Add dgIdentity from draft-haripriya-dynamicgroup-02

diff --git a/servers/slapd/schema/dyngroup.schema b/servers/slapd/schema/dyngroup.schema
index 1650cb4965b90f0fd54cf9be6902f7cfb3c98ed8..c88a6c52a20c330ffbda13cfa01817ca4c5615f7 100644 (file)
--- a/servers/slapd/schema/dyngroup.schema
+++ b/servers/slapd/schema/dyngroup.schema
@@ -43,6 +43,8 @@
 # In other words, the Netscape definitions are broken and interoperability
 # is not guaranteed.
 #
+# Also see the new DynGroup prposed spec at
+# http://tools.ietf.org/html/draft-haripriya-dynamicgroup-02
 
 objectIdentifier NetscapeRoot 2.16.840.1.113730
 
@@ -50,14 +52,31 @@ objectIdentifier NetscapeLDAP NetscapeRoot:3
 objectIdentifier NetscapeLDAPattributeType NetscapeLDAP:1
 objectIdentifier NetscapeLDAPobjectClass NetscapeLDAP:2
 
+objectIdentifier OpenLDAPExp11 1.3.6.1.4.1.4203.666.11
+objectIdentifier DynGroupBase  OpenLDAPExp11:8
+objectIdentifier DynGroupAttr  DynGroupBase:1
+objectIdentifier DynGroupOC    DynGroupBase:2
+
 attributetype ( NetscapeLDAPattributeType:198
        NAME 'memberURL'
        DESC 'Identifies an URL associated with each member of a group. Any type of labeled URL can be used.'
        SUP labeledURI )
 
+attributetype ( DynGroupAttr:1
+       NAME 'dgIdentity'
+       DESC 'Identity to use when processing the memberURL'
+       SUP distinguishedName SINGLE-VALUE )
+
 objectClass ( NetscapeLDAPobjectClass:33
        NAME 'groupOfURLs'
        SUP top STRUCTURAL
        MUST cn
        MAY ( memberURL $ businessCategory $ description $ o $ ou $
                owner $ seeAlso ) )
+
+# The Haripriya dyngroup schema still needs a lot of work.
+# We're just adding support for the dgIdentity attribute for now...
+objectClass ( DynGroupOC:1
+       NAME 'dgIdentityAux'
+       SUP top AUXILIARY
+       MAY dgIdentity )