Schema Attribute OID numbers

[Jim Watts]

Hi,

I'm trying to learn about AD schema extensions etc. What I need to
understand is the OID number, which I believe is a globally unique
definition of the attribute/class etc, obtained from a standards authority
(IEEE, IETF??) Can somebody point me to information concerning this?

I have two specific questions, although I do want to gain a general
understanding as well:

1) How can I tell if third party extensions have correctly defined OIDs,
registered with the authority? Is there a list somewhere of x500 attributes?
We have a supplier who has extensions required for their app, but we want to
check that these are correctly registered etc, and so will NEVER clash with
others

2) How do we go about creating our own extensions, and having these
registered as well? I believe we have to apply for a block of OIDs that will
be assigned to our company, but where can I find information concerning
this.

Many thanks
--
Jim Watts,
Technology Consultant
Directories, Authentication and Border Security
Information Systems Services
University of Southampton

 

[Jimmy Andersson [MVP]]

OIDGEN should be used to generate OIDs for testing purposes. Once you are
ready to register a schema extension you should register a root OID for your
company or entity with Microsoft at:
http://msdn.microsoft.com/certification/ad-registration.asp (If you leave
the OID blank in the above page, Microsoft will issue you a new root OID.)
Once you have that OID, it is up to you to manage the classes and attributes
below it. For example: If you received 1.2.3.4.5 as your root, you could
internally manage schema extensions to be: 1.2.3.4.5.1 for classes and
1.2.3.4.5.2 for attributes. So that your first extended class would be:
1.2.3.4.5.1.1 and the second 1.2.3.4.5.1.2, and so on.

Schema extensions:
http://msdn.microsoft.com/library/d...adschema/adschema/active_directory_schema.asp
and do a search on extending the schema.

If you want to extend the ADUC you should take a look at Step-by-Step Guide
to Using Active Directory Schema and Display Specifiers:
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/adschemasteps.asp.

Regards,
/Jimmy