9
szerkesztés
Módosítások
a
→niifAuthenticatedObject
== Versioning ==
Current version: '''2.1b13'''
=== Change log ===
* changes in 2.3
** extend [[#niifAuthenticatedObject]] with [[#niifValidityStart]] and [[#niifExpireTime]] attributes
* changes since 2.1b2
** add [[#niifAuthenticatedObject]] and its [[#niifEduroamPassword]]
* changes since 2.1b1
** updated schema files
* changes since 2.0b5
** add [[#niifCertificateSHA1Fingerprint]]
= Schema files =
* Sun DS format: [[Kép:99-niifschema.ldif|NIIF-SunDS.schema]]* OpenLDAP format: [[Kép:NIIF-OpenLDAP.schema|NIIF-OpenLDAP.schema]]* [[Kép:niifAuthentication.ldif]]
= ObjectClasses =
* [[#niifPersonDegree]]
* [[#niifPersonPosition]]
* <strike>[[#niifPrefix]]</strike>* <strike>[[#niifStatus]]</strike>* <strike>[[#niifTitle]]</strike>* <strike>[[#niifCertificateSubjectDN]]</strike>
* [[#niifPersonDateOfBirth]]
* [[#niifPersonActivityStatus]]
* [[#niifEduPersonArchiveCourse]]
* [[#niifEduPersonHeldCourse]]
}}
== niifAuthenticatedObject ==
{{LDAPObjectClassDef
|name=niifAuthenticatedObject
|OID=1.3.6.1.4.1.11914.0.0.10
|description=An object having extra passwords or time-limited validity
|optional=
* [[#niifEduroamPassword]]
* [[#niifValidityStart]]
* [[#niifExpireTime]]
}}
|name= niifUniqueID
|OID= 1.3.6.1.4.1.11914.0.1.3
|numOfValuesnumofvalues= single
|availability= organizational
|description= Unique ID of a person.
|description= Prefix of the person's name
|semantics= A name should have only one prefix, multiple entitlements may be listed one after the other in the same value
|numOfValuesnumofvalues=single
|availability=public
|example=Prof. Dr.
|description= Position of the person within a department or organization
|example= dékán
|notes= May be specified in multiple languages by the use of language tags. Also see When a person is in relationship with multiple departments or organizations, no exact match between a status and a particular organization can be defined within an entry. To solve this situation, some relation-representing entry may be used, eg. use of the schacPersonalPosition attribute, which defines an URN format for this purpose.
}}
|name= niifCertificateSubjectDN
|OID= 1.3.6.1.4.1.11914.0.1.151
|description= Subject DN of the certificate of the entity. This attribute is '''OBSOLETED''', use [[#niifCertificateSHA1Fingerprint]] instead.|semantics= The value must describe a DN which identifies the certificate subject of the entity. |values= Unlike standard LDAP DN, this value must contain the same number of spaces between DN elements as it is tied in the certificate.|example= cn=Bajnok Kristóf, ou=ITAK, o=Sztaki, c=HU|notes= Although it is possible for an entity to have more than one certificates at the same time, this kind of usage is deprecated.When used, this attribute must be indexed.This attribute may be applied to any kind of entities that can be certified with an X.509 certificate, including persons, servers, network nodes, etc.
}}
|description= Fingerprint of a certificate which belongs to the subject.
|semantics= Multiple fingerprints may be stored in this attribute, if a subject has multiple valid certificates. This attribute uses case insensitive matching rule.
|valuevalues= SHA-1 hash in hexadecimal string format without any separator characters.
|example= fe6d5980e2c02912024054cec114ee53ebeb2e6c
|numofvalues= multi
|useinfederation=[[HREFAttributeSpec#schacDateOfBirth]],[[HREFAttributeSpec#schacYearOfBirth]]
|notes= It's recommended to use the schacDateOfBirth attribute instead, as it has the same syntax and semantics.
|example= 19800316
}}
|numofvalues= single
|availability= organizational
|example= 19980901
}}
|notes= If this date is in the past, niifPersonActivityStatus must be 'inactive', and the user should be locked out.
|availability= organizational
|example= 20030627
}}
|numofvalues= single
|availability= confidential
|example= Kolozsvár
|notes= It's recommended to use the schacPlaceOfBirth attribute instead.
}}
|numofvalues= single
|availability= confidential
|example= Románia
|notes= It's recommended to use the schacPlaceOfBirth attribute instead.
}}
|numofvalues= single
|availability= confidential
|example= 329906AA
|notes= Every Hungarian citizen by the age of 14 receives an Identity Card. For foreigners, Passport Number should be used. This number should never be made public.
Format of the code may vary as numbering scheme has been changed in the recent years.
|numofvalues= single
|availability= confidential
|example= 1234 Budapest, Harap u. 3.
}}
|description= Code of the courses the student attends to in the current semester
|values= Course codes defined in the student calendar.
|examplesexample=
* BMEVIMM1234
* BMEVIMA3214
|notes= This attribute has a meaning only if the person is a faculty (eduPersonAffiliation = faculty), the values should be taken from the student calendar.
For authorization decision reasons, courses from previous semester(s) might appear in this attribute if the local policy needs these additional values.
}}
== Attributes of niifAuthenticatedObject ==
=== niifEduroamPassword ===
{{LDAPAttributeDef
|name=niifEduroamPassword
|OID=1.3.6.1.4.1.11914.0.1.4
|description=Clear text password for eduroam authentication
|notes=SUP userPassword
|syntax=Octet String
}}
=== niifValidityStart ===
{{LDAPAttributeDef
|name=niifValidityStart
|OID=1.3.6.1.4.1.11914.0.1.5
|numofvalues= single
|description=When to enable this account
|syntax=Generalized Time
}}
=== niifExpireTime ===
{{LDAPAttributeDef
|name=niifExpireTime
|OID=1.3.6.1.4.1.11914.0.1.6
|numofvalues= single
|description=When to disable this account
|syntax=Generalized Time
}}
