Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

The following is the defined members of the utexasAux class. This class contains the custom schema attributes defined in the Austin Active Directory. 

Custom Attribute Availability

Attribute TypeTotal
Single-valued String

30

Multi-valued String60
Time

30


Single Valued Attributes

NameOIDOwnerPurposeSecurity Groups
utexasEduAustinSingle11.3.6.1.4.1.17940.3.5.1.1SystemseduPersonPrimaryAffiliation

AUSTIN-Single1-R / RW

utexasEduAustinSingle21.3.6.1.4.1.17940.3.5.1.2SystemsutexasEduPersonAuthnLockTypeCode

AUSTIN-Single2-R / RW

utexasEduAustinSingle31.3.6.1.4.1.17940.3.5.1.3Systems

mail

AUSTIN-Single3-R / RW
utexasEduAustinSingle41.3.6.1.4.1.17940.3.5.1.4SystemsinetUserStatusAUSTIN-Single4-R / RW
utexasEduAustinSingle51.3.6.1.4.1.17940.3.5.1.5Systems

utexasEduPersonForcePasswdChg

AUSTIN-Single5-R / RW

utexasEduAustinSingle6 1.3.6.1.4.1.17940.3.5.1.6SystemsdisplayName

AUSTIN-Single6-R / RW

utexasEduAustinSingle7 1.3.6.1.4.1.17940.3.5.1.7SystemsutexasEduPersonHighestDegreeAUSTIN-Single7-R / RW
utexasEduAustinSingle8 1.3.6.1.4.1.17940.3.5.1.8SystemsutexasEduPersonPrimaryOrgUnitName

AUSTIN-Single8-R / RW

utexasEduAustinSingle9 1.3.6.1.4.1.17940.3.5.1.9SystemsutexasEduPersonPrimaryTitle

AUSTIN-Single9-R / RW

utexasEduAustinSingle10 1.3.6.1.4.1.17940.3.5.1.10SystemsAD Tools - EID that created the accountAUSTIN-Single10-R / RW
utexasEduAustinSingle111.3.6.1.4.1.17940.3.5.1.11SystemsAD Tools - EID that last set the assignee(s) on the accountAUSTIN-Single11-R / RW
utexasEduAustinSingle121.3.6.1.4.1.17940.3.5.1.12SystemsAD Tools - EID that last claimed the accountAUSTIN-Single12-R / RW
utexasEduAustinSingle131.3.6.1.4.1.17940.3.5.1.13SystemsAD Tools - Account type (user or service)AUSTIN-Single13-R / RW

utexasEduAustinSingle14

1.3.6.1.4.1.17940.3.5.1.14IAMutexasPersonEduRoleSourceAUSTIN-Single14-R / RW

utexasEduAustinSingle15

1.3.6.1.4.1.17940.3.5.1.15IAMutexasPersonEduRoleCode AUSTIN-Single15-R / RW
utexasEduAustinSingle161.3.6.1.4.1.17940.3.5.1.16IAMutexasPersonEduRoleAttribute AUSTIN-Single16-R / RW
utexasEduAustinSingle171.3.6.1.4.1.17940.3.5.1.17SystemsExchange provisioning tool - mark user objects which should not be auto-provisionedAUSTIN-Single17-R / RW
utexasEduAustinSingle181.3.6.1.4.1.17940.3.5.1.18SystemsExchange provisioning tool - eduPersonPrimaryOrgUnitDNAUSTIN-Single18-R / RW
utexasEduAustinSingle191.3.6.1.4.1.17940.3.5.1.19SystemsExchange user-defined display nameAUSTIN-Single19-R / RW
utexasEduAustinSingle201.3.6.1.4.1.17940.3.5.1.20

eduPersonOrgDN

AUSTIN-Single20-R / RW
utexasEduAustinSingle211.3.6.1.4.1.17940.3.5.1.21
eduPersonTargetedIDAUSTIN-Single21-R / RW
utexasEduAustinSingle221.3.6.1.4.1.17940.3.5.1.22
preferredLanguageAUSTIN-Single22-R / RW
utexasEduAustinSingle231.3.6.1.4.1.17940.3.5.1.23
utexasEduPersonBirthDateAUSTIN-Single23-R / RW
utexasEduAustinSingle241.3.6.1.4.1.17940.3.5.1.24
utexasEduPersonClassificationAUSTIN-Single24-R / RW
utexasEduAustinSingle251.3.6.1.4.1.17940.3.5.1.25
utexasEduPersonClassificationCodeAUSTIN-Single25-R / RW
utexasEduAustinSingle261.3.6.1.4.1.17940.3.5.1.26
utexasEduPersonEidClassAUSTIN-Single26-R / RW
utexasEduAustinSingle271.3.6.1.4.1.17940.3.5.1.27
utPersonBID
AUSTIN-Single27-R / RW
utexasEduAustinSingle281.3.6.1.4.1.17940.3.5.1.28BACSfacility codeAUSTIN-Single28-R / RW
utexasEduAustinSingle291.3.6.1.4.1.17940.3.5.1.29BACSbadge IDAUSTIN-Single29-R / RW
utexasEduAustinSingle301.3.6.1.4.1.17940.3.5.1.30

AUSTIN-Single30-R / RW

Multi Valued Attributes

Name OID Owner Purpose Security Groups
utexasEduAustinMulti1 1.3.6.1.4.1.17940.3.5.2.1SystemsutexasEduPersonEntitlementCode

AUSTIN-Multi1-R / RW

utexasEduAustinMulti21.3.6.1.4.1.17940.3.5.2.2SystemsutexasEduPersonAffCode

AUSTIN-Multi2-R / RW

utexasEduAustinMulti31.3.6.1.4.1.17940.3.5.2.3SystemsutexasEduPersonRecordRestrict

AUSTIN-Multi3-R / RW

utexasEduAustinMulti41.3.6.1.4.1.17940.3.5.2.4Systems facsimileTelephoneNumberAUSTIN-Multi4-R / RW
utexasEduAustinMulti51.3.6.1.4.1.17940.3.5.2.5SystemsutexasEduPersonOfficeLocationAUSTIN-Multi5-R / RW
utexasEduAustinMulti61.3.6.1.4.1.17940.3.5.2.6SystemsutexasEduPersonCampusMailCodeAUSTIN-Multi6-R / RW
utexasEduAustinMulti71.3.6.1.4.1.17940.3.5.2.7SystemstelephoneNumber (office)AUSTIN-Multi7-R / RW
utexasEduAustinMulti81.3.6.1.4.1.17940.3.5.2.8SystemstitleAUSTIN-Multi8-R / RW
utexasEduAustinMulti91.3.6.1.4.1.17940.3.5.2.9SystemsutexasEduPersonAffiliationAUSTIN-Multi9-R / RW
utexasEduAustinMulti101.3.6.1.4.1.17940.3.5.2.10SystemsutexasEduPersonAttrRestrictAUSTIN-Multi10-R / RW
utexasEduAustinMulti111.3.6.1.4.1.17940.3.5.2.11SystemsutexasEduPersonOrgUnitNameAUSTIN-Multi11-R / RW
utexasEduAustinMulti121.3.6.1.4.1.17940.3.5.2.12Systemsmanager (stored as EID, AD DN of EID in actual manager attribute)

AUSTIN-Mult12-R / RW

utexasEduAustinMulti131.3.6.1.4.1.17940.3.5.2.13SystemshomePhone

AUSTIN-Multi13-R / RW

utexasEduAustinMulti141.3.6.1.4.1.17940.3.5.2.14SystemsAD Tools - EID(s) assigned to accountAUSTIN-Multi14-R / RW
utexasEduAustinMulti15 1.3.6.1.4.1.17940.3.5.2.15  SystemsExchange provisioning tool - eduPersonOrgUnitDN AUSTIN-Multi15-R / RW
utexasEduAustinMulti161.3.6.1.4.1.17940.3.5.2.16SystemsAD Tools - Update Security Group MembersAUSTIN-Multi16-R / RW
utexasEduAustinMulti171.3.6.1.4.1.17940.3.5.2.17

cn

AUSTIN-Multi17-R / RW
utexasEduAustinMulti181.3.6.1.4.1.17940.3.5.2.18
eduPersonAffiliationAUSTIN-Multi18-R / RW
utexasEduAustinMulti191.3.6.1.4.1.17940.3.5.2.19
eduPersonEntitlementAUSTIN-Multi19-R / RW
utexasEduAustinMulti201.3.6.1.4.1.17940.3.5.2.20
generationQualifierAUSTIN-Multi20-R / RW
utexasEduAustinMulti211.3.6.1.4.1.17940.3.5.2.21
givenNameAUSTIN-Multi21-R / RW
utexasEduAustinMulti221.3.6.1.4.1.17940.3.5.2.22
homePostalAddressAUSTIN-Multi22-R / RW
utexasEduAustinMulti231.3.6.1.4.1.17940.3.5.2.23
initialsAUSTIN-Multi23-R / RW
utexasEduAustinMulti241.3.6.1.4.1.17940.3.5.2.24

AUSTIN-Multi24-R / RW
utexasEduAustinMulti251.3.6.1.4.1.17940.3.5.2.25

AUSTIN-Multi25-R / RW
utexasEduAustinMulti261.3.6.1.4.1.17940.3.5.2.26
postalAddressAUSTIN-Multi26-R / RW
utexasEduAustinMulti271.3.6.1.4.1.17940.3.5.2.27
snAUSTIN-Multi27-R / RW
utexasEduAustinMulti281.3.6.1.4.1.17940.3.5.2.28

AUSTIN-Multi28-R / RW
utexasEduAustinMulti291.3.6.1.4.1.17940.3.5.2.29

AUSTIN-Multi29-R / RW
utexasEduAustinMulti301.3.6.1.4.1.17940.3.5.2.30


AUSTIN-Multi30-R / RW
utexasEduAustinMulti311.3.6.1.4.1.17940.3.5.2.31

utexasEduPersonAssociatedSchoolCode

AUSTIN-Multi31-R / RW
utexasEduAustinMulti321.3.6.1.4.1.17940.3.5.2.32
utexasEduPersonClassUniqueNbrAUSTIN-Multi32-R / RW
utexasEduAustinMulti331.3.6.1.4.1.17940.3.5.2.33
utexasEduPersonGraduationSemAUSTIN-Multi33-R / RW
utexasEduAustinMulti341.3.6.1.4.1.17940.3.5.2.34
utexasEduPersonJobClassCategoryAUSTIN-Multi34-R / RW
utexasEduAustinMulti351.3.6.1.4.1.17940.3.5.2.35
utexasEduPersonJobClassCategoryCodeAUSTIN-Multi35-R / RW
utexasEduAustinMulti361.3.6.1.4.1.17940.3.5.2.36
utexasEduPersonJobClassCodeAUSTIN-Multi36-R / RW
utexasEduAustinMulti371.3.6.1.4.1.17940.3.5.2.37
utexasEduPersonMajorAUSTIN-Multi37-R / RW
utexasEduAustinMulti381.3.6.1.4.1.17940.3.5.2.38
utexasEduPersonMajorCodeAUSTIN-Multi38-R / RW
utexasEduAustinMulti391.3.6.1.4.1.17940.3.5.2.39
utexasEduPersonMajorDeptAUSTIN-Multi39-R / RW
utexasEduAustinMulti401.3.6.1.4.1.17940.3.5.2.40
utexasEduPersonMajorDeptCodeAUSTIN-Multi40-R / RW
utexasEduAustinMulti411.3.6.1.4.1.17940.3.5.2.41
utexasEduPersonSchoolAUSTIN-Multi41-R / RW
utexasEduAustinMulti421.3.6.1.4.1.17940.3.5.2.42
utexasEduPersonSchoolCodeAUSTIN-Multi42-R / RW
utexasEduAustinMulti431.3.6.1.4.1.17940.3.5.2.43

utexasEduPersonSchoolMajorCode

AUSTIN-Multi43-R / RW
utexasEduAustinMulti441.3.6.1.4.1.17940.3.5.2.44

AUSTIN-Multi44-R / RW
utexasEduAustinMulti451.3.6.1.4.1.17940.3.5.2.45

AUSTIN-Multi45-R / RW
utexasEduAustinMulti461.3.6.1.4.1.17940.3.5.2.46

AUSTIN-Multi46-R / RW
utexasEduAustinMulti471.3.6.1.4.1.17940.3.5.2.47

AUSTIN-Multi47-R / RW
utexasEduAustinMulti481.3.6.1.4.1.17940.3.5.2.48

AUSTIN-Multi48-R / RW
utexasEduAustinMulti491.3.6.1.4.1.17940.3.5.2.49

AUSTIN-Multi49-R / RW
utexasEduAustinMulti501.3.6.1.4.1.17940.3.5.2.50

AUSTIN-Multi50-R / RW
utexasEduAustinMulti511.3.6.1.4.1.17940.3.5.2.51

AUSTIN-Multi51-R / RW
utexasEduAustinMulti521.3.6.1.4.1.17940.3.5.2.52

AUSTIN-Multi52-R / RW
utexasEduAustinMulti531.3.6.1.4.1.17940.3.5.2.53

AUSTIN-Multi53-R / RW
utexasEduAustinMulti541.3.6.1.4.1.17940.3.5.2.54

AUSTIN-Multi54-R / RW
utexasEduAustinMulti551.3.6.1.4.1.17940.3.5.2.55

AUSTIN-Multi55-R / RW
utexasEduAustinMulti561.3.6.1.4.1.17940.3.5.2.56

AUSTIN-Multi56-R / RW
utexasEduAustinMulti571.3.6.1.4.1.17940.3.5.2.57

AUSTIN-Multi57-R / RW
utexasEduAustinMulti581.3.6.1.4.1.17940.3.5.2.58

AUSTIN-Multi58-R / RW
utexasEduAustinMulti591.3.6.1.4.1.17940.3.5.2.59

AUSTIN-Multi59-R / RW
utexasEduAustinMulti601.3.6.1.4.1.17940.3.5.2.60

AUSTIN-Multi60-R / RW

Time Attributes

Name OID Owner Purpose Security Groups
utexasEduAustinTime11.3.6.1.4.1.17940.3.5.3.1SystemsLast time a utexasEduPersonEntitlementCode change was received

AUSTIN-Time1-R / RW

utexasEduAustinTime21.3.6.1.4.1.17940.3.5.3.2SystemsLast time a utexasEduPersonAffCode change was received

AUSTIN-Time2-R / RW

utexasEduAustinTime31.3.6.1.4.1.17940.3.5.3.3SystemsLast time the EID has been enabled or disabled

AUSTIN-Time3-R / RW

utexasEduAustinTime4 1.3.6.1.4.1.17940.3.5.3.4SystemsutexasEduPersonLastUpdateTimeAUSTIN-Time4-R / RW
utexasEduAustinTime51.3.6.1.4.1.17940.3.5.3.5SystemsAD Tools - When the account was assignedAUSTIN-Time5-R / RW
utexasEduAustinTime61.3.6.1.4.1.17940.3.5.3.6SystemsAD Tools - When the account was claimedAUSTIN-Time6-R / RW

Commands to set permissions for security groups

# set scope
Import-Module ActiveDirectory
$attributes = 1..30
$grouptypes = "Single","Multi","Time"
$ad = Get-ADDomain
$dc = $ad.PDCEmulator.ToLower()
$ou = "'\\" + $dc + "\OU=People," + $ad.DistinguishedName + "'"
foreach ($attr in $attributes) {
	foreach ($group in $grouptypes) {
		$groupAttr = $group + $attr
		# Check for existing groups; create groups if missing
		Try {
			Get-ADGroup ("AUSTIN-" + $groupAttr + "-R") | Out-Null
			Write-host "Existing group for" ($ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-R")
		}
		Catch {
			Write-Host "Creating group for" ($ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-R")
			New-ADGroup -Server $dc -Path ("OU=Attributes,OU=Austin,OU=Departments," +  $ad.DistinguishedName) -GroupScope Universal -Name ("AUSTIN-" + $groupAttr + "-R") | Out-Null
		}
		Try {
			Get-ADGroup ("AUSTIN-" + $groupAttr + "-RW") | Out-Null
			Write-host "Existing group for" ($ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-RW")
		}
		Catch {
			Write-Host "Creating group for" ($ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-RW")
			New-ADGroup -Server $dc -Path ("OU=Attributes,OU=Austin,OU=Departments," +  $ad.DistinguishedName) -GroupScope Universal -Name ("AUSTIN-" + $groupAttr + "-RW") | Out-Null
		}
		# Remove and reset permissions for groups
		Write-Host "Setting rights for" ($ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-R")
		Invoke-Expression ("C:\Windows\System32\dsacls.exe " + $ou + " /R '" + $ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-R'") | Out-Null
		Invoke-Expression ("C:\Windows\System32\dsacls.exe " + $ou + " /I:S /G '" + $ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-R:CARP;utexasEduAustin" + $groupAttr + ";'") | Out-Null
		Write-Host "Setting rights for" ($ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-RW")
		Invoke-Expression ("C:\Windows\System32\dsacls.exe " + $ou + " /R '" + $ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-RW'") | Out-Null
		Invoke-Expression ("C:\Windows\System32\dsacls.exe " + $ou + " /I:S /G '" + $ad.NetBIOSName + "\AUSTIN-" + $groupAttr + "-RW:CARPWP;utexasEduAustin" + $groupAttr + ";'") | Out-Null
	}
}



  • No labels

Confluence Documentation | Web Privacy Policy | Web Accessibility