Overview[1]#

eDirectory supports numerous Extended Flags that affect the type of data an attribute can contain and that control its synchronization schedule.

The LDAP server in NDS eDirectory can set and get information about the following eDirectory extended flags.

By default, when creating an attribute definition, none of these flags are set.

To obtain the information when reading the schema, you must send the flag with the request to read the attribute.

EDirectory Extended LDAP Flags:#

• X-NDS_NAME
• X-NDS_LOWER_BOUND
• X-NDS_UPPER_BOUND
• X-NDS_NOT_SCHED_SYNC_IMMEDIATE
• X-NDS_NON_REMOVABLE
• X-NDS_PUBLIC_READ
• X-NDS_SERVER_READ
• X-NDS_HIDDEN
• X-NDS_NEVER_SYNC
• X-NDS_SCHED_SYNC_NEVER
• X-NDS_NAME_VALUE_ACCESS
• X-NDS_BOTH_MANAGED
• X-NDS_ENCRYPTED_SYNC
• X-NDS_FILTERED_REQUIRED
• X-NDS_FILTERED_OPERATIONAL
• X-NDS_NAMING
• X-NDS_CONTAINMENT
• X-NDS_NOT_CONTAINER
• X-NDS_ACL_TEMPLATES

ObjectClass EDirectory Extended LDAP Flags#

These eDirectory objectClass EDirectory Extended LDAP Flags can be used when adding a ObjectClass Type definition to the schema, you can set the following flags. When reading definitions, you send the flags to obtain the information.

• X-NDS_NOT_CONTAINER
• X-NDS_CONTAINMENT
• X-NDS_NAMING
• X-NDS_NONREMOVABLE
• X-NDS_NAME

Standard LDAP attribute flags can also be used. #

The following table lists the LDAP name and the corresponding NDAP name.

Standard LDAP Flags	NDAP Equivalent
SINGLE-VALUE	DS_SINGLE_VALUED_ATTR set to True COLLECTIVE Not supported
NO-USER-MODIFICATION Flag	DS_READ_ONLY_ATTR set to True
USAGE userApplications	None required. This sets the attribute as a normal attribute. The other Attribute Usage Flags flags can only ?? be set by eDirectory.
USAGE directoryOperation	DS_OPERATIONAL (set by eDirectory)
USAGE distributedOperation	DS_OPERATIONAL (set by eDirectory)
USAGE dSAOperation	DS_OPERATIONAL (set by eDirectory)

Standard LDAP ObjectClass Flags#

The standard LDAP class flags can also be used.

Standard LDAP Flags	NDAP Equivalent
ABSTRACT	DS_EFFECTIVE_CLASS set to False
STRUCTURAL	DS_EFFECTIVE_CLASS set to True
AUXILIARY	DS_AUXILIARY_CLASS set to True

Category#

eDirectory

More Information#

There might be more information for this subject on one of the following:

• X-NDS_ACL_TEMPLATES
• X-NDS_BOTH_MANAGED
• X-NDS_CONTAINMENT
• X-NDS_ENCRYPTED_SYNC
• X-NDS_FILTERED_OPERATIONAL
• X-NDS_FILTERED_REQUIRED
• X-NDS_LOWER_BOUND
• X-NDS_NAME
• X-NDS_NAME_VALUE_ACCESS
• X-NDS_NAMING
• X-NDS_NEVER_SYNC
• X-NDS_NONREMOVABLE
• X-NDS_NON_REMOVABLE
• X-NDS_NOT_CONTAINER
• X-NDS_NOT_SCHED_SYNC_IMMEDIATE
• X-NDS_PUBLIC_READ
• X-NDS_SCHED_SYNC_NEVER
• X-NDS_SERVER_READ
• X-NDS_SYNTAX

---

• [#1] - LDAP Schema for NDS - based on information obtained 2017-07-05