source: branches/samba-3.5.x/source4/ldap_server/devdocs/rfc4530.txt

Last change on this file was 414, checked in by Herwig Bauernfeind, 15 years ago

Samba 3.5.0: Initial import

File size: 14.8 KB
Line 
1
2
3
4
5
6
7Network Working Group K. Zeilenga
8Request for Comments: 4530 OpenLDAP Foundation
9Category: Standards Track June 2006
10
11
12 Lightweight Directory Access Protocol (LDAP)
13 entryUUID Operational Attribute
14
15
16Status of This Memo
17
18 This document specifies an Internet standards track protocol for the
19 Internet community, and requests discussion and suggestions for
20 improvements. Please refer to the current edition of the "Internet
21 Official Protocol Standards" (STD 1) for the standardization state
22 and status of this protocol. Distribution of this memo is unlimited.
23
24Copyright Notice
25
26 Copyright (C) The Internet Society (2006).
27
28Abstract
29
30 This document describes the LDAP/X.500 'entryUUID' operational
31 attribute and associated matching rules and syntax. The attribute
32 holds a server-assigned Universally Unique Identifier (UUID) for the
33 object. Directory clients may use this attribute to distinguish
34 objects identified by a distinguished name or to locate an object
35 after renaming.
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58Zeilenga Standards Track [Page 1]
59
60
61RFC 4530 LDAP entryUUID June 2006
62
63
64Table of Contents
65
66 1. Background and Intended Use .....................................2
67 2. UUID Schema Elements ............................................3
68 2.1. UUID Syntax ................................................3
69 2.2. 'uuidMatch' Matching Rule ..................................3
70 2.3. 'uuidOrderingMatch' Matching Rule ..........................3
71 2.4. 'entryUUID' Attribute ......................................4
72 3. Security Considerations .........................................4
73 4. IANA Considerations .............................................5
74 4.1. Object Identifier Registration .............................5
75 4.2. UUID Syntax Registration ...................................5
76 4.3. 'uuidMatch' Descriptor Registration ........................5
77 4.4. 'uuidOrderingMatch' Descriptor Registration ................5
78 4.5. 'entryUUID' Descriptor Registration ........................6
79 5. Acknowledgements ................................................6
80 6. References ......................................................6
81 6.1. Normative References .......................................6
82 6.2. Informative References .....................................7
83
841. Background and Intended Use
85
86 In X.500 Directory Services [X.501], such as those accessible using
87 the Lightweight Directory Access Protocol (LDAP) [RFC4510], an object
88 is identified by its distinguished name (DN). However, DNs are not
89 stable identifiers. That is, a new object may be identified by a DN
90 that previously identified another (now renamed or deleted) object.
91
92 A Universally Unique Identifier (UUID) is "an identifier unique
93 across both space and time, with respect to the space of all UUIDs"
94 [RFC4122]. UUIDs are used in a wide range of systems.
95
96 This document describes the 'entryUUID' operational attribute, which
97 holds the UUID assigned to the object by the server. Clients may use
98 this attribute to distinguish objects identified by a particular
99 distinguished name or to locate a particular object after renaming.
100
101 This document defines the UUID syntax, the 'uuidMatch' and
102 'uuidOrderingMatch' matching rules, and the 'entryUUID' attribute
103 type.
104
105 Schema definitions are provided using LDAP description formats
106 [RFC4512]. Definitions provided here are formatted (line wrapped)
107 for readability.
108
109
110
111
112
113
114
115Zeilenga Standards Track [Page 2]
116
117
118RFC 4530 LDAP entryUUID June 2006
119
120
121 In this document, the key words "MUST", "MUST NOT", "REQUIRED",
122 "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY",
123 and "OPTIONAL" are to be interpreted as described in BCP 14
124 [RFC2119].
125
1262. UUID Schema Elements
127
1282.1. UUID Syntax
129
130 A Universally Unique Identifier (UUID) [RFC4122] is a 16-octet (128-
131 bit) value that identifies an object. The ASN.1 [X.680] type UUID is
132 defined to represent UUIDs as follows:
133
134 UUID ::= OCTET STRING (SIZE(16))
135 -- constrained to an UUID [RFC4122]
136
137 In LDAP, UUID values are encoded using the [ASCII] character string
138 representation described in [RFC4122]. For example,
139 "597ae2f6-16a6-1027-98f4-d28b5365dc14".
140
141 The following is an LDAP syntax description suitable for publication
142 in subschema subentries.
143
144 ( 1.3.6.1.1.16.1 DESC 'UUID' )
145
1462.2. 'uuidMatch' Matching Rule
147
148 The 'uuidMatch' matching rule compares an asserted UUID with a stored
149 UUID for equality. Its semantics are the same as the
150 'octetStringMatch' [X.520][RFC4517] matching rule. The rule differs
151 from 'octetStringMatch' in that the assertion value is encoded using
152 the UUID string representation instead of the normal OCTET STRING
153 string representation.
154
155 The following is an LDAP matching rule description suitable for
156 publication in subschema subentries.
157
158 ( 1.3.6.1.1.16.2 NAME 'uuidMatch'
159 SYNTAX 1.3.6.1.1.16.1 )
160
1612.3. 'uuidOrderingMatch' Matching Rule
162
163 The 'uuidOrderingMatch' matching rule compares an asserted UUID with
164 a stored UUID for ordering. Its semantics are the same as the
165 'octetStringOrderingMatch' [X.520][RFC4517] matching rule. The rule
166 differs from 'octetStringOrderingMatch' in that the assertion value
167 is encoded using the UUID string representation instead of the normal
168 OCTET STRING string representation.
169
170
171
172Zeilenga Standards Track [Page 3]
173
174
175RFC 4530 LDAP entryUUID June 2006
176
177
178 The following is an LDAP matching rule description suitable for
179 publication in subschema subentries.
180
181 ( 1.3.6.1.1.16.3 NAME 'uuidOrderingMatch'
182 SYNTAX 1.3.6.1.1.16.1 )
183
184 Note that not all UUID variants have a defined ordering; and even
185 where it does, servers are not obligated to assign UUIDs in any
186 particular order. This matching rule is provided for completeness.
187
1882.4. 'entryUUID' Attribute
189
190 The 'entryUUID' operational attribute provides the Universally Unique
191 Identifier (UUID) assigned to the entry.
192
193 The following is an LDAP attribute type description suitable for
194 publication in subschema subentries.
195
196 ( 1.3.6.1.1.16.4 NAME 'entryUUID'
197 DESC 'UUID of the entry'
198 EQUALITY uuidMatch
199 ORDERING uuidOrderingMatch
200 SYNTAX 1.3.6.1.1.16.1
201 SINGLE-VALUE
202 NO-USER-MODIFICATION
203 USAGE directoryOperation )
204
205 Servers SHALL generate and assign a new UUID to each entry upon its
206 addition to the directory and provide that UUID as the value of the
207 'entryUUID' operational attribute. An entry's UUID is immutable.
208
209 UUID are to be generated in accordance with Section 4 of [RFC4122].
210 In particular, servers MUST ensure that each generated UUID is unique
211 in space and time.
212
2133. Security Considerations
214
215 An entry's relative distinguish name (RDN) is composed from attribute
216 values of the entry, which are commonly descriptive of the object the
217 entry represents. Although deployers are encouraged to use naming
218 attributes whose values are widely disclosable [RFC4514], entries are
219 often named using information that cannot be disclosed to all
220 parties. As UUIDs do not contain any descriptive information of the
221 object they identify, UUIDs may be used to identify a particular
222 entry without disclosure of its contents.
223
224 General UUID security considerations [RFC4122] apply.
225
226
227
228
229Zeilenga Standards Track [Page 4]
230
231
232RFC 4530 LDAP entryUUID June 2006
233
234
235 General LDAP security considerations [RFC4510] apply.
236
2374. IANA Considerations
238
239 The IANA has registered the LDAP values [RFC4520] specified in this
240 document.
241
2424.1. Object Identifier Registration
243
244 Subject: Request for LDAP OID Registration
245 Person & email address to contact for further information:
246 Kurt Zeilenga <kurt@OpenLDAP.org>
247 Specification: RFC 4530
248 Author/Change Controller: IESG
249 Comments:
250 Identifies the UUID schema elements
251
2524.2. UUID Syntax Registration
253
254 Subject: Request for LDAP Syntax Registration
255 Object Identifier: 1.3.6.1.1.16.1
256 Description: UUID
257 Person & email address to contact for further information:
258 Kurt Zeilenga <kurt@OpenLDAP.org>
259 Specification: RFC 4530
260 Author/Change Controller: IESG
261 Comments:
262 Identifies the UUID syntax
263
2644.3. 'uuidMatch' Descriptor Registration
265
266 Subject: Request for LDAP Descriptor Registration
267 Descriptor (short name): uuidMatch
268 Object Identifier: 1.3.6.1.1.16.2
269 Person & email address to contact for further information:
270 Kurt Zeilenga <kurt@OpenLDAP.org>
271 Usage: Matching Rule
272 Specification: RFC 4530
273 Author/Change Controller: IESG
274
2754.4. 'uuidOrderingMatch' Descriptor Registration
276
277 Subject: Request for LDAP Descriptor Registration
278 Descriptor (short name): uuidOrderingMatch
279 Object Identifier: 1.3.6.1.1.16.3
280 Person & email address to contact for further information:
281 Kurt Zeilenga <kurt@OpenLDAP.org>
282 Usage: Matching Rule
283
284
285
286Zeilenga Standards Track [Page 5]
287
288
289RFC 4530 LDAP entryUUID June 2006
290
291
292 Specification: RFC 4530
293 Author/Change Controller: IESG
294
2954.5. 'entryUUID' Descriptor Registration
296
297 The IANA has registered the LDAP 'entryUUID' descriptor.
298
299 Subject: Request for LDAP Descriptor Registration
300 Descriptor (short name): entryUUID
301 Object Identifier: 1.3.6.1.1.16.4
302 Person & email address to contact for further information:
303 Kurt Zeilenga <kurt@OpenLDAP.org>
304 Usage: Attribute Type
305 Specification: RFC 4530
306 Author/Change Controller: IESG
307
3085. Acknowledgements
309
310 This document is based upon discussions in the LDAP Update and
311 Duplication Protocols (LDUP) WG. Members of the LDAP Directorate
312 provided review.
313
3146. References
315
3166.1. Normative References
317
318 [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
319 Requirement Levels", BCP 14, RFC 2119, March 1997.
320
321 [RFC4122] Leach, P., Mealling, M., and R. Salz, "A Universally
322 Unique IDentifier (UUID) URN Namespace", RFC 4122, July
323 2005.
324
325 [RFC4510] Zeilenga, K., Ed., "Lightweight Directory Access
326 Protocol (LDAP): Technical Specification Road Map", RFC
327 4510, June 2006.
328
329 [RFC4512] Zeilenga, K., "Lightweight Directory Access Protocol
330 (LDAP): Directory Information Models", RFC 4512, June
331 2006.
332
333 [RFC4517] Legg, S., Ed., "Lightweight Directory Access Protocol
334 (LDAP): Syntaxes and Matching Rules", RFC 4517, June
335 2006.
336
337 [ASCII] Coded Character Set--7-bit American Standard Code for
338 Information Interchange, ANSI X3.4-1986.
339
340
341
342
343Zeilenga Standards Track [Page 6]
344
345
346RFC 4530 LDAP entryUUID June 2006
347
348
349 [X.501] International Telecommunication Union -
350 Telecommunication Standardization Sector, "The
351 Directory -- Models," X.501(1993) (also ISO/IEC 9594-
352 2:1994).
353
354 [X.520] International Telecommunication Union -
355 Telecommunication Standardization Sector, "The
356 Directory: Selected Attribute Types", X.520(1993) (also
357 ISO/IEC 9594-6:1994).
358
359 [X.680] International Telecommunication Union -
360 Telecommunication Standardization Sector, "Abstract
361 Syntax Notation One (ASN.1) - Specification of Basic
362 Notation", X.680(2002) (also ISO/IEC 8824-1:2002).
363
3646.2. Informative References
365
366 [RFC4514] Zeilenga, K., Ed., "Lightweight Directory Access
367 Protocol (LDAP): String Representation of Distinguished
368 Names", RFC 4514, June 2006.
369
370 [RFC4520] Zeilenga, K., "Internet Assigned Numbers Authority
371 (IANA) Considerations for the Lightweight Directory
372 Access Protocol (LDAP)", BCP 64, RFC 4520, June 2006.
373
374Author's Address
375
376 Kurt D. Zeilenga
377 OpenLDAP Foundation
378
379 EMail: Kurt@OpenLDAP.org
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400Zeilenga Standards Track [Page 7]
401
402
403RFC 4530 LDAP entryUUID June 2006
404
405
406Full Copyright Statement
407
408 Copyright (C) The Internet Society (2006).
409
410 This document is subject to the rights, licenses and restrictions
411 contained in BCP 78, and except as set forth therein, the authors
412 retain all their rights.
413
414 This document and the information contained herein are provided on an
415 "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
416 OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET
417 ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED,
418 INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE
419 INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
420 WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
421
422Intellectual Property
423
424 The IETF takes no position regarding the validity or scope of any
425 Intellectual Property Rights or other rights that might be claimed to
426 pertain to the implementation or use of the technology described in
427 this document or the extent to which any license under such rights
428 might or might not be available; nor does it represent that it has
429 made any independent effort to identify any such rights. Information
430 on the procedures with respect to rights in RFC documents can be
431 found in BCP 78 and BCP 79.
432
433 Copies of IPR disclosures made to the IETF Secretariat and any
434 assurances of licenses to be made available, or the result of an
435 attempt made to obtain a general license or permission for the use of
436 such proprietary rights by implementers or users of this
437 specification can be obtained from the IETF on-line IPR repository at
438 http://www.ietf.org/ipr.
439
440 The IETF invites any interested party to bring to its attention any
441 copyrights, patents or patent applications, or other proprietary
442 rights that may cover technology that may be required to implement
443 this standard. Please address the information to the IETF at
444 ietf-ipr@ietf.org.
445
446Acknowledgement
447
448 Funding for the RFC Editor function is provided by the IETF
449 Administrative Support Activity (IASA).
450
451
452
453
454
455
456
457Zeilenga Standards Track [Page 8]
458
459
Note: See TracBrowser for help on using the repository browser.