# =============================================================================
#                                Jetspeed Schema
# =============================================================================
#
# The following attribute type OID have been arbitrarily chosen for now.
#
#              +-----------------------------+-----------------+
#              |  Apache AttributeType OID   |      name       |
#              +-----------------------------+-----------------+
#              | 1.3.6.1.4.1.8100.1.2.3.1    | j2-classname    |
#              | 1.3.6.1.4.1.8100.1.2.3.2    | j2-action       |
#              | 1.3.6.1.4.1.8100.1.2.3.3    | j2-role         |
#              | 1.3.6.1.4.1.8100.1.2.3.4    | j2-group        |
#              | 1.3.6.1.4.1.8100.1.2.3.5    | j2-permission   |
#              | 1.3.6.1.4.1.8100.1.2.3.6    | creation-date   |
#              | 1.3.6.1.4.1.8100.1.2.3.7    | modified-date   |
#              +-----------------------------+-----------------+
# =============================================================================

attributetype ( 1.3.6.1.4.1.8100.1.2.3.1 NAME 'j2-classname'
	DESC 'The java class name of the object.'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.8100.1.2.3.2 NAME 'j2-action'
	DESC 'An action associated with a permission. This is a multi-valued attribute.'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.3 NAME 'j2-role'
	DESC 'The UID of an associated Role. This is a multi-valued attribute.'
	EQUALITY caseExactIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.4 NAME 'j2-group'
	DESC 'The UID of an associated Group. This is a multi-valued attribute.'
	EQUALITY caseExactIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.5 NAME 'j2-permission'
	DESC 'The UID of an associated Permission'
	EQUALITY caseExactIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

attributetype ( 1.3.6.1.4.1.8100.1.2.3.6 NAME 'creation-date'
	DESC 'create date'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.8100.1.2.3.7 NAME 'modified-date'
	DESC 'modified date'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
	SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.1 NAME 'jetspeed-2-group'
	DESC 'Jetspeed-2 group'
	MUST ( j2-classname $ uid)
	MAY ( j2-role $ creation-date $ modified-date) )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.2 NAME 'jetspeed-2-permission'
	DESC 'Jetspeed-2 permission'
	MUST ( j2-classname $ uid)
	MAY ( j2-action $ creation-date $ modified-date) )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.3 NAME 'jetspeed-2-role'
	DESC 'Jetspeed-2 role'
	MUST ( j2-classname $ uid)
	MAY ( creation-date $ modified-date) )

objectclass ( 1.3.6.1.4.1.8100.1.2.4.4 NAME 'jetspeed-2-user'
	DESC 'Jetspeed-2 user' SUP inetOrgPerson
	MUST ( cn $ uid)
	MAY ( j2-role $ j2-group $ j2-permission $ creation-date $ modified-date))