LDAP People OU - SPA Attributes

SPA CalNet ID Attributes in LDAP

In the CalNet LDAP directory, SPA CalNet IDs are found as OU=People entries. Typical attributes for these accounts are listed in the table below. Click to find out more about SPAs.

List of attributes

Attribute Name	Example Value
givenname	Econ
sn	SP_Account
departmentNumber	SECON
berkeleyEduHierarchyString	UCBKL-COLLS-LS1SS-SECON
berkeleyEduKerberosPrincipalString	spa-econ
berkeleyEduAlternateID	econ@berkeley.edu
berkeleyEduAffiliations	AFFILIATE-TYPE-SPA
berkeleyEduAffTypes	SPA

Auxiliary objectClass: berkeleyEduSpecialPurposeAccount

Additional attributes are defined in the SPA-related auxiliary objectClass berkeleyEduSpecialPurposeAccount:

• berkeleyEduSPAApproverUID (Required)
• berkeleyEduSPAAdminGroup (Required; Distinguished Name (DN) for the group with all Admins for this SPA as members)
• berkeleyEduSPAUsersGroup (DN for the group with all Users of this SPA as members; includes all Admins as well)
• berkeleyEduSPACollection
• berkeleyEduSPAPurpose
• berkeleyEduSPAType

Additional Information

To create SPAs and manage membership, use the Special Purpose Accounts Admin App.