Active Directory, Second Edition

Classes (classSchema Objects)

Schema classes are defined as instances of the classSchema class. Table 4-4 shows the most important attributes that you may wish to set.

Table 4-4. The defining attributes of a classSchema object instance

Attribute	Syntax	Mandatory	Multi-valued	Description
cn	Unicode	Yes	No	The Relative Distinguished Name (RDN).
governsID	OID	Yes	No	The OID that uniquely identifies objects of this class.
lDAPDisplayName	Unicode	No	No	The name by which LDAP clients identify this class.
schemaIDGUID	Octet string	Yes	No	Globally Unique Identifier (GUID) to uniquely identify this class.
rDNAttID	OID	No	No	The attribute that indicates what two-letter-prefix (cn=, ou=, dc=) is used to reference the class. You should use only cn here unless you have a very solid idea of what you are doing and why.
description	Unicode string	No	No	A description of the attribute.
subClassOf	OID	Yes	No	The class that this one inherits from; the default is Top.[a]
mustContain	OID	No	Yes	The list of attributes that are mandatory for this class.
systemMustContain	OID	No	Yes	System version of the previous attribute.
mayContain	OID	No	Yes	The list of attributes that are optional for this class.
systemMayContain	OID	No	Yes	System version of the previous attribute.
possSuperiors	OID	No	Yes	The list of Auxiliary (or 88-Class) classes that this object can be created within; e.g., User objects can be created within Organizational Unit objects. ...