Overview#

In computing, an Object Identifier or OID or LDAPOID is an identifier used to name an object (compare URN). Structurally, an OID consists of a node in a hierarchically-assigned namespace, formally defined using the ITU-T's ASN.1 standard. Successive numbers of the nodes, starting at the root of the tree, identify each node in the tree. Designers set up new nodes by registering them under the node's registration authority. The root of the tree contains the following three arcs:

• 0: ITU-T - ITU is also referenced as CCITT
• 1: ISO
• 2: joint-ISO-ITU-t

http://en.wikipedia.org/wiki/Object_identifier

LDAP Object Identifier#

LDAP Object Identifier are specifically defined at: LDAP Object Identifier Descriptors

X.500 Object IDentifiers (OIDs)#

The LDAP "Data model", mentions every objectClass must be uniquely identified by an OID. But what is an OID?

Every objectClass that is part of a LDAP Schema receives a dotted decimal hierarchical identifier. These OIDs can be organized in a tree structure, very similar to the X.500 DIT , called Object Identifier Tree (OIT). They were defined by the X.208 standard, and they have been revised and updated by the X.680 standard. Immediately below the root of this tree, there are only three values currently defined as shown above.

Each LDAP Schema element is identified by a globally unique Object Identifier (OID). OIDs are also used to identify other objects. They are commonly found in protocols described by ASN.1. In particular, they are heavily used by the Simple Network Management Protocol (SNMP). As OIDs are hierarchical, your organization can obtain one OID and branch it as needed.

You can design a hierarchy suitable to your organizational needs under your organization's OID. No matter what hierarchy you choose, you should maintain a registry of assignments you make. This can be a simple flat file or a something more sophisticated such as the OpenLDAP OID Registry. For more information about Object Identifiers (and a listing service) see http://www.alvestrand.no/harald/objectid/.

Under no circumstances should you use a fictitious OID!#

To obtain a fully registered OID at no cost, apply for an OID under Internet Assigned Numbers Authority (IANA) maintained Private Enterprise arch. Any private enterprise (organization) may request an OID to be assigned under this arch. Just fill out the IANA form and your official OID will be sent to you usually within a few days. Your base OID will be something like 1.3.6.1.4.1.X were X is an integer.

Microsoft has an OID for Microsft Base OID for Customer Usage[1] and even a script to help generate them[2]

LDAP Schema Usage#

An object identifier, OID, is a string that is comprised of a series of integers separated by periods. It is used as a unique identifier for various types of elements in the Directory Server, including:

• LDAPSyntaxes
• Matching Rule
• AttributeType
• Object Class
• Name Forms
• SupportedControl
• Extended Request
• Supported Features

How To Get Your Own OID#

We show you How To Get Your Own OID, free!

External Links for More Information#

• OID Repository - based on information obtained 2014-03-28
• The Alvestrand Repository - based on information obtained 2014-03-28
• HL7-Assigned OIDs - based on information obtained 2014-03-28
• Debian OID hierarchy - based on information obtained 2014-03-28
• A URN Namespace of Object Identifiers - based on information obtained 2014-03-28

More Information#

There might be more information for this subject on one of the following:

• 0.9.2342.19200300.100.1.2
• 0.9.2342.19200300.100.1.25
• 0.9.2342.19200300.100.1.4
• 0.9.2342.19200300.100.1.5
• 0.9.2342.19200300.100.1.55
• 0.9.2342.19200300.100.1.60
• 0.9.2342.19200300.100.1.8
• 0.9.2342.19200300.100.1.9
• 0.9.2342.19200300.100.4.5
• 1.2.36.79672281.1.13.6
• 1.2.36.79672281.1.13.7
• 1.2.36.79672281.1.5.3
• 1.2.840.113549.1.9.1
• 1.2.840.113556
• 1.2.840.113556.1.2.13
• 1.2.840.113556.1.2.48
• 1.2.840.113556.1.2.54
• 1.2.840.113556.1.3.11
• 1.2.840.113556.1.3.14
• 1.2.840.113556.1.4.1221
• 1.2.840.113556.1.4.1362
• 1.2.840.113556.1.4.146
• 1.2.840.113556.1.4.159
• 1.2.840.113556.1.4.1669
• 1.2.840.113556.1.4.1696
• 1.2.840.113556.1.4.1963
• 1.2.840.113556.1.4.2011
• 1.2.840.113556.1.4.2012
• 1.2.840.113556.1.4.2013
• 1.2.840.113556.1.4.2014
• 1.2.840.113556.1.4.2015
• 1.2.840.113556.1.4.2016
• 1.2.840.113556.1.4.2017
• 1.2.840.113556.1.4.2018
• 1.2.840.113556.1.4.2019
• 1.2.840.113556.1.4.2020
• 1.2.840.113556.1.4.2023
• 1.2.840.113556.1.4.2058
• 1.2.840.113556.1.4.221
• 1.2.840.113556.1.4.2253
• 1.2.840.113556.1.4.25
• 1.2.840.113556.1.4.52
• 1.2.840.113556.1.4.62
• 1.2.840.113556.1.4.750
• 1.2.840.113556.1.4.803
• 1.2.840.113556.1.4.805
• 1.2.840.113556.1.4.903
• 1.2.840.113556.1.4.904
• 1.2.840.113556.1.4.905
• 1.2.840.113556.1.4.907
• 1.2.840.113556.1.4.93
• 1.2.840.113556.1.4.98
• 1.2.840.113556.1.5.6
• 1.2.840.113556.1.5.72
• 1.2.840.113556.1.5.8
• 1.2.840.113556.1.5.9
• 1.3.6.1.1.1.1.12
• 1.3.6.1.1.1.1.15
• 1.3.6.1.1.1.1.2
• 1.3.6.1.1.1.1.22
• 1.3.6.1.1.1.1.6
• 1.3.6.1.1.1.1.9
• 1.3.6.1.1.1.2.0
• 1.3.6.1.1.1.2.15
• 1.3.6.1.1.1.2.3
• 1.3.6.1.1.11.1.1
• 1.3.6.1.1.16.1
• 1.3.6.1.1.16.4
• 1.3.6.1.1.21.1
• 1.3.6.1.1.21.2
• 1.3.6.1.1.21.4
• 1.3.6.1.1.3.1
• 1.3.6.1.4.1
• 1.3.6.1.4.1.11.1.3.1.1.2
• 1.3.6.1.4.1.11.1.3.1.2.5
• 1.3.6.1.4.1.1466.101.120.1
• 1.3.6.1.4.1.1466.101.120.13
• 1.3.6.1.4.1.1466.101.120.14
• 1.3.6.1.4.1.1466.101.120.15
• 1.3.6.1.4.1.1466.101.120.6
• 1.3.6.1.4.1.1466.101.120.7
• 1.3.6.1.4.1.1466.109.114.1
• 1.3.6.1.4.1.1466.109.114.2
• 1.3.6.1.4.1.1466.109.114.3
• 1.3.6.1.4.1.1466.115.121.1.1
• 1.3.6.1.4.1.1466.115.121.1.12
• 1.3.6.1.4.1.1466.115.121.1.15
• 1.3.6.1.4.1.1466.115.121.1.17
• 1.3.6.1.4.1.1466.115.121.1.24
• 1.3.6.1.4.1.1466.115.121.1.26
• 1.3.6.1.4.1.1466.115.121.1.36
• 1.3.6.1.4.1.1466.115.121.1.38
• 1.3.6.1.4.1.1466.115.121.1.4
• 1.3.6.1.4.1.1466.115.121.1.8
• 1.3.6.1.4.1.36733.2.1.1.59
• 1.3.6.1.4.1.42.2.27.8.1.1
• 1.3.6.1.4.1.42.2.27.8.1.2
• 1.3.6.1.4.1.42.2.27.8.1.28
• 1.3.6.1.4.1.42.2.27.8.1.3
• 1.3.6.1.4.1.42.2.27.8.1.30
• 1.3.6.1.4.1.42.2.27.8.5.1
• 1.3.6.1.4.1.42.2.27.9.5.8
• 1.3.6.1.4.1.4203
• 1.3.6.1.4.1.4203.1.3.5
• 1.3.6.1.4.1.4203.1.5.1
• 1.3.6.1.4.1.4203.1.5.3
• 1.3.6.1.4.1.63
• 1.3.6.1.4.1.694.2.1.112
• 1.3.6.1.4.1.7165.2.1.24
• 1.3.6.1.4.1.8876
• 1.3.6.1.4.1.8876.2.1.10
• 1.3.6.1.4.1.8876.2.1.6
• 1.3.6.1.4.1.8876.2.2.5
• 1.3.6.1.5.5.2
• 2.16.840.1.113719
• 2.16.840.1.113719.1.1.4.1.110
• 2.16.840.1.113719.1.1.4.1.114
• 2.16.840.1.113719.1.1.4.1.120
• 2.16.840.1.113719.1.1.4.1.178
• 2.16.840.1.113719.1.1.4.1.180
• 2.16.840.1.113719.1.1.4.1.197
• 2.16.840.1.113719.1.1.4.1.2
• 2.16.840.1.113719.1.1.4.1.300
• 2.16.840.1.113719.1.1.4.1.31
• 2.16.840.1.113719.1.1.4.1.34
• 2.16.840.1.113719.1.1.4.1.40
• 2.16.840.1.113719.1.1.4.1.44
• 2.16.840.1.113719.1.1.4.1.46
• 2.16.840.1.113719.1.1.4.1.69
• 2.16.840.1.113719.1.1.4.1.96
• 2.16.840.1.113719.1.1.5.1.15
• 2.16.840.1.113719.1.1.5.1.17
• 2.16.840.1.113719.1.1.5.1.23
• 2.16.840.1.113719.1.1.5.1.25
• 2.16.840.1.113719.1.1.5.1.6
• 2.16.840.1.113719.1.1.6.1.45
• 2.16.840.1.113719.1.14.100
• 2.16.840.1.113719.1.14.100.12
• 2.16.840.1.113719.1.14.100.31
• 2.16.840.1.113719.1.14.4.1.11
• 2.16.840.1.113719.1.14.4.1.14
• 2.16.840.1.113719.1.14.4.1.2000
• 2.16.840.1.113719.1.14.4.1.2087
• 2.16.840.1.113719.1.14.4.1.27
• 2.16.840.1.113719.1.14.6.1.7
• 2.16.840.1.113719.1.27.100.33
• 2.16.840.1.113719.1.27.100.34
• 2.16.840.1.113719.1.27.103.1
• 2.16.840.1.113719.1.27.103.2
• 2.16.840.1.113719.1.27.103.4
• 2.16.840.1.113719.1.27.103.7
• 2.16.840.1.113719.1.27.103.8
• 2.16.840.1.113719.1.27.4.46
• 2.16.840.1.113719.1.27.4.48
• 2.16.840.1.113719.1.27.4.49
• 2.16.840.1.113719.1.27.4.50
• 2.16.840.1.113719.1.27.4.82
• 2.16.840.1.113719.1.27.6.1
• 2.16.840.1.113719.1.3.4.7
• 2.16.840.1.113719.1.39.42.100.13
• 2.16.840.1.113719.1.39.42.100.14
• 2.16.840.1.113719.1.39.43.4.106
• 2.16.840.1.113719.1.39.43.4.107
• 2.16.840.1.113719.1.39.43.4.231
• 2.16.840.1.113719.1.39.6.1.2
• 2.16.840.1.113719.1.48.4.1.9
• 2.16.840.1.113719.1.8.4.2
• 2.16.840.1.113719.1.8.4.5
• 2.16.840.1.113730
• 2.16.840.1.113730.3.1.1
• 2.16.840.1.113730.3.1.11
• 2.16.840.1.113730.3.1.241
• 2.16.840.1.113730.3.1.35
• 2.16.840.1.113730.3.2.1
• 2.16.840.1.113730.3.2.2
• 2.16.840.1.113730.3.2.6
• 2.16.840.1.113730.3.4.18
• 2.16.840.1.113883
• 2.5.13.1
• 2.5.13.11
• 2.5.13.13
• 2.5.13.14
• 2.5.13.15
• 2.5.13.16
• 2.5.13.2
• 2.5.13.20
• 2.5.13.27
• 2.5.13.28
• 2.5.13.4
• 2.5.13.5
• 2.5.13.6
• 2.5.13.7
• 2.5.18.12
• 2.5.18.2
• 2.5.18.5
• 2.5.18.7
• 2.5.20.1
• 2.5.20.2
• 2.5.21.1
• 2.5.21.10
• 2.5.21.2
• 2.5.21.4
• 2.5.21.7
• 2.5.21.8
• 2.5.23.2
• 2.5.23.3
• 2.5.23.4
• 2.5.23.5
• 2.5.23.6
• 2.5.4.0
• 2.5.4.1
• 2.5.4.13
• 2.5.4.17
• 2.5.4.20
• 2.5.4.23
• 2.5.4.41
• 2.5.4.50
• 2.5.4.6
• 2.5.4.65
• 2.5.5.1
• 2.5.5.10
• 2.5.5.11
• 2.5.5.12
• 2.5.5.13
• 2.5.5.14
• 2.5.5.15
• 2.5.5.16
• 2.5.5.17
• 2.5.5.2
• 2.5.5.3
• 2.5.5.5
• 2.5.5.6
• 2.5.5.7
• 2.5.5.8
• 2.5.5.9
• 2.5.6.1
• 2.5.6.13
• 2.5.6.14
• 2.5.6.17
• 2.5.6.6
• 2.5.6.9
• ACI Item
• ACL (eDirectory Attribute)
• ADSTYPE_NT_SECURITY_DESCRIPTOR
• Access Log
• Access Point
• AccessControlInnerArea
• AccessControlSpecificArea
• Account Usability Request Control
• AccountExpires
• AdministrativeRole
• AdministratorsAddress
• Alias
• AliasedObjectName
• AllComponentsMatch
• AltServer
• ApplicationEntity
• Assistant
• Attribute
• Attribute Options
• Attribute Type Description
• AttributeSchema
• AttributeTypes
• Audio
• AutonomousArea
• AuxiliaryClassFlag
• BackLink
• BirthDate
• Bit String
• BitStringMatch
• Boolean
• BooleanMatch
• CCITT
• CarLicense
• Case Ignore List
• CaseExactIA5Match
• CaseExactMatch
• CaseExactOrderingMatch
• CaseExactSubstringsMatch
• CaseIgnoreIA5Match
• CaseIgnoreIA5SubstringsMatch
• CaseIgnoreListMatch
• CaseIgnoreMatch
• Certificate Algorithm ID
• Certificate Extensions
• ChangeLogEntry
• ChangeNumber
• ChangeType
• Changelog
• Changes
• Cn
• Co
• CollectiveAttributeInnerArea
• CollectiveAttributeSpecificArea
• CollectiveAttributeSubentries
• CollectiveAttributeSubentry
• CollectiveExclusions
• Collision-Resistant Name
• Company
• ControlType
• Country
• Country String
• Country-Code
• CountryName
• CreateGroupType
• CreateTimestamp
• CrossRef
• DC
• DIT Content Rule
• DITContentRules
• DITStructureRules
• DN Syntax
• DNWithOctetString
• DNWithString
• DSA ObjectClass
• DSE Type
• Data Country Codes
• DateOfBirth
• DeleteOldRDN
• Delivery Method
• DepartmentNumber
• Description
• DetectIntruder
• Device
• DicPersonInfo
• DirXML-ApplicationSchema
• DirXML-Associations
• DirXML-DriverFilter
• DirXML-DriverVersion
• DirXML-EntitlementRef
• DirXML-JavaDebugPort
• DirXML-NTAccountName
• DirXML-PasswordSyncStatus
• DirXML-Rule
• DirXML-State
• Directory Synchronization Control
• DirectoryComponentsMatch
• DirectoryString
• DisplayName
• Distinguished Names
• DistinguishedNameMatch
• Dmd
• Domain
• DomainComponent
• DomainControllerFunctionality
• DomainFunctionality
• Draft-behera-ldap-password-policy
• Draft-ietf-pkix-generalname-00
• DxPwdFailedTime
• DxPwdHistory
• DxPwdLastChange
• DxPwdLocked
• DxPwdLoginTime
• DxPwdMustChange
• EMailAddress
• EdirectoryMonitoringMIB
• EmailAddress
• EntryDN
• EntryFlags
• EntryUUID
• Enumeration syntax
• EquivalentToMe
• Etag
• Example Certificate
• Extended Request
• Extended Response
• ExtendedKeyUsage
• FacsimileTelephoneNumber
• FederationBoundary
• ForestFunctionality
• FullName
• GUID
• Gecos
• Gender
• GeneralizedTime
• GeneralizedTimeMatch
• GeneralizedTimeOrderingMatch
• GetVersionResponse
• GidNumber
• GivenName
• Group-AD
• GroupOfNames
• GroupOfUniqueNames
• GroupType
• Guide LDAPSyntax
• HL7
• Health Level Seven
• HomeDirectory
• HostServer
• How To Get Your Own OID
• How To Use The Password Policy Control
• HttpSessionTimeout
• IA5String
• ISO
• InetOrgPerson
• Integer
• IntegerMatch
• IntegerOrderingMatch
• Internet Assigned Numbers Authority
• Internet Directory Numbers (iso.org.dod.internet.directory 1.3.6.1.1.)
• Interval Syntax
• IntruderLockoutResetInterval
• IpService
• IpServicePort
• IpServiceProtocol
• IsDeleted
• IsRecycled
• JpegPhoto
• KnowledgeInformation
• LDAP Descriptor
• LDAP Extensions and Controls Listing
• LDAP Group
• LDAP Object Identifier Descriptors
• LDAP Protocol Mechanisms
• LDAP Schema
• LDAP Schema Element Type
• LDAPAttributetypesWillekeBranchStart
• LDAPSyntaxes
• LDAP_MATCHING_RULE_DN_WITH_DATA
• LDAP_SERVER_BATCH_REQUEST_OID
• LDAP_SERVER_RANGE_OPTION_OID
• LDAP_SERVER_TREE_DELETE_OID
• LabeledUri
• Language
• LanguageId
• LargeInteger
• LastLogon
• LastLogonTimeStamp
• LdapPermissiveModify
• LdapServer
• LdapServerIdleTimeout
• LdapStdCompliance
• Lightweight Directory Access Protocol (LDAP) Parameters
• LocalEntryID
• LocalityName
• LockedByIntruder
• LockoutAfterDetection
• LoginAllowedTimeMap
• LoginDisabled
• LoginExpirationTime
• LoginGraceRemaining
• LoginIntruderAddress
• LoginIntruderAttempts
• LoginIntruderLimit
• LoginMaximumSimultaneous
• LoginShell
• MacAddress
• Mail
• MailboxRelatedObject
• Manage DSA IT Control
• Management Information Base
• Matched Values Control
• MatchingRuleUse
• MemberNisNetgroup
• MemberQueryURL
• MemberUid
• Memory
• Microsoft Active Directory Syntax
• ModifyTimestamp
• MsDS-Approx-Immed-Subordinates
• MsDS-HasInstantiatedNCs
• MsDS-LockoutDuration
• MsDS-LockoutObservationWindow
• MsDS-LockoutThreshold
• MsDS-MaximumPasswordAge
• MsDS-MinimumPasswordAge
• MsDS-MinimumPasswordLength
• MsDS-PSOAppliesTo
• MsDS-PasswordComplexityEnabled
• MsDS-PasswordHistoryLength
• MsDS-PasswordReversibleEncryptionEnabled
• MsDS-PasswordSettings
• MsDS-PasswordSettingsContainer
• MsDS-PasswordSettingsPrecedence
• MsDS-SupportedEncryptionTypes
• NDSPKIKeyMaterialDN
• NDSPKISDKeyAccessPartition
• NT-Sec-Desc
• NTDSService
• NameForms
• NamingContext
• NcpServer
• Netscape Communications Corp
• NetworkAddress
• NetworkAddressRestriction
• NewRDN
• NewSuperior
• NickName
• NisDomain
• NisDomainObject
• NisNetGroupTriple
• NisNetgroup
• NisNetgroupTriple
• Novell INC
• NspmAdminsDoNotExpirePassword
• NspmComplexityRules
• NspmConfigurationOptions
• NspmMaximumLength
• NspmPasswordACL
• NspmPasswordPolicy
• NspmPasswordPolicyDN
• NumSubordinates
• NumericString
• Numericoid
• OID
• OID Syntax
• OR-Name
• Obituary
• Object Class Description
• ObjectClass
• ObjectClass=unknown
• ObjectClasses
• ObjectIdentifierFirstComponentMatch
• ObjectSID
• OctetString
• OctetStringMatch
• OpenAssertionType
• OpenLDAP
• Oracle Internet Directory and DirXML Moves
• OrganizationalPerson
• OrganizationalUnit
• OrganizationalUnitName
• Owner
• Partition
• PartitionStatus
• PasswordExpirationInterval
• PasswordExpirationTime
• PasswordMinimumLength
• PasswordsUsed
• PermanentConfigParms
• Person
• Photo
• PkiUser
• PosixAccount
• PosixGroup
• PostalAddress
• PostalCode
• PreferredServerList
• Presentation Address
• PrimaryGroupID
• PrintableString
• Private Enterprise Number
• Profile
• Proxied Authorization Control
• Public Claim Names
• PwdAccountLockedTime
• PwdAllowUserChange
• PwdAttribute
• PwdChangedTime
• PwdEndTime
• PwdExpireWarning
• PwdFailureCountInterval
• PwdFailureTime
• PwdGraceAuthNLimit
• PwdGraceExpiry
• PwdGraceUseTime
• PwdHistory
• PwdLastSuccess
• PwdLockout
• PwdLockoutDuration
• PwdMaxAge
• PwdMaxDelay
• PwdMaxFailure
• PwdMaxIdle
• PwdMinAge
• PwdMinDelay
• PwdMustChange
• PwdPolicy
• PwdPolicySubEntry
• PwdProperties
• PwdReset
• PwdSafeModify
• PwdStartTime
• Queue
• Ref
• Reference
• Referral
• RegisteredID
• Replica Link
• ReplicaUpTo
• RequestName
• ResponseName
• ResponseValue
• Retrieving All Attributes
• Revision
• SAMAccountType
• SASLoginPolicy
• SASLoginSecretKey
• SASSecurity
• SASService
• SID string
• SamAccountName
• SambaLMPassword
• SchemaFlagsEx
• ScriptPath
• SecurityEquals
• SecurityPrincipal
• SeeAlso
• SerialNumber
• Server
• ServerHolds
• ServiceConnectionPoint
• ServiceDNSName
• ShadowAccount
• ShadowExpire
• ShadowFlag
• ShadowInactive
• ShadowLastChange
• ShadowMax
• ShadowMin
• ShadowWarning
• SslEnableMutualAuthentication
• StartTLS
• StateOrProvinceName
• StructuralObjectClass Attribute
• SubordinateCount
• Subschema
• SubschemaAdminSpecificArea
• SubschemaSubentry
• Sun Microsystems
• SupportedFeatures
• SupportedGroupingTypes
• SupportedLDAPVersion
• SupportedSASLMechanisms
• SynchronizedUpTo
• System-Id-Guid
• SystemFlags
• Tagged Name
• TargetDN
• Telephone Number LDAP Syntax
• TelephoneNumber
• TelephoneNumberMatch
• Telex
• Timezone
• TombstoneLifetime
• TransitiveVector
• Turn Operation
• TypedName
• UTCTime
• UUID
• Uid
• UidNumber
• UidObject
• Understanding DIT Structure Rules
• Understanding Name Forms
• UnderstandingMatchingRuleUses
• UnicodePwd
• UnknownBaseClass
• Unsolicited Notification
• User
• UserCertificate
• UserPrincipalName
• VPIMUser
• VendorName
• Version (LDAP Attribute)
• Virtual List View Control
• Web Blog_blogentry_230914_1
• Willeke Schema
• X.660
• authoritative
• automountMapName
• certificateRevocation
• certificateRevocationList
• ipProtocolNumber
• shadowLastChange
• status

---

• [#1] - Microsft Base OID for Customer Usage - based on information obtained 2014-03-28
• [#2] - script to help generate them - based on information obtained 2014-03-28