeOfLastAccess GET,
    currentActiveAssocs GET,
    accumAssocs GET ;
  NOTIFICATIONS
    "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":communicationsAlarm;
REGISTERED AS {DirectoryManagement.id-mp-knownDUAPackage} ;

--A.4  Management of association
--The Upper Layer Connection Endpoint represents an active association between
--the DSA and another DSA, or between the DSA and a DUA. A.4.1  Upper Layer
--Connection Endpoint managed object definition The following definition
--specifies the managed object used to represent an upper layer connection endpoint.


uLconnEnd MANAGED OBJECT CLASS
  DERIVED FROM "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":singlePeerConnection ;
  CHARACTERIZED BY uLconnEndPackage ;
REGISTERED AS {DirectoryManagement.id-moc-ULconnEnd} ;

--A.4.2  Upper Layer Connection Endpoint name binding definitions The following
--definitions specify the naming relationship of Upper Layer Connection
--Endpoints to other managed objects. Upper Layer Connection Endpoints are named
--subordinate to a Known DSAs and Known DUAs.


uLconnEnd-knownDSA NAME BINDING
  SUBORDINATE OBJECT CLASS uLconnEnd AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS knownDSA AND SUBCLASSES;
  WITH ATTRIBUTE associationId ;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-ULconnEnd-knownDSA} ;


uLconnEnd-knownDUA NAME BINDING
  SUBORDINATE OBJECT CLASS uLconnEnd AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS knownDUA AND SUBCLASSES;
  WITH ATTRIBUTE associationId ;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-ULconnEnd-knownDUA} ;

--A.4.3  Upper Layer Connection Endpoint package definition
--The following definition specifies the package for Upper Layer Connection Endpoints.


uLconnEndPackage PACKAGE
  BEHAVIOUR uLconnEndBehaviour BEHAVIOUR
    DEFINED AS
      ! This package defined the attributes for an application assocation ! ;;
  ATTRIBUTES
    callingAETitle GET,
    associationId GET,
    applicationContextInUse GET ;
REGISTERED AS {DirectoryManagement.id-mp-ULconnEndPackage} ;

--A.5  Management of a DUA
--A DUA is represented in the OSI Environment as an application process with an
--application entity representing its communications capability. This subclause
--identifies the managed objects used to represent and manage a DUA, its
--application entity invocations and application associations. A.5.1  DUA
--managed object definition The following definition specifies the DUA managed
--objects used to represent a DUA in an end system.


dUA MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ;
  CHARACTERIZED BY dUAPackage ;
REGISTERED AS {DirectoryManagement.id-moc-dUA} ;

--A.5.2  DUA package definition
--The following definition specifies the package for DUAs.


dUAPackage PACKAGE
  BEHAVIOUR dUAPackageBehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains the attributes and actions that manage the view of
      the DUA as viewed from the DUA. No notifications are generated. There are
      two actions to control which DSA the DUA should use. ! ;;
  ATTRIBUTES
    homeDSA GET-REPLACE SET-BY-CREATE,
    subSchema GET-REPLACE SET-BY-CREATE,
    dUATimeout GET-REPLACE SET-BY-CREATE ;
  ACTIONS
    useRemoteDSA,
    useHomeDSA;
REGISTERED AS {DirectoryManagement.id-mp-dUAPackage} ;

--A.5.3  DUA action definitions
--The following definitions specify the actions for DUAs.


useRemoteDSA ACTION
  BEHAVIOUR useRemoteDSABehaviour BEHAVIOUR
    DEFINED AS
      ! Use one of the subordinate remotes Known instead of the home DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mac-useRemoteDSA} ;


useHomeDSA ACTION
  BEHAVIOUR useHomeDSABehaviour BEHAVIOUR
    DEFINED AS
      ! Revert to using the home DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mac-useHomeDSA} ;

--A.6  Directory Service management
--This subclause specifies the management definitions for a Directory Service.
--A.6.1  Directory Service
--A.6.1.1  Directory Service managed object definition
--The following definition specifies the managed objects used to represent a
--Directory Service.


directoryService MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top;
  CHARACTERIZED BY directoryServicePackage ;
  CONDITIONAL PACKAGES
    directoryInformationServicePackage PRESENT IF    'the DSA allows the
      Directory service manager to control the information processing capability
      of the Directory',
    directoryControlServicePackage PRESENT IF 'the DSA allows the Directory
      service manager to manage the operational activity of the Directory' ;
REGISTERED AS {DirectoryManagement.id-moc-disManagedObject} ;

--A.6.1.2  Directory Service name binding definition
--The following definition specifies the naming relationship of Directory
--Service managed objects to other managed objects. Directory Service managed
--objects are named subordinate to a Directory Customer.


directoryService-Customer NAME BINDING
  SUBORDINATE OBJECT CLASS directoryService AND SUBCLASSES;
  NAMED BY SUPERIOR OBJECT CLASS directoryCustomer AND SUBCLASSES;
  WITH ATTRIBUTE serviceIdentifier ;
  CREATE WITH-REFERENCE-OBJECT ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-dis-Customer-name-binding} ;

--A.6.1.3  Directory Service package definitions
--The following definitions specify the package for the Directory Service
--managed object.


directoryServicePackage PACKAGE
  BEHAVIOUR directoryServicePackageBehaviour BEHAVIOUR
    DEFINED AS
      ! This package uses management definitions to be used for the management
      of a Directory service ! ;;
  ATTRIBUTES
    serviceIdentifier GET-REPLACE SET-BY-CREATE,
    serviceDescription GET-REPLACE SET-BY-CREATE ;
REGISTERED AS {id-mp-dsPackage} ;


directoryInformationServicePackage PACKAGE
  BEHAVIOUR directoryInformationServiceBehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains management definitions to be used for the
      specification of a Directory information service. Certain attributes in
      the package (including SizeLimit and TimeLimit) provide service policy
      limits for use by the DSA. These limits overide any similar limits that
      can be established for the DSA itself ! ;;
  ATTRIBUTES
    allowedDirectoryInformationServiceElement GET-REPLACE SET-BY-CREATE,
    disAllowedDirectoryInformationServiceElement GET-REPLACE SET-BY-CREATE,
    sizeLimit GET-REPLACE SET-BY-CREATE,
    timeLimit GET-REPLACE SET-BY-CREATE,
    accessor GET-REPLACE SET-BY-CREATE ;
REGISTERED AS {DirectoryManagement.id-mp-disPackage} ;


directoryControlServicePackage PACKAGE
  BEHAVIOUR serviceControlServiceBehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains management definitions to be used for the
      operational control of a Directory service ! ;;
  ATTRIBUTES
    maxEntriesReturned GET-REPLACE SET-BY-CREATE,
    maxTimeForResults GET-REPLACE SET-BY-CREATE ;
REGISTERED AS {DirectoryManagement.id-mp-dcsPackage} ;

--A.6.2  Directory Customer
--A.6.2.1  Directory Customer managed object definition
--The following definition specifies the managed objects used to represent a
--Directory Customer.


directoryCustomer MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec.X.721 (1992) | ISO/IEC 10165-2:1992":top;
  CHARACTERIZED BY directoryCustomerPackage ;
REGISTERED AS {DirectoryManagement.id-moc-dirCust} ;

--A.6.2.2  Directory Customer name binding definition
--The following definition specifies the name binding for the Directory Customer
--managed objects that may be created to represent the Directory Customers.


directoryCustomer-dMD NAME BINDING
  SUBORDINATE OBJECT CLASS directoryCustomer ;
  NAMED BY SUPERIOR OBJECT CLASS dMD ;
  WITH ATTRIBUTE directoryCustomerName ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-DirCust-DMD} ;

--A.6.2.3  Directory Customer package definition
--The following definition specifies the package for the Directory Customer
--managed object.


directoryCustomerPackage PACKAGE
  BEHAVIOUR directoryCustomerBehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains management defintions to be used for the
      specification of Directory Customers ! ;;
  ATTRIBUTES
    directoryCustomerName GET-REPLACE SET-BY-CREATE,
    directoryCustomerAddress GET-REPLACE SET-BY-CREATE ;
REGISTERED AS {DirectoryManagement.id-mp-dirCust};

--A.6.3  Directory User
--A.6.3.1  Directory User managed object
--The following definition specifies the managed objects used to represent a
--Directory User.


directoryUser MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec.X.721 (1992) | ISO/IEC 10165-2:1992":top;
  CHARACTERIZED BY directoryUserPackage ;
REGISTERED AS {DirectoryManagement.id-moc-dirUser};

--A.6.3.2  Directory User name binding definition
--The following definition specifies the name binding for the Directory User
--managed objects that may be created to represent the Directory Users.


directoryUser-directoryCustomer NAME BINDING
  SUBORDINATE OBJECT CLASS directoryUser ;
  NAMED BY SUPERIOR OBJECT CLASS directoryCustomer ;
  WITH ATTRIBUTE directoryUserName ;
  DELETE ONLY-IF-NO-CONTAINED-OBJECTS ;
REGISTERED AS {DirectoryManagement.id-mnb-DirUser-DirCust} ;

--A.6.3.3  Directory User package definition
--The following definition specifies the package for the Directory User managed object.


directoryUserPackage PACKAGE
  BEHAVIOUR directoryUserBehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains management definitions to be used for the
      specification of Directory Users ! ;;
  ATTRIBUTES
    directoryUserName GET-REPLACE SET-BY-CREATE;
REGISTERED AS {DirectoryManagement.id-mp-dirUser};

--A.7  DMD
--This subclause specifies the management definitions for a Directory Management
--Domain. A.7.1  DMD managed object
--The following definition specifies the managed objects used to represent a
--Directory Management Domain.


dMD MANAGED OBJECT CLASS
  DERIVED FROM "CCITT Rec.X.721(1992) | ISO/IEC 10165-2:1992":top;
  CHARACTERIZED BY dMDPackage ;
REGISTERED AS {DirectoryManagement.id-moc-dMD} ;

--A.7.2  DMD package definition
--The following definition specifies the package for Directory Management Domains.


dMDPackage PACKAGE
  BEHAVIOUR dMDPackageBehaviour BEHAVIOUR
    DEFINED AS
      ! This package contains management definitions to be used for the
      specification of a Directory Management Domain ! ;;
  ATTRIBUTES
    dMDName GET-REPLACE SET-BY-CREATE ;
REGISTERED AS {DirectoryManagement.id-mp-dMD};

--A.8  Definition of attributes
--The following definitions specify the attributes for the Directory Managed Objects.


abandonOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR abandonsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of abandon operations that
      the DSA has processed. For each abandon operation that the DSA processes,
      the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-abandonOpsProc} ;


accessControlScheme ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR accessControlSchemeBehaviour BEHAVIOUR
    DEFINED AS
      ! Defines which access control scheme is in operation in the
      administrative area. This attribute maps to the accessControlScheme
      Directory attribute ! ;;
REGISTERED AS {DirectoryManagement.id-mat-accessControlScheme} ;


accumAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR accumAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the total accumulated associations from this
      Network Element to a neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-accumAssocs} ;


accumFailedInboundAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR accumFailedInboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the total accumulated attempted inbound
      associations from a neighbouring Network Element that failed! ;;
REGISTERED AS {DirectoryManagement.id-mat-accumFailedInboundAssocs} ;


accumFailedOutboundAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR accumFailedOutboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the total accumulated attempted outbound
      associations to a neighbouring Network Element that failed! ;;
REGISTERED AS {DirectoryManagement.id-mat-accumFailedOutboundAssocs} ;


accumInboundAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter ;
  BEHAVIOUR accumInboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the total accumulated inbound associations from
      this Network Element to a neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-accumInboundAssocs} ;


accumOutboundAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter ;
  BEHAVIOUR accumOutboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the total accumulated outbound associations from
      this Network Element to a neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-accumOutboundAssocs} ;


accessor ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.Accessors ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR accessorBehaviour BEHAVIOUR
    DEFINED AS
      ! The identifier for a particular Directory information service accessor! ;;
REGISTERED AS {DirectoryManagement.id-mat-accessor} ;


accessPoint ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR accessPointBehaviour BEHAVIOUR
    DEFINED AS
      ! The myAccessPoint attribute of the root DSE in the DSA. This attribute
      contains the presentation address, protocol information and AE Title of
      the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-accessPoint} ;


addEntryOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR addsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of addEntry operations that
      the DSA has processed in the evaluation phase. For each addEntry operation
      that the DSA evaluates, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-addEntryOpsProc} ;


administrativeRole ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AdministrativeRole ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR administrativeRoleBehaviour BEHAVIOUR
    DEFINED AS
      ! Identifies the start of an administrative area. This attribute maps to
      the administrativeRole Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-administrativeRole} ;


adminLimitExceeded ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR adminLimitExceededBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of administrative limit exceeded errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-adminLimitExceeded} ;


affectsMultipleDSAs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR affectsMultipleDSAsBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of affects Multiple DSA errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-affectsMultipleDSAs} ;


aliasedEntryName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR aliasedEntryNameBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the alias target. This attribute maps to the aliasedEntryName
      Directory. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-aliasedEntryName} ;


agreementID ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR agreementIDBehaviour BEHAVIOUR
    DEFINED AS
      ! The agreement identification for an operational binding agreement ! ;;
REGISTERED AS {DirectoryManagement.id-mat-agreementID} ;


agreementVersion ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR agreementVersionBehaviour BEHAVIOUR
    DEFINED AS
      ! The agreement version for an operational binding agreement ! ;;
REGISTERED AS {DirectoryManagement.id-mat-agreementVersion} ;


aliasDereferences ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR aliaseDereferencesBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of alias dereferences performed by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-aliasDereferences} ;


aliasDereferencingProblem ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR aliasDereferencingProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of alias dereferencing problem errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-aliasDereferencingProblem} ;


aliasProblem ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR aliasProblemBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of alias problem errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-aliasProblem} ;


allowedDirectoryInformationServiceElement ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DirectoryInformationServiceElement ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR allowedDirectoryInformationServiceElementBehaviour BEHAVIOUR
    DEFINED AS
      ! The permitted Directory information service elements ! ;;
REGISTERED AS {DirectoryManagement.id-mat-allowedInfoService} ;


applicationContextInUse ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ApplicationContext ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR applicationContextInUseBehaviour BEHAVIOUR
    DEFINED AS
      ! The application context in use on an association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-applicationContextInUse} ;


associationId ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationId ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR associationIdBehaviour BEHAVIOUR
    DEFINED AS
      ! The association Identifier for the application association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-associationId} ;


attributeTypes ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AttributeTypeDescription ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR attributeTypesBehaviour BEHAVIOUR
    DEFINED AS
      ! Lists the attribute types for use in the subschema administrative area.
      This attribute maps to the attributeTyped Directory Attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-attributeTypes} ;


callingAETitle ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtName ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR callingAETitleBehaviour BEHAVIOUR
    DEFINED AS
      ! The AE Title of the calling entity ! ;;
REGISTERED AS {DirectoryManagement.id-mat-callingAETitle} ;


chainedAbandonOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedAbandonsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chained abandon operations
      that the DSA has processed. For each chained abandon operation that the
      DSA processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chAbandonOpsProc} ;


chainedAddEntryOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedAddsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedAddEntry operations
      that the DSA has processed in the evaluation phase. For each
      chainedAddEntry operation that the DSA evaluates, the DSA increases the
      counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chAddEntryOpsProc} ;


chainedCompareOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedComparesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedCompare operations
      that the DSA has processed in the evaluation phase. For each chained
      compare operation that the DSA evaluates, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chCompareOpsProc} ;


chainedListOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedListsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedList operations
      that the DSA has processed. For each chainedList operation that the DSA
      processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chListOpsProc} ;


chainedModifyEntryOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedModifiesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedModifyEntry
      operations that the DSA has processed. For each chainedModifyEntry
      operation that the DSA processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chModifyEntryOpsProc} ;


chainedModifyDNOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedModifyDNsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedModifyDN operations
      that the DSA has processed. For each chainedModifyDN operation that the
      DSA processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chModifyDNOpsProc} ;


chainedReadOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedReadsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedRead operations
      that the DSA has processed in the evaluation phase. For each chainedRead
      operation that the DSA evaluates, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chReadOpsProc} ;


chainedRemoveEntryOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedRemovesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedRemoveEntry
      operations that the DSA has processed in the evaluation phase. For each
      chainedRemoveEntry operation that the DSA evaluates, the DSA increases the
      counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chRemoveEntryOpsProc} ;


chainedSearch1LevelOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chained1LevelSearchesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedSearch operations
      that the DSA has processed that refer to the base object's immediate
      subordinates. For each such operation that the DSA processes, the DSA
      increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chSearch1LevelOpsProc} ;


chainedSearchBaseOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedBaseSearchesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chainedSearch operations
      that the DSA has processed that only refer to the base object. For each
      operation that the DSA processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chSearchBaseOpsProc} ;


chainedSearchSubtreeOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainedSubtreeSearchesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of chained search operations
      that the DSA has processed that refer to a whole subtree. For each such
      operation that the DSA processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chSearchSubtreeOpsProc} ;


chainings ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR chainingsBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of chained operations initiated by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-chainings} ;


collectiveExclusions  ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR collectiveExclusionsBehaviour BEHAVIOUR
    DEFINED AS
      ! The list of collective attributes which are excluded from the
      corresponding Directory entry. This attribute maps to the
      collectiveExclusions Directory attribute ! ;;
REGISTERED AS {DirectoryManagement.id-mat-collectiveExclusions} ;


compareOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR comparesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of compare operations that
      the DSA has processed in the evaluation phase. For each compare operation
      that the DSA evaluates, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-compareOpsProc} ;


consumerKnowledge ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ConsumerInformation ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR consumerKnowledgeBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the knowledge about the consumer of shadow information supplied by
      this DSA. This attribute maps to the consumerKnowledge Directory attribute ! ;;
REGISTERED AS {DirectoryManagement.id-mat-consumerKnowledge} ;


copyEntries ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR copyEntriestBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of entry copies held by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-copyEntries} ;


createTimestamp ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ;
  MATCHES FOR EQUALITY, ORDERING ;
  BEHAVIOUR createTimestampBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the time at which this DSE was created. This attribute maps to the
      createTimestamp Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-createTimestamp} ;


creatorsName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR creatorsNameBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the distinguished name of the creator of the DSE. The attribute
      maps to the creatorsName Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-creatorsName} ;


credentials ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.Credentials ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR credentialsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute contains the credentials sent with a bind request !;;
REGISTERED AS {DirectoryManagement.id-mat-credentials} ;


currentActiveAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ;
  BEHAVIOUR currentActiveAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the current total of active associations from
      this Network Element to a neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-currentActiveAssocs} ;


currentActiveInboundAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ;
  BEHAVIOUR currentActiveInboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the current total of active inbound associations
      from this Network Element to neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-currentActiveInboundAssocs} ;


currentActiveOutboundAssocs ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ;
  BEHAVIOUR currentActiveOutboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the current total of active outbound associations
      from this Network Element to a neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-currentActiveOutboundAssocs} ;


dAPAssociationTimeout ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dAPAssociationTimeoutBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of seconds after which the DSA shall timeout a quiescent DAP
      association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dAPAssociationTimeout} ;


dISPAssociationEstablishment ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationEstablishment ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dISPAssociationEstablishmentBehaviour BEHAVIOUR
    DEFINED AS
      ! The types of association establishment supported by the DSA for DISP
      association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dISPAssociationEstablishment} ;


dISPAssociationTimeout ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dISPAssociationTimeoutBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of seconds after which the DSA shall timeout a quiescent DISP
      association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dISPAssociationTimeout} ;


dOPAssociationEstablishment ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationEstablishment ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dOPAssociationEstablishmentBehaviour BEHAVIOUR
    DEFINED AS
      ! The types of association establishment supported by the DSA for DOP
      association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dOPAssociationEstablishment} ;


dOPAssociationTimeout ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dOPAssociationTimeoutBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of seconds after which the DSA shall timeout a quiescent DOP
      association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dOPAssociationTimeout} ;


dSAActiveAssociationsThreshold ATTRIBUTE
  DERIVED FROM "ITU-T Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ;
  BEHAVIOUR dSAActiveAssociationThresholdBehaviour BEHAVIOUR
    DEFINED AS
      ! This value is an indication of the total number of the DSA's active
      associations. The crossing of a high-value threshold will cause the
      generation of the notification "dSAActiveAssociationsNotification"! ;;
REGISTERED AS {DirectoryManagement.id-mat-dSAActiveAssociations} ;


dSAScopeOfChaining ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DSAScopeOfChainingValue ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dSAScopeOfChainingBehaviour BEHAVIOUR
    DEFINED AS
      ! The limitation on the DSA of chaining to one of DMD, country or global
      scope ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dSAScopeOfChaining} ;


dSAScopeOfReferral ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DSAScopeOfReferralValue ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dSAScopeOfReferralBehaviour BEHAVIOUR
    DEFINED AS
      ! The limitation on the DSA of referral to one of DMD, country or global
      scope ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dSAScopeOfReferral} ;


dSPAssociationEstablishment ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationEstablishment ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dSPAssociationEstablishmentBehaviour BEHAVIOUR
    DEFINED AS
      ! The types of association establishment supported by the DSA for DSP
      association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dSPAssociationEstablishment} ;


dSPAssociationTimeout ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dSPAssociationTimeoutBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of seconds after which the DSA shall timeout a quiescent DSP
      association ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dSPAssociationTimeout} ;


dUATimeout ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dUATimeoutBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of seconds of inactivity on the association before the
      association is aborted ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dUATimeout} ;


dirCommonName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtCommonName ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dirCommonNameBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the name of the Directory component ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dirCommonName} ;


disAllowedDirectoryInformationServiceElement ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DirectoryInformationServiceElement ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR disAllowedDirInformationServiceElementBehaviour BEHAVIOUR
    DEFINED AS
      ! The disallowed Directory information service elements ! ;;
REGISTERED AS {DirectoryManagement.id-mat-disAllowedInfoService} ;


directoryCustomerName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.Name ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR directoryCustomerNameBehaviour BEHAVIOUR
    DEFINED AS
      ! The name of a Directory customer ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dirCustName} ;


directoryCustomerAddress ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DirectoryString ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR directoryCustomerAddrBehaviour BEHAVIOUR
    DEFINED AS
      ! The address of a Directory customer ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dirCustAddr} ;


directoryUserName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.Name ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR directoryUserNameBehaviour BEHAVIOUR
    DEFINED AS
      ! The name of a Directory user ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dirUserName} ;


distinguishedName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR distinguishedNameBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds a Distinguished Name. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-distName} ;


dseType ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DSEType ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dseTypeBehaviour BEHAVIOUR
    DEFINED AS
      ! Defines the type of DSE. The attribute maps to the dseType Directory
      attributes. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dseType} ;


dITContentRules ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DITContentRuleDescription ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dITContentRulesBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the DIT Content Rules for use in the subschema administrative
      area. This attribute maps to the dITContentRules Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dITContentRules} ;


dITStructureRules ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DITStructureRuleDescription ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dITStructureRulesBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the DIT Structure rules of use in the subschema administrative
      area. This attribute maps to the dITStructureRules Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dITStructureRule} ;


dMDName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtName ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR dMDNameBehaviour BEHAVIOUR
    DEFINED AS
      ! The name of a Directory Management Domain ! ;;
REGISTERED AS {DirectoryManagement.id-mat-dMDName} ;


entryACI ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ACIItem ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR entryACIBehaviour BEHAVIOUR
    DEFINED AS
      ! Contains the entryACI access control information for the DSE. This
      attribute maps to the entryACI Directory attribute! ;;
REGISTERED AS {DirectoryManagement.id-mat-entryACI} ;


foundLocalEntries ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR foundLocalBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of target entries found by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-foundLocalEntries} ;


governingStructureRule ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR governingStructureRuleBehaviour BEHAVIOUR
    DEFINED AS
      ! Contains the governing structure rule for the DSE. This attribute maps
      to the governingStructureRule Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-governingSR} ;


hOBRole ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.HOBRole ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR hOBRoleBehaviour BEHAVIOUR
    DEFINED AS
      ! The role of the DSA in the operational binding agreement for an RHOB ! ;;
REGISTERED AS {DirectoryManagement.id-mat-hOBRole} ;


homeDSA ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR homeDSABehaviour BEHAVIOUR
    DEFINED AS
      ! The default DSA to be used by the DUA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-homeDSA} ;


invalidReferences ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR invalidRefsBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of invalid references reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-invalidReferences} ;


lastUpdateTime ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.Time ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR lastUpdateTimeBehaviour BEHAVIOUR
    DEFINED AS
      ! The time recorded by this DSA when the last update occurred. This time
      is provided by the supplier DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-lastUpdateTime} ;


listOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR listsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of list operations that the
      DSA has processed. For each list operation that the DSA processes, the DSA
      increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-listOpsProc} ;


loopsDetected ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR loopsDetectedBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of loops detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-loopsDetected} ;


masterAccessPoint ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR masterAccessPointBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute contains the presentation address, protocol information,
      and the AETitle of the master DSA for a naming context ! ;;
REGISTERED AS {DirectoryManagement.id-mat-masterAccessPoint} ;


masterEntries ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR masterEntriestBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of entries mastered by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-masterEntries} ;


matchingRules ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MatchingRuleDescription ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR matchingRulesBehaviour BEHAVIOUR
    DEFINED AS
      ! Defines the matching rules for the subschema administrative area. This
      attribute maps to the matchingRules Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-matchingRules} ;


matchingRuleUse ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MatchingRuleUseDescription ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR matchingRuleUseBehaviour BEHAVIOUR
    DEFINED AS
      ! Lists the attribute types to which each matching rule can be applied
      within the subschema administrative area. This attribute maps to the
      matchingRuleUse Directory attribute ! ;;
REGISTERED AS {DirectoryManagement.id-mat-matchingRuleUse} ;


maxDAPAssociations ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxDAPAssociationsBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum number of concurrent DSP associations permitted by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxDAPAssociations} ;


maxDISPAssociations ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxDISPAssociationsBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum number of concurrent DISP associations permitted by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxDISPAssociations} ;


maxDOPAssociations ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxDOPAssociationsBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum number of concurrent DOP associations permitted by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxDOPAssociations} ;


maxDSPAssociations ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxDSPAssociationBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum number of concurrent DSP associations permitted by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxDSPAssociations} ;


maxEntriesReturned ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxEntriesReturnedBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum number of entries returned by the Directory service ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxEntriesReturned} ;


maxInboundAssocs ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxInboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the maximum possible inbound associations from
      this Network Element to a neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxInboundAssociations} ;


maxOutboundAssocs ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxOutboundAssocsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the maximum possible outbound associations from
      this Network Element to a neighbouring Network Element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxOutboundAssociations} ;


maxTimeForResults ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR maxTimeForResultsBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum time for the service to return the results ! ;;
REGISTERED AS {DirectoryManagement.id-mat-maxTimeForResult} ;


modifiersName ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR modifiersNameBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the name of the last modifier of the DSE. This attribute maps to
      the modifiersName Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-modifiersName} ;


modifyEntryOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR modifiesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of modifyEntry operations
      that the DSA has processed. For each modifyEntry operation that the DSA
      processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-modifyEntryOpsProc} ;


modifyDNOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR modifyDNsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of modifyDN operations that
      the DSA has processed. For each modifyDN operation that the DSA processes,
      the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-modifyDNOpsProc} ;


modifyDNRenameOnlyOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR modifyDNsRenameOnlyProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of modifyDN operations which
      do not supply a value of newSuperior that the DSA has processed. For each
      modifyDN operation that the DSA processes, the DSA increases the counter
      by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-modifyDNRenameOnlyOpsProc} ;


modifyTimestamp ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ;
  MATCHES FOR EQUALITY, ORDERING ;
  BEHAVIOUR modifyTimestampBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the time at which this DSE was last modified. This attribute maps
      to the modifyTimestamp Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-modifyTimestamp} ;


myAccessPoint ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR myAccessPointBehaviour BEHAVIOUR
    DEFINED AS
      ! The access point for the DSA. This attribute maps to the myAccessPoint
      Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-myAccessPoint} ;


nameErrors ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR nameErrorsBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of name errors detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-nameErrors} ;


nameForms ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.NameFormDescription ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR nameFormsBehaviour BEHAVIOUR
    DEFINED AS
      ! Lists the name forms for use in the subschema administrative area. This
      attribute maps to the nameForms Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-nameForms} ;


nextUpdateTime ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.Time ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR nextUpdateTimeBehaviour BEHAVIOUR
    DEFINED AS
      ! The time when the next shadow update is due ! ;;
REGISTERED AS {DirectoryManagement.id-mat-nextUpdateTime} ;


nonSpecificKnowledge ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MasterAndShadowAccessPoints ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR nonSpecificKnowledgeBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the non-specific knowledge for an NSSR. This attribute maps to the
      nonSpecificKnowledge Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-nonSpecificKnowledge} ;


noSuchObject ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR noSuchObjectBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of no such object errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-noSuchObject} ;


objectClass ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR objectClassBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the object class object identifiers for the DSE. This attribute
      maps to the objectClass Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-objectClass} ;


objectClasses ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ObjectClassDescription ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR objectClassesBehaviour BEHAVIOUR
    DEFINED AS
      ! Lists the object classes permitted in the subschema administrative area.
      This attribute maps to the objectClasses Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-objectClasses} ;


outOfScope ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter ;
  BEHAVIOUR outOfScopeBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of out of scope errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-outOfScope} ;


pagedResultsExpungeTimerInSeconds ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR pagedResultsExpungeTimerInSecondsBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum time limit allowed for active paged results query references
      before they are deleted by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-pagedResultsTimer} ;


pagedResultsMaximumIdentifiers ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR pagedResultsMaximumIdentifiersBehaviour BEHAVIOUR
    DEFINED AS
      ! The maximum number of active paged results query references supported by
      the DSA (on a per association basis) ! ;;
REGISTERED AS {DirectoryManagement.id-mat-pagedResultsMaxIDs} ;


peerEntityAuthenticationPolicy ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.PeerEntityAuthenticationPolicy ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR peerEntityAuthenticationPolicyBehaviour BEHAVIOUR
    DEFINED AS
      ! The types of peer entity authentication supported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-peerEntityAuthenticationPolicy} ;


prescriptiveACI ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ACIItem ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR prescriptiveACIBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the prescriptive ACI for an access control specific area. This
      attribute maps to the prescriptiveACI Directory attributes. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-prescriptiveACI} ;


prohibitChaining ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtBoolean;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR prohibitChainingBehaviour BEHAVIOUR
    DEFINED AS
      ! If TRUE, the DSA shall not chain ! ;;
REGISTERED AS {DirectoryManagement.id-mat-prohibitChaining} ;


readOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR readsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of read operations that the
      DSA has processed in the evaluation phase. For each read operation that
      the DSA evaluates, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-readOpsProc} ;


referrals ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR referralsBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of referrals used by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-referrals} ;


remoteAccessPoint ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR remoteAccessPointBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute contains the presentation address, protocol information,
      and the AETitle of the peer DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-remoteAccessPoint} ;


removeEntryOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR removesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of removeEntry operations
      that the DSA has processed in the evaluation phase. For each removeEntry
      operation that the DSA evaluates, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-removeEntryOpsProc} ;


replyCounter ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR replyCounterBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the number of responses made by this DSA to its
      users based upon those users' requests ! ;;
REGISTERED AS {DirectoryManagement.id-mat-replyCounter} ;


requestAuthenticationPolicy ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.RequestAuthenticationPolicy ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR requestAuthenticationPolicyBehaviour BEHAVIOUR
    DEFINED AS
      ! The types of request authentication supported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-requestAuthenticationPolicy} ;


requestCounter ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR requestCounterBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the number of requests that this DSA has received
      since it was initialized ! ;;
REGISTERED AS {DirectoryManagement.id-mat-requestCounter} ;


requestsFailedCounter ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR requestsFailedCounterBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the number or requests made of this DSA that failed ! ;;
REGISTERED AS {DirectoryManagement.id-mat-requestsFailedCounter} ;


resultAuthenticationPolicy ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ResultAuthenticationPolicy ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR resultAuthenticationPolicyBehaviour BEHAVIOUR
    DEFINED AS
      ! The types of result authentication supported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-resultAuthenticationPolicy} ;


reverseCredentials ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.Credentials;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR reverseCredentialsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute contains the reverse credentials !;;
REGISTERED AS {DirectoryManagement.id-mat-reverseCredentials} ;


search1LevelOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR search1LevelOperationsProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of search operations that the
      DSA has processed that refer to the base object's immediate subordinates.
      For each such operation that the DSA processes, the DSA increases the
      counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-search1LevelOpsProc} ;


searchBaseOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR baseSearchesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of search operations that the
      DSA has processed that only refer to the base object. For each such
      operation that the DSA processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-searchBaseOpsProc} ;


searchSubtreeOperationsProcessed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR subtreeSearchesProcessedBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute is used to count the number of search operations that the
      DSA has processed that refer to a whole subtree. For each such operation
      that the DSA processes, the DSA increases the counter by 1. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-searchSubtreeOpsProc} ;


secondaryShadows ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.SupplierAndConsumers ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR secondaryShadowsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute contains the presentation address, protocol information,
      and the AETitle of any DSAs holding secondary shadows of a naming context ! ;;
REGISTERED AS {DirectoryManagement.id-mat-secondaryShadows} ;


securityErrors ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR securityErrorsBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of security errors detected by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-securityErrors} ;


serviceDescription ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtPrintableString ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR serviceDescriptionBehaviour BEHAVIOUR
    DEFINED AS
      ! A description of the Directory service ! ;;
REGISTERED AS {DirectoryManagement.id-mat-serviceDesc} ;


serviceErrors ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR serviceErrorsBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of service errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-serviceErrors} ;


serviceIdentifier ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR serviceIdentifierBehaviour BEHAVIOUR
    DEFINED AS
      ! The identifier for a particular directory information service ! ;;
REGISTERED AS {DirectoryManagement.id-mat-serviceId} ;


shadowingRole ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ShadowingRole ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR shadowingRoleBehaviour BEHAVIOUR
    DEFINED AS
      ! The role of the DSA in the operational binding agreement for a shadowing
      agreement ! ;;
REGISTERED AS {DirectoryManagement.id-mat-shadowingRole} ;


shadowingSchedule ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.SchedulingParameters;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR shadowingScheduleBehaviour BEHAVIOUR
    DEFINED AS
      ! The scheduling information held by the DSA for this shadowing agreement ! ;;
REGISTERED AS {DirectoryManagement.id-mat-shadowingSchedule} ;


shadowingSubject ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.UnitOfReplication;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR shadowingSubjectBehaviour BEHAVIOUR
    DEFINED AS
      ! The specifications of the unit of replication for this shadowing agreement ! ;;
REGISTERED AS {DirectoryManagement.id-mat-shadowingSubject} ;


sizeLimit ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR sizeLimitBehaviour BEHAVIOUR
    DEFINED AS
      ! The size limit policy of the DSA. This policy overrides the sizeLimit
      service control ! ;;
REGISTERED AS {DirectoryManagement.id-mat-sizeLimit} ;


sizeLimitExceeded ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR sizeLimitExceededBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of size limit exceeded errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-sizeLimitExceeded} ;


specificKnowledge ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MasterAndShadowAccessPoints ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR specificKnowledgeBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the knowledge for a cross-reference, subordinate reference or
      immediate superior reference. This attribute maps to the specificKnowledge
      Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-specificKnowledge} ;


structuralObjectClass ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR structuralObjectClassBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the structural object class of a DSE. This attribute maps to the
      structuralObjectClass Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-structuralObjectClass} ;


subentryACI ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.ACIItem ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR subentryACIBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the subentry ACI for an administrative entry. This attribute maps
      to the subentryACI Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-subentryACI} ;


subSchema ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.SubSchemaSyntax ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR subSchemaBehaviour BEHAVIOUR
    DEFINED AS
      ! The subschema publication information for the DUA. !;;
REGISTERED AS {DirectoryManagement.id-mat-subSchema} ;


subtreeSpecification ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.SubtreeSpecification ;
  BEHAVIOUR subtreeSpecificationBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the scope of a subentry. This attribute maps to the
      subtreeSpecification Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-subtreeSpecification} ;


superiorKnowledge ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR superiorKnowledgeBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the knowledge for a superior reference. This attribute maps to the
      superiorKnowledge Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-superiorKnowledge} ;


supplierKnowledge ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.SupplierInformation ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR supplierKnowledgeBehaviour BEHAVIOUR
    DEFINED AS
      ! Holds the knowledge about the supplier of shadowed information. This
      attribute maps to the supplierKnowledge Directory attribute. ! ;;
REGISTERED AS {DirectoryManagement.id-mat-supplierKnowledge} ;


supportedApplicationContexts ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.SupportedApplicationContexts ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR supportedApplicationContextsBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute contains the set of application contexts supported by the
      represented entity ! ;;
REGISTERED AS {DirectoryManagement.id-mat-supportedApplicationContexts} ;


timeLimit ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR timeLimitBehaviour BEHAVIOUR
    DEFINED AS
      ! The time policy of the DSA. This policy overrides the timeLimit service
      control ! ;;
REGISTERED AS {DirectoryManagement.id-mat-timeLimit} ;


timeLimitExceeded ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR timeLimitExceededBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of time limit exceeded errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-timeLimitExceeded} ;


timeOfLastAttempt ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR timeOfLastAttemptBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the absolute time that this Network Element
      attempted to create an association with a neighbouring network element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-timeOfLastAttempt} ;


timeOfLastAccess ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR timeOfLastAccessBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the absolute time that the DUA last accessed this
      DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-timeOfLastAccess} ;


timeOfLastSuccess ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR timeOfLastSuccessBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute defines the absolute time that this Network Element
      successfully created an association with a neighbouring network element ! ;;
REGISTERED AS {DirectoryManagement.id-mat-timeOfLastSuccess} ;


unableToProceed ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR unableToProceedBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of unable to proceed errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-unableToProceed} ;


unavailableCriticalExtension ATTRIBUTE
  DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ;
  BEHAVIOUR unavailableCriticalExtensionBehaviour BEHAVIOUR
    DEFINED AS
      ! The number of unavailable critical extension errors reported by the DSA ! ;;
REGISTERED AS {DirectoryManagement.id-mat-unavailableCriticalExtension} ;


updateMode ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.UpdateMode;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR updateModeBehaviour BEHAVIOUR
    DEFINED AS
      ! The specifications of the update mode for this shadowing agreement ! ;;
REGISTERED AS {DirectoryManagement.id-mat-updateMode} ;


useDOP ATTRIBUTE
  WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtBoolean;
  MATCHES FOR EQUALITY ;
  BEHAVIOUR useDOPBehaviour BEHAVIOUR
    DEFINED AS
      ! This attribute indicates whether DOP is used to maintain the operational
      binding. TRUE indicates that DOP is used. !;;
REGISTERED AS {DirectoryManagement.id-mat-useDOP};

-- =============================================================================
--  Formatted by OpenT2 Version 5.5.6.34 on Fri Nov 18 08:48:12 2005