Overview#

SubschemaSubentry is an Attribute found in the RootDSE which name of a SubschemaSubentry that provides information about the schema elements defined in RFC 4512 section 4.4 used "discover the DN of the subschema (sub)entry holding the subschema controlling a particular entry, a client reads that entry's 'subschemaSubentry' operational attribute."

Attributes in this entry typically include:

• LDAPSyntaxes -- The set of LDAPSyntaxes defined in the server schema.
• MatchingRules -- The set of MatchingRule defined in the server schema.
• matchingRuleUse -- The set of matching rule uses defined in the server schema for extensibleMatch filters.
• AttributeTypes -- The set of attribute Type defined in the server schema.
• ObjectClasses -- The set of object classes defined in the server schema.
• Name Forms -- The set of Name Forms defined in the server schema.
• DIT Content Rule -- The set of DIT Content Rule defined in the server schema.
• DIT Structure Rule -- The set of DIT Structure Rule defined in the server schema.

Also note that it is technically possible for directory servers to have multiple SubschemaSubentry with different sets of schema definitions that govern different portions of the DIT. The schema that applies to any given entry may be determined by retrieving the subschemaSubentry Virtual Attribute from that entry.

Attribute Definition#

The SubschemaSubentry AttributeTypes is defined as:

• OID of 2.5.18.10
• NAME: SubschemaSubentry
• DESC:
• EQUALITY: distinguishedNameMatch
• ORDERING:
• SYNTAX: 1.3.6.1.4.1.1466.115.121.1.12
• SINGLE-VALUE
• NO-USER-MODIFICATION
• USAGE DirectoryOperation !! More Information

There might be more information for this subject on one of the following:

• 2.5.18.10
• DIT Content Rule
• DIT Structure Rule
• Glossary Of LDAP And Directory Terminology
• LDAP Object Identifier Descriptors
• LDAP Query For Schema
• LDAP Schema
• MatchingRule
• MatchingRuleUse
• RootDSE
• Virtual Attribute