Overview#
SubschemaSubentry is an Attribute found in the RootDSE which name of a SubschemaSubentry that provides information about the schema elements defined in RFC 4512 section 4.4 used "discover the DN of the subschema (sub)entry holding the subschema controlling a particular entry, a client reads that entry's 'subschemaSubentry' operational attribute."Attributes in this entry typically include:
- LDAPSyntaxes -- The set of LDAPSyntaxes defined in the server schema.
- MatchingRules -- The set of MatchingRule defined in the server schema.
- matchingRuleUse -- The set of matching rule uses defined in the server schema for extensibleMatch filters.
- AttributeTypes -- The set of attribute Type defined in the server schema.
- ObjectClasses -- The set of object classes defined in the server schema.
- Name Forms -- The set of Name Forms defined in the server schema.
- DIT Content Rule -- The set of DIT Content Rule defined in the server schema.
- DIT Structure Rule -- The set of DIT Structure Rule defined in the server schema.
Note that all of these are operational attributes and therefore will not be returned unless explicitly requested.
Also note that it is technically possible for directory servers to have multiple SubschemaSubentry with different sets of schema definitions that govern different portions of the DIT. The schema that applies to any given entry may be determined by retrieving the subschemaSubentry Virtual Attribute from that entry.
Attribute Definition#
The SubschemaSubentry AttributeTypes is defined as:- OID of 2.5.18.10
- NAME: SubschemaSubentry
- DESC:
- EQUALITY: distinguishedNameMatch
- ORDERING:
- SYNTAX: 1.3.6.1.4.1.1466.115.121.1.12
- SINGLE-VALUE
- NO-USER-MODIFICATION
- USAGE DirectoryOperation !! More Information