英文:
Do we have any class schema available for OpenLDAP and ApacheDS for each object class?
问题
我们可以在Active Directory中找到每个对象类的classSchema。根据ApacheDS和OpenLDAP的文档，我们无法找到用于查找类标识符、可能属性、可能父项、超类和辅助类的类模式。
OpenLDAP和ApacheDS是否有可用的类模式？如果没有，是否有办法查找OpenLDAP和ApacheDS的每个对象类的系统属性？
英文:
We can find the classSchema available for each object class in active directory. As per the documentation of ApacheDS and OpenLDAP we could not find any class schema for finding Class identifiers, Possible attributes, Possible parents and Superclasses and auxiliary classes.
Do we have class schema available for OpenLDAP and ApacheDS? If no is there any way to find the system attributes for each object class for OpenLDAP and ApacheDS?
答案1
得分: 1
一个ObjectClass是一个LDAP模式元素AttributeType，这些在RFC 4512中定义。
条目中的完整对象类定义了需要或允许出现的AttributeTypes的集合。STRUCTURAL类也可以用于将条目与NameForm、dITContentRules和/或DITStructureRules关联起来。
每个LDAP条目必须有一个且仅有一个STRUCTURAL对象类，并且可以有零个或多个AUXILIARY类。
您可以在ldapwiki.com上浏览其中大部分（如AD的提到的classSchema）。
英文:
An ObjectClass is an LDAP Schema element AttributeType, these are defined in RFC 4512.
> The complete set of object classes in an entry define the set of
> AttributeTypes that are required or allowed to be present. The
> STRUCTURAL class may also be used to link the entry with a NameForm,
> dITContentRules, and/or DITStructureRules.
Every LDAP Entry must have exactly one STRUCTURAL object class, and it may have zero or more AUXILIARY classes.
You can browse most of them (like the mentioned classSchema for AD) at ldapwiki.com
答案2
得分: 1
对于大多数LDAP服务器实现，rootDSE具有一个属性值，该属性值在RFC 4512第4.4节中定义，
> 为了发现控制特定条目的子模式（subschema）的DN，客户端读取该条目的“subschemaSubentry”操作属性。
通常情况下，这会像这样：subschemaSubentry: cn=schema。
因此，类似于以下的ldapsearch命令：
ldapsearch -h yourLDAPDNS -b "cn=schema" -s base -D cn=admin,ou=...,dc=example,dc=com -w secretpassword "(objectclass=*)" > schema.ldif
应该将模式定义放入schema.ldif文件中。
一些LDAP服务器实现使用稍微不同格式的ldapsearch，需要指定返回的属性：
ldapsearch -h yourLDAPDNS -b "cn=schema" -s base -D cn=admin,ou=...,dc=example,dc=com -w secretpassword "(objectclass=*)" attributeTypes objectClasses
英文:
For most LDAP Server implementation the rootDSE has an attribute value for the
defined in RFC 4512 section 4.4,
> To discover the DN of the subschema (sub)entry holding the subschema
> controlling a particular entry, a client reads that entry's
> 'subschemaSubentry' operational attribute.
Typically this would be like subschemaSubentry: cn=schema.
So a ldapsearch similar to:
ldapsearch -h yourLDAPDNS -b "cn=schema" -s base -D cn=admin,ou=...,dc=example,dc=com -w secretpassword "(objectclass=*)" > schema.ldif
Should put the schema definition into the schema.ldif file.
Some ldapserver implementations use a slightly different format for the ldapsearch requiring the return attributes be specified:
ldapsearch -h yourLDAPDNS -b "cn=schema" -s base -D cn=admin,ou=...,dc=example,dc=com -w secretpassword "(objectclass=*)" attributeTypes objectClasses
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论