# eduPersonAffiliation
# Specifies a person's relationship(s) to the institution in
# broad categories such as student, faculty, staff, alum, etc.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.1
        NAME 'eduPersonAffiliation'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonNickname
# Specifies a person's nickname, or the informal name by which
# they are accustomed to be hailed.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.2
        NAME 'eduPersonNickname'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonOrgDN
# The distinguished name (DN) of the directory entry
# representing the institution with which the person
# is associated.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.3
        NAME 'eduPersonOrgDN'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY distinguishedNameMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' SINGLE-VALUE )

# eduPersonOrgUnitDN
# The distinguished name (DN) of the directory entries representing
# the person's Organizational Unit(s).
attributetype ( 1.3.6.1.4.1.5923.1.1.1.4
        NAME 'eduPersonOrgUnitDN'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY distinguishedNameMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' )

# eduPersonPrimaryAffiliation
# Specifies a person's PRIMARY relationship to the institution
# in broad categories such as student, faculty, staff, alum, etc.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.5
        NAME 'eduPersonPrimaryAffiliation'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPersonPrincipalName
# The "NetID" of the person for the purposes of inter-institutional
# authentication.  Should be stored in the form of user@univ.edu,
# where univ.edu is the name of the local security domain.
attributetype ( 1.3.6.1.4.1.5923.1.1.1.6
        NAME 'eduPersonPrincipalName'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SUBSTR caseIgnoreSubstringsMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPersonEntitlement
attributetype ( 1.3.6.1.4.1.5923.1.1.1.7
        NAME 'eduPersonEntitlement'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseExactMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' )

# eduPersonPrimaryOrgUnitDN
attributetype ( 1.3.6.1.4.1.5923.1.1.1.8
        NAME 'eduPersonPrimaryOrgUnitDN'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY distinguishedNameMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.12' SINGLE-VALUE )

# eduPersonScopedAffiliation
attributetype ( 1.3.6.1.4.1.5923.1.1.1.9
        NAME 'eduPersonScopedAffiliation'
        DESC 'eduPerson per Internet2 and EDUCAUSE'
        EQUALITY caseIgnoreMatch
        SYNTAX '1.3.6.1.4.1.1466.115.121.1.15' SINGLE-VALUE )

# eduPerson
# The eduPerson objectclass is used to represent people who are
# associated with a university/school in some way.  It is derived
# from the inetOrgPerson objectclass.
objectclass ( 1.3.6.1.4.1.5923.1.1.2
        NAME 'eduPerson'
        AUXILIARY
        MAY ( eduPersonAffiliation $ eduPersonNickname $
              eduPersonOrgDN $ eduPersonOrgUnitDN $
              eduPersonPrimaryAffiliation $ eduPersonPrincipalName $
              eduPersonEntitlement $ eduPersonPrimaryOrgUnitDN $
              eduPersonScopedAffiliation
            )
        )