ISO-9594-7-2005.pdf

Reference number ISO/IEC 9594-7:2005(E) © ISO/IEC 2005 INTERNATIONAL STANDARD ISO/IEC 9594-7 Fifth edition 2005-12-15 Information technology Open Systems Interconnection The Directory: Selected object classes Technologies de l'information Interconnexion de systèmes ouverts (OSI) L'annuaire: Classes d'objets sélectionnées Copyright International Organization for Standardization Provided by IHS under license with ISO Licensee=Aramco HQ/9980755100 Not for Resale, 04/16/2007 09:56:44 MDTNo reproduction or networking permitted without license from IHS -,-,- ISO/IEC 9594-7:2005(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In downloading this file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below. © ISO/IEC 2005 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISO's member body in the country of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published by ISO in 2006 Published in Switzerland ii © ISO/IEC 2005 All rights reserved Copyright International Organization for Standardization Provided by IHS under license with ISO Licensee=Aramco HQ/9980755100 Not for Resale, 04/16/2007 09:56:44 MDTNo reproduction or networking permitted without license from IHS -,-,- ISO/IEC 9594-7:2005(E) © ISO/IEC 2005 All rights reserved iii CONTENTS Page SECTION 1 GENERAL. 1 1 Scope. 1 2 Normative references 1 2.1 Identical Recommendations | International Standards. 1 3 Definitions 2 3.1 Communication Model definitions 2 3.2 Directory Model definitions 2 4 Conventions 2 SECTION 2 SELECTED OBJECT CLASSES 4 5 Definition of useful attribute sets. 4 5.1 Telecommunication attribute set. 4 5.2 Postal attribute set. 4 5.3 Locale attribute set 4 5.4 Organizational attribute set. 4 6 Definition of selected object classes. 4 6.1 Country. 4 6.2 Locality. 5 6.3 Organization 5 6.4 Organizational Unit. 5 6.5 Person. 5 6.6 Organizational Person 5 6.7 Organizational Role. 6 6.8 Group of Names. 6 6.9 Group of Unique Names. 6 6.10 Residential Person. 6 6.11 Application Process. 7 6.12 Application Entity. 7 6.13 DSA. 7 6.14 Device 7 6.15 Strong Authentication User. 8 6.16 User Security Information. 8 6.17 Certification Authority. 8 6.18 Certification Authority-V2 8 6.19 DMD 8 SECTION 3 SELECTED NAME FORMS 9 7 Definition of selected name forms 9 7.1 Country name form. 9 7.2 Locality name form. 9 7.3 State or Province name form. 9 7.4 Organization name form. 9 7.5 Organizational Unit name form 9 7.6 Person name form. 9 7.7 Organizational Person name form. 9 7.8 Organizational Role name form. 10 7.9 Group of Names name form 10 7.10 Residential Person name form. 10 7.11 Application Process name form 10 7.12 Application Entity name form 10 7.13 DSA name form 10 7.14 Device name form. 11 7.15 DMD name form. 11 Copyright International Organization for Standardization Provided by IHS under license with ISO Licensee=Aramco HQ/9980755100 Not for Resale, 04/16/2007 09:56:44 MDTNo reproduction or networking permitted without license from IHS -,-,- ISO/IEC 9594-7:2005(E) iv © ISO/IEC 2005 All rights reserved Page Annex A Selected object classes and name forms in ASN.1. 12 Annex B Suggested name forms and DIT structures. 18 B.1 Country. 19 B.2 Organization 19 B.3 Locality. 19 B.4 Organizational Unit. 20 B.5 Organizational Person 20 B.6 Organizational Role. 20 B.7 Group of Names. 20 B.8 Residential Person. 21 B.9 Application Entity. 21 B.10 Device 21 B.11 Application Process. 21 B.12 Alternative Structure Rule for Locality 21 Annex C Amendments and corrigenda. 23 Copyright International Organization for Standardization Provided by IHS under license with ISO Licensee=Aramco HQ/9980755100 Not for Resale, 04/16/2007 09:56:44 MDTNo reproduction or networking permitted without license from IHS -,-,- ISO/IEC 9594-7:2005(E) © ISO/IEC 2005 All rights reserved v Foreword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 9594-7 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 6, Telecommunications and information exchange between systems, in collaboration with ITU-T. The identical text is published as ITU-T Rec. X.521. This fifth edition of ISO/IEC 9594-7 constitutes a technical revision of the fourth edition (ISO/IEC 9594-7:2001), which is provisionally retained in order to support implementations based on the fourth edition. ISO/IEC 9594 consists of the following parts, under the general title Information technology Open Systems Interconnection The Directory: Part 1: Overview of concepts, models and services Part 2: Models Part 3: Abstract service definition Part 4: Procedures for distributed operation Part 5: Protocol specifications Part 6: Selected attribute types Part 7: Selected object classes Part 8: Public-key and attribute certificate frameworks Part 9: Replication Part 10: Use of systems management for administration of the Directory Copyright International Organization for Standardization Provided by IHS under license with ISO Licensee=Aramco HQ/9980755100 Not for Resale, 04/16/2007 09:56:44 MDTNo reproduction or networking permitted without license from IHS -,-,- ISO/IEC 9594-7:2005(E) vi © ISO/IEC 2005 All rights reserved Introduction This Recommendation | International Standard, together with other Recommendations | International Standards, has been produced to facilitate the interconnection of information processing systems to provide directory services. A set of such systems, together with the directory information that they hold, can be viewed as an integrated whole, called the Directory. The information held by the Directory, collectively known as the Directory Information Base (DIB), is typically used to facilitate communication between, with or about objects such as application entities, people, terminals, and distribution lists. The Directory plays a significant role in Open Systems Interconnection, whose aim is to allow, with a minimum of technical agreement outside of the interconnection standards themselves, the interconnection of information processing systems: from different manufacturers; under different managements; of different levels of complexity; and of different ages. This Recommendation | International Standard defines a number of attribute sets and object classes which may be found useful across a range of applications of the Directory. This Recommendation | International Standard provides the foundation frameworks upon which industry profiles can be defined by other standards groups and industry forums. Many of the features defined as optional in these frameworks may be mandated for use in certain environments through profiles. This fifth edition technically revises and enhances, but does not replace, the fourth edition of this Recommendation | International Standard. Implementations may still claim conformance to the fourth edition. However, at some point, the fourth edition will not be supported (i.e., reported defects will no longer be resolved). It is recommended that implementations conform to this fifth edition as soon as possible. This fifth edition specifies versions 1 and 2 of the Directory protocols. The first and second editions specified only version 1. Most of the services and protocols specified in this edition are designed to function under version 1. However some enhanced services and protocols, e.g., signed errors, will not function unless all Directory entities involved in the operation have negotiated version 2. Whichever version has been negotiated, differences between the services and between the protocols defined in the five editions, except for those specifically assigned to version 2, are accommodated using the rules of extensibility defined in ITU-T Rec. X.519 | ISO/IEC 9594-5. Annex A, which is an integral part of this Recommendation | International Standard, provides an ASN.1 module containing all of the type and value definitions which appear in this Recommendation | International Standard. Annex B, which is not an integral part of this Recommendation | International Standard, provides some common naming and structure rules which may or may not be used by administrative authorities. Annex C, which is not an integral part of this Recommendation | International Standard, lists the amendments and defect reports that have been incorporated to form this edition of this Recommendation | International Standard. Copyright International Organization for Standardization Provided by IHS under license with ISO Licensee=Aramco HQ/9980755100 Not for Resale, 04/16/2007 09:56:44 MDTNo reproduction or networking permitted without license from IHS -,-,- ISO/IEC 9594-7:2005 (E) ITU-T Rec. X.521 (08/2005) 1 INTERNATIONAL STANDARD ITU-T RECOMMENDATION Information technology Open Systems Interconnection The Directory: Selected object classes SECTION 1 GENERAL 1 Scope This Recommendation | International Standard defines a number of object classes and name forms which may be found useful across a range of applications of the Directory. The definition of an object class involves listing a number of attribute types which are relevant to objects of that class. The definition of a name form involves naming the object class to which it applies and listing the attributes to be used in forming names for objects of that class. These definitions are used by the administrative authority which is responsible for the management of the directory information. Any administrative authority can define its own object classes or subclasses and name forms for any purpose. NOTE 1 Those definitions may or may not use the notation specified in ITU-T Rec. X.501 | ISO/IEC 9594-2. NOTE 2 It is recommended that an object class defined in this Recommendation | International Standard, or a subclass derived from one, or a name form defined in this Recommendation | International Standard, be used in preference to the generation of a new one, whenever the semantics is appropriate for the application. Administrative authorities may support some or all the selected object classes and name forms, and may also add additional ones. All administrative authorities shall support the object classes which the directory uses for its own purpose (the top, alias and DSA object classes). 2 Normative references The following Recommendations and International Standards contain provisions which, through reference in this text, constitute provisions of this Recommendation | International Standard. At the time of publication, the editions indicated were valid. All Recommendations and Standards are subject to revision, and parties to agreements based on this Recommendation | International Standard are encouraged to investigate the possibility of applying the most recent editions of the Recommendations and Standards listed below. Members of IEC and ISO maintain registers of currently valid International Standards. The Telecommunication Standardization Bureau of the ITU maintains a list of currently valid ITU-T Recommendations. 2.1 Identical Recommendations | International Standards ITU-T Recommendation X.200 (1994) | ISO/IEC 7498-1:1994, Information technology Open Systems Interconnection Basic Reference Model: The Basic Model. ITU-T Recommendation X.500 (2005) | ISO/IEC 9594-1:2005, Information technology Open Systems Interconnection The Directory: Overview of concepts, models and services. ITU-T Recommendation X.501 (2005) | ISO/IEC 9594-2:2005, Information technology Open Systems Interconnection The Directory: Models. ITU-T Recommendation X.509 (2005) | ISO/IEC 9594-8:2005, Information technology Open Systems Interconnection The Directory: Public-key and attribute certificate frameworks. ITU-T Recommendation X.511 (2005) | ISO/IEC 9594-3:2005, Information technology Open Systems Interconnection The Directory: Abstract service definition. ITU-T Recommendation X.518 (2005) | ISO/IEC 9594-4:2005, Information technology Open Systems Interconnection The Directory: Procedures for distributed operation. ITU-T Recommendation X.519 (2005) | ISO/IEC 9594-5:2005, Information technology Open Systems Interconnection The Directory: Protocol specifications. Copyright International Organization for Standardization Provided by IHS under license with ISO Licensee=Aramco HQ/9980755100 Not for Resale, 04/16/2007 09:56:4