====== INFN-AAI schema ======

[[cn:ccr:aai:en:tech:aai-schema:ldif|Frammento LDIF]]

===== INFN OID Tree =====

The INFN-AAI OID is registered under the INFN enterprise number [[http://www.oid-info.com/get/1.3.6.1.4.1.10403|10403]], assigned to Istituto Nazionale di Fisica Nucleare.

The branch 1.3.6.1.4.1.10403.1 is reserved for INFN-AAI:
  * **1.3.6.1.4.1.10403.1.1** - Branch for INFN-AAI LDAP attributes
  * **1.3.6.1.4.1.10403.1.2** - Branch for INFN-AAI LDAP object classes

===== INFN-AAI LDAP attributes =====

^ Attribute             ^ OID                       ^ Description                           ^ Equality       ^ Syntax            ^
| infnUUID              | 1.3.6.1.4.1.10403.1.1.6   |  UUID of infnPerson                   |caseIgnoreMatch |  Directory String |
| infnCertSubjectDN     | 1.3.6.1.4.1.10403.1.1.7   |  DN of X.509 Certificate Subject      |caseIgnoreMatch |  Directory String |
| infnAccountDN         | 1.3.6.1.4.1.10403.1.1.13  |  local LDAP branch entry's DN         |caseIgnoreMatch |  Directory String |
| infnKerberosPrincipal | 1.3.6.1.4.1.10403.1.1.14  |  Kerberos Principal for infnAccount   |caseIgnoreMatch |  Directory String |
| infnLinkedUUID        | 1.3.6.1.4.1.10403.1.1.15  |  infnUUID of Identity in GODiVA       |caseIgnoreMatch |  Directory String |




===== INFN-AAI LDAP object classes =====

^ ObjectClass   ^ OID                       ^ SUP             ^ MUST         ^ MAY           ^
| infnPerson    | 1.3.6.1.4.1.10403.1.2.1   |  top AUXILIARY  |cn infnUUID |infnLinkedUUID infnCertSubjectDN infnAccountDN infnKerberosPrincipal |
| infnAccount   | 1.3.6.1.4.1.10403.1.2.2   |  top AUXILIARY  |cn infnUUID infnLinkedUUID | infnCertSubjectDN infnAccountDN infnKerberosPrincipal |
| infnHost      | 1.3.6.1.4.1.10403.1.2.4   |  top STRUCTURAL |cn          |description infnCertSubjectDN infnKerberosPrincipal infnUUID userpassword |
| infnService   | 1.3.6.1.4.1.10403.1.2.5   |  top STRUCTURAL |cn          |description infnCertSubjectDN infnKerberosPrincipal infnUUID userpassword |