Files for django-ldap-academia-ou-manager, version 0. Close Hashes for django-ldap-academia-ou-manager File type Source. Python version None. Upload date Jul 4, Hashes View. Multiple subjects may have the same value. The first character MUST be alphanumeric. Granularity of the values SHOULD be coarse enough to prevent unintentional identification of subjects or correlation of access to multiple services, but is not otherwise constrained except by syntax.
The mechanism by which the usage reports are provided to an organization is outside the scope of this specification. It is typically used in federated scenarios in which anonymous or pseudonymous access is more frequent. Comments on Other Common Person Attributes. The attributes in the following section are from other standard object classes or attribute definitions.
It is not a complete list of such attributes, but in any case where the eduPerson working group considered that some comment was needed to clarify the meaning or utility of an attribute, it can be found here.
For details on the syntax and other aspects of these attributes, see the appropriate standards documents. Each name is one value of this multi-valued attribute. If the object corresponds to a person, it is typically the person's full name. One of the two required attributes in the person object class the other is sn. As such it is one of three recommended "core application utility" attributes. The third is eduPersonOrgDN.
The latter could help them find a directory entry for the person's organization. This attribute is often overloaded in the sense that many applications act as if this were "their" attribute, and therefore add values to this attribute as they see fit.
Because of that it is impossible to give a precise and accurate definition of what this field means. Open-ended; whatever the person or the directory manager puts here.
According to RFC, "The 'description' attribute type contains human-readable descriptive phrases about the object. Each description is one value of this multi-valued attribute. From RFC description: "preferred name of a person to be used when displaying entries. Cn common name is multi-valued and overloaded to meet the needs of multiple applications. According to RFC "The 'facsimileTelephoneNumber' attribute type contains telephone numbers and, optionally, the parameters for facsimile terminals.
Each telephone number is one value of this multi-valued attribute. From RFC description:"The 'givenName' attribute type contains name strings that are the part of a person's name that is not their surname. Each string is one value of this multi-valued attribute. From RFC description: "The [homePhone] attribute type specifies a home telephone number associated with a person. From RFC description: "The Home postal address attribute type specifies a home postal address for an object.
This should be limited to up to 6 lines of 30 characters each. From RFC description: "The 'initials' attribute type contains strings of initials of some or all of an individual's names, except the surname s. When used as a component of a directory name, it identifies a geographical area or locality in which the named object is physically located or with which it is associated in some other important way. Commonly a URL for a web site associated with this person.
Good candidate for a self-maintained attribute. Note, however, that the vocabulary for the label portion of the value is not standardized. Values placed in the attribute should consist of a URI at the present time, a URL optionally followed by one or more space characters and a label. Since space characters are not allowed to appear un-encoded in URIs, there is no ambiguity about where the label begins. Multiple labeledURI values will generally indicate different resources that are all related to the X.
The label is used to describe the resource to which the URI points, and is intended as a friendly name fit for human consumption. This document does not propose any specific syntax for the label part. Note that the label may include any characters allowed by the caseExactString syntax, but that the use of non-IA5 non-ASCII characters is discouraged as not all directory clients may handle them in the same manner. If non-IA5 characters are included, they should be represented using the X.
Another example. This one includes a hint in the label to help the user realize that the URL points to a photo image. Preferred address for the "to:" field of email to be sent to this person. Usually of the form localid univ. Though multi-valued, there is often only one value. Some mail clients will not display entries unless the mail attribute is populated.
From RFC "The 'manager' attribute specifies managers, by distinguished name, of the person or entity. Do not use this attribute to carry school college names. Organizational unit s. According to X. When used as a component of a directory name it identifies an organizational unit with which the named object is affiliated.
The designated organizational unit is understood to be part of an organization designated by an OrganizationName [o] attribute.
It follows that if an Organizational Unit Name attribute is used in a directory name, it must be associated with an OrganizationName [o] attribute. An attribute value for Organizational Unit Name is a string chosen by the organization of which it is a part. Campus or office address.
Follow X. If this attribute. From RFC "The 'postOfficeBox' attribute type contains postal box identifiers that a Postal Service uses when a customer arranges to receive mail at a box on the premises of the Postal Service. Each postal box identifier is a single value of this multi-valued attribute. From RFC The 'seeAlso' attribute type contains the distinguished names of objects that are related to the subject object.
Each related object name is one value of this multi-valued attribute. Surname or family name. One of the two required attributes in the person object class from which eduPerson derives the other is cn. As such it is one of eduPerson's three "core application utility" attributes. If the person has a multi-part surname whether hyphenated or not , store both 1 the whole surname including hyphens if present and 2 each component of a hyphenated surname as a separate value in this multi-valued attribute.
That yields the best results for the broadest range of clients doing name searches. Format: The values should be coordinated on a national level. If well-known shortcuts exist, like the two-letter state abbreviations in the US, these abbreviations are preferred over longer full names. State or province name. While RFC specifies use of the "full name," it is customary to use the U. Postal Service set of two-letter state name abbreviations for states in the U.
Standard two-letter abbreviations for U. Each street is one value of this multi-valued attribute. From RFC "The 'title' attribute type contains the title of a person in their organizational context. Each title is one value of this multi-valued attribute. Likely only one value. A number of off-the-shelf directory-enabled applications make use of this inetOrgPerson attribute, not always consistently. From RFC "The 'uniqueIdentifier' attribute specifies a unique identifier for an object represented in the Directory.
The domain within which the identifier is unique and the exact semantics of the identifier are for local definition. For a person, this might be an institution- wide payroll number. For an organizational unit, it might be a department code. Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment. You signed in with another tab or window. Reload to refresh your session.
You signed out in another tab or window. File: eduPerson. This file should be imported with the following command while logged in to the Domain Controller as an Admin User:.
Permissible values: faculty, student, staff, alum, member, affiliate, employee, library-walk-in. Jira links. Created by Etan Weintraub johnshopkins. No labels. David Bantz alaska. Permalink May 03, James Babb internet2. Permalink Jan 25,
0コメント