{"id":2133,"date":"2010-09-28T05:55:10","date_gmt":"2010-09-28T09:55:10","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2010\/09\/28\/oiddirectory-services-11g-schema-object-class-attributes\/"},"modified":"2010-09-28T05:55:10","modified_gmt":"2010-09-28T09:55:10","slug":"oiddirectory-services-11g-schema-object-class-attributes","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2010\/09\/28\/oiddirectory-services-11g-schema-object-class-attributes\/","title":{"rendered":"OID\/Directory Services 11g – Schema, Object Class, Attributes"},"content":{"rendered":"

<\/a><\/p>\n

This post covers overview of Schema<\/strong>, Object Class<\/strong> and Attributes<\/strong>in OID. Schema Extension (creating object class, adding attribute) is NOT<\/strong> a regular task for OID administrators but one should know basics and tool\/steps to modify\/extend OID Schema.<\/p>\n

Schema<\/strong> : contains rules about kinds of objects you can store in OID. As shown in figure above schema definition is stored in cn=subSchemaSubentry<\/strong> under Root DSE .\u00a0 Use ldapadd<\/strong> or ODSM<\/strong>to add subSchemaSubentry entry (You cannot use bulkload to add subSchemaSubentry<\/font>).<\/p>\n

Attribute <\/strong>: is item\/property attached to an entity\/entry in OID. firstname, lastname, address are example of attributes for entity\/entry user<\/strong>. Attribute can be Application Attributes<\/strong>(example firstname, lastname, photo)\u00a0or System Configuration Attribute<\/strong>(example createTimestamp, createdBy, modifiedBy). Attribute can hold single value<\/strong> or multiple value<\/strong>.<\/p>\n

Object Class<\/strong> : group of attribute<\/strong> that define structure of entry\/entity is called Object Class (for example user<\/strong>, person<\/strong>, OrganizationalPerson <\/strong>are Object Class). ObjectClass contains mandatory<\/strong> and optional <\/strong>attribute (For example for object class Person,<\/strong> cn<\/strong> & sn<\/strong> attribute are mandatory attribute where as address<\/strong>is optional attribute). You assign objectClass to an entity\/entry. There are three type of Object Class<\/p>\n

a) Structural <\/strong>: Structural object classes describe the basic aspects of an object. example, people, person, printer ..
\n
\nb) Auxiliary <\/strong>: Auxiliary object classes are groupings of optional attributes<\/strong> that expand the existing list of attributes in an entry. Unlike structural object classes, they do not place restrictions on where an entry may be stored, and you can attach them to any entry regardless of that entry’s location in the DIT.<\/p>\n

c) Abstract<\/strong> : An abstract object class is a virtual object class. It is used only for convenience when specifying the highest levels of the object class hierarchy. It cannot be the only object class for an entry. For example, the object class top<\/strong>is an abstract object class. It is required as a superclass for all structural object classes, but it cannot be used alone.<\/p>\n

.
\nHow to Add\/Modify\/Delete Object Class ?<\/strong><\/p>\n

You can use a)<\/strong>\u00a0Oracle Directory Services Manager<\/strong> (More on ODSM here<\/a>) or b)<\/strong> command line tool <\/strong>(ldapXXXX<\/strong>)\u00a0to add\/modify\/delete Object Class.<\/p>\n

To Manage\/Create Object Class using ODSM<\/u><\/strong>: Login to ODSM (http:\/\/host:7005\/odsm<\/strong>) -> Schema -> Object Classes -> Add\/Modify\u00a0<\/p>\n

<\/a><\/p>\n

.<\/p>\n

To add\/modify\/delete Object Class using Command Line<\/u><\/strong>: Use ldap commands like ldapsearch<\/strong>, ldapmodify .<\/strong><\/p>\n

.<\/p>\n

\u00a0\u00a0<\/p>\n

Things good to know\u00a0about managing OID Schema<\/u><\/strong>
\n1.<\/strong> Every structural object class must have top<\/strong>as a superclass (top is name of object class<\/font>)
\n2.<\/strong> The name<\/strong> and the object identifier<\/strong> of an object class must be unique across all the schema components (Object Identifier is string of decimal numbers, which uniquely identifies an Object<\/font>)
\n3.<\/strong> The Object Identifier must begin with the unique identifier 2.16.840.1.113894 followed by either the Oracle-supplied prefix.9999 or a site-specific prefix.
\n4.<\/strong> It is possible to redefine mandatory attributes<\/strong>in a superclass into optional attributes<\/strong> in the new object class. Conversely, optional attributes<\/strong>in a superclass can be redefined into mandatory attributes<\/strong> in the new object class.
\n5.<\/strong> You cannot modify an object class that is part of the standard LDAP schema. You can, however, modify user-defined object classes.
\n6.<\/strong> If existing object classes do not have the attributes you need, you can create an auxiliary object class<\/strong> and associate the needed attributes with that object class.
\n7.<\/strong> You cannot<\/strong> add additional mandatory attributes to an existing object class (Use auxiliary class to include existing objectclass as superclass and add additional attributes in auxiliary class<\/font>).
\n8.<\/strong> You cannot<\/strong>remove attributes or super-classes from an existing object class.
\n9.<\/strong> You cannot<\/strong> convert structural object classes<\/strong> to other object class types (like structural or abstract).
\n10.<\/strong> You should not modify an object class if there are entries already associated with it.
\n11<\/strong>. You cannot<\/strong> delete object classes from the base schema.
\n12<\/strong>. You can delete object classes that are not in the base schema if they are not directly or indirectly referenced by other schema components.<\/p>\n

.<\/p>\n

References\/Related<\/u><\/strong><\/p>\n