ISO/IEC 9594-6:2017
Information technology — Open Systems Interconnection — The Directory — Part 6: Selected attribute types
ISO/IEC 9594-6:2017 defines a number of attribute types and matching rules which may be found useful across a range of applications of the Directory.
Attribute types and matching rules fall into three categories, as described below.
Some attribute types and matching rules are used by a wide variety of applications or are understood and/or used by the Directory itself.
NOTE 1 - It is recommended that an attribute type or matching rule defined in this Recommendation | International Standard be used, in preference to the generation of a new one, whenever it is appropriate for the application.
NOTE 2 - The attribute and context types definitions by this Recommendation | International Standard have some associated semantics. Such specifications should not be used in situations where these semantics do not apply.
Some attribute types and matching rules are internationally standardized, but are application-specific. These are defined in the standards associated with the application concerned.
Any administrative authority can define its own attribute types and matching rules for any purpose. These are not internationally standardized, and are available to others beyond the administrative authority which created them only through bilateral agreement.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$118.26 NZD
|
|
| HardCopy |
$152.17 NZD
|
|
| Networkable PDF |
Price varies
|
1 Scope
2 Normative references
2.1 Identical Recommendations | International Standards
2.2 Other references
2.3 ISO/IEC Standards
3 Definitions
4 Abbreviations
5 Conventions
6 Definition of selected attribute types
6.1 System attribute types
6.1.1 Knowledge Information
6.2 Labelling attribute types
6.2.1 Name
6.2.2 Common Name
6.2.3 Surname
6.2.4 Given Name
6.2.5 Initials
6.2.6 Generation Qualifier
6.2.7 Unique Identifier
6.2.8 DN Qualifier
6.2.9 Serial Number
6.2.10 Pseudonym
6.2.11 Universal Unique Identifier Pair
6.2.12 uri
6.2.13 URN
6.2.14 URL
6.2.15 Domain name
6.3 Geographical attribute types
6.3.1 Country Name
6.3.2 Three-character country code
6.3.3 Numeric character country code
6.3.4 Locality Name
6.3.5 State or Province Name
6.3.6 Street Address
6.3.7 House Identifier
6.3.8 UTM Coordinates attribute type
6.4 Organizational attribute types
6.4.1 Organization Name
6.4.2 Organizational Unit Name
6.4.3 Title
6.4.4 Organization Identifier
6.5 Explanatory attribute types
6.5.1 Description
6.5.2 Search Guide
6.5.3 Enhanced Search Guide
6.5.4 Business Category
6.6 Postal addressing attribute types
6.6.1 Postal Address
6.6.2 Postal Code
6.6.3 Post Office Box
6.6.4 Physical Delivery Office Name
6.7 Telecommunications addressing attribute types
6.7.1 Telephone Number
6.7.2 Telex Number
6.7.3 Teletex Terminal Identifier
6.7.4 Facsimile Telephone Number
6.7.5 X.121 Address
6.7.6 International ISDN Number
6.7.7 Registered Address
6.7.8 Destination Indicator
6.7.9 Communications Service
6.7.10 Communications Network
6.8 Preferences attribute types
6.8.1 Preferred Delivery Method
6.9 OSI application attribute types
6.9.1 Presentation Address
6.9.2 Supported Application Context
6.9.3 Protocol Information
6.10 Relational attribute types
6.10.1 Distinguished Name
6.10.2 Member
6.10.3 Unique Member
6.10.4 Owner
6.10.5 Role Occupant
6.10.6 See Also
6.11 Domain attribute types
6.11.1 DMD Name
6.12 Hierarchical attribute types
6.12.1 Top level object identifier arc
6.12.2 Second level object identifier arc
6.12.3 Lower level object identifier arcs attribute type
6.12.4 URN component attribute type
6.13 Attributes for applications using tag-based identification
6.13.1 Tag OID
6.13.2 UII Format
6.13.3 UII in URN attribute type
6.13.4 Content URL
6.13.5 UII attribute type
6.13.6 EPC attribute type
6.13.7 Tag AFI attribute type
6.13.8 EPC Format attribute
6.13.9 EPC in URN attribute type
6.13.10 LDAP URL attribute type
6.13.11 Tag location
6.14 Simple Authentication attributes held by object entries
6.14.1 Multi-valued User Password attribute type
6.14.2 Single-valued User Password attribute
6.14.3 Password Start Time attribute
6.14.4 Password Expiry Time attribute
6.14.5 Password End Time attribute
6.14.6 Password Fails attribute
6.14.7 Password Failure Time attribute
6.14.8 Password Graces Used attribute
6.14.9 User Password History attribute
6.14.10 User Password Recently Expired attribute
6.15 Password policy attributes
6.15.1 Password ModifyEntry Allowed attribute
6.15.2 Password Change Allowed attribute
6.15.3 Password Maximum Age attribute
6.15.4 Password Expiry Age attribute
6.15.5 Password Quality Rule attributes
6.15.5.1 Password Minimum Length attribute
6.15.5.2 Password Vocabulary attribute
6.15.5.3 Password Alphabet attribute
6.15.5.4 Password Dictionaries attribute
6.15.6 Password Expiry Warning attribute
6.15.7 Password Graces attribute
6.15.8 Password Failure Duration attribute
6.15.9 Password Lockout Duration attribute
6.15.10 Password Maximum Failures attribute
6.15.11 Password Maximum Time in History attribute
6.15.12 Password Minimum Time in History attribute
6.15.13 Password History Slots attribute
6.15.14 Password Recently Expired Duration attribute
6.15.15 Password Encryption Algorithm attribute
6.16 Notification attributes
6.16.1 DSA Problem
6.16.2 Search Service Problem
6.16.3 Service-type
6.16.4 Attribute Type List
6.16.5 Matching Rule List
6.16.6 Filter Item
6.16.7 Attribute Combinations
6.16.8 Context Type List
6.16.9 Context List
6.16.10 Context Combinations
6.16.11 Hierarchy Select List
6.16.12 Search Control Options List
6.16.13 Service Control Options List
6.16.14 Multiple Matching Localities
6.16.15 Proposed Relaxation
6.16.16 Applied Relaxation
6.16.17 Password response
6.16.18 LDAP diagnostic message
6.17 LDAP defined attribute types
6.17.1 User ID attribute type
6.17.2 Domain component attribute type
6.17.3 Mail attribute type
7 String preparation
7.1 Transcode
7.2 Map
7.3 Normalize
7.4 Prohibit
7.5 Check bidi
7.6 Insignificant Character Removal
7.6.1 Insignificant Space Removal
7.6.2 NumericString Insignificant Character Removal
8 Definition of matching rules
8.1 String matching rules
8.1.1 Case Exact Match and Case Ignore Match
8.1.2 Case Exact Ordering Match and Case Ignore Ordering Match
8.1.3 Case Exact Substrings Match and Case Ignore Substrings Match
8.1.4 Numeric String Match
8.1.5 Numeric String Ordering Match
8.1.6 Numeric String Substrings Match
8.1.7 Case Ignore List Match
8.1.8 Case Ignore List Substrings Match
8.1.9 Stored Prefix Match
8.2 Syntax-based matching rules
8.2.1 Boolean Match
8.2.2 Integer Match
8.2.3 Integer Ordering Match
8.2.4 Bit String Match
8.2.5 Octet String Match
8.2.6 Octet String Ordering Match
8.2.7 Octet String Substrings Match
8.2.8 Telephone Number Match
8.2.9 Telephone Number Substrings Match
8.2.10 Presentation Address Match
8.2.11 Unique Member Match
8.2.12 Protocol Information Match
8.2.13 Facsimile Number Match
8.2.14 Facsimile Number Substrings Match
8.2.15 UUID Pair Match
8.2.16 Component Match
8.3 Time matching rules
8.3.1 UTC Time Match
8.3.2 UTC Time Ordering Match
8.3.3 Generalized Time Match
8.3.4 Generalized Time Ordering Match
8.3.5 System Proposed Match
8.4 First component matching rules
8.4.1 Integer First Component Match
8.4.2 Object Identifier First Component Match
8.4.3 Directory String First Component Match
8.5 Word matching rules
8.5.1 Word Match
8.5.2 Keyword Match
8.5.3 General Word Match
8.6 Approximate Matching Rules
8.6.1 Approximate String Match
8.7 Special Matching Rules
8.7.1 Ignore if Absent Match
8.7.2 Null Match
8.8 Zonal Match
8.9 Identity matching rules
8.9.1 uri Match
8.9.2 DNS name match
8.10 Password policy matching rules
8.10.1 User Password matching rule
8.10.2 Password Encryption Algorithm matching rule
8.10.3 User Password History matching rule
8.11 LDAP defined matching rules
8.11.1 Case exact IA5 match
8.11.2 Case ignore IA5 match
8.11.3 Case ignore IA5 substrings match
9 Definition of syntaxes
9.1 Directory syntaxes
9.1.1 UTM Coordinates syntax
9.1.2 UII Format syntax
9.1.3 EPC Format syntax
9.1.4 Three character country string syntax
9.1.5 Numeric country string syntax
9.1.6 DNS name string syntax
9.2 IETF syntaxes
9.2.1 Descriptors
9.2.2 AttributeType Description syntax
9.2.3 Bit string syntax
9.2.4 Boolean syntax
9.2.5 Country string
9.2.6 DN syntax
9.2.7 Delivery method
9.2.8 Directory string syntax
9.2.9 DIT Content Rule Description syntax
9.2.10 DIT Structure Rule Description syntax
9.2.11 Enhanced Guide syntax
9.2.12 Facsimile Telephone Number syntax
9.2.13 Fax syntax
9.2.14 Generalized Time syntax
9.2.15 Guide syntax
9.2.16 IA5 String syntax
9.2.17 INTEGER syntax
9.2.18 JPEG syntax
9.2.19 Matching Rule Description syntax
9.2.20 Matching Rule Use Description syntax
9.2.21 Name and Optional UID syntax
9.2.22 Name Form Description syntax
9.2.23 Numeric String syntax
9.2.24 Object Class Description syntax
9.2.25 OID syntax
9.2.26 Other Mailbox syntax
9.2.27 Octet String syntax
9.2.28 Postal Address syntax
9.2.29 Presentation Address syntax
9.2.30 Printable String syntax
9.2.31 Subtree Specification syntax
9.2.32 Telephone Number syntax
9.2.33 Telex Number syntax
9.2.34 UTC Time syntax
9.2.35 LDAP Syntax Description syntax
9.2.36 Substring Assertion syntax
10 Definition of Context Types
10.1 Language Context
10.2 Temporal Context
10.3 Locale Context
10.4 LDAP Attribute Option Context
F.1 Scope of this annex
F.2 Object identifier resolution
F.3 Uniform Resource Name (URN) resolution
G.1 Scope of this annex
G.2 Transformation of object identifiers into Directory names
G.3 The use of object-identifier-based Directory names
Keep me up-to-date
Register to receive notifications when updates are made to this standard.
Related Information
Similar Standards
-
BS EN 12834:2003
Road transport and traffic telematics. Dedicated Short Range Communication (DSRC). DSRC application layer
-
BS EN 13757-1:2021
Communication systems for meters, Data exchange
-
BS EN 13757-3:2013
Communication systems for and remote reading of meters, Dedicated application layer
-
BS EN 13757-3:2018
Communication systems for meters, Application protocols
1 Scope
2 Normative references
2.1 Identical Recommendations | International Standards
2.2 Other references
2.3 ISO/IEC Standards
3 Definitions
4 Abbreviations
5 Conventions
6 Definition of selected attribute types
6.1 System attribute types
6.1.1 Knowledge Information
6.2 Labelling attribute types
6.2.1 Name
6.2.2 Common Name
6.2.3 Surname
6.2.4 Given Name
6.2.5 Initials
6.2.6 Generation Qualifier
6.2.7 Unique Identifier
6.2.8 DN Qualifier
6.2.9 Serial Number
6.2.10 Pseudonym
6.2.11 Universal Unique Identifier Pair
6.2.12 uri
6.2.13 URN
6.2.14 URL
6.2.15 Domain name
6.3 Geographical attribute types
6.3.1 Country Name
6.3.2 Three-character country code
6.3.3 Numeric character country code
6.3.4 Locality Name
6.3.5 State or Province Name
6.3.6 Street Address
6.3.7 House Identifier
6.3.8 UTM Coordinates attribute type
6.4 Organizational attribute types
6.4.1 Organization Name
6.4.2 Organizational Unit Name
6.4.3 Title
6.4.4 Organization Identifier
6.5 Explanatory attribute types
6.5.1 Description
6.5.2 Search Guide
6.5.3 Enhanced Search Guide
6.5.4 Business Category
6.6 Postal addressing attribute types
6.6.1 Postal Address
6.6.2 Postal Code
6.6.3 Post Office Box
6.6.4 Physical Delivery Office Name
6.7 Telecommunications addressing attribute types
6.7.1 Telephone Number
6.7.2 Telex Number
6.7.3 Teletex Terminal Identifier
6.7.4 Facsimile Telephone Number
6.7.5 X.121 Address
6.7.6 International ISDN Number
6.7.7 Registered Address
6.7.8 Destination Indicator
6.7.9 Communications Service
6.7.10 Communications Network
6.8 Preferences attribute types
6.8.1 Preferred Delivery Method
6.9 OSI application attribute types
6.9.1 Presentation Address
6.9.2 Supported Application Context
6.9.3 Protocol Information
6.10 Relational attribute types
6.10.1 Distinguished Name
6.10.2 Member
6.10.3 Unique Member
6.10.4 Owner
6.10.5 Role Occupant
6.10.6 See Also
6.11 Domain attribute types
6.11.1 DMD Name
6.12 Hierarchical attribute types
6.12.1 Top level object identifier arc
6.12.2 Second level object identifier arc
6.12.3 Lower level object identifier arcs attribute type
6.12.4 URN component attribute type
6.13 Attributes for applications using tag-based identification
6.13.1 Tag OID
6.13.2 UII Format
6.13.3 UII in URN attribute type
6.13.4 Content URL
6.13.5 UII attribute type
6.13.6 EPC attribute type
6.13.7 Tag AFI attribute type
6.13.8 EPC Format attribute
6.13.9 EPC in URN attribute type
6.13.10 LDAP URL attribute type
6.13.11 Tag location
6.14 Simple Authentication attributes held by object entries
6.14.1 Multi-valued User Password attribute type
6.14.2 Single-valued User Password attribute
6.14.3 Password Start Time attribute
6.14.4 Password Expiry Time attribute
6.14.5 Password End Time attribute
6.14.6 Password Fails attribute
6.14.7 Password Failure Time attribute
6.14.8 Password Graces Used attribute
6.14.9 User Password History attribute
6.14.10 User Password Recently Expired attribute
6.15 Password policy attributes
6.15.1 Password ModifyEntry Allowed attribute
6.15.2 Password Change Allowed attribute
6.15.3 Password Maximum Age attribute
6.15.4 Password Expiry Age attribute
6.15.5 Password Quality Rule attributes
6.15.5.1 Password Minimum Length attribute
6.15.5.2 Password Vocabulary attribute
6.15.5.3 Password Alphabet attribute
6.15.5.4 Password Dictionaries attribute
6.15.6 Password Expiry Warning attribute
6.15.7 Password Graces attribute
6.15.8 Password Failure Duration attribute
6.15.9 Password Lockout Duration attribute
6.15.10 Password Maximum Failures attribute
6.15.11 Password Maximum Time in History attribute
6.15.12 Password Minimum Time in History attribute
6.15.13 Password History Slots attribute
6.15.14 Password Recently Expired Duration attribute
6.15.15 Password Encryption Algorithm attribute
6.16 Notification attributes
6.16.1 DSA Problem
6.16.2 Search Service Problem
6.16.3 Service-type
6.16.4 Attribute Type List
6.16.5 Matching Rule List
6.16.6 Filter Item
6.16.7 Attribute Combinations
6.16.8 Context Type List
6.16.9 Context List
6.16.10 Context Combinations
6.16.11 Hierarchy Select List
6.16.12 Search Control Options List
6.16.13 Service Control Options List
6.16.14 Multiple Matching Localities
6.16.15 Proposed Relaxation
6.16.16 Applied Relaxation
6.16.17 Password response
6.16.18 LDAP diagnostic message
6.17 LDAP defined attribute types
6.17.1 User ID attribute type
6.17.2 Domain component attribute type
6.17.3 Mail attribute type
7 String preparation
7.1 Transcode
7.2 Map
7.3 Normalize
7.4 Prohibit
7.5 Check bidi
7.6 Insignificant Character Removal
7.6.1 Insignificant Space Removal
7.6.2 NumericString Insignificant Character Removal
8 Definition of matching rules
8.1 String matching rules
8.1.1 Case Exact Match and Case Ignore Match
8.1.2 Case Exact Ordering Match and Case Ignore Ordering Match
8.1.3 Case Exact Substrings Match and Case Ignore Substrings Match
8.1.4 Numeric String Match
8.1.5 Numeric String Ordering Match
8.1.6 Numeric String Substrings Match
8.1.7 Case Ignore List Match
8.1.8 Case Ignore List Substrings Match
8.1.9 Stored Prefix Match
8.2 Syntax-based matching rules
8.2.1 Boolean Match
8.2.2 Integer Match
8.2.3 Integer Ordering Match
8.2.4 Bit String Match
8.2.5 Octet String Match
8.2.6 Octet String Ordering Match
8.2.7 Octet String Substrings Match
8.2.8 Telephone Number Match
8.2.9 Telephone Number Substrings Match
8.2.10 Presentation Address Match
8.2.11 Unique Member Match
8.2.12 Protocol Information Match
8.2.13 Facsimile Number Match
8.2.14 Facsimile Number Substrings Match
8.2.15 UUID Pair Match
8.2.16 Component Match
8.3 Time matching rules
8.3.1 UTC Time Match
8.3.2 UTC Time Ordering Match
8.3.3 Generalized Time Match
8.3.4 Generalized Time Ordering Match
8.3.5 System Proposed Match
8.4 First component matching rules
8.4.1 Integer First Component Match
8.4.2 Object Identifier First Component Match
8.4.3 Directory String First Component Match
8.5 Word matching rules
8.5.1 Word Match
8.5.2 Keyword Match
8.5.3 General Word Match
8.6 Approximate Matching Rules
8.6.1 Approximate String Match
8.7 Special Matching Rules
8.7.1 Ignore if Absent Match
8.7.2 Null Match
8.8 Zonal Match
8.9 Identity matching rules
8.9.1 uri Match
8.9.2 DNS name match
8.10 Password policy matching rules
8.10.1 User Password matching rule
8.10.2 Password Encryption Algorithm matching rule
8.10.3 User Password History matching rule
8.11 LDAP defined matching rules
8.11.1 Case exact IA5 match
8.11.2 Case ignore IA5 match
8.11.3 Case ignore IA5 substrings match
9 Definition of syntaxes
9.1 Directory syntaxes
9.1.1 UTM Coordinates syntax
9.1.2 UII Format syntax
9.1.3 EPC Format syntax
9.1.4 Three character country string syntax
9.1.5 Numeric country string syntax
9.1.6 DNS name string syntax
9.2 IETF syntaxes
9.2.1 Descriptors
9.2.2 AttributeType Description syntax
9.2.3 Bit string syntax
9.2.4 Boolean syntax
9.2.5 Country string
9.2.6 DN syntax
9.2.7 Delivery method
9.2.8 Directory string syntax
9.2.9 DIT Content Rule Description syntax
9.2.10 DIT Structure Rule Description syntax
9.2.11 Enhanced Guide syntax
9.2.12 Facsimile Telephone Number syntax
9.2.13 Fax syntax
9.2.14 Generalized Time syntax
9.2.15 Guide syntax
9.2.16 IA5 String syntax
9.2.17 INTEGER syntax
9.2.18 JPEG syntax
9.2.19 Matching Rule Description syntax
9.2.20 Matching Rule Use Description syntax
9.2.21 Name and Optional UID syntax
9.2.22 Name Form Description syntax
9.2.23 Numeric String syntax
9.2.24 Object Class Description syntax
9.2.25 OID syntax
9.2.26 Other Mailbox syntax
9.2.27 Octet String syntax
9.2.28 Postal Address syntax
9.2.29 Presentation Address syntax
9.2.30 Printable String syntax
9.2.31 Subtree Specification syntax
9.2.32 Telephone Number syntax
9.2.33 Telex Number syntax
9.2.34 UTC Time syntax
9.2.35 LDAP Syntax Description syntax
9.2.36 Substring Assertion syntax
10 Definition of Context Types
10.1 Language Context
10.2 Temporal Context
10.3 Locale Context
10.4 LDAP Attribute Option Context
F.1 Scope of this annex
F.2 Object identifier resolution
F.3 Uniform Resource Name (URN) resolution
G.1 Scope of this annex
G.2 Transformation of object identifiers into Directory names
G.3 The use of object-identifier-based Directory names