# Apache Directory config schema ## Object Classes ### class ads-authenticationInterceptor {#ads-authenticationInterceptor} description | type | oid | superior ———– | —- | — | ——– The AuthenticationInterceptor ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.131 | ads-interceptor #### attributes | optional | | ——– | | ads-authenticators | | ads-passwordPolicies | ### class ads-authenticator {#ads-authenticator} description | type | oid | superior ———– | —- | — | ——– A generic authenticator | ABSTRACT | 1.3.6.1.4.1.18060.0.4.1.3.901 | ads-base #### attributes | mandatory | | ——– | | ads-authenticatorId | ### class ads-authenticatorImpl {#ads-authenticatorImpl} description | type | oid | superior ———– | —- | — | ——– an authenticator implementation | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.902 | ads-authenticator #### attributes | mandatory | | ——– | | ads-authenticatorClass | ### class ads-base {#ads-base} description | type | oid | superior ———– | —- | — | ——– The base bean | ABSTRACT | 1.3.6.1.4.1.18060.0.4.1.3.0 | #### attributes | optional | | ——– | | ads-enabled | | description | ### class ads-changeLog {#ads-changeLog} description | type | oid | superior ———– | —- | — | ——– The ChangeLog | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.120 | ads-base #### attributes | mandatory | | ——– | | ads-changeLogId | | optional | | ——– | | ads-changeLogExposed | ### class ads-changePasswordServer {#ads-changePasswordServer} description | type | oid | superior ———– | —- | — | ——– The ChangePassword ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.800 | ads-dsBasedServer #### attributes | optional | | ——– | | ads-krbAllowableClockSkew | | ads-krbEmptyAddressesAllowed | | ads-krbEncryptionTypes | | ads-krbPrimaryRealm | | ads-chgPwdPolicyCategoryCount | | ads-chgPwdPolicyPasswordLength | | ads-chgPwdPolicyTokenSize | | ads-chgPwdServicePrincipal | ### class ads-delegatingAuthenticator {#ads-delegatingAuthenticator} description | type | oid | superior ———– | —- | — | ——– delegated authentication configuration | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.904 | ads-authenticator #### attributes | mandatory | | ——– | | ads-delegateHost | | ads-delegatePort | ### class ads-dhcpServer {#ads-dhcpServer} description | type | oid | superior ———– | —- | — | ——– The DhcpServer ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.600 | ads-dsBasedServer #### attributes ### class ads-directoryService {#ads-directoryService} description | type | oid | superior ———– | —- | — | ——– The DirectoryService ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.100 | ads-base #### attributes | mandatory | | ——– | | ads-directoryServiceId | | ads-dsReplicaId | | ads-interceptors | | ads-partitions | | optional | | ——– | | ads-servers | | ads-dsAccessControlEnabled | | ads-dsAllowAnonymousAccess | | ads-changeLog | | ads-dsDenormalizeOpAttrsEnabled | | ads-journal | | ads-dsMaxPDUSize | | ads-dsPasswordHidden | | ads-dsSyncPeriodMillis | | ads-dsTestEntries | ### class ads-dnsServer {#ads-dnsServer} description | type | oid | superior ———– | —- | — | ——– The DnsServer ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.500 | ads-dsBasedServer #### attributes ### class ads-dsBasedServer {#ads-dsBasedServer} description | type | oid | superior ———– | —- | — | ——– The DirectoryService based server ObjectClass | ABSTRACT | 1.3.6.1.4.1.18060.0.4.1.3.260 | ads-server #### attributes | optional | | ——– | | ads-searchBaseDN | ### class ads-extendedOpHandler {#ads-extendedOpHandler} description | type | oid | superior ———– | —- | — | ——– Extended operation handler | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.802 | ads-base #### attributes | mandatory | | ——– | | ads-extendedOpHandlerClass | | ads-extendedOpId | ### class ads-httpServer {#ads-httpServer} description | type | oid | superior ———– | —- | — | ——– integrated jetty http server | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.804 | ads-server #### attributes | optional | | ——– | | ads-httpConfFile | | ads-httpwebApps | ### class ads-httpWebApp {#ads-httpWebApp} description | type | oid | superior ———– | —- | — | ——– a web app | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.803 | ads-base #### attributes | mandatory | | ——– | | ads-httpWarFile | | ads-id | | optional | | ——– | | ads-httpAppCtxPath | ### class ads-index {#ads-index} description | type | oid | superior ———– | —- | — | ——– A generic indexed attribute | ABSTRACT | 1.3.6.1.4.1.18060.0.4.1.3.160 | ads-base #### attributes | mandatory | | ——– | | ads-indexAttributeId | | ads-indexHasReverse | ### class ads-interceptor {#ads-interceptor} description | type | oid | superior ———– | —- | — | ——– The Interceptor ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.130 | ads-base #### attributes | mandatory | | ——– | | ads-interceptorId | | ads-interceptorOrder | | ads-interceptorClassName | ### class ads-jdbmIndex {#ads-jdbmIndex} description | type | oid | superior ———– | —- | — | ——– A JDBM indexed attribute | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.161 | ads-index #### attributes | optional | | ——– | | ads-indexFileName | | ads-indexWorkingDir | | ads-indexNumDupLimit | | ads-indexCacheSize | ### class ads-jdbmPartition {#ads-jdbmPartition} description | type | oid | superior ———– | —- | — | ——– A JDBM partition | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.151 | ads-partition #### attributes | optional | | ——– | | ads-partitionCacheSize | | ads-jdbmPartitionOptimizerEnabled | ### class ads-journal {#ads-journal} description | type | oid | superior ———– | —- | — | ——– The Journal | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.140 | ads-base #### attributes | mandatory | | ——– | | ads-journalId | | ads-journalFileName | | optional | | ——– | | ads-journalWorkingDir | | ads-journalRotation | ### class ads-kdcServer {#ads-kdcServer} description | type | oid | superior ———– | —- | — | ——– The KerberosServer ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.400 | ads-dsBasedServer #### attributes | optional | | ——– | | ads-krbAllowableClockSkew | | ads-krbEncryptionTypes | | ads-krbEmptyAddressesAllowed | | ads-krbForwardableAllowed | | ads-krbPaEncTimestampRequired | | ads-krbPostdatedAllowed | | ads-krbProxiableAllowed | | ads-krbRenewableAllowed | | ads-krbKdcPrincipal | | ads-krbMaximumRenewableLifetime | | ads-krbMaximumTicketLifetime | | ads-krbPrimaryRealm | | ads-krbBodyChecksumVerified | ### class ads-ldapServer {#ads-ldapServer} description | type | oid | superior ———– | —- | — | ——– The LdapServer ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.300 | ads-dsBasedServer #### attributes | optional | | ——– | | ads-confidentialityRequired | | ads-maxSizeLimit | | ads-maxTimeLimit | | ads-saslHost | | ads-saslPrincipal | | ads-saslRealms | | ads-keystoreFile | | ads-certificatePassword | | ads-replReqHandler | | ads-saslMechHandlers | | ads-extendedOpHandlers | | ads-replConsumers | ### class ads-ntpServer {#ads-ntpServer} description | type | oid | superior ———– | —- | — | ——– The NtpServer ObjectClass | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.700 | ads-server #### attributes ### class ads-partition {#ads-partition} description | type | oid | superior ———– | —- | — | ——– A generic partition | ABSTRACT | 1.3.6.1.4.1.18060.0.4.1.3.150 | ads-base #### attributes | mandatory | | ——– | | ads-partitionId | | ads-partitionSuffix | | optional | | ——– | | ads-contextEntry | | ads-partitionSyncOnWrite | | ads-indexes | ### class ads-passwordPolicy {#ads-passwordPolicy} description | type | oid | superior ———– | —- | — | ——– class to hold the PasswordPolicy configuration | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.900 | ads-base #### attributes | mandatory | | ——– | | ads-pwdId | | ads-pwdAttribute | | optional | | ——– | | ads-pwdMinAge | | ads-pwdMaxAge | | ads-pwdInHistory | | ads-pwdCheckQuality | | ads-pwdMinLength | | ads-pwdMaxLength | | ads-pwdExpireWarning | | ads-pwdGraceAuthNLimit | | ads-pwdGraceExpire | | ads-pwdLockout | | ads-pwdLockoutDuration | | ads-pwdMaxFailure | | ads-pwdFailureCountInterval | | ads-pwdMustChange | | ads-pwdAllowUserChange | | ads-pwdSafeModify | | ads-pwdMinDelay | | ads-pwdMaxDelay | | ads-pwdMaxIdle | ### class ads-replConsumer {#ads-replConsumer} description | type | oid | superior ———– | —- | — | ——– replication consumer configuration | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.806 | ads-base #### attributes | mandatory | | ——– | | ads-replConsumerId | | ads-searchBaseDN | | ads-replProvHostName | | ads-replProvPort | | ads-replAliasDerefMode | | ads-replAttributes | | ads-replRefreshInterval | | ads-replRefreshNPersist | | ads-replSearchScope | | ads-replSearchFilter | | ads-replSearchSizeLimit | | ads-replSearchTimeOut | | ads-replUserDn | | ads-replUserPassword | | optional | | ——– | | ads-replUseTls | | ads-replStrictCertValidation | | ads-replPeerCertificate | | ads-replConsumerImpl | | ads-replCookie | ### class ads-replEventLog {#ads-replEventLog} description | type | oid | superior ———– | —- | — | ——– class to hold a replication consumer event log details | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.805 | ads-base #### attributes | mandatory | | ——– | | ads-dsReplicaId | | ads-replAliasDerefMode | | ads-searchBaseDN | | ads-replSearchScope | | ads-replSearchFilter | | ads-replRefreshNPersist | | optional | | ——– | | ads-replLastSentCsn | | ads-replCookie | ### class ads-saslMechHandler {#ads-saslMechHandler} description | type | oid | superior ———– | —- | — | ——– SASL mechanism handler | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.801 | ads-base #### attributes | mandatory | | ——– | | ads-saslMechName | | ads-saslMechClassName | | optional | | ——– | | ads-ntlmMechProvider | ### class ads-server {#ads-server} description | type | oid | superior ———– | —- | — | ——– The server ObjectClass | ABSTRACT | 1.3.6.1.4.1.18060.0.4.1.3.250 | ads-base #### attributes | mandatory | | ——– | | ads-serverId | | optional | | ——– | | ads-transports | ### class ads-tcpTransport {#ads-tcpTransport} description | type | oid | superior ———– | —- | — | ——– A TCP transport | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.19 | ads-transport #### attributes ### class ads-transport {#ads-transport} description | type | oid | superior ———– | —- | — | ——– A transport (TCP or UDP) | ABSTRACT | 1.3.6.1.4.1.18060.0.4.1.3.18 | ads-base #### attributes | mandatory | | ——– | | ads-transportId | | ads-systemPort | | optional | | ——– | | ads-transportAddress | | ads-transportBacklog | | ads-transportEnableSSL | | ads-transportNbThreads | ### class ads-udpTransport {#ads-udpTransport} description | type | oid | superior ———– | —- | — | ——– an UDP transport | STRUCTURAL | 1.3.6.1.4.1.18060.0.4.1.3.20 | ads-transport #### attributes ## Attribute types alias | description | syntax | equality | ordering | substring ———- | —– | —– | —— | —— | ——– | ——– ads-allowAnonymousAccess {#ads-allowAnonymousAccess} | Tells the server to accept Anynymous requests or not | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-authenticatorClass {#ads-authenticatorClass} | the fully qualified class name of an authenticator implementation | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-authenticatorId {#ads-authenticatorId} | Authenticator Id | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-authenticators {#ads-authenticators} | A reference to the authenticators | | | | ads-certificatePassword {#ads-certificatePassword} | The certificate passord | 1.3.6.1.4.1.1466.115.121.1.15 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-changeLog {#ads-changeLog} | The ChangeLog system | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-changeLogExposed {#ads-changeLogExposed} | Tells if the changeLog system is visible by the clients | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-changeLogId {#ads-changeLogId} | The ChangeLog identifier | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-chgPwdPolicyCategoryCount {#ads-chgPwdPolicyCategoryCount} | The policy category count | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-chgPwdPolicyPasswordLength {#ads-chgPwdPolicyPasswordLength} | The policy minimum password length | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-chgPwdPolicyTokenSize {#ads-chgPwdPolicyTokenSize} | The policy token size | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-chgPwdServicePrincipal {#ads-chgPwdServicePrincipal} | The Change Password service principal | 1.3.6.1.4.1.1466.115.121.1.26 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-compositeElement {#ads-compositeElement} | A base AttributeType for attributeType referencing composite configuration elements | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-confidentialityRequired {#ads-confidentialityRequired} | Tells the server to accept requests using startTLS or LDAPS | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-contextEntry {#ads-contextEntry} | The Partition context entry | 1.3.6.1.4.1.1466.115.121.1.15 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-delegateHost {#ads-delegateHost} | an external host handling delegate authentication | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-delegatePort {#ads-delegatePort} | Port number on system | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-directoryServiceId {#ads-directoryServiceId} | The DirectoryService ID | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-dsAccessControlEnabled {#ads-dsAccessControlEnabled} | Tells if access control is activated or not | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-dsAllowAnonymousAccess {#ads-dsAllowAnonymousAccess} | Tells if anonymous access are allowed or not | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-dsDenormalizeOpAttrsEnabled {#ads-dsDenormalizeOpAttrsEnabled} | Tells if the operational attributes are denormalized or not | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-dsMaxPDUSize {#ads-dsMaxPDUSize} | Gives the maximum size of a PDU | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-dsPasswordHidden {#ads-dsPasswordHidden} | Tells if the password is stored encrypted even for PLAIN authentication | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-dsReplicaId {#ads-dsReplicaId} | The server identifier, used for replication | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-dsSyncPeriodMillis {#ads-dsSyncPeriodMillis} | Define the duration between two flushes on disk | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-dsTestEntries {#ads-dsTestEntries} | The set of entries to inject at startup (may be obsolete) | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-enabled {#ads-enabled} | specifies whether a config element is enabled or not, default is true | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-enableReplProvider {#ads-enableReplProvider} | flag to prepare the server as a replication provider | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-extendedOpHandlerClass {#ads-extendedOpHandlerClass} | Fully qualified class name of the extended operation handler | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-extendedOpHandlers {#ads-extendedOpHandlers} | The reference to the extended operation Handlers | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-extendedOpId {#ads-extendedOpId} | an ID used for ExtendeOpertion names | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-httpAppCtxPath {#ads-httpAppCtxPath} | A web app context path | 1.3.6.1.4.1.1466.115.121.1.44 | caseIgnoreMatch | caseIgnoreOrderingMatch | caseIgnoreSubstringsMatch ads-httpConfFile {#ads-httpConfFile} | Jetty web server config file path | 1.3.6.1.4.1.1466.115.121.1.44 | caseIgnoreMatch | caseIgnoreOrderingMatch | caseIgnoreSubstringsMatch ads-httpWarFile {#ads-httpWarFile} | a web app archive | 1.3.6.1.4.1.1466.115.121.1.44 | caseIgnoreMatch | caseIgnoreOrderingMatch | caseIgnoreSubstringsMatch ads-httpWebApps {#ads-httpWebApps} | The references to the web applications | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-Id {#ads-Id} | a generic ID which can be used in any configuration entry DN | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-indexAttributeId {#ads-indexAttributeId} | The attributeType name or OID | 1.3.6.1.4.1.1466.115.121.1.38 | objectIdentifierMatch | | ads-indexCacheSize {#ads-indexCacheSize} | The number of key we store in the cache for this index | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-indexes {#ads-indexes} | A reference to the indexed attributes | | | | ads-indexFileName {#ads-indexFileName} | The index file name | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-indexHasReverse {#ads-indexHasReverse} | A flag telling if the index has a reverse table | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-indexNumDupLimit {#ads-indexNumDupLimit} | The number of duplicated element we allow before switching to a secondary tree | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-indexWorkingDir {#ads-indexWorkingDir} | The place on disk where the index file is stored | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-interceptorClassName {#ads-interceptorClassName} | Fully qualified class name of the interceptor | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-interceptorId {#ads-interceptorId} | The Interceptor identifier | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-interceptorOrder {#ads-interceptorOrder} | The Interceptor order number | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-interceptors {#ads-interceptors} | The references to the interceptors | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-jdbmPartitionOptimizerEnabled {#ads-jdbmPartitionOptimizerEnabled} | Enables JDBM partition optimizer | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-journal {#ads-journal} | The reference to the Journal | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-journalFileName {#ads-journalFileName} | The journal file name. | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-journalId {#ads-journalId} | The Journal ID | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-journalRotation {#ads-journalRotation} | The size before a journal rotation occurs. | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-journalWorkingDir {#ads-journalWorkingDir} | The place on disk where the journal is stored. | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-keystoreFile {#ads-keystoreFile} | The keystore file to use to store certificates | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-krbAllowableClockSkew {#ads-krbAllowableClockSkew} | The allowable clock skew | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-krbBodyChecksumVerified {#ads-krbBodyChecksumVerified} | Whether to verify the body checksum | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-krbEmptyAddressesAllowed {#ads-krbEmptyAddressesAllowed} | Whether empty addresses are allowed | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-krbEncryptionTypes {#ads-krbEncryptionTypes} | The encryption types | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-krbForwardableAllowed {#ads-krbForwardableAllowed} | Whether forwardable addresses are allowed | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-krbKdcPrincipal {#ads-krbKdcPrincipal} | The service principal name | 1.3.6.1.4.1.1466.115.121.1.26 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-krbMaximumRenewableLifetime {#ads-krbMaximumRenewableLifetime} | The maximum renewable lifetime | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-krbMaximumTicketLifetime {#ads-krbMaximumTicketLifetime} | The maximum ticket lifetime | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-krbPaEncTimestampRequired {#ads-krbPaEncTimestampRequired} | Whether pre-authentication by encrypted timestamp is required | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-krbPostdatedAllowed {#ads-krbPostdatedAllowed} | Whether postdated tickets are allowed | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-krbPrimaryRealm {#ads-krbPrimaryRealm} | The primary realm | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-krbProxiableAllowed {#ads-krbProxiableAllowed} | Whether proxiable addresses are allowed | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-krbRenewableAllowed {#ads-krbRenewableAllowed} | Whether renewable tickets are allowed | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-maxSizeLimit {#ads-maxSizeLimit} | The maximum number of entries to return | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-maxTimeLimit {#ads-maxTimeLimit} | The maximum time before an operation is aborted (in seconds) | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-ntlmMechProvider {#ads-ntlmMechProvider} | Fully qualified class name of SASL NTLM provider | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-partitionCacheSize {#ads-partitionCacheSize} | The number of entries in the cache for this partition | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-partitionId {#ads-partitionId} | The Partition identifier | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-partitions {#ads-partitions} | The set of partitions | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-partitionSuffix {#ads-partitionSuffix} | The partition suffix | 1.3.6.1.4.1.1466.115.121.1.12 | distinguishedNameMatch | distinguishedNameMatch | ads-partitionSyncOnWrite {#ads-partitionSyncOnWrite} | directs a partition to synchronize the underlying storage upon a write operation | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-passwordPolicies {#ads-passwordPolicies} | The PasswordPolicy configuration | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-pwdAllowUserChange {#ads-pwdAllowUserChange} | | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-pwdAttribute {#ads-pwdAttribute} | | 1.3.6.1.4.1.1466.115.121.1.38 | objectIdentifierMatch | | ads-pwdCheckQuality {#ads-pwdCheckQuality} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdExpireWarning {#ads-pwdExpireWarning} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdFailureCountInterval {#ads-pwdFailureCountInterval} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdGraceAuthNLimit {#ads-pwdGraceAuthNLimit} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdGraceExpire {#ads-pwdGraceExpire} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdId {#ads-pwdId} | an ID used to identify the passwordPolicy configuration | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-pwdInHistory {#ads-pwdInHistory} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdLockout {#ads-pwdLockout} | | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-pwdLockoutDuration {#ads-pwdLockoutDuration} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMaxAge {#ads-pwdMaxAge} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMaxDelay {#ads-pwdMaxDelay} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMaxFailure {#ads-pwdMaxFailure} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMaxIdle {#ads-pwdMaxIdle} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMaxLength {#ads-pwdMaxLength} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMinAge {#ads-pwdMinAge} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMinDelay {#ads-pwdMinDelay} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMinLength {#ads-pwdMinLength} | | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | | ads-pwdMustChange {#ads-pwdMustChange} | | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-pwdSafeModify {#ads-pwdSafeModify} | | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-replAliasDerefMode {#ads-replAliasDerefMode} | the alias dereference mode of replication search | 1.3.6.1.4.1.18060.0.4.1.0.11 | caseExactMatch | caseExactOrderingMatch | ads-replAttributes {#ads-replAttributes} | the attributes to be replicated | 1.3.6.1.4.1.1466.115.121.1.15 | caseIgnoreIA5Match | caseExactOrderingMatch | caseIgnoreIA5SubstringsMatch ads-replConsumerId {#ads-replConsumerId} | The replication consumer ID | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-replConsumerImpl {#ads-replConsumerImpl} | The FQCN of the replication consumer/client handler | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-replConsumers {#ads-replConsumers} | The replication consumers of this server instance | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-replCookie {#ads-replCookie} | cookie sent from the replication provider | 1.3.6.1.4.1.1466.115.121.1.40 | octetStringMatch | octetStringOrderingMatch | octetStringSubstringsMatch ads-replEnabled {#ads-replEnabled} | A flag set when the replication is enabled | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-replLastSentCsn {#ads-replLastSentCsn} | the CSN that was sent to the client as part of cookie | 1.3.6.1.4.1.4203.666.11.2.1 | csnMatch | csnOrderingMatch | ads-replPeerCertificate {#ads-replPeerCertificate} | X.509 certificate of the replica peer | | | | ads-replProvHostName {#ads-replProvHostName} | replication provider host name | 1.3.6.1.4.1.1466.115.121.1.26 | caseIgnoreIA5Match | caseIgnoreOrderingMatch | caseIgnoreSubstringsMatch ads-replProvPort {#ads-replProvPort} | replication provider port number | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-replRefreshInterval {#ads-replRefreshInterval} | time interval between two refreshOnly sessions | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-replRefreshNPersist {#ads-replRefreshNPersist} | flag indicating refreshAndPersist mode of replication | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-replReqHandler {#ads-replReqHandler} | FQCN of the replication replication request handler on a master/provider | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-replSearchFilter {#ads-replSearchFilter} | Search filter used in replication | 1.3.6.1.4.1.1466.115.121.1.26 | caseIgnoreIA5Match | caseIgnoreOrderingMatch | caseIgnoreSubstringsMatch ads-replSearchScope {#ads-replSearchScope} | the search scope of the replication | 1.3.6.1.4.1.18060.0.4.1.0.10 | caseExactMatch | caseExactOrderingMatch | ads-replSearchSizeLimit {#ads-replSearchSizeLimit} | size limit imposed during replication refreshOnly phase | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-replSearchTimeOut {#ads-replSearchTimeOut} | search timeout imposed during replication refreshOnly phase | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-replStrictCertValidation {#ads-replStrictCertValidation} | flag to indicate strict certificate validation | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-replUserDn {#ads-replUserDn} | user DN used for authenticating with replication provider | 1.3.6.1.4.1.1466.115.121.1.12 | distinguishedNameMatch | | ads-replUserPassword {#ads-replUserPassword} | replication user password | 1.3.6.1.4.1.1466.115.121.1.40 | octetStringMatch | | ads-replUseTls {#ads-replUseTls} | flag to indicate the use of TLS | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-saslHost {#ads-saslHost} | The name of this host, validated during SASL negotiation | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-saslMechClassName {#ads-saslMechClassName} | Fully qualified class name of SASL mechanism implementation | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-saslMechHandlers {#ads-saslMechHandlers} | The reference to the SASL mechanism Handlers | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-saslMechName {#ads-saslMechName} | SASL mechanism name | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-saslPrincipal {#ads-saslPrincipal} | The service principal, used by GSSAPI | 1.3.6.1.4.1.1466.115.121.1.26 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-saslRealms {#ads-saslRealms} | The realms serviced by this SASL host | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-searchBaseDN {#ads-searchBaseDN} | base DN of the DIT to be searched or replicated | 1.3.6.1.4.1.1466.115.121.1.12 | distinguishedNameMatch | distinguishedNameMatch | ads-serverId {#ads-serverId} | The server ID | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-servers {#ads-servers} | The references to the servers | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-systemPort {#ads-systemPort} | Port number on system | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-transportAddress {#ads-transportAddress} | The Address to listen on. | 1.3.6.1.4.1.1466.115.121.1.26 | caseIgnoreOrderingMatch | caseExactOrderingMatch | caseIgnoreIA5SubstringsMatch ads-transportBacklog {#ads-transportBacklog} | The number of messages waiting to be processed. | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-transportEnableSSL {#ads-transportEnableSSL} | Tells if this transport support SSL. | 1.3.6.1.4.1.1466.115.121.1.7 | booleanMatch | | ads-transportId {#ads-transportId} | The transport ID | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch ads-transportNbThreads {#ads-transportNbThreads} | The number of threads to use for the Acceptor | 1.3.6.1.4.1.1466.115.121.1.27 | integerMatch | integerOrderingMatch | ads-transports {#ads-transports} | The reference to the associated transports | 1.3.6.1.4.1.1466.115.121.1.44 | caseExactMatch | caseExactOrderingMatch | caseExactSubstringsMatch