OID Schema for UC Berkeley Attributes and Object Classes

Root OID Overview

UC Berkeley's root OID/Enterprise-number arc is: 1.3.6.1.4.1.4995

Directory Service OIDs

The current Directory Service uses the subarc 1.3.6.1.4.1.4995.2 as its base and implements the following subarcs:

• 1.3.6.1.4.1.4995.2.200 = ATTRIBUTE DEFINITIONS
• 1.3.6.1.4.1.4995.2.600 = OBJECT CLASS DEFINITIONS

There is a strong relationship in the subarc assignments within the .200 (attributes) and .600 (objectclasses) subarcs:

People Subarc Details (.10)

• .1 = Multi-Purpose Attributes
• .10 = People
  • .1 = Person General (berkeleyEduPerson)
    • .2.15 berkeleyEduHCMID
    • .2.16 berkeleyEduCADSAffID
    • .2.17 berkeleyEduCalNetAffID
    • .2.18 berkeleyEduUCPathID
    • .5.4 CalNetID (berkeleyEduKerberosPrincipalString)
    • .7.1 Alternate ID (berkeleyEduAlternateID)
  • .2 = Deputy (berkeleyEduDeputy)
  • .3 = Deputy Admin (berkeleyEduDeputyAdmin)
  • .4 = Address (berkeleyEduPersonAddress)
  • .5 = Job Appt (berkeleyEduPersonJobAppt)
  • .6 = Service (berkeleyEduPersonService)
  • .7 = Affiliate (berkeleyEduPersonAffiliate)
  • .8 = Dept Directory Contact (berkeleyEduDeptDirectoryContact)
  • .9 = Term (berkeleyEduPersonTerm)
  • .10 = Security Question (berkeleyEduCalNetSecurityQuestion)
    • .1 = Security Question (berkeleyEduSecurityQuestion)
    • .2 = Security Question Answer (berkeleyEduCalNetSecurityQuestionAnswer)

Org Units, Applications, and Authorizations

• .11 = Application Authorizations (berkeleyEduAuthorizations)
  • .1 = Application Authorizations (berkeleyEduAuthorizations)
  • .11 = AuthZ-related (berkeleyEduAuthZClass)
    • .1 = AuthZ (berkeleyEduAuthZ)
    • .2 = AuthZ Sponsor Uid (berkeleyEduAuthZSponsorUid)
• .20 = ORG UNITS
  • .1 = Org-unit (berkeleyEduOrgUnit)
• .30 = APPLICATIONS
  • .1 = Application (berkeleyEduApplication)

Services and Namespace (.40, .50)

.40 = SERVICES

• .1 = CalMail
  • .1 = CalMail Account (berkeleyEduCalMailAccount)
  • .2 = CalMail Redirect (berkeleyEduCalMailRedirect)
• .2 = UniBears
  • .1 = UniBears Admin (berkeleyEduUniBearsAdmin)
• .3 = CalNet
  • .1 = Affiliation (berkeleyEduCalNetAffiliation)
  • .2 = Current Highest Assigned UID (berkeleyEduCalNetMaxUid)
  • .3 = Time of Last Sync (berkeleyEduCalNetLastSyncTime)
  • .4 = Title Code (berkeleyEduCalNetTitleCode)
  • .5 = Term (berkeleyEduCalNetTerm)
  • .6 = Honorific (berkeleyEduCalNetHonorific)
  • .7 = Generational (berkeleyEduCalNetGenerational)
  • .8 = Salutation (berkeleyEduCalNetSalutation)
  • .9 = Publication (berkeleyEduCalNetPublication)
  • .10 = Last ChangeLog Number (berkeleyEduCalNetChangeLogSyncStart)
  • .11 = Change Event Notification Service
    • .1 = Event (berkeleyEduENSEvent)
    • .2 = Subscription (berkeleyEduENSEventSubscription)
  • .12 = Generic key value pair
• .4 = Central Service
  • .1 = Central Service Entry (berkeleyEduCentralService)
• .5 = Communite (unibears software)
  • .1 = Standard Communite (berkeleyEduCommunite)

.50 = NAMESPACE

• .1 = Name (berkeleyEduNamespaceName)
• .2 = Service Type (berkeleyEduNamespaceServiceType)
• .3 = Stub Pattern (berkeleyEduNamespaceStubPattern)

Department OID Subarcs (.60)

• .1 = Department (berkeleyEduDept)
• .2 = Department Postal Code (berkeleyEduDeptPostalCode)

Extended Department OID Subarcs

Upon request, additional subarcs can be allocated for specific departments:

Subarcs

Subarc	Allocated to
1.3.6.1.4.1.4995.1000.1	Reserved
1.3.6.1.4.1.4995.1000.2	EECS - X-TRACE
1.3.6.1.4.1.4995.1000.3	RSSP - Requested by Kevin Sweeney
1.3.6.1.4.1.4995.1000.4	EECS - Attestation Transparency project

Employee Criteria

The following criteria are used to determine employee records pulled into the directory service:

• Personnel Status: Code is not N. This indicates that the record is not a non-employee record.
• Employee Status: Must be A (Active), L (On unpaid leave), or P (Paid leave).
• Appointment Begin Date: Must be no more than 3 months later than the pull date. This allows departments to give new employees CalNet IDs prior to their actual start date.
• Appointment Termination Date: Must be greater than the pull date.
• Job Category: Must be P. This indicates that the job is the principal job.