-- ============================================================================= -- ITU-T Rec. X.530 (08/2005) | ISO/IEC 9594-10 -- ============================================================================= --<GDMO.Alias "ITU-T Rec. X.530 (08/2005) | ISO/IEC 9594-10" -- "ITU-T Rec. X.530 (2005) | ISO/IEC 9594-10:2005", -- "ITU-T Rec. X.530 (2005) | ISO/IEC 9594-10", -- "Rec. X.530 (2005)">-- -- ========================================================= --<GDMO.Document "ITU-T Rec. X.530 (08/2005) | ISO/IEC 9594-10">-- --<GDMO.Alias "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992" -- "CCITT Rec. X.721 | ISO/IEC 10165-2:1992", -- "CCITT Rec. X.721 | ISO/IEC 10165-2", -- "CCITT Rec. X.721(1992)", -- "CCITT Rec. X.721">-- --<GDMO.Alias "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5 : 1994" -- "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994", -- "Rec. X.723 | ISO/IEC 10165-5">-- dSA MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ; CHARACTERIZED BY dSAPackage ; CONDITIONAL PACKAGES readPackage PRESENT IF 'the DSA supports the read operation', comparePackage PRESENT IF 'the DSA supports the compare operation', abandonPackage PRESENT IF 'the DSA supports the abandon operation', searchPackage PRESENT IF 'the DSA supports the search operation', listPackage PRESENT IF 'the DSA supports the list operation', addEntryPackage PRESENT IF 'the DSA supports the addEntry operation', removeEntryPackage PRESENT IF 'the DSA supports the removeEntry operation', modifyEntryPackage PRESENT IF 'the DSA supports the modifyEntry operation', modifyDNPackage PRESENT IF 'the DSA supports the modifyDN operation', chainedReadPackage PRESENT IF 'the DSA supports the read operation', chainedComparePackage PRESENT IF 'the DSA supports the compare operation', chainedAbandonPackage PRESENT IF 'the DSA supports the abandon operation', chainedSearchPackage PRESENT IF 'the DSA supports the search operation', chainedListPackage PRESENT IF 'the DSA supports the list operation', chainedAddEntryPackage PRESENT IF 'the DSA supports the addEntry operation', chainedRemoveEntryPackage PRESENT IF 'the DSA supports the removeEntry operation', chainedModifyEntryPackage PRESENT IF 'the DSA supports the modifyEntry operation', chainedModifyDNPackage PRESENT IF 'the DSA supports the modifyDN operation'; REGISTERED AS {DirectoryManagement.id-moc-dsa} ; dSANB NAME BINDING SUBORDINATE OBJECT CLASS dSA AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dMD AND SUBCLASSES; WITH ATTRIBUTE dirCommonName ; CREATE WITH-REFERENCE-OBJECT ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-dsa-name-binding} ; dSAPackage PACKAGE BEHAVIOUR dSABehaviour BEHAVIOUR DEFINED AS ! This package contains the definitions that manage the DSA itself !; , nameErrorNotificationBehaviour, serviceErrorNotificationBehaviour, attributeErrorNotificationBehaviour, updateErrorNotificationBehaviour, shadowErrorNotificationBehaviour, unavailableCriticalExtensionNotificationBehaviour, resourceExhaustedNotificationBehaviour, authenticationFailureNotificationBehaviour, accessControlFailureNotificationBehaviour, aliasProblemNotificationBehaviour, aliasDereferencingProblemNotificationBehaviour, unableToProceedNotificationBehaviour, invalidReferenceNotificationBehaviour, loopDetectedNotificationBehaviour, operationRequestNotificationBehaviour, operationResponseNotificationBehaviour, shadowUpdateCompleteNotificationBehaviour; ATTRIBUTES dirCommonName GET , "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":administrativeState GET-REPLACE, accessPoint GET-REPLACE , masterEntries REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , copyEntries REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , loopsDetected REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , securityErrors REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , nameErrors REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , foundLocalEntries REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , referrals REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET, serviceErrors REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , aliasDereferences REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , chainings REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , invalidReferences REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , unableToProceed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , outOfScope REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , noSuchObject REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , aliasProblem REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , aliasDereferencingProblem REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , affectsMultipleDSAs REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , unavailableCriticalExtension REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , timeLimitExceeded REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , sizeLimitExceeded REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , adminLimitExceeded REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , sizeLimit GET-REPLACE , timeLimit GET-REPLACE , prohibitChaining GET-REPLACE , dSAScopeOfReferral GET-REPLACE , dSAScopeOfChaining GET-REPLACE , peerEntityAuthenticationPolicy GET-REPLACE , requestAuthenticationPolicy GET-REPLACE , resultAuthenticationPolicy GET-REPLACE , dSPAssociationEstablishment GET-REPLACE , dOPAssociationEstablishment GET-REPLACE , dISPAssociationEstablishment GET-REPLACE , maxDAPAssociations GET-REPLACE , maxDSPAssociations GET-REPLACE , maxDOPAssociations GET-REPLACE , maxDISPAssociations GET-REPLACE , dAPAssociationTimeout GET-REPLACE , dSPAssociationTimeout GET-REPLACE , dOPAssociationTimeout GET-REPLACE , dISPAssociationTimeout GET-REPLACE , dSAActiveAssociationsThreshold GET-REPLACE , pagedResultsMaximumIdentifiers GET-REPLACE , pagedResultsExpungeTimerInSeconds GET-REPLACE , supportedApplicationContexts GET-REPLACE ADD-REMOVE; NOTIFICATIONS "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation entryName nameProblem traceInformation serviceProblem operation aliasedRDN aliasDereferenced attributeProblem attributeType attributeValue, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":processingErrorAlarm entryName operation extensions resource, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992": securityServiceOrMechanismViolation entryName authenReason operation, "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation operationIdentifier operationIdentifierDN pDU; REGISTERED AS {DirectoryManagement.id-mp-dsaPackage} ; --A.1.1.3 DSA notification parameters --The following parameter definitions are used with the notifications for DSAs. nameProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.NameProblem ; BEHAVIOUR nameProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why a nameError has been detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-nameProblem}; traceInformation PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.TraceInformation ; BEHAVIOUR traceInfo-B BEHAVIOUR DEFINED AS ! The trace information associated with the operation ! ;; REGISTERED AS {DirectoryManagement.id-mpa-traceInformation}; serviceProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.ServiceProblem ; BEHAVIOUR serviceProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why a serviceError has been detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-serviceProblem}; entryName PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.Name ; BEHAVIOUR entryNameBehaviour BEHAVIOUR DEFINED AS ! The name of the entry associated with the operation that caused the notifications ! ;; REGISTERED AS {DirectoryManagement.id-mpa-entryName}; operation PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.MgtInteger ; BEHAVIOUR operationBehaviourBehaviour BEHAVIOUR DEFINED AS ! The operation code that caused the notification to be generated by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-operation}; attributeProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.AttributeProblem ; BEHAVIOUR attributeProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why an attributeError has been detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-attributeProblem}; attributeType PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.AttributeType ; BEHAVIOUR attributeTypeBehaviour BEHAVIOUR DEFINED AS ! The attribute type in error ! ;; REGISTERED AS {DirectoryManagement.id-mpa-attributeType}; attributeValue PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.AttributeValue; BEHAVIOUR attributeValueBehaviour BEHAVIOUR DEFINED AS ! The attribute value in error ! ;; REGISTERED AS {DirectoryManagement.id-mpa-attributeValue}; resource PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.ResourceSyntax ; BEHAVIOUR resourceBehaviour BEHAVIOUR DEFINED AS ! An identification of the resource that has become exhausted ! ;; REGISTERED AS {DirectoryManagement.id-mpa-resource}; authenReason PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.AuthenReasonSyntax ; BEHAVIOUR authenReasonBehaviour BEHAVIOUR DEFINED AS ! The reason why the authentications failed ! ;; REGISTERED AS {DirectoryManagement.id-mpa-authenReason}; extensions PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.MgtBitString ; BEHAVIOUR extensionsBehaviour BEHAVIOUR DEFINED AS ! The critical extensions not supported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-extensions}; aliasedRDNs PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.RDNSequence ; BEHAVIOUR aliasedRDNsBehaviour BEHAVIOUR DEFINED AS ! The aliased RDNs processed by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-aliasedRDNs}; aliasDereferenced PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.Name ; BEHAVIOUR aliaseDereferencedBehaviour BEHAVIOUR DEFINED AS ! The name of the dereferenced alias ! ;; REGISTERED AS {DirectoryManagement.id-mpa-aliasDereferenced}; referenceType PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.ReferenceType ; BEHAVIOUR referenceTypeBehaviour BEHAVIOUR DEFINED AS ! The reference type of the knowledge reference ! ;; REGISTERED AS {DirectoryManagement.id-mpa-referenceType}; operationProgress PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.OperationProgress ; BEHAVIOUR operationProgressBehaviour BEHAVIOUR DEFINED AS ! The operation progress when the error was detected ! ;; REGISTERED AS {DirectoryManagement.id-mpa-operationProgress}; pDU PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.MgtOctetString ; BEHAVIOUR pDUBehaviour BEHAVIOUR DEFINED AS ! The octets of a PDU sent or received by the entity ! ;; REGISTERED AS {DirectoryManagement.id-mpa-pDU}; operationIdentifier PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.MgtInteger ; BEHAVIOUR operationIdentifierBehaviour BEHAVIOUR DEFINED AS ! The operation identifier for the operation of response ! ;; REGISTERED AS {DirectoryManagement.id-mpa-opId}; operationIdentifierDN PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.Name ; BEHAVIOUR operationIdentifierDNBehaviour BEHAVIOUR DEFINED AS ! The distinguished name qualifying the operation identifier for the operation of response ! ;; REGISTERED AS {DirectoryManagement.id-mpa-opIdDN}; --A.1.1.4 DSA notification behaviours --The following behaviour definitions are used with the notifications for DSAs. nameErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a name error that it reports to the peer. The serviceUser field of the operationViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The nameProblem parameter indicates the problems that were detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; serviceErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a service error while processing an operation either as part of the name resolution phase, or as part of the operation evaluation phase. The serviceUser field of the operationViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The serviceProblem parameter contains an indication of the service error that was detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; attributeErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects an attribute error while processing an operation either as part of the name resolution phase, or as part of the operation evaluation phase. The serviceUser field of the operationViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The attributeProblem parameter contains an indication of the attribute error that was detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The attributeType parameter contains the object identifier of the attribute that caused the error and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The attributeValue parameter contains the attribute value that caused the error and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; updateErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a update error while processing an operation either as part of the name resolution phase, or as part of the operation evaluation phase. The serviceUser field of the operationViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The updateProblem parameter contains an indication of the update error that was detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; aliasProblemNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects an alias problem. The serviceUser field of the operationViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The aliasedRDNs parameter contains the aliased RDNs if available and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The aliasDereferenced parameter contains the name of a dereferenced alias if available and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; aliasDereferencingProblemNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects an alias dereferencing problem. The serviceUser field of the operationViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The aliasedRDNs parameter contains the aliased RDNs if available and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The aliasDereferenced parameter contains the name of a dereferenced alias if available and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; unavailableCriticalExtensionNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a set extension bit it does not understand. This represents an unknown/unimplemented critical extension. The serviceUser field of the processingErrorAlarm notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the processingErrorAlarm notification contains the AE-title of the DSA executing the request. The additionalText field of the processingErrorAlarm notification contains any additional textual information to be conveyed in the notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The extensions parameter contains the critical extension bits that are unknown to the DSA and that are set in the requested operation and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. ! ; unableToProceedNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA is unable to proceed with name resolution or during operation evaluation. The serviceUser field of the processingErrorAlarm notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the processingErrorAlarm notification contains the AE-title of the DSA executing the request. The additionalText field of the processingErrorAlarm notification contains any additional textual information to be conveyed in the notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The referenceType parameter contains the reference type of the knowledge reference and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The operationProgress parameter contains the operation progress information at the time that the error was detected and is conveyed as a parameter in the processingErrorAlarm field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. ! ; invalidReferenceNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects an invalid reference. The serviceUser field of the processingErrorAlarm notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the processingErrorAlarm notification contains the AE-title of the DSA executing the request. The additionalText field of the processingErrorAlarm notification contains any additional textual information to be conveyed in the notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The referenceType parameter contains the reference type of the knowledge reference and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The operationProgress parameter contains the operation progress information at the time that the error was detected and is conveyed as a parameter in the processingErrorAlarm field of the operationViolation notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. ! ; loopDetectedNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a loop in the configuration of the Directory distribution. The serviceUser field of the processingErrorAlarm notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the processingErrorAlarm notification contains the AE-title of the DSA executing the request. The additionalText field of the processingErrorAlarm notification contains any additional textual information to be conveyed in the notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The referenceType parameter contains the reference type of the knowledge reference and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The traceInformation parameter holds the trace information from a chained operation and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. ! ; resourceExhaustedNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects an exhausted resource. The serviceUser field of the processingErrorAlarm notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the processingErrorAlarm notification contains the AE-title of the DSA executing the request. The additionalText field of the processingErrorAlarm notification contains any additional textual information to be conveyed in the notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. The resource parameter contains an indication of the resource that is exhausted and is conveyed as a parameter in the additionalInformation field of the processingErrorAlarm notification. ! ; authenticationFailureNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever an authentication failure occurs. The serviceUser field of the securityServiceOrMechanismViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the securityServiceOrMechanismViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the securityServiceOrMechanismViolation notification contains any additional textual information to be conveyed in the notification. The authenReason parameter contains an indication of the reason why the authentication failed and is conveyed as a parameter in the additionalInformation field of the securityServiceOrMechanismViolation notification. ! ; accessControlFailureNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects an attempt to access an object prohibited by an access control, policy. The serviceUser field of the securityServiceOrMechanismViolation notification contains the authenticated name of the user requesting the operation, or the peer DUA's AE-title. The serviceProvider field of the securityServiceOrMechanismViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the securityServiceOrMechanismViolation notification contains any additional textual information to be conveyed in the notification. The entryName parameter contains the Name of the base object for the entry and is conveyed as a parameter in the additionalInformation field of the securityServiceOrMechanismViolation notification. The operation parameter contains an indication of the operation that caused the error and is conveyed as a parameter in the additionalInformation field of the securityServiceOrMechanismViolation notification. ! ; operationRequestNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA received an operation. The serviceUser field of the communicationsInformation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the communicationsInformation notification contains the AE-title of the DSA executing the request. The additionalText field of the communicationsInformation notification contains any additional textual information to be conveyed in the notification. The pDU parameter contains the PDU received by the DSA for processing and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. The operationIdentifier parameter contains the operation identification of the operation and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. The operationIdentifierDN parameter contains the distinguished name qualifying the operation identifier and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. For DAP operations, this is the distinguished name of the receiving DSA. For DSP operations, this is the distinguished name of the first element of the received trace information. ! ; operationResponseNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA sends an operation response (including results and errors). The serviceUser field of the communicationsInformation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the communicationsInformation notification contains the AE-title of the DSA executing the request. The additionalText field of the communicationsInformation notification contains any additional textual information to be conveyed in the notification. The pDU parameter contains the PDU being sent by the DSA and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. The operationIdentifier parameter contains the operation identification of the operation for which this is the response and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. The operationIdentifierDN parameter contains the distinguished name qualifying the operation identifier and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. For DAP operations, this is the distinguished name of the DSA. For DSP operations, this is the distinguished name of the first element of the received trace information from the corresponding request. ! ; --A.1.2 Directory Service Packages Management Package definitions The following --definitions specify the systems management packages for the Directory Service --Packages that may be included in the dSA managed object instance. readPackage PACKAGE BEHAVIOUR readPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory read operation. ! ;; ATTRIBUTES readOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-readPackage} ; comparePackage PACKAGE BEHAVIOUR comparePackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory compare operation. ! ;; ATTRIBUTES compareOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-comparePackage} ; abandonPackage PACKAGE BEHAVIOUR abandonPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory Abandon operation. ! ;; ATTRIBUTES abandonOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-abandonPackage} ; listPackage PACKAGE BEHAVIOUR listPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory list operation. ! ;; ATTRIBUTES listOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-listPackage} ; searchPackage PACKAGE BEHAVIOUR searchPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory search operation. ! ;; ATTRIBUTES searchBaseOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , search1LevelOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , searchSubtreeOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-searchPackage} ; addEntryPackage PACKAGE BEHAVIOUR addEntryPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory addEntry operation. ! ;; ATTRIBUTES addEntryOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-addPackage} ; removeEntryPackage PACKAGE BEHAVIOUR removeEntryPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory removeEntry operation. ! ;; ATTRIBUTES removeEntryOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-removePackage} ; modifyEntryPackage PACKAGE BEHAVIOUR modifyEntryPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory modifyEntry operation. ! ;; ATTRIBUTES modifyEntryOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-modifyPackage} ; modifyDNPackage PACKAGE BEHAVIOUR modifyDNPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory modifyDN operation. ! ;; ATTRIBUTES modifyDNOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , modifyDNRenameOnlyOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-modifyDNPackage} ; chainedReadPackage PACKAGE BEHAVIOUR chainedReadPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedRead operation. ! ;; ATTRIBUTES chainedReadOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedReadPackage} ; chainedComparePackage PACKAGE BEHAVIOUR chainedComparePackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedCompare operation. ! ;; ATTRIBUTES chainedCompareOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedComparePackage} ; chainedAbandonPackage PACKAGE BEHAVIOUR chainedAbandonPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedAbandon operation. ! ;; ATTRIBUTES chainedAbandonOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedAbandonPackage} ; chainedListPackage PACKAGE BEHAVIOUR chainedListPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedList operation. ! ;; ATTRIBUTES chainedListOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedListPackage} ; chainedSearchPackage PACKAGE BEHAVIOUR chainedSearchPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedSearch operation. ! ;; ATTRIBUTES chainedSearchBaseOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , chainedSearch1LevelOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET , chainedSearchSubtreeOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedSearchPackage} ; chainedAddEntryPackage PACKAGE BEHAVIOUR chainedAddEntryPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedAddEntry operation. ! ;; ATTRIBUTES chainedAddEntryOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedAddPackage} ; chainedRemoveEntryPackage PACKAGE BEHAVIOUR chainedEntryRemovePackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedRemoveEntry operation. ! ;; ATTRIBUTES chainedRemoveEntryOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedRemovePackage} ; chainedModifyEntryPackage PACKAGE BEHAVIOUR chainedModifyEntryPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedModifyEntry operation. ! ;; ATTRIBUTES chainedModifyEntryOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedModifyPackage} ; chainedModifyDNPackage PACKAGE BEHAVIOUR chainedModifyDNPackagebehaviour BEHAVIOUR DEFINED AS ! This package holds information about and provides management access to the Directory chainedModifyDN operation. ! ;; ATTRIBUTES chainedModifyDNOperationsProcessed REPLACE-WITH-DEFAULT DEFAULT VALUE DirectoryManagement.zero GET ; REGISTERED AS {DirectoryManagement.id-mp-chainedModifyDNPackage} ; --A.1.3 DSA Information Tree operational information definitions This subclause --specifies the management definitions for a DSA's DSA Information Tree --operational information. A.1.3.1 DSA Information Tree managed object class definition --The following definition specifies the DSE managed objects that may be created --to manage the necessary aspects of a DSA Information Tree. Each DSE in the DSA --Information Tree may be created by the DSA as a managed object instance --subordinate to the DSA managed object instance. dseMO MANAGED OBJECT CLASS -- These managed object instances contain the name and operational -- information for each -- Directory managed entry in a naming context held in a DSA. DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ; CHARACTERIZED BY dsePackage ; REGISTERED AS {DirectoryManagement.id-moc-dse} ; --A.1.3.2 DSA Information Tree name binding definition --The following definition specifies the name binding for the DSE managed --objects that may be created to represent DSA Information Tree operational --information in a DSA. dseNB NAME BINDING SUBORDINATE OBJECT CLASS dseMO AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES; WITH ATTRIBUTE distinguishedName; BEHAVIOUR dseNBBehaviour BEHAVIOUR DEFINED AS ! Each DSE in a DSA Information Tree is named by the sequence of RDNs forming its Distinguished Name ! ;; CREATE WITH-REFERENCE-OBJECT; DELETE ; REGISTERED AS {DirectoryManagement.id-mnb-dse-name-binding} ; --A.1.3.3 DSE package definition --The following definition specifies the packages for the DSE managed objects. dsePackage PACKAGE BEHAVIOUR dsePackageBehaviour BEHAVIOUR DEFINED AS !The information and actions permitted for managing DSEs. ! ;; ATTRIBUTES distinguishedName GET , specificKnowledge GET-REPLACE ADD-REMOVE, nonSpecificKnowledge GET-REPLACE ADD-REMOVE, administrativeRole GET-REPLACE , dseType GET-REPLACE , supplierKnowledge GET-REPLACE , consumerKnowledge GET-REPLACE , secondaryShadows GET-REPLACE ADD-REMOVE, createTimestamp GET-REPLACE , modifyTimestamp GET-REPLACE , creatorsName GET-REPLACE , modifiersName GET-REPLACE , aliasedEntryName GET-REPLACE , subtreeSpecification GET-REPLACE , accessPoint GET-REPLACE ; REGISTERED AS {DirectoryManagement.id-mp-dsePackage} ; --A.1.4 NHOB managed object definitions --This subclause specifies the management definitions for a DSA's NHOBs. --A.1.4.1 NHOB managed object class definition --The following definition specifies the managed objects used to represent an --NHOB held by a DSA. nHOBMO MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ; CHARACTERIZED BY nHOBPackage ; REGISTERED AS {DirectoryManagement.id-moc-nHOBMO} ; --A.1.4.2 NHOB name binding definition --The following definition specifies the name binding for the NHOB managed --objects that may be created to represent the NHOBs of a DSA. nHOBNB NAME BINDING SUBORDINATE OBJECT CLASS nHOBMO AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES; WITH ATTRIBUTE distinguishedName ; BEHAVIOUR nHOBNBBehaviour BEHAVIOUR DEFINED AS ! Each NHOB held by a DSA is named by the sequence of RDNs forming the Distinguished Name of the immediate superior entry of the subordinate naming context ! ;; CREATE WITH-REFERENCE-OBJECT ; DELETE ; REGISTERED AS {DirectoryManagement.id-mnb-nHOB-name-binding} ; --A.1.4.3 NHOB package definition --The following definition specifies the package for the NHOB managed object. nHOBPackage PACKAGE BEHAVIOUR nHOBPackageBehaviour BEHAVIOUR DEFINED AS ! The information and actions permitted for managing NHOBs ! ;; ATTRIBUTES distinguishedName GET, agreementID GET, agreementVersion GET, useDOP GET-REPLACE, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET, remoteAccessPoint GET-REPLACE, hOBRole GET ; NOTIFICATIONS "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation operationalBindingID dOPProblem, "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation operationalBindingID; REGISTERED AS {DirectoryManagement.id-mp-nHOBPackage} ; --A.1.4.4 NHOB notification parameters --The following parameter definitions are used with the notifications for NHOBs: operationalBindingID PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.OperationalBindingID ; BEHAVIOUR operationalBindingIDBehaviour BEHAVIOUR DEFINED AS ! The operational binding ID associated with the notification ! ;; REGISTERED AS { DirectoryManagement.id-mpa-nhob-bind-id} ; dOPProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.OpBindingErrorParam; BEHAVIOUR dOPProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why a DOP Error has been detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-mhob-dop-prob} ; --A.1.4.5 NHOB notification behaviours --The following behaviour definitions are used with the notifications for NHOBs: dOPErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a DOP error while maintaining the NHOB. The serviceUser field of the operationViolation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The operationalBindingID parameter contains the operation binding ID of the NHOB for which the error has been detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The DOPProblem parameter contains an indication of the DOP error that was detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; dOPCompleteNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA successfully completes a DOP operation. The serviceUser field of the communicationsInformation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the communicationsInformation notification contains the AE-title of the DSA executing the request. The additionalText field of the communicationsInformation notification contains any additional textual information to be conveyed in the notification. The operationalBindingID parameter contains the operational binding ID of the NHOB for which the operation has been completed and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. ! ; --A.1.5 HOB managed object definitions --This subclause specifies the management definitions for a DSA's HOBs. A.1.5.1 --HOB managed object class definition --The following definition specifies the managed objects used to represent a HOB --held by a DSA. hOBMO MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ; CHARACTERIZED BY hOBPackage ; REGISTERED AS {DirectoryManagement.id-moc-hOBMO} ; --A.1.5.2 HOB name binding definition --The following definition specifies the name binding for the HOB managed --objects that may be created to represent the HOBs of a DSA. hOBNB NAME BINDING SUBORDINATE OBJECT CLASS hOBMO AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES; WITH ATTRIBUTE distinguishedName ; BEHAVIOUR hOBNBBehaviour BEHAVIOUR DEFINED AS ! Each HOB held by a DSA is named by the sequence of RDNs forming the Distinguished Name of the root entry of the subordinate naming context ! ;; CREATE WITH-REFERENCE-OBJECT ; DELETE ; REGISTERED AS {DirectoryManagement.id-mnb-hOB-name-binding} ; --A.1.5.3 HOB package definition --The following definition specifies the package for the HOB managed object. hOBPackage PACKAGE BEHAVIOUR hOBPackageBehaviour BEHAVIOUR DEFINED AS ! The information and actions permitted for managing HOBs ! ;; ATTRIBUTES distinguishedName GET, agreementID GET, agreementVersion GET, useDOP GET-REPLACE, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET, remoteAccessPoint GET-REPLACE, hOBRole GET ; NOTIFICATIONS "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation hOBOperationalBindingID hOBDOPProblem, "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation hOBOperationalBindingID; REGISTERED AS {DirectoryManagement.id-mp-hOBPackage} ; --A.1.5.4 HOB notification parameters --The following parameter definitions are used with the notifications for HOBs: hOBOperationalBindingID PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.OperationalBindingID; BEHAVIOUR hOBOperationalBindingIDBehaviour BEHAVIOUR DEFINED AS ! The operational binding ID associated with the notification ! ;; REGISTERED AS {DirectoryManagement.id-mpa-hob-bind-id} ; hOBDOPProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.OpBindingErrorParam ; BEHAVIOUR hOBDOPProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why a DOP Error has been detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-hob-dop-prob} ; --A.1.5.5 HOB notification behaviours --The following behaviour definitions are used with the notifications for HOBs: hOBDOPErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a DOP error while maintaining the HOB. The serviceUser field of the operationViolation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The operationalBindingID parameter contains the operation binding ID of the HOB for which the error has been detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The DOPProblem parameter contains an indication of the DOP error that was detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; hOBDOPCompleteNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA successfully completes a DOP operation. The serviceUser field of the communicationsInformation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the communicationsInformation notification contains the AE-title of the DSA executing the request. The additionalText field of the communicationsInformation notification contains any additional textual information to be conveyed in the notification. The operationalBindingID parameter contains the operational binding ID of the HOB for which the operation has been completed and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. ! ; --A.1.6 Shadowing Agreement managed object definitions --This subclause specifies the management definitions for a DSA's shadowing --agreements. A.1.6.1 Shadowing Agreement managed object class definition --The following definition specifies the managed objects used to represent a --shadowing agreement held by a DSA. shadowingAgreementMO MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ; CHARACTERIZED BY shadowingAgreementPackage ; REGISTERED AS {DirectoryManagement.id-moc-shadowingAgreement} ; --A.1.6.2 Shadowing Agreement name binding definition --The following definition specifies the name binding for the Shadowing --Agreement managed objects that may be created to represent the shadowing --agreements of a DSA. shadowingAgreementNB NAME BINDING SUBORDINATE OBJECT CLASS shadowingAgreementMO AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES; WITH ATTRIBUTE distinguishedName ; BEHAVIOUR shadowingAgreementNBBehaviour BEHAVIOUR DEFINED AS ! Each shadowing agreement held by a DSA is named by the sequence of RDNs forming the Distinguished Name of the root entry of the naming context containing the unit of replication ! ;; CREATE WITH-REFERENCE-OBJECT ; DELETE ; REGISTERED AS {DirectoryManagement.id-mnb-shadowingAgreement-nb} ; --A.1.6.3 Shadowing Agreement package definition --The following definition specifies the package for the HOB managed object. shadowingAgreementPackage PACKAGE BEHAVIOUR shadowingAgreementPackageBehaviour BEHAVIOUR DEFINED AS ! The information and actions permitted for managing shadowing agreements ! ;; ATTRIBUTES distinguishedName GET, agreementID GET, agreementVersion GET, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalState GET, shadowingSubject GET-REPLACE, updateMode GET-REPLACE, masterAccessPoint GET, secondaryShadows GET-REPLACE ADD-REMOVE, useDOP GET-REPLACE, remoteAccessPoint GET-REPLACE, shadowingRole GET, lastUpdateTime GET-REPLACE, shadowingSchedule GET-REPLACE, nextUpdateTime GET-REPLACE ; ACTIONS updateShadow ; NOTIFICATIONS "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":stateChange, "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":operationalViolation shadDOPProblem notificationsAgreementID shadowProblem updateProblem notificationLastUpdateTime, "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsInformation notificationsAgreementID ; REGISTERED AS {DirectoryManagement.id-mp-shadowingAgreementPackage} ; --A.1.6.4 Shadowing Agreement notification parameters --The following parameter definitions are used with the notifications for --shadowing agreements. shadDOPProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.OpBindingErrorParam ; BEHAVIOUR shadDOPProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why a DOP Error has been detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-shadowing-dop-prob} ; shadowProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.ShadowProblem ; BEHAVIOUR shadowProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why the shadow operation failed ! ;; REGISTERED AS {DirectoryManagement.id-mpa-shadowProblem} ; updateProblem PARAMETER CONTEXT EVENT-INFO; WITH SYNTAX DirectoryManagement.ShadowProblem ; BEHAVIOUR updateProblemBehaviour BEHAVIOUR DEFINED AS ! Reason why an updateError has been detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mpa-updateProblem} ; notificationsAgreementID PARAMETER CONTEXT EVENT-INFO; ATTRIBUTE agreementID ; BEHAVIOUR notificationAgreementIDBehaviour BEHAVIOUR DEFINED AS ! The agreement identification associated with the notification ! ;;; notificationLastUpdateTime PARAMETER CONTEXT EVENT-INFO; ATTRIBUTE lastUpdateTime ; BEHAVIOUR notificationLastUpdateTimeBehaviour BEHAVIOUR DEFINED AS ! The last update time associated with a shadowing agreement ! ;;; --A.1.6.5 Shadowing Agreement notification behaviours --The following behaviour definitions are used with the notifications for --shadowing agreements: shadowUpdateCompleteNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA successfully completes a shadow update sequence. The serviceUser field of the communicationsInformation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the communicationsInformation notification contains the AE-title of the DSA executing the request. The additionalText field of the communicationsInformation notification contains any additional textual information to be conveyed in the notification. The notificationsAgreementID parameter contains the agreement ID of the shadowingAgreement for which the update has been completed and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. ! ; shadowErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a shadow error while performing a shadowing operation. The serviceUser field of the operationViolation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The notificationsAgreementID parameter contains the agreement ID of the shadowingAgreement for which the error has been detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The shadowProblem parameter contains an indication of the shadow error that was detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The notificationLastUpdateTime parameter contains an indication of the time of last update for the DSA for the agreement identified in the notificationsAgreementID parameter. The lastUpdateTime parameter is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; shadowDOPErrorNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA detects a DOP error while maintaining the shadowing agreement. The serviceUser field of the operationViolation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the operationViolation notification contains the AE-title of the DSA executing the request. The additionalText field of the operationViolation notification contains any additional textual information to be conveyed in the notification. The notificationsAgreementID parameter contains the agreement ID of the shadowing agreement for which the error has been detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. The shadDOPProblem parameter contains an indication of the DOP error that was detected and is conveyed as a parameter in the additionalInformation field of the operationViolation notification. ! ; shadowDOPCompleteNotificationBehaviour BEHAVIOUR DEFINED AS ! Notifications with this behaviour are generated whenever the DSA successfully completes a DOP operation. The serviceUser field of the communicationsInformation notification contains the authenticated name of the DSA requesting the operation, or the peer DSA's AE-title. The serviceProvider field of the communicationsInformation notification contains the AE-title of the DSA executing the request. The additionalText field of the communicationsInformation notification contains any additional textual information to be conveyed in the notification. The notificationsAgreementID parameter contains the agreement ID of the shadowing agreement for which the operation has been completed and is conveyed as a parameter in the additionalInformation field of the communicationsInformation notification. ! ; --A.1.6.6 Shadowing Agreement Actions --The following actions are used for shadowing agreements: updateShadow ACTION BEHAVIOUR updateBehaviour BEHAVIOUR DEFINED AS ! The action causes an out-of-band shadow update sequence to be initiated using the DISP protocol. !;; REGISTERED AS {DirectoryManagement.id-mac-update}; --A.2 Management of a Known DSA --The Known DSA is represented in the OSI Environment as an application process --with application entities representing its communications capabilities. The --Known DSA represents another DSA application entity with which the local --Directory component interacts. This subclause identifies the managed objects --used to represent and manage the Known DSA, its application entity --invocations, application associations and operations. A.2.1 Known DSA managed --object definition The following definition specifies the managed objects used --to represent a Known DSA in an end system. knownDSA MANAGED OBJECT CLASS DERIVED FROM "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsEntity ; CHARACTERIZED BY knownDSAPackage ; REGISTERED AS {DirectoryManagement.id-moc-knownDSA} ; --A.2.2 Known DSA name binding definitions --The following definitions specify the naming relationship of Known DSAs to --other managed objects. Known DSAs are named subordinate to DSA and DUA managed --objects. knownDSA-dSA NAME BINDING SUBORDINATE OBJECT CLASS knownDSA AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES; WITH ATTRIBUTE dirCommonName ; CREATE WITH-REFERENCE-OBJECT ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-knownDSA-dSA-name-binding} ; knownDSA-dUA NAME BINDING SUBORDINATE OBJECT CLASS knownDSA AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dUA AND SUBCLASSES; WITH ATTRIBUTE dirCommonName ; CREATE WITH-REFERENCE-OBJECT ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-knownDSA-dUA-name-binding} ; --A.2.3 Known DSA package definition --The following definition specifies the package for Known DSAs. knownDSAPackage PACKAGE BEHAVIOUR knownDSABehaviour BEHAVIOUR DEFINED AS ! This managed object class describes the information required to establish an association to a neighbouring DSA, and contains association-related statistics for the neighbour DSA. The CommunicationsAlarm notification is sent when there is an abnormal termination of an association.!;; ATTRIBUTES dirCommonName GET, remoteAccessPoint GET-REPLACE, supportedApplicationContexts GET, credentials GET-REPLACE, reverseCredentials GET-REPLACE, dIRQOP GET-REPLACE, maxInboundAssocs GET-REPLACE, maxOutboundAssocs GET-REPLACE, timeOfLastAttempt GET, timeOfLastSuccess GET, currentActiveInboundAssocs GET, currentActiveOutboundAssocs GET, accumInboundAssocs GET, accumOutboundAssocs GET, accumFailedInboundAssocs GET, accumFailedOutboundAssocs GET, requestCounter GET, replyCounter GET, requestsFailedCounter GET ; NOTIFICATIONS "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":communicationsAlarm ; REGISTERED AS {DirectoryManagement.id-mp-knownDSAPackage} ; --A.3 Management of a Known DUA --The Known DUA is represented in the OSI Environment as an application process --with application entities representing its communications capabilities. The --Known DUA represents a DUA application entity with which the DSA interacts. --This subclause identifies the managed objects used to represent and manage the --Known DUA, its application entity invocations, application associations and --operations. A.3.1 Known DUA managed object definition The following --definition specifies the managed objects used to represent a Known DUA in an --end system. knownDUA MANAGED OBJECT CLASS DERIVED FROM "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":communicationsEntity ; CHARACTERIZED BY knownDUAPackage ; REGISTERED AS {DirectoryManagement.id-moc-knownDUA} ; --A.3.2 Known DUA name binding definition --The following definition specifies the naming relationship of Known DUAs to --other managed objects. Known DUAs are named subordinate to a DSA. knownDUA-dSA NAME BINDING SUBORDINATE OBJECT CLASS knownDUA AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS dSA AND SUBCLASSES; WITH ATTRIBUTE dirCommonName ; CREATE WITH-REFERENCE-OBJECT ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-knownDUA-dSA-name-binding} ; --A.3.3 Known DUA package definition --The following definition specifies the package for Known DUAs. knownDUAPackage PACKAGE BEHAVIOUR knownDUABehaviour BEHAVIOUR DEFINED AS ! This package contains the definitions that manage the view of DUAs as viewed from the (local) DSA. The Communications Alarm notification is sent when there is an abnormal termination of a DUA's association.!;; ATTRIBUTES dirCommonName GET, remoteAccessPoint GET, supportedApplicationContexts GET, credentials GET, reverseCredentials GET, timeOfLastAccess GET, currentActiveAssocs GET, accumAssocs GET ; NOTIFICATIONS "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":communicationsAlarm; REGISTERED AS {DirectoryManagement.id-mp-knownDUAPackage} ; --A.4 Management of association --The Upper Layer Connection Endpoint represents an active association between --the DSA and another DSA, or between the DSA and a DUA. A.4.1 Upper Layer --Connection Endpoint managed object definition The following definition --specifies the managed object used to represent an upper layer connection endpoint. uLconnEnd MANAGED OBJECT CLASS DERIVED FROM "ITU-T Rec. X.723 (1993) | ISO/IEC 10165-5:1994":singlePeerConnection ; CHARACTERIZED BY uLconnEndPackage ; REGISTERED AS {DirectoryManagement.id-moc-ULconnEnd} ; --A.4.2 Upper Layer Connection Endpoint name binding definitions The following --definitions specify the naming relationship of Upper Layer Connection --Endpoints to other managed objects. Upper Layer Connection Endpoints are named --subordinate to a Known DSAs and Known DUAs. uLconnEnd-knownDSA NAME BINDING SUBORDINATE OBJECT CLASS uLconnEnd AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS knownDSA AND SUBCLASSES; WITH ATTRIBUTE associationId ; CREATE WITH-REFERENCE-OBJECT ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-ULconnEnd-knownDSA} ; uLconnEnd-knownDUA NAME BINDING SUBORDINATE OBJECT CLASS uLconnEnd AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS knownDUA AND SUBCLASSES; WITH ATTRIBUTE associationId ; CREATE WITH-REFERENCE-OBJECT ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-ULconnEnd-knownDUA} ; --A.4.3 Upper Layer Connection Endpoint package definition --The following definition specifies the package for Upper Layer Connection Endpoints. uLconnEndPackage PACKAGE BEHAVIOUR uLconnEndBehaviour BEHAVIOUR DEFINED AS ! This package defined the attributes for an application assocation ! ;; ATTRIBUTES callingAETitle GET, associationId GET, applicationContextInUse GET ; REGISTERED AS {DirectoryManagement.id-mp-ULconnEndPackage} ; --A.5 Management of a DUA --A DUA is represented in the OSI Environment as an application process with an --application entity representing its communications capability. This subclause --identifies the managed objects used to represent and manage a DUA, its --application entity invocations and application associations. A.5.1 DUA --managed object definition The following definition specifies the DUA managed --objects used to represent a DUA in an end system. dUA MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top ; CHARACTERIZED BY dUAPackage ; REGISTERED AS {DirectoryManagement.id-moc-dUA} ; --A.5.2 DUA package definition --The following definition specifies the package for DUAs. dUAPackage PACKAGE BEHAVIOUR dUAPackageBehaviour BEHAVIOUR DEFINED AS ! This package contains the attributes and actions that manage the view of the DUA as viewed from the DUA. No notifications are generated. There are two actions to control which DSA the DUA should use. ! ;; ATTRIBUTES homeDSA GET-REPLACE SET-BY-CREATE, subSchema GET-REPLACE SET-BY-CREATE, dUATimeout GET-REPLACE SET-BY-CREATE ; ACTIONS useRemoteDSA, useHomeDSA; REGISTERED AS {DirectoryManagement.id-mp-dUAPackage} ; --A.5.3 DUA action definitions --The following definitions specify the actions for DUAs. useRemoteDSA ACTION BEHAVIOUR useRemoteDSABehaviour BEHAVIOUR DEFINED AS ! Use one of the subordinate remotes Known instead of the home DSA ! ;; REGISTERED AS {DirectoryManagement.id-mac-useRemoteDSA} ; useHomeDSA ACTION BEHAVIOUR useHomeDSABehaviour BEHAVIOUR DEFINED AS ! Revert to using the home DSA ! ;; REGISTERED AS {DirectoryManagement.id-mac-useHomeDSA} ; --A.6 Directory Service management --This subclause specifies the management definitions for a Directory Service. --A.6.1 Directory Service --A.6.1.1 Directory Service managed object definition --The following definition specifies the managed objects used to represent a --Directory Service. directoryService MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":top; CHARACTERIZED BY directoryServicePackage ; CONDITIONAL PACKAGES directoryInformationServicePackage PRESENT IF 'the DSA allows the Directory service manager to control the information processing capability of the Directory', directoryControlServicePackage PRESENT IF 'the DSA allows the Directory service manager to manage the operational activity of the Directory' ; REGISTERED AS {DirectoryManagement.id-moc-disManagedObject} ; --A.6.1.2 Directory Service name binding definition --The following definition specifies the naming relationship of Directory --Service managed objects to other managed objects. Directory Service managed --objects are named subordinate to a Directory Customer. directoryService-Customer NAME BINDING SUBORDINATE OBJECT CLASS directoryService AND SUBCLASSES; NAMED BY SUPERIOR OBJECT CLASS directoryCustomer AND SUBCLASSES; WITH ATTRIBUTE serviceIdentifier ; CREATE WITH-REFERENCE-OBJECT ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-dis-Customer-name-binding} ; --A.6.1.3 Directory Service package definitions --The following definitions specify the package for the Directory Service --managed object. directoryServicePackage PACKAGE BEHAVIOUR directoryServicePackageBehaviour BEHAVIOUR DEFINED AS ! This package uses management definitions to be used for the management of a Directory service ! ;; ATTRIBUTES serviceIdentifier GET-REPLACE SET-BY-CREATE, serviceDescription GET-REPLACE SET-BY-CREATE ; REGISTERED AS {id-mp-dsPackage} ; directoryInformationServicePackage PACKAGE BEHAVIOUR directoryInformationServiceBehaviour BEHAVIOUR DEFINED AS ! This package contains management definitions to be used for the specification of a Directory information service. Certain attributes in the package (including SizeLimit and TimeLimit) provide service policy limits for use by the DSA. These limits overide any similar limits that can be established for the DSA itself ! ;; ATTRIBUTES allowedDirectoryInformationServiceElement GET-REPLACE SET-BY-CREATE, disAllowedDirectoryInformationServiceElement GET-REPLACE SET-BY-CREATE, sizeLimit GET-REPLACE SET-BY-CREATE, timeLimit GET-REPLACE SET-BY-CREATE, accessor GET-REPLACE SET-BY-CREATE ; REGISTERED AS {DirectoryManagement.id-mp-disPackage} ; directoryControlServicePackage PACKAGE BEHAVIOUR serviceControlServiceBehaviour BEHAVIOUR DEFINED AS ! This package contains management definitions to be used for the operational control of a Directory service ! ;; ATTRIBUTES maxEntriesReturned GET-REPLACE SET-BY-CREATE, maxTimeForResults GET-REPLACE SET-BY-CREATE ; REGISTERED AS {DirectoryManagement.id-mp-dcsPackage} ; --A.6.2 Directory Customer --A.6.2.1 Directory Customer managed object definition --The following definition specifies the managed objects used to represent a --Directory Customer. directoryCustomer MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec.X.721 (1992) | ISO/IEC 10165-2:1992":top; CHARACTERIZED BY directoryCustomerPackage ; REGISTERED AS {DirectoryManagement.id-moc-dirCust} ; --A.6.2.2 Directory Customer name binding definition --The following definition specifies the name binding for the Directory Customer --managed objects that may be created to represent the Directory Customers. directoryCustomer-dMD NAME BINDING SUBORDINATE OBJECT CLASS directoryCustomer ; NAMED BY SUPERIOR OBJECT CLASS dMD ; WITH ATTRIBUTE directoryCustomerName ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-DirCust-DMD} ; --A.6.2.3 Directory Customer package definition --The following definition specifies the package for the Directory Customer --managed object. directoryCustomerPackage PACKAGE BEHAVIOUR directoryCustomerBehaviour BEHAVIOUR DEFINED AS ! This package contains management defintions to be used for the specification of Directory Customers ! ;; ATTRIBUTES directoryCustomerName GET-REPLACE SET-BY-CREATE, directoryCustomerAddress GET-REPLACE SET-BY-CREATE ; REGISTERED AS {DirectoryManagement.id-mp-dirCust}; --A.6.3 Directory User --A.6.3.1 Directory User managed object --The following definition specifies the managed objects used to represent a --Directory User. directoryUser MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec.X.721 (1992) | ISO/IEC 10165-2:1992":top; CHARACTERIZED BY directoryUserPackage ; REGISTERED AS {DirectoryManagement.id-moc-dirUser}; --A.6.3.2 Directory User name binding definition --The following definition specifies the name binding for the Directory User --managed objects that may be created to represent the Directory Users. directoryUser-directoryCustomer NAME BINDING SUBORDINATE OBJECT CLASS directoryUser ; NAMED BY SUPERIOR OBJECT CLASS directoryCustomer ; WITH ATTRIBUTE directoryUserName ; DELETE ONLY-IF-NO-CONTAINED-OBJECTS ; REGISTERED AS {DirectoryManagement.id-mnb-DirUser-DirCust} ; --A.6.3.3 Directory User package definition --The following definition specifies the package for the Directory User managed object. directoryUserPackage PACKAGE BEHAVIOUR directoryUserBehaviour BEHAVIOUR DEFINED AS ! This package contains management definitions to be used for the specification of Directory Users ! ;; ATTRIBUTES directoryUserName GET-REPLACE SET-BY-CREATE; REGISTERED AS {DirectoryManagement.id-mp-dirUser}; --A.7 DMD --This subclause specifies the management definitions for a Directory Management --Domain. A.7.1 DMD managed object --The following definition specifies the managed objects used to represent a --Directory Management Domain. dMD MANAGED OBJECT CLASS DERIVED FROM "CCITT Rec.X.721(1992) | ISO/IEC 10165-2:1992":top; CHARACTERIZED BY dMDPackage ; REGISTERED AS {DirectoryManagement.id-moc-dMD} ; --A.7.2 DMD package definition --The following definition specifies the package for Directory Management Domains. dMDPackage PACKAGE BEHAVIOUR dMDPackageBehaviour BEHAVIOUR DEFINED AS ! This package contains management definitions to be used for the specification of a Directory Management Domain ! ;; ATTRIBUTES dMDName GET-REPLACE SET-BY-CREATE ; REGISTERED AS {DirectoryManagement.id-mp-dMD}; --A.8 Definition of attributes --The following definitions specify the attributes for the Directory Managed Objects. abandonOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR abandonsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of abandon operations that the DSA has processed. For each abandon operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-abandonOpsProc} ; accessControlScheme ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ; MATCHES FOR EQUALITY ; BEHAVIOUR accessControlSchemeBehaviour BEHAVIOUR DEFINED AS ! Defines which access control scheme is in operation in the administrative area. This attribute maps to the accessControlScheme Directory attribute ! ;; REGISTERED AS {DirectoryManagement.id-mat-accessControlScheme} ; accumAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR accumAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the total accumulated associations from this Network Element to a neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-accumAssocs} ; accumFailedInboundAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR accumFailedInboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the total accumulated attempted inbound associations from a neighbouring Network Element that failed! ;; REGISTERED AS {DirectoryManagement.id-mat-accumFailedInboundAssocs} ; accumFailedOutboundAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR accumFailedOutboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the total accumulated attempted outbound associations to a neighbouring Network Element that failed! ;; REGISTERED AS {DirectoryManagement.id-mat-accumFailedOutboundAssocs} ; accumInboundAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter ; BEHAVIOUR accumInboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the total accumulated inbound associations from this Network Element to a neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-accumInboundAssocs} ; accumOutboundAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter ; BEHAVIOUR accumOutboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the total accumulated outbound associations from this Network Element to a neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-accumOutboundAssocs} ; accessor ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.Accessors ; MATCHES FOR EQUALITY ; BEHAVIOUR accessorBehaviour BEHAVIOUR DEFINED AS ! The identifier for a particular Directory information service accessor! ;; REGISTERED AS {DirectoryManagement.id-mat-accessor} ; accessPoint ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ; MATCHES FOR EQUALITY ; BEHAVIOUR accessPointBehaviour BEHAVIOUR DEFINED AS ! The myAccessPoint attribute of the root DSE in the DSA. This attribute contains the presentation address, protocol information and AE Title of the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-accessPoint} ; addEntryOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR addsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of addEntry operations that the DSA has processed in the evaluation phase. For each addEntry operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-addEntryOpsProc} ; administrativeRole ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AdministrativeRole ; MATCHES FOR EQUALITY ; BEHAVIOUR administrativeRoleBehaviour BEHAVIOUR DEFINED AS ! Identifies the start of an administrative area. This attribute maps to the administrativeRole Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-administrativeRole} ; adminLimitExceeded ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR adminLimitExceededBehaviour BEHAVIOUR DEFINED AS ! The number of administrative limit exceeded errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-adminLimitExceeded} ; affectsMultipleDSAs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR affectsMultipleDSAsBehaviour BEHAVIOUR DEFINED AS ! The number of affects Multiple DSA errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-affectsMultipleDSAs} ; aliasedEntryName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ; MATCHES FOR EQUALITY ; BEHAVIOUR aliasedEntryNameBehaviour BEHAVIOUR DEFINED AS ! Holds the alias target. This attribute maps to the aliasedEntryName Directory. ! ;; REGISTERED AS {DirectoryManagement.id-mat-aliasedEntryName} ; agreementID ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR agreementIDBehaviour BEHAVIOUR DEFINED AS ! The agreement identification for an operational binding agreement ! ;; REGISTERED AS {DirectoryManagement.id-mat-agreementID} ; agreementVersion ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR agreementVersionBehaviour BEHAVIOUR DEFINED AS ! The agreement version for an operational binding agreement ! ;; REGISTERED AS {DirectoryManagement.id-mat-agreementVersion} ; aliasDereferences ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR aliaseDereferencesBehaviour BEHAVIOUR DEFINED AS ! The number of alias dereferences performed by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-aliasDereferences} ; aliasDereferencingProblem ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR aliasDereferencingProblemBehaviour BEHAVIOUR DEFINED AS ! The number of alias dereferencing problem errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-aliasDereferencingProblem} ; aliasProblem ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR aliasProblemBehaviour BEHAVIOUR DEFINED AS ! The number of alias problem errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-aliasProblem} ; allowedDirectoryInformationServiceElement ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DirectoryInformationServiceElement ; MATCHES FOR EQUALITY ; BEHAVIOUR allowedDirectoryInformationServiceElementBehaviour BEHAVIOUR DEFINED AS ! The permitted Directory information service elements ! ;; REGISTERED AS {DirectoryManagement.id-mat-allowedInfoService} ; applicationContextInUse ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ApplicationContext ; MATCHES FOR EQUALITY ; BEHAVIOUR applicationContextInUseBehaviour BEHAVIOUR DEFINED AS ! The application context in use on an association ! ;; REGISTERED AS {DirectoryManagement.id-mat-applicationContextInUse} ; associationId ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationId ; MATCHES FOR EQUALITY ; BEHAVIOUR associationIdBehaviour BEHAVIOUR DEFINED AS ! The association Identifier for the application association ! ;; REGISTERED AS {DirectoryManagement.id-mat-associationId} ; attributeTypes ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AttributeTypeDescription ; MATCHES FOR EQUALITY ; BEHAVIOUR attributeTypesBehaviour BEHAVIOUR DEFINED AS ! Lists the attribute types for use in the subschema administrative area. This attribute maps to the attributeTyped Directory Attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-attributeTypes} ; callingAETitle ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtName ; MATCHES FOR EQUALITY ; BEHAVIOUR callingAETitleBehaviour BEHAVIOUR DEFINED AS ! The AE Title of the calling entity ! ;; REGISTERED AS {DirectoryManagement.id-mat-callingAETitle} ; chainedAbandonOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedAbandonsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chained abandon operations that the DSA has processed. For each chained abandon operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chAbandonOpsProc} ; chainedAddEntryOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedAddsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedAddEntry operations that the DSA has processed in the evaluation phase. For each chainedAddEntry operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chAddEntryOpsProc} ; chainedCompareOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedComparesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedCompare operations that the DSA has processed in the evaluation phase. For each chained compare operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chCompareOpsProc} ; chainedListOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedListsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedList operations that the DSA has processed. For each chainedList operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chListOpsProc} ; chainedModifyEntryOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedModifiesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedModifyEntry operations that the DSA has processed. For each chainedModifyEntry operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chModifyEntryOpsProc} ; chainedModifyDNOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedModifyDNsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedModifyDN operations that the DSA has processed. For each chainedModifyDN operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chModifyDNOpsProc} ; chainedReadOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedReadsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedRead operations that the DSA has processed in the evaluation phase. For each chainedRead operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chReadOpsProc} ; chainedRemoveEntryOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedRemovesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedRemoveEntry operations that the DSA has processed in the evaluation phase. For each chainedRemoveEntry operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chRemoveEntryOpsProc} ; chainedSearch1LevelOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chained1LevelSearchesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedSearch operations that the DSA has processed that refer to the base object's immediate subordinates. For each such operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chSearch1LevelOpsProc} ; chainedSearchBaseOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedBaseSearchesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chainedSearch operations that the DSA has processed that only refer to the base object. For each operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chSearchBaseOpsProc} ; chainedSearchSubtreeOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainedSubtreeSearchesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of chained search operations that the DSA has processed that refer to a whole subtree. For each such operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-chSearchSubtreeOpsProc} ; chainings ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR chainingsBehaviour BEHAVIOUR DEFINED AS ! The number of chained operations initiated by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-chainings} ; collectiveExclusions ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ; MATCHES FOR EQUALITY ; BEHAVIOUR collectiveExclusionsBehaviour BEHAVIOUR DEFINED AS ! The list of collective attributes which are excluded from the corresponding Directory entry. This attribute maps to the collectiveExclusions Directory attribute ! ;; REGISTERED AS {DirectoryManagement.id-mat-collectiveExclusions} ; compareOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR comparesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of compare operations that the DSA has processed in the evaluation phase. For each compare operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-compareOpsProc} ; consumerKnowledge ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ConsumerInformation ; MATCHES FOR EQUALITY ; BEHAVIOUR consumerKnowledgeBehaviour BEHAVIOUR DEFINED AS ! Holds the knowledge about the consumer of shadow information supplied by this DSA. This attribute maps to the consumerKnowledge Directory attribute ! ;; REGISTERED AS {DirectoryManagement.id-mat-consumerKnowledge} ; copyEntries ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger; MATCHES FOR EQUALITY ; BEHAVIOUR copyEntriestBehaviour BEHAVIOUR DEFINED AS ! The number of entry copies held by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-copyEntries} ; createTimestamp ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ; MATCHES FOR EQUALITY, ORDERING ; BEHAVIOUR createTimestampBehaviour BEHAVIOUR DEFINED AS ! Holds the time at which this DSE was created. This attribute maps to the createTimestamp Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-createTimestamp} ; creatorsName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ; MATCHES FOR EQUALITY ; BEHAVIOUR creatorsNameBehaviour BEHAVIOUR DEFINED AS ! Holds the distinguished name of the creator of the DSE. The attribute maps to the creatorsName Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-creatorsName} ; credentials ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.Credentials ; MATCHES FOR EQUALITY ; BEHAVIOUR credentialsBehaviour BEHAVIOUR DEFINED AS ! This attribute contains the credentials sent with a bind request !;; REGISTERED AS {DirectoryManagement.id-mat-credentials} ; currentActiveAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ; BEHAVIOUR currentActiveAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the current total of active associations from this Network Element to a neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-currentActiveAssocs} ; currentActiveInboundAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ; BEHAVIOUR currentActiveInboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the current total of active inbound associations from this Network Element to neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-currentActiveInboundAssocs} ; currentActiveOutboundAssocs ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ; BEHAVIOUR currentActiveOutboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the current total of active outbound associations from this Network Element to a neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-currentActiveOutboundAssocs} ; dAPAssociationTimeout ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR dAPAssociationTimeoutBehaviour BEHAVIOUR DEFINED AS ! The number of seconds after which the DSA shall timeout a quiescent DAP association ! ;; REGISTERED AS {DirectoryManagement.id-mat-dAPAssociationTimeout} ; dISPAssociationEstablishment ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationEstablishment ; MATCHES FOR EQUALITY ; BEHAVIOUR dISPAssociationEstablishmentBehaviour BEHAVIOUR DEFINED AS ! The types of association establishment supported by the DSA for DISP association ! ;; REGISTERED AS {DirectoryManagement.id-mat-dISPAssociationEstablishment} ; dISPAssociationTimeout ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR dISPAssociationTimeoutBehaviour BEHAVIOUR DEFINED AS ! The number of seconds after which the DSA shall timeout a quiescent DISP association ! ;; REGISTERED AS {DirectoryManagement.id-mat-dISPAssociationTimeout} ; dOPAssociationEstablishment ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationEstablishment ; MATCHES FOR EQUALITY ; BEHAVIOUR dOPAssociationEstablishmentBehaviour BEHAVIOUR DEFINED AS ! The types of association establishment supported by the DSA for DOP association ! ;; REGISTERED AS {DirectoryManagement.id-mat-dOPAssociationEstablishment} ; dOPAssociationTimeout ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR dOPAssociationTimeoutBehaviour BEHAVIOUR DEFINED AS ! The number of seconds after which the DSA shall timeout a quiescent DOP association ! ;; REGISTERED AS {DirectoryManagement.id-mat-dOPAssociationTimeout} ; dSAActiveAssociationsThreshold ATTRIBUTE DERIVED FROM "ITU-T Rec. X.721 (1992) | ISO/IEC 10165-2:1992":gauge-Threshold ; BEHAVIOUR dSAActiveAssociationThresholdBehaviour BEHAVIOUR DEFINED AS ! This value is an indication of the total number of the DSA's active associations. The crossing of a high-value threshold will cause the generation of the notification "dSAActiveAssociationsNotification"! ;; REGISTERED AS {DirectoryManagement.id-mat-dSAActiveAssociations} ; dSAScopeOfChaining ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DSAScopeOfChainingValue ; MATCHES FOR EQUALITY ; BEHAVIOUR dSAScopeOfChainingBehaviour BEHAVIOUR DEFINED AS ! The limitation on the DSA of chaining to one of DMD, country or global scope ! ;; REGISTERED AS {DirectoryManagement.id-mat-dSAScopeOfChaining} ; dSAScopeOfReferral ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DSAScopeOfReferralValue ; MATCHES FOR EQUALITY ; BEHAVIOUR dSAScopeOfReferralBehaviour BEHAVIOUR DEFINED AS ! The limitation on the DSA of referral to one of DMD, country or global scope ! ;; REGISTERED AS {DirectoryManagement.id-mat-dSAScopeOfReferral} ; dSPAssociationEstablishment ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AssociationEstablishment ; MATCHES FOR EQUALITY ; BEHAVIOUR dSPAssociationEstablishmentBehaviour BEHAVIOUR DEFINED AS ! The types of association establishment supported by the DSA for DSP association ! ;; REGISTERED AS {DirectoryManagement.id-mat-dSPAssociationEstablishment} ; dSPAssociationTimeout ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR dSPAssociationTimeoutBehaviour BEHAVIOUR DEFINED AS ! The number of seconds after which the DSA shall timeout a quiescent DSP association ! ;; REGISTERED AS {DirectoryManagement.id-mat-dSPAssociationTimeout} ; dUATimeout ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR dUATimeoutBehaviour BEHAVIOUR DEFINED AS ! The number of seconds of inactivity on the association before the association is aborted ! ;; REGISTERED AS {DirectoryManagement.id-mat-dUATimeout} ; dirCommonName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtCommonName ; MATCHES FOR EQUALITY ; BEHAVIOUR dirCommonNameBehaviour BEHAVIOUR DEFINED AS ! Holds the name of the Directory component ! ;; REGISTERED AS {DirectoryManagement.id-mat-dirCommonName} ; disAllowedDirectoryInformationServiceElement ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DirectoryInformationServiceElement ; MATCHES FOR EQUALITY ; BEHAVIOUR disAllowedDirInformationServiceElementBehaviour BEHAVIOUR DEFINED AS ! The disallowed Directory information service elements ! ;; REGISTERED AS {DirectoryManagement.id-mat-disAllowedInfoService} ; directoryCustomerName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.Name ; MATCHES FOR EQUALITY ; BEHAVIOUR directoryCustomerNameBehaviour BEHAVIOUR DEFINED AS ! The name of a Directory customer ! ;; REGISTERED AS {DirectoryManagement.id-mat-dirCustName} ; directoryCustomerAddress ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DirectoryString ; MATCHES FOR EQUALITY ; BEHAVIOUR directoryCustomerAddrBehaviour BEHAVIOUR DEFINED AS ! The address of a Directory customer ! ;; REGISTERED AS {DirectoryManagement.id-mat-dirCustAddr} ; directoryUserName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.Name ; MATCHES FOR EQUALITY ; BEHAVIOUR directoryUserNameBehaviour BEHAVIOUR DEFINED AS ! The name of a Directory user ! ;; REGISTERED AS {DirectoryManagement.id-mat-dirUserName} ; distinguishedName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ; MATCHES FOR EQUALITY ; BEHAVIOUR distinguishedNameBehaviour BEHAVIOUR DEFINED AS ! Holds a Distinguished Name. ! ;; REGISTERED AS {DirectoryManagement.id-mat-distName} ; dseType ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DSEType ; MATCHES FOR EQUALITY ; BEHAVIOUR dseTypeBehaviour BEHAVIOUR DEFINED AS ! Defines the type of DSE. The attribute maps to the dseType Directory attributes. ! ;; REGISTERED AS {DirectoryManagement.id-mat-dseType} ; dITContentRules ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DITContentRuleDescription ; MATCHES FOR EQUALITY ; BEHAVIOUR dITContentRulesBehaviour BEHAVIOUR DEFINED AS ! Holds the DIT Content Rules for use in the subschema administrative area. This attribute maps to the dITContentRules Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-dITContentRules} ; dITStructureRules ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DITStructureRuleDescription ; MATCHES FOR EQUALITY ; BEHAVIOUR dITStructureRulesBehaviour BEHAVIOUR DEFINED AS ! Holds the DIT Structure rules of use in the subschema administrative area. This attribute maps to the dITStructureRules Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-dITStructureRule} ; dMDName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtName ; MATCHES FOR EQUALITY ; BEHAVIOUR dMDNameBehaviour BEHAVIOUR DEFINED AS ! The name of a Directory Management Domain ! ;; REGISTERED AS {DirectoryManagement.id-mat-dMDName} ; entryACI ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ACIItem ; MATCHES FOR EQUALITY ; BEHAVIOUR entryACIBehaviour BEHAVIOUR DEFINED AS ! Contains the entryACI access control information for the DSE. This attribute maps to the entryACI Directory attribute! ;; REGISTERED AS {DirectoryManagement.id-mat-entryACI} ; foundLocalEntries ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR foundLocalBehaviour BEHAVIOUR DEFINED AS ! The number of target entries found by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-foundLocalEntries} ; governingStructureRule ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR governingStructureRuleBehaviour BEHAVIOUR DEFINED AS ! Contains the governing structure rule for the DSE. This attribute maps to the governingStructureRule Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-governingSR} ; hOBRole ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.HOBRole ; MATCHES FOR EQUALITY ; BEHAVIOUR hOBRoleBehaviour BEHAVIOUR DEFINED AS ! The role of the DSA in the operational binding agreement for an RHOB ! ;; REGISTERED AS {DirectoryManagement.id-mat-hOBRole} ; homeDSA ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ; MATCHES FOR EQUALITY ; BEHAVIOUR homeDSABehaviour BEHAVIOUR DEFINED AS ! The default DSA to be used by the DUA ! ;; REGISTERED AS {DirectoryManagement.id-mat-homeDSA} ; invalidReferences ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR invalidRefsBehaviour BEHAVIOUR DEFINED AS ! The number of invalid references reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-invalidReferences} ; lastUpdateTime ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.Time ; MATCHES FOR EQUALITY ; BEHAVIOUR lastUpdateTimeBehaviour BEHAVIOUR DEFINED AS ! The time recorded by this DSA when the last update occurred. This time is provided by the supplier DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-lastUpdateTime} ; listOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR listsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of list operations that the DSA has processed. For each list operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-listOpsProc} ; loopsDetected ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR loopsDetectedBehaviour BEHAVIOUR DEFINED AS ! The number of loops detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-loopsDetected} ; masterAccessPoint ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint; MATCHES FOR EQUALITY ; BEHAVIOUR masterAccessPointBehaviour BEHAVIOUR DEFINED AS ! This attribute contains the presentation address, protocol information, and the AETitle of the master DSA for a naming context ! ;; REGISTERED AS {DirectoryManagement.id-mat-masterAccessPoint} ; masterEntries ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR masterEntriestBehaviour BEHAVIOUR DEFINED AS ! The number of entries mastered by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-masterEntries} ; matchingRules ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MatchingRuleDescription ; MATCHES FOR EQUALITY ; BEHAVIOUR matchingRulesBehaviour BEHAVIOUR DEFINED AS ! Defines the matching rules for the subschema administrative area. This attribute maps to the matchingRules Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-matchingRules} ; matchingRuleUse ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MatchingRuleUseDescription ; MATCHES FOR EQUALITY ; BEHAVIOUR matchingRuleUseBehaviour BEHAVIOUR DEFINED AS ! Lists the attribute types to which each matching rule can be applied within the subschema administrative area. This attribute maps to the matchingRuleUse Directory attribute ! ;; REGISTERED AS {DirectoryManagement.id-mat-matchingRuleUse} ; maxDAPAssociations ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxDAPAssociationsBehaviour BEHAVIOUR DEFINED AS ! The maximum number of concurrent DSP associations permitted by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxDAPAssociations} ; maxDISPAssociations ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxDISPAssociationsBehaviour BEHAVIOUR DEFINED AS ! The maximum number of concurrent DISP associations permitted by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxDISPAssociations} ; maxDOPAssociations ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxDOPAssociationsBehaviour BEHAVIOUR DEFINED AS ! The maximum number of concurrent DOP associations permitted by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxDOPAssociations} ; maxDSPAssociations ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxDSPAssociationBehaviour BEHAVIOUR DEFINED AS ! The maximum number of concurrent DSP associations permitted by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxDSPAssociations} ; maxEntriesReturned ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxEntriesReturnedBehaviour BEHAVIOUR DEFINED AS ! The maximum number of entries returned by the Directory service ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxEntriesReturned} ; maxInboundAssocs ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxInboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the maximum possible inbound associations from this Network Element to a neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxInboundAssociations} ; maxOutboundAssocs ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxOutboundAssocsBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the maximum possible outbound associations from this Network Element to a neighbouring Network Element ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxOutboundAssociations} ; maxTimeForResults ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR maxTimeForResultsBehaviour BEHAVIOUR DEFINED AS ! The maximum time for the service to return the results ! ;; REGISTERED AS {DirectoryManagement.id-mat-maxTimeForResult} ; modifiersName ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.DistinguishedName ; MATCHES FOR EQUALITY ; BEHAVIOUR modifiersNameBehaviour BEHAVIOUR DEFINED AS ! Holds the name of the last modifier of the DSE. This attribute maps to the modifiersName Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-modifiersName} ; modifyEntryOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR modifiesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of modifyEntry operations that the DSA has processed. For each modifyEntry operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-modifyEntryOpsProc} ; modifyDNOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR modifyDNsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of modifyDN operations that the DSA has processed. For each modifyDN operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-modifyDNOpsProc} ; modifyDNRenameOnlyOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR modifyDNsRenameOnlyProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of modifyDN operations which do not supply a value of newSuperior that the DSA has processed. For each modifyDN operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-modifyDNRenameOnlyOpsProc} ; modifyTimestamp ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ; MATCHES FOR EQUALITY, ORDERING ; BEHAVIOUR modifyTimestampBehaviour BEHAVIOUR DEFINED AS ! Holds the time at which this DSE was last modified. This attribute maps to the modifyTimestamp Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-modifyTimestamp} ; myAccessPoint ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ; MATCHES FOR EQUALITY ; BEHAVIOUR myAccessPointBehaviour BEHAVIOUR DEFINED AS ! The access point for the DSA. This attribute maps to the myAccessPoint Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-myAccessPoint} ; nameErrors ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR nameErrorsBehaviour BEHAVIOUR DEFINED AS ! The number of name errors detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-nameErrors} ; nameForms ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.NameFormDescription ; MATCHES FOR EQUALITY ; BEHAVIOUR nameFormsBehaviour BEHAVIOUR DEFINED AS ! Lists the name forms for use in the subschema administrative area. This attribute maps to the nameForms Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-nameForms} ; nextUpdateTime ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.Time ; MATCHES FOR EQUALITY ; BEHAVIOUR nextUpdateTimeBehaviour BEHAVIOUR DEFINED AS ! The time when the next shadow update is due ! ;; REGISTERED AS {DirectoryManagement.id-mat-nextUpdateTime} ; nonSpecificKnowledge ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MasterAndShadowAccessPoints ; MATCHES FOR EQUALITY ; BEHAVIOUR nonSpecificKnowledgeBehaviour BEHAVIOUR DEFINED AS ! Holds the non-specific knowledge for an NSSR. This attribute maps to the nonSpecificKnowledge Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-nonSpecificKnowledge} ; noSuchObject ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR noSuchObjectBehaviour BEHAVIOUR DEFINED AS ! The number of no such object errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-noSuchObject} ; objectClass ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ; MATCHES FOR EQUALITY ; BEHAVIOUR objectClassBehaviour BEHAVIOUR DEFINED AS ! Holds the object class object identifiers for the DSE. This attribute maps to the objectClass Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-objectClass} ; objectClasses ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ObjectClassDescription ; MATCHES FOR EQUALITY ; BEHAVIOUR objectClassesBehaviour BEHAVIOUR DEFINED AS ! Lists the object classes permitted in the subschema administrative area. This attribute maps to the objectClasses Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-objectClasses} ; outOfScope ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter ; BEHAVIOUR outOfScopeBehaviour BEHAVIOUR DEFINED AS ! The number of out of scope errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-outOfScope} ; pagedResultsExpungeTimerInSeconds ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR pagedResultsExpungeTimerInSecondsBehaviour BEHAVIOUR DEFINED AS ! The maximum time limit allowed for active paged results query references before they are deleted by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-pagedResultsTimer} ; pagedResultsMaximumIdentifiers ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtInteger ; MATCHES FOR EQUALITY ; BEHAVIOUR pagedResultsMaximumIdentifiersBehaviour BEHAVIOUR DEFINED AS ! The maximum number of active paged results query references supported by the DSA (on a per association basis) ! ;; REGISTERED AS {DirectoryManagement.id-mat-pagedResultsMaxIDs} ; peerEntityAuthenticationPolicy ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.PeerEntityAuthenticationPolicy ; MATCHES FOR EQUALITY ; BEHAVIOUR peerEntityAuthenticationPolicyBehaviour BEHAVIOUR DEFINED AS ! The types of peer entity authentication supported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-peerEntityAuthenticationPolicy} ; prescriptiveACI ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ACIItem ; MATCHES FOR EQUALITY ; BEHAVIOUR prescriptiveACIBehaviour BEHAVIOUR DEFINED AS ! Holds the prescriptive ACI for an access control specific area. This attribute maps to the prescriptiveACI Directory attributes. ! ;; REGISTERED AS {DirectoryManagement.id-mat-prescriptiveACI} ; prohibitChaining ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtBoolean; MATCHES FOR EQUALITY ; BEHAVIOUR prohibitChainingBehaviour BEHAVIOUR DEFINED AS ! If TRUE, the DSA shall not chain ! ;; REGISTERED AS {DirectoryManagement.id-mat-prohibitChaining} ; readOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR readsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of read operations that the DSA has processed in the evaluation phase. For each read operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-readOpsProc} ; referrals ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR referralsBehaviour BEHAVIOUR DEFINED AS ! The number of referrals used by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-referrals} ; remoteAccessPoint ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint; MATCHES FOR EQUALITY ; BEHAVIOUR remoteAccessPointBehaviour BEHAVIOUR DEFINED AS ! This attribute contains the presentation address, protocol information, and the AETitle of the peer DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-remoteAccessPoint} ; removeEntryOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR removesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of removeEntry operations that the DSA has processed in the evaluation phase. For each removeEntry operation that the DSA evaluates, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-removeEntryOpsProc} ; replyCounter ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR replyCounterBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the number of responses made by this DSA to its users based upon those users' requests ! ;; REGISTERED AS {DirectoryManagement.id-mat-replyCounter} ; requestAuthenticationPolicy ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.RequestAuthenticationPolicy ; MATCHES FOR EQUALITY ; BEHAVIOUR requestAuthenticationPolicyBehaviour BEHAVIOUR DEFINED AS ! The types of request authentication supported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-requestAuthenticationPolicy} ; requestCounter ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR requestCounterBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the number of requests that this DSA has received since it was initialized ! ;; REGISTERED AS {DirectoryManagement.id-mat-requestCounter} ; requestsFailedCounter ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR requestsFailedCounterBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the number or requests made of this DSA that failed ! ;; REGISTERED AS {DirectoryManagement.id-mat-requestsFailedCounter} ; resultAuthenticationPolicy ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ResultAuthenticationPolicy ; MATCHES FOR EQUALITY ; BEHAVIOUR resultAuthenticationPolicyBehaviour BEHAVIOUR DEFINED AS ! The types of result authentication supported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-resultAuthenticationPolicy} ; reverseCredentials ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.Credentials; MATCHES FOR EQUALITY ; BEHAVIOUR reverseCredentialsBehaviour BEHAVIOUR DEFINED AS ! This attribute contains the reverse credentials !;; REGISTERED AS {DirectoryManagement.id-mat-reverseCredentials} ; search1LevelOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR search1LevelOperationsProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of search operations that the DSA has processed that refer to the base object's immediate subordinates. For each such operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-search1LevelOpsProc} ; searchBaseOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR baseSearchesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of search operations that the DSA has processed that only refer to the base object. For each such operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-searchBaseOpsProc} ; searchSubtreeOperationsProcessed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR subtreeSearchesProcessedBehaviour BEHAVIOUR DEFINED AS ! This attribute is used to count the number of search operations that the DSA has processed that refer to a whole subtree. For each such operation that the DSA processes, the DSA increases the counter by 1. ! ;; REGISTERED AS {DirectoryManagement.id-mat-searchSubtreeOpsProc} ; secondaryShadows ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.SupplierAndConsumers ; MATCHES FOR EQUALITY ; BEHAVIOUR secondaryShadowsBehaviour BEHAVIOUR DEFINED AS ! This attribute contains the presentation address, protocol information, and the AETitle of any DSAs holding secondary shadows of a naming context ! ;; REGISTERED AS {DirectoryManagement.id-mat-secondaryShadows} ; securityErrors ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR securityErrorsBehaviour BEHAVIOUR DEFINED AS ! The number of security errors detected by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-securityErrors} ; serviceDescription ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtPrintableString ; MATCHES FOR EQUALITY ; BEHAVIOUR serviceDescriptionBehaviour BEHAVIOUR DEFINED AS ! A description of the Directory service ! ;; REGISTERED AS {DirectoryManagement.id-mat-serviceDesc} ; serviceErrors ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR serviceErrorsBehaviour BEHAVIOUR DEFINED AS ! The number of service errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-serviceErrors} ; serviceIdentifier ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ; MATCHES FOR EQUALITY ; BEHAVIOUR serviceIdentifierBehaviour BEHAVIOUR DEFINED AS ! The identifier for a particular directory information service ! ;; REGISTERED AS {DirectoryManagement.id-mat-serviceId} ; shadowingRole ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ShadowingRole ; MATCHES FOR EQUALITY ; BEHAVIOUR shadowingRoleBehaviour BEHAVIOUR DEFINED AS ! The role of the DSA in the operational binding agreement for a shadowing agreement ! ;; REGISTERED AS {DirectoryManagement.id-mat-shadowingRole} ; shadowingSchedule ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.SchedulingParameters; MATCHES FOR EQUALITY ; BEHAVIOUR shadowingScheduleBehaviour BEHAVIOUR DEFINED AS ! The scheduling information held by the DSA for this shadowing agreement ! ;; REGISTERED AS {DirectoryManagement.id-mat-shadowingSchedule} ; shadowingSubject ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.UnitOfReplication; MATCHES FOR EQUALITY ; BEHAVIOUR shadowingSubjectBehaviour BEHAVIOUR DEFINED AS ! The specifications of the unit of replication for this shadowing agreement ! ;; REGISTERED AS {DirectoryManagement.id-mat-shadowingSubject} ; sizeLimit ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; MATCHES FOR EQUALITY ; BEHAVIOUR sizeLimitBehaviour BEHAVIOUR DEFINED AS ! The size limit policy of the DSA. This policy overrides the sizeLimit service control ! ;; REGISTERED AS {DirectoryManagement.id-mat-sizeLimit} ; sizeLimitExceeded ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR sizeLimitExceededBehaviour BEHAVIOUR DEFINED AS ! The number of size limit exceeded errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-sizeLimitExceeded} ; specificKnowledge ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MasterAndShadowAccessPoints ; MATCHES FOR EQUALITY ; BEHAVIOUR specificKnowledgeBehaviour BEHAVIOUR DEFINED AS ! Holds the knowledge for a cross-reference, subordinate reference or immediate superior reference. This attribute maps to the specificKnowledge Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-specificKnowledge} ; structuralObjectClass ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtOID ; MATCHES FOR EQUALITY ; BEHAVIOUR structuralObjectClassBehaviour BEHAVIOUR DEFINED AS ! Holds the structural object class of a DSE. This attribute maps to the structuralObjectClass Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-structuralObjectClass} ; subentryACI ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.ACIItem ; MATCHES FOR EQUALITY ; BEHAVIOUR subentryACIBehaviour BEHAVIOUR DEFINED AS ! Holds the subentry ACI for an administrative entry. This attribute maps to the subentryACI Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-subentryACI} ; subSchema ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.SubSchemaSyntax ; MATCHES FOR EQUALITY ; BEHAVIOUR subSchemaBehaviour BEHAVIOUR DEFINED AS ! The subschema publication information for the DUA. !;; REGISTERED AS {DirectoryManagement.id-mat-subSchema} ; subtreeSpecification ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.SubtreeSpecification ; BEHAVIOUR subtreeSpecificationBehaviour BEHAVIOUR DEFINED AS ! Holds the scope of a subentry. This attribute maps to the subtreeSpecification Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-subtreeSpecification} ; superiorKnowledge ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.AccessPoint ; MATCHES FOR EQUALITY ; BEHAVIOUR superiorKnowledgeBehaviour BEHAVIOUR DEFINED AS ! Holds the knowledge for a superior reference. This attribute maps to the superiorKnowledge Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-superiorKnowledge} ; supplierKnowledge ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.SupplierInformation ; MATCHES FOR EQUALITY ; BEHAVIOUR supplierKnowledgeBehaviour BEHAVIOUR DEFINED AS ! Holds the knowledge about the supplier of shadowed information. This attribute maps to the supplierKnowledge Directory attribute. ! ;; REGISTERED AS {DirectoryManagement.id-mat-supplierKnowledge} ; supportedApplicationContexts ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.SupportedApplicationContexts ; MATCHES FOR EQUALITY ; BEHAVIOUR supportedApplicationContextsBehaviour BEHAVIOUR DEFINED AS ! This attribute contains the set of application contexts supported by the represented entity ! ;; REGISTERED AS {DirectoryManagement.id-mat-supportedApplicationContexts} ; timeLimit ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; MATCHES FOR EQUALITY ; BEHAVIOUR timeLimitBehaviour BEHAVIOUR DEFINED AS ! The time policy of the DSA. This policy overrides the timeLimit service control ! ;; REGISTERED AS {DirectoryManagement.id-mat-timeLimit} ; timeLimitExceeded ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR timeLimitExceededBehaviour BEHAVIOUR DEFINED AS ! The number of time limit exceeded errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-timeLimitExceeded} ; timeOfLastAttempt ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ; MATCHES FOR EQUALITY ; BEHAVIOUR timeOfLastAttemptBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the absolute time that this Network Element attempted to create an association with a neighbouring network element ! ;; REGISTERED AS {DirectoryManagement.id-mat-timeOfLastAttempt} ; timeOfLastAccess ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ; MATCHES FOR EQUALITY ; BEHAVIOUR timeOfLastAccessBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the absolute time that the DUA last accessed this DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-timeOfLastAccess} ; timeOfLastSuccess ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtGeneralizedTime ; MATCHES FOR EQUALITY ; BEHAVIOUR timeOfLastSuccessBehaviour BEHAVIOUR DEFINED AS ! This attribute defines the absolute time that this Network Element successfully created an association with a neighbouring network element ! ;; REGISTERED AS {DirectoryManagement.id-mat-timeOfLastSuccess} ; unableToProceed ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR unableToProceedBehaviour BEHAVIOUR DEFINED AS ! The number of unable to proceed errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-unableToProceed} ; unavailableCriticalExtension ATTRIBUTE DERIVED FROM "CCITT Rec. X.721 (1992) | ISO/IEC 10165-2:1992":counter-Threshold ; BEHAVIOUR unavailableCriticalExtensionBehaviour BEHAVIOUR DEFINED AS ! The number of unavailable critical extension errors reported by the DSA ! ;; REGISTERED AS {DirectoryManagement.id-mat-unavailableCriticalExtension} ; updateMode ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.UpdateMode; MATCHES FOR EQUALITY ; BEHAVIOUR updateModeBehaviour BEHAVIOUR DEFINED AS ! The specifications of the update mode for this shadowing agreement ! ;; REGISTERED AS {DirectoryManagement.id-mat-updateMode} ; useDOP ATTRIBUTE WITH ATTRIBUTE SYNTAX DirectoryManagement.MgtBoolean; MATCHES FOR EQUALITY ; BEHAVIOUR useDOPBehaviour BEHAVIOUR DEFINED AS ! This attribute indicates whether DOP is used to maintain the operational binding. TRUE indicates that DOP is used. !;; REGISTERED AS {DirectoryManagement.id-mat-useDOP}; -- ============================================================================= -- Formatted by OpenT2 Version 5.5.6.34 on Fri Nov 18 08:48:12 2005