# Copyright 2004-2017 Univention GmbH
#
# http://www.univention.de/
#
# All rights reserved.
#
# The source code of this program is made available
# under the terms of the GNU Affero General Public License version 3
# (GNU AGPL V3) as published by the Free Software Foundation.
#
# Binary versions of this program provided by Univention to you as
# well as other copyrighted, protected or trademarked materials like
# Logos, graphics, fonts, specific documentations and configurations,
# cryptographic keys etc. are subject to a license agreement between
# you and Univention and not subject to the GNU AGPL V3.
#
# In the case you use this program under the terms of the GNU AGPL V3,
# the program is provided in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License with the Debian GNU/Linux or Univention distribution in file
# /usr/share/common-licenses/AGPL-3; if not, see
# <http://www.gnu.org/licenses/>.

# policy.schema
# $Id: policy.schema,v 1.39.2.6.2.27.2.11 2006/12/01 07:45:41 andreas Exp $

# $OID: 1.3.6.1.4.1.10176.1000 (Policies) $

# $OID: 1.3.6.1.4.1.10176.1000 (References) $
# reverted to old OIDs to make slapd accept these on sles8
attributetype ( 1.3.6.1.4.1.10176.1000 NAME 'univentionPolicyReference'
	DESC 'referenced policy objects'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

objectclass ( 1.3.6.1.4.1.10176.1002 NAME 'univentionPolicyReference'
	AUXILIARY
	DESC 'reference to policy object'
	MAY ( univentionPolicyReference ))

# $OID: 1.3.6.1.4.1.10176.1000.2 (Policy objects) $
attributetype ( 1.3.6.1.4.1.10176.1000.2.1.1 NAME 'requiredObjectClasses'
	DESC 'required objectClasses'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.10176.1000.2.1.2 NAME 'prohibitedObjectClasses'
	DESC 'prohibited objectClasses'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.10176.1000.2.1.3 NAME 'fixedAttributes'
	DESC 'fixed attributes'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.10176.1000.2.1.4 NAME 'emptyAttributes'
	DESC 'empty attributes'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.10176.1000.2.1.5 NAME 'ldapFilter'
	DESC 'ldap filter string'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.2.2.1 NAME 'univentionPolicy'
	SUP 'top' STRUCTURAL
	DESC 'policy object'
	MUST ( cn )
	MAY ( requiredObjectClasses $ prohibitedObjectClasses $ fixedAttributes $ emptyAttributes $ ldapFilter))

attributetype ( 1.3.6.1.4.1.10176.1000.2.1.10 NAME 'univentionRegistry'
	DESC 'registry entry'
	EQUALITY caseIgnoreMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.2.2.10 NAME 'univentionPolicyRegistry'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'registry policy object'
	MAY ( univentionRegistry ))

# $OID: 1.3.6.1.4.1.10176.1000.3 (X) $
attributetype ( 1.3.6.1.4.1.10176.1000.3.1.1 NAME 'univentionXResolution'
	DESC 'X resolution [client]'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.2 NAME 'univentionXColorDepth'
	DESC 'X color depth [client]'
	EQUALITY integerMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.3 NAME 'univentionXMouseProtocol'
	DESC 'X mouse protocol [client]'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.4 NAME 'univentionXMouseDevice'
	DESC 'X mouse device [client]'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.5 NAME 'univentionXKeyboardLayout'
	DESC 'X keyboard layout [client]'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.6 NAME 'univentionXKeyboardVariant'
	DESC 'X keyboard variant [client]'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.7 NAME 'univentionXHSync'
	DESC 'X horizontal sync rate [client]'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.8 NAME 'univentionXVRefresh'
	DESC 'X vertical refresh rate [client]'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.9 NAME 'univentionXModule'
	DESC 'X module (4.x) or X server (3.x)'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.10 NAME 'univentionXDisplaySize'
	DESC 'Display Size [client]'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.11 NAME 'univentionXVNCExportType'
	DESC 'VNC Export Type'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.12 NAME 'univentionXVNCExportViewonly'
	DESC 'VNC Export Viewonly Option'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.13 NAME 'univentionXVideoRam'
	DESC 'Amount of RAM on the graphics board'
	EQUALITY integerMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.14 NAME 'univentionXAutoDetect'
	DESC 'Defines if auto detection of the X.org configuration should be used'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.15 NAME 'univentionXDisplayPrimary'
	DESC 'The primary display in dual monitor setups'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.16 NAME 'univentionXDisplaySecondary'
	DESC 'The secondary display in dual monitor setups'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.17 NAME 'univentionXDisplayPosition'
	DESC 'The relative position of the secondary display in dual monitor setups'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.18 NAME 'univentionXDisplayVirtualSize'
	DESC 'The relative position of the secondary display in dual monitor setups'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.19 NAME 'univentionXResolutionSecondary'
	DESC 'X resolution of the secondary display in dual monitor setups'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.20 NAME 'univentionXHSyncSecondary'
	DESC 'X horizontal sync rate of secondary display'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.21 NAME 'univentionXVRefreshSecondary'
	DESC 'X vertical refresh rate of secondary display'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.3.1.22 NAME 'univentionXDisplaySizeSecondary'
	DESC 'Display Size of secondary display'
	EQUALITY caseIgnoreIA5Match
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.10176.1000.3.2.1 NAME 'univentionPolicyXConfiguration'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'X configuration policy object'
	MAY ( univentionXResolution $
	      univentionXColorDepth $ univentionXMouseProtocol $
	      univentionXMouseDevice $ univentionXKeyboardLayout $
	      univentionXKeyboardVariant $ univentionXHSync $
	      univentionXVRefresh $ univentionXModule $
		  univentionXVNCExportType $ univentionXVNCExportViewonly  $
		  univentionXVideoRam $ univentionXDisplaySize $ univentionXAutoDetect $
		  univentionXDisplayPrimary $ univentionXDisplaySecondary $ 
		  univentionXDisplayPosition $ univentionXDisplayVirtualSize $
		  univentionXResolutionSecondary $ univentionXHSyncSecondary $
		  univentionXVRefreshSecondary $ univentionXDisplaySizeSecondary ))

# $OID: 1.3.6.1.4.1.10176.1000.4 (Sound) $
attributetype ( 1.3.6.1.4.1.10176.1000.4.1.1 NAME 'univentionSoundEnabled'
	DESC 'enable sound [client]'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.4.1.2 NAME 'univentionSoundModule'
	DESC 'sound kernel module to use [client]'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.10176.1000.4.2.1 NAME 'univentionPolicySoundConfiguration'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Sound configuration policy object'
	MAY ( univentionSoundEnabled $ univentionSoundModule ))


# 1.3.6.1.4.1.10176.1000.5 (Thin Client) $
attributetype ( 1.3.6.1.4.1.10176.1000.5.1.1 NAME 'univentionDesktopServer'
	DESC 'terminal server for the client'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.5.1.2 NAME 'univentionFileServer'
	DESC 'file server for the client'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.5.1.3 NAME 'univentionWindowsTerminalServer'
	DESC 'Windows Terminal Server for rdesktop'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.5.1.4 NAME 'univentionWindowsDomain'
	DESC 'Windows Domain for rdesktop'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.5.1.5 NAME 'univentionAuthServer'
	DESC 'authentication server for the client'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )


objectclass ( 1.3.6.1.4.1.10176.1000.5.2.1 NAME 'univentionPolicyThinClient'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Thin client policy object'
	MAY ( univentionDesktopServer $ univentionFileServer $ univentionWindowsTerminalServer $ univentionWindowsDomain $ univentionAuthServer ))

# 1.3.6.1.4.1.10176.1000.6 (DHCP) $

# 1.3.6.1.4.1.10176.1000.6.1 (DHCP - DNS) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.1.1.1 NAME 'univentionDhcpDomainName'
    DESC 'domain-name'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.1.1.2 NAME 'univentionDhcpDomainNameServers'
    DESC 'domain-name-servers'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.1.2.1 NAME 'univentionPolicyDhcpDns'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP DNS configuration policy object'
    MAY ( univentionDhcpDomainName $ univentionDhcpDomainNameServers ))

# 1.3.6.1.4.1.10176.1000.6.2 (DHCP - Routers) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.2.1.1 NAME 'univentionDhcpRouters'
    DESC 'routers'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.2.2.1 NAME 'univentionPolicyDhcpRouting'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP Routing configuration policy object'
    MAY ( univentionDhcpRouters ))

# 1.3.6.1.4.1.10176.1000.6.3 (DHCP - Boot) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.3.1.1 NAME 'univentionDhcpBootServer'
    DESC 'next-server'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.3.1.2 NAME 'univentionDhcpBootFilename'
    DESC 'filename'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.3.2.1 NAME 'univentionPolicyDhcpBoot'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP boot configuration policy object'
    MAY ( univentionDhcpBootServer $ univentionDhcpBootFilename ))

# 1.3.6.1.4.1.10176.1000.6.4 (DHCP - Netbios) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.4.1.1 NAME 'univentionDhcpNetbiosNameServers'
    DESC 'netbios-name-servers'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.4.1.2 NAME 'univentionDhcpNetbiosScope'
    DESC 'netbios-scope'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.4.1.3 NAME 'univentionDhcpNetbiosNodeType'
    DESC 'netbios-node-type'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.4.2.1 NAME 'univentionPolicyDhcpNetbios'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP netbios configuration policy object'
    MAY ( univentionDhcpNetbiosNameServers $ univentionDhcpNetbiosScope
    $ univentionDhcpNetbiosNodeType ))

# 1.3.6.1.4.1.10176.1000.6.5 (DHCP - Scope) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.5.1.1 NAME 'univentionDhcpUnknownClients'
    DESC 'unknown clients'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.5.1.2 NAME 'univentionDhcpBootp'
    DESC 'bootp'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.5.1.3 NAME 'univentionDhcpBooting'
    DESC 'booting'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.5.1.4 NAME 'univentionDhcpDuplicates'
    DESC 'duplicates'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.5.1.5 NAME 'univentionDhcpDeclines'
    DESC 'declines'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.5.2.1 NAME 'univentionPolicyDhcpScope'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP scope configuration policy object'
    MAY ( univentionDhcpUnknownClients $ univentionDhcpBootp
    $ univentionDhcpBooting $ univentionDhcpDuplicates
    $ univentionDhcpDeclines ))

# 1.3.6.1.4.1.10176.1000.6.6 (DHCP - Statements) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.6.1.1 NAME 'univentionDhcpAuthoritative'
    DESC 'authoritative'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.6.1.2 NAME 'univentionDhcpBootUnknownClients'
    DESC 'bootp-unknown-clients'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.6.1.3 NAME 'univentionDhcpPingCheck'
    DESC 'ping-check'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.6.1.4 NAME 'univentionDhcpGetLeaseHostnames'
    DESC 'get-lease-hostnames'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.6.1.5 NAME 'univentionDhcpServerIdentifier'
    DESC 'server-identifier'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.6.1.6 NAME 'univentionDhcpServerName'
    DESC 'server-name'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.6.1.7 NAME 'univentionDhcpVendorOptionSpace'
    DESC 'vendor-option-space'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.6.2.1 NAME 'univentionPolicyDhcpStatements'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP statements configuration policy object'
    MAY ( univentionDhcpAuthoritative $ univentionDhcpBootUnknownClients
    $ univentionDhcpPingCheck $ univentionDhcpGetLeaseHostnames
    $ univentionDhcpServerIdentifier $ univentionDhcpServerName
    $ univentionDhcpVendorOptionSpace ))

# 1.3.6.1.4.1.10176.1000.6.7 (DHCP - Lease Time) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.7.1.1 NAME 'univentionDhcpLeaseTimeDefault'
    DESC 'default-lease-time'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.7.1.2 NAME 'univentionDhcpLeaseTimeMax'
    DESC 'max-lease-time'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.7.1.3 NAME 'univentionDhcpLeaseTimeMin'
    DESC 'min-lease-time'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.7.2.1 NAME 'univentionPolicyDhcpLeaseTime'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP lease time configuration policy object'
    MAY ( univentionDhcpLeaseTimeDefault $ univentionDhcpLeaseTimeMax
    $ univentionDhcpLeaseTimeMin))

# 1.3.6.1.4.1.10176.1000.6.8 (DHCP - DNS Update) $
attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.1 NAME 'univentionDhcpDdnsHostname'
    DESC 'ddns-hostname'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.2 NAME 'univentionDhcpDdnsDomainname'
    DESC 'ddns-domainname'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.3 NAME 'univentionDhcpDdnsRevDomainname'
    DESC 'ddns-rev-domainname'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.4 NAME 'univentionDhcpDdnsUpdates'
    DESC 'ddns-updates'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.5 NAME 'univentionDhcpDdnsUpdateStyle'
    DESC 'ddns-updates-style'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.6 NAME 'univentionDhcpDoForwardUpdates'
    DESC 'do-forward-updates'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.7 NAME 'univentionDhcpUpdateStaticLeases'
    DESC 'update-static-leases'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

attributetype ( 1.3.6.1.4.1.10176.1000.6.8.1.8 NAME 'univentionDhcpClientUpdates'
    DESC 'client-updates'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.8.2.1 NAME 'univentionPolicyDhcpDnsUpdate'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP ddns update configuration policy object'
    MAY ( univentionDhcpDdnsHostname $ univentionDhcpDdnsDomainname
    $ univentionDhcpDdnsRevDomainname $ univentionDhcpDdnsUpdates
    $ univentionDhcpDdnsUpdateStyle $ univentionDhcpDoForwardUpdates
    $ univentionDhcpUpdateStaticLeases $ univentionDhcpClientUpdates))

# 1.3.6.1.4.1.10176.1000.7 (Desktop Settings) $
attributetype ( 1.3.6.1.4.1.10176.1000.7.1.1 NAME 'univentionDesktopLanguage'
	DESC 'desktop language'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.2 NAME 'univentionDesktopBackground'
	DESC 'desktop background image or color'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.3 NAME 'univentionDesktopIcons'
	DESC 'Icons to be displayed on the desktop'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.4 NAME 'univentionDesktopTheme'
	DESC 'KDE/GTK theme to apply'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.5 NAME 'univentionDesktopWindowBorders'
	DESC 'Window borders theme to apply'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.6 NAME 'univentionDesktopIconsTheme'
	DESC 'Icons theme to apply'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.7 NAME 'univentionDesktopProfile'
	DESC 'KDE profile to apply'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.8 NAME 'univentionDesktopLogonScripts'
	DESC 'Scripts to execute on logon'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.7.1.9 NAME 'univentionDesktopLogoutScripts'
	DESC 'Scripts to execute on logout'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.7.2.1 NAME 'univentionPolicyDesktop'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Desktop policy object'
	MAY ( univentionDesktopLanguage $ univentionDesktopBackground
	$ univentionDesktopIcons $ univentionDesktopTheme
	$ univentionDesktopWindowBorders $ univentionDesktopIconsTheme
	$ univentionDesktopProfile $ univentionDesktopLogonScripts
	$ univentionDesktopLogoutScripts ))

# 1.3.6.1.4.1.10176.1000.8 (User Setting) $

attributetype ( 1.3.6.1.4.1.10176.1000.8.1.1 NAME 'univentionHomeShare'
	DESC 'share to mount home directory from'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.10176.1000.8.2.1 NAME 'univentionPolicyUser'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'User policy'
	MAY ( univentionHomeShare ))

# 1.3.6.1.4.1.10176.1000.9 (Password History Setting) $

attributetype ( 1.3.6.1.4.1.10176.1000.9.1.1 NAME 'univentionPWHistoryLen'
	DESC 'Length of password history.'
	EQUALITY integerMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.9.1.2 NAME 'univentionPWExpiryInterval'
	DESC 'Expiry interval of password in days.'
	EQUALITY integerMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.9.1.3 NAME 'univentionPWLength'
	DESC 'Minimum password length.'
	EQUALITY integerMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.9.1.4 NAME 'univentionPWQualityCheck'
    DESC 'Enables/disables password quality checks'
    EQUALITY booleanMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.10176.1000.9.2.1 NAME 'univentionPolicyPWHistory'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'PWHistory policy'
	MAY ( univentionPWHistoryLen $ univentionPWExpiryInterval $ univentionPWLength $ univentionPWQualityCheck))

# 1.3.6.1.4.1.10176.1000.10 (Windows Installer) $

attributetype ( 1.3.6.1.4.1.10176.1000.10.1.1 NAME 'univentionWindowsInstallationUnattendFile'
	DESC 'Path of unattended.txt file. Must be present on installation server.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.10176.1000.10.2.1 NAME 'univentionPolicyWindowsInstallation'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Windows Installation settings'
	MAY ( univentionWindowsInstallationUnattendFile ))

# 1.3.6.1.4.1.10176.1000.10 (Quota Setting) $

attributetype ( 1.3.6.1.4.1.10176.1000.12.1.1 NAME 'univentionQuotaSoftLimitSpace'
	DESC 'Soft-Quota for Disk-Space.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.12.1.2 NAME 'univentionQuotaHardLimitSpace'
	DESC 'Hard-Quota for Disk-Space.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.12.1.3 NAME 'univentionQuotaSoftLimitInodes'
	DESC 'Soft-Quota for # of Files.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.12.1.4 NAME 'univentionQuotaHardLimitInodes'
	DESC 'Hard Quota for # of Files.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.10176.1000.12.1.5 NAME 'univentionQuotaReapplyEveryLogin'
	DESC 'Reapply quota policy on every user login.'
	EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.10176.1000.12.2.1 NAME 'univentionPolicyShareUserQuota'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Share User Quota'
	MAY ( univentionQuotaSoftLimitInodes $ univentionQuotaHardLimitInodes $ univentionQuotaSoftLimitSpace $ univentionQuotaHardLimitSpace $ univentionQuotaReapplyEveryLogin ))

# 1.3.6.1.4.1.10176.1000.13 (Packages) $

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.1 NAME 'univentionClientPackages'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.2 NAME 'univentionMasterPackages'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.3 NAME 'univentionSlavePackages'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.4 NAME 'univentionMemberPackages'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.5 NAME 'univentionClientPackagesRemove'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.6 NAME 'univentionMasterPackagesRemove'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.7 NAME 'univentionSlavePackagesRemove'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.8 NAME 'univentionMemberPackagesRemove'
	DESC 'Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.9 NAME 'univentionMobileClientPackages'
	DESC 'Mobile Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.13.1.10 NAME 'univentionMobileClientPackagesRemove'
	DESC 'Mobile Client Package List.'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.13.2.1 NAME 'univentionPolicyPackagesMaster'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Packages List Master'
	MAY ( univentionMasterPackages $ univentionMasterPackagesRemove ))

objectclass ( 1.3.6.1.4.1.10176.1000.13.2.2 NAME 'univentionPolicyPackagesSlave'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Packages List Slave'
	MAY ( univentionSlavePackages $ univentionSlavePackagesRemove ))

objectclass ( 1.3.6.1.4.1.10176.1000.13.2.3 NAME 'univentionPolicyPackagesMember'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Packages List Member'
	MAY ( univentionMemberPackages $ univentionMemberPackagesRemove ))

objectclass ( 1.3.6.1.4.1.10176.1000.13.2.4 NAME 'univentionPolicyPackagesClient'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Packages List Client'
	MAY ( univentionClientPackages $ univentionClientPackagesRemove ))

objectclass ( 1.3.6.1.4.1.10176.1000.13.2.5 NAME 'univentionPolicyPackagesMobileClient'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Packages List MobileClient'
	MAY (  univentionMobileClientPackages $ univentionMobileClientPackagesRemove ))

# 1.3.6.1.4.1.10176.1000.14 (Update) $

attributetype ( 1.3.6.1.4.1.10176.1000.14.1.1 NAME 'univentionUpdateVersion'
	DESC 'Update to Version'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.14.1.2 NAME 'univentionUpdateActivate'
	DESC 'Activate this policy'
	EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.10176.1000.14.2.1 NAME 'univentionPolicyUpdate'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Update Policy'
	MAY ( univentionUpdateVersion $ univentionUpdateActivate))

# 1.3.6.1.4.1.10176.1000.15 (LDAP Server) $

attributetype ( 1.3.6.1.4.1.10176.1000.15.1.1 NAME 'univentionLDAPServer'
	DESC 'LDAP Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.15.2.1 NAME 'univentionPolicyLDAPServer'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Update Policy'
	MAY ( univentionLDAPServer ))

# 1.3.6.1.4.1.10176.1000.16 (Cron Installation) $

attributetype ( 1.3.6.1.4.1.10176.1000.16.1.1 NAME 'univentionCron'
	DESC 'LDAP Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.16.1.2 NAME 'univentionCronActive'
	DESC 'LDAP Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.16.1.3 NAME 'univentionInstallationStartup'
	DESC 'LDAP Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.16.1.4 NAME 'univentionInstallationShutdown'
	DESC 'LDAP Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.16.1.5 NAME 'univentionInstallationReboot'
	DESC 'LDAP Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.10176.1000.16.2.1 NAME 'univentionPolicyInstallationTime'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Update Policy'
	MAY ( univentionCron $ univentionCronActive $ univentionInstallationStartup $ univentionInstallationShutdown $ univentionInstallationReboot ))

attributetype ( 1.3.6.1.4.1.10176.1000.16.1.15NAME 'univentionRepositoryCron'
	DESC 'LDAP Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.10176.1000.16.3.1 NAME 'univentionPolicyRepositorySync'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Repository Sync Time Policy'
	MAY ( univentionRepositoryCron ))

# 1.3.6.1.4.1.10176.1000.17 (Policy Server) $

attributetype ( 1.3.6.1.4.1.10176.1000.17.1.1 NAME 'univentionRepositoryServer'
	DESC 'Repository Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.10176.1000.17.2.1 NAME 'univentionPolicyRepositoryServer'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Repository Server Policy'
	MAY ( univentionRepositoryServer ))

# 1.3.6.1.4.1.10176.1000.18 (Client Devices) $
attributetype ( 1.3.6.1.4.1.10176.1000.18.1.1 NAME 'univentionClientDevicesActivate'
	DESC 'activate Client Devices'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.10176.1000.18.2.1 NAME 'univentionPolicyClientDevices'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'using CDROM and Floppy devices on a thin client'
	MAY ( univentionClientDevicesActivate ))

# 1.3.6.1.4.1.10176.1000.19 (Print Server) $

attributetype ( 1.3.6.1.4.1.10176.1000.19.1.1 NAME 'univentionPrintServer'
	DESC 'Print Server'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.19.2.1 NAME 'univentionPolicyPrintServer'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Update Policy'
	MAY ( univentionPrintServer ))

# 1.3.6.1.4.1.10176.1000.20 (Auto Start) $

attributetype ( 1.3.6.1.4.1.10176.1000.20.1.1 NAME 'univentionAutoStartScript'
	DESC 'Script to be started by autostart'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectClass ( 1.3.6.1.4.1.10176.1000.20.2.1 NAME 'univentionPolicyAutoStart'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Autostart Policy'
	MAY ( univentionAutoStartScript ))

# 1.3.6.1.4.1.10176.1000.21 (Print Quota) $

attributetype ( 1.3.6.1.4.1.10176.1000.21.1.1 NAME 'univentionPrintQuotaGroups'
        DESC 'Printquota for Groups'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.21.1.2 NAME 'univentionPrintQuotaUsers'
        DESC 'Printquota for Users'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.21.1.3 NAME 'univentionPrintQuotaGroupsPerUsers'
	DESC 'Printquota for Groups per Users'
	EQUALITY caseExactMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.21.2.1 NAME 'univentionPolicySharePrintQuota'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Update Policy'
	MAY ( univentionPrintQuotaGroups $ univentionPrintQuotaUsers $ univentionPrintQuotaGroupsPerUsers))

# $OID: 1.3.6.1.4.1.10176.1000.22 (Mail Quota) $
attributetype ( 1.3.6.1.4.1.10176.1000.22.1.1 NAME 'univentionMailQuotaMB'
	DESC 'mail quota limit - in MB'
	EQUALITY integerMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

attributetype ( 1.3.6.1.4.1.10176.1000.22.1.2 NAME 'univentionMailQuotaWarning'
	DESC 'mail quota warning if limit is almost reached - percent'
	EQUALITY integerMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

objectclass ( 1.3.6.1.4.1.10176.1000.22.2.1 NAME 'univentionMailQuota'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Mail quota configuration policy object'
	MAY ( univentionMailQuotaMB $ univentionMailQuotaWarning ))

# 1.3.6.1.4.1.10176.1000.23 (admin settings) $

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.1 NAME 'univentionAdminListDNs'
        DESC 'DNs that are visible to user; if DN is container, list all childs'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.2 NAME 'univentionAdminListWizards'
        DESC 'Wizards that are visible to user'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.3 NAME 'univentionAdminListWebModules'
        DESC 'Wizards that are visible to user'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.4 NAME 'univentionAdminBaseDN'
        DESC 'Show tree starting here'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.5 NAME 'univentionAdminMayOverrideSettings'
        DESC 'User may override settings'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.6 NAME 'univentionAdminShowSelf'
        DESC 'Show self menu item'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.7 NAME 'univentionAdminListModules'
        DESC 'Show modules'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.8 NAME 'univentionAdminSelfAttributes'
        DESC 'contains the attributes of a user to be shown in self menu item'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.9 NAME 'univentionAdminListAttributes'
        DESC 'contains a list of attributes to be shown in the search results'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.23.1.10 NAME 'univentionAdminListBrowseAttributes'
        DESC 'contains a list of attributes to be shown in the navigation'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.23.2.1 NAME 'univentionPolicyAdminSettings'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'User settings for Univention Admin'
	MAY ( univentionAdminListDNs $ univentionAdminListWizards $ univentionAdminListWebModules $
		univentionAdminBaseDN $ univentionAdminMayOverrideSettings $ univentionAdminShowSelf $
		univentionAdminSelfAttributes $ univentionPolicyObject $ univentionDnsObject $
		univentionDhcpObject $ univentionUsersObject $ univentionGroupsObject $
		univentionComputersObject $ univentionNetworksObject $ univentionSharesObject $
		univentionPrintersObject $ univentionAdminListAttributes $ univentionAdminListBrowseAttributes))

objectclass ( 1.3.6.1.4.1.10176.1000.23.2.2 NAME 'univentionPolicyAdminContainerSettings'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Container settings for Univention Admin'
	MAY ( univentionAdminListModules ))

# 1.3.6.1.4.1.10176.1000.24 (console settings) $
attributetype ( 1.3.6.1.4.1.10176.1000.24.1.1 NAME 'univentionConsoleAllow'
        DESC 'List of UMC operations that will be granted'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

attributetype ( 1.3.6.1.4.1.10176.1000.24.1.2 NAME 'univentionConsoleDisallow'
        DESC 'List of UMC operations that will be prohibited'
        EQUALITY caseExactMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.24.2.2 NAME 'univentionPolicyConsoleAccess'
	SUP 'univentionPolicy' STRUCTURAL
	DESC 'Access Control List for UMC'
	MAY ( univentionConsoleAllow $ univentionConsoleDisallow ))

attributetype ( 1.3.6.1.4.1.10176.1000.25.1.1 NAME 'univentionDhcpSunAuth'
    DESC 'Authentication server for Sun Ray thin clients'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.25.2.1 NAME 'univentionPolicyDhcpSunAuth'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'DHCP Sun Ray authentication policy object'
    MAY ( univentionDhcpSunAuth ))

# nfs mounts
attributetype ( 1.3.6.1.4.1.10176.1000.26.1.1 NAME 'univentionNFSMounts'
    DESC 'NFS-Share to mount'
    EQUALITY caseExactMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass ( 1.3.6.1.4.1.10176.1000.6.26.2.1 NAME 'univentionPolicyNFSMounts'
    SUP 'univentionPolicy' STRUCTURAL
    DESC 'NFS-Shares policy object'
    MAY ( univentionNFSMounts ))

# new UMC policy object (UCS 3.0)
attributetype ( 1.3.6.1.4.1.10176.1000.308.1.1
			  NAME 'umcPolicyGrantedOperationSet'
			  DESC 'List of allowed UMC operantion set'
			  EQUALITY caseExactMatch
			  SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )

objectclass ( 1.3.6.1.4.1.10176.1000.308.2.1
			  NAME 'umcPolicy'
			  DESC 'Defines a set of allowed UMC operations'
			  SUP 'univentionPolicy' STRUCTURAL
			  MAY umcPolicyGrantedOperationSet )