# Mod for Feide schema version 1.5, 2010.04.21, Håvard Høyaas, Steria (hh@steria.no)
#
# This LDIF file makes modifications to the cn=schema tree
# which should modify the user portion of the schema of your
# directory (if that concept exists).  The LDIF is constructed
# to perform this modification in one update.  Should any portion
# fail, then the entire update will fail and no change should be
# made.  The first part of the LDIF is to delete any attributes
# that may have already been defined so that they can be readded
# in the next section. Same methodology applies to the objectclasses
# which follows.
#
# This file contains lines with trailing spaces so that continuation
# of lines work properly.  Please make sure this is respected or you
# may have difficulty in applying the LDIF.
#
dn: cn=subschemasubentry
changetype: modify
#
# if you need to change the definition of an attribute,
#            then first delete and re-add in one step
#
# if this is the first time you are adding the eduperson
# objectclass using this LDIF file, then you should comment
# out the delete attributetypes modification since this will
# fail. Alternatively, if your ldapmodify has a switch to continue
# on errors, then just use that switch -- if you're careful
#
#
# "norEduPerson" attributes
#
#delete: attributetypes
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.1  NAME 'norEduOrgUniqueNumber' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.2  NAME 'norEduOrgUnitUniqueNumber' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.3  NAME 'norEduPersonBirthDate' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.4  NAME 'norEduPersonLIN' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.5  NAME 'norEduPersonNIN' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.6  NAME 'norEduOrgAcronym' ) 
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.7  NAME 'norEduOrgUniqueIdentifier' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.8  NAME 'norEduOrgUnitUniqueIdentifier' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.9  NAME 'federationFeideSchemaVersion' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.10 NAME 'norEduPersonLegalName' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.11 NAME 'norEduOrgSchemaVersion' )
#attributetypes: ( 1.3.6.1.4.1.2428.90.1.12 NAME 'norEduOrgNIN' )
#-
#
# add the attributes -- in case there is a change of definition
#
#
# "norEduPerson" og "norEduOrg" attributes
#
add: attributetypes
attributetypes: ( 1.3.6.1.4.1.2428.90.1.1 
		NAME 'norEduOrgUniqueNumber' 
		DESC 'The number describing the institution.' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.27' 
		EQUALITY integerMatch
		USAGE userApplications
		SINGLE-VALUE )  
attributetypes: ( 1.3.6.1.4.1.2428.90.1.2 
		NAME 'norEduOrgUnitUniqueNumber' 
		DESC 'The number describing the organizational unit.' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.27' 
		EQUALITY integerMatch
		USAGE userApplications
		SINGLE-VALUE )  
attributetypes: ( 1.3.6.1.4.1.2428.90.1.3 
		NAME 'norEduPersonBirthDate' 
		DESC 'Birth date for a person.' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.27' 
		EQUALITY integerMatch
		USAGE userApplications
                SINGLE-VALUE ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.4 
		NAME 'norEduPersonLIN' 
		DESC 'Locally defined unique identifier for a person' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' 
		SUBSTR caseIgnoreSubstringsMatch
		EQUALITY caseIgnoreMatch
		USAGE userApplications ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.5 
		NAME 'norEduPersonNIN' 
		DESC 'National Identity Number, assigned by public authorities' 
		EQUALITY caseIgnoreMatch
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15'
		USAGE userApplications
		SINGLE-VALUE  ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.6 
		NAME 'norEduOrgAcronym' 
		DESC 'Acronym for the organization.' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' 
		EQUALITY caseIgnoreMatch
		USAGE userApplications ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.7 
		NAME 'norEduOrgUniqueIdentifier' 
		DESC 'Unique identifier describing the organization.' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' 
		EQUALITY caseIgnoreMatch
		USAGE userApplications
		SINGLE-VALUE ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.8 
		NAME 'norEduOrgUnitUniqueIdentifier' 
		DESC 'Unique identifier describing the organizational unit.' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' 
		EQUALITY caseIgnoreMatch
		USAGE userApplications
		SINGLE-VALUE ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.9 
		NAME 'federationFeideSchemaVersion' 
		DESC 'The norEdu scheme version used by the LDAP of the organization .' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' 
		EQUALITY caseIgnoreMatch
		USAGE userApplications
		SINGLE-VALUE )  
attributetypes:	( 1.3.6.1.4.1.2428.90.1.10 
		NAME 'norEduPersonLegalName' 
		DESC 'The legal name for the subject it is associated with' 
		SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 
		SUBSTR caseIgnoreSubstringsMatch 
		EQUALITY caseIgnoreMatch 
		USAGE userApplications 
		SINGLE-VALUE ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.11 
		NAME 'norEduOrgSchemaVersion' 
		DESC 'Version number of the norEdu schema used by the organization' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' 
		EQUALITY caseIgnoreMatch
		USAGE userApplications ) 
attributetypes: ( 1.3.6.1.4.1.2428.90.1.12 
		NAME 'norEduOrgNIN' 
		DESC 'Identifier assigned to the organization by public authorities' 
		SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' 
		EQUALITY caseIgnoreMatch
		USAGE userApplications
		SINGLE-VALUE ) 
-
#
# eduPerson objectclass definition
# can only be done after attributes established
#
# now add the objectclass 
# If object class already exists, comment out the following section:
add: objectclasses
objectclasses: ( 1.3.6.1.4.1.2428.90.2.1 
                 NAME 'norEduOrg' 
                 AUXILIARY 
                 DESC 'Supplementary attributes for an educational organization' 
                 MAY ( norEduOrgUniqueIdentifier $ norEduOrgNIN $
                       norEduOrgAcronym $ norEduOrgSchemaVersion $
                       dc $ mail $ labeledURI ) )
objectclasses: ( 1.3.6.1.4.1.2428.90.2.2
                 NAME 'norEduOrgUnit'
                 AUXILIARY
                 DESC 'Supplementary attributes for a unit of an educational organization'
                 MAY ( norEduOrgUnitUniqueIdentifier $ norEduOrgAcronym $
                       cn $ mail $ labeledURI ) )
objectclasses: ( 1.3.6.1.4.1.2428.90.2.3
                 NAME 'norEduPerson'
                 AUXILIARY
                 DESC 'Supplementary attributes for a person affiliated with an educational #organization'
                 MAY ( norEduPersonLegalName $ norEduPersonNIN $ norEduPersonLIN $ norEduPersonBirthDate) )
objectclasses: ( 1.3.6.1.4.1.2428.90.2.4
                 NAME 'norEduObsolete'
                 AUXILIARY
                 DESC 'Attributes obsoleted in norEdu 1.4 or later'
                 MAY ( norEduOrgUniqueNumber $ norEduOrgUnitUniqueNumber $
                       federationFeideSchemaVersion ) )
-
#
# end of LDIF
#