dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
Network Working Group                                  M. Meredith,
dc724d5
Internet Draft                                         V. Nanjundaswamy,
dc724d5
Document: <draft-ietf-dhc-ldap-schema-00.txt>          M. Hinckley
dc724d5
Category: Proposed Standard                            Novell Inc.
dc724d5
Expires: 15th December 2001                            16th June 2001
dc724d5
dc724d5
dc724d5
                          LDAP Schema for DHCP
dc724d5
dc724d5
Status of this Memo
dc724d5
dc724d5
This document is an Internet-Draft and is in full conformance with all
dc724d5
provisions of Section 10 of RFC2026 [ ].
dc724d5
dc724d5
Internet-Drafts are working documents of the Internet Engineering Task
dc724d5
Force (IETF), its areas, and its working groups.  Note that other groups
dc724d5
may also distribute working documents as Internet-Drafts. Internet-
dc724d5
Drafts are draft documents valid for a maximum of six months and may be
dc724d5
updated, replaced, or obsolete by other documents at any time.  It is
dc724d5
inappropriate to use Internet-Drafts as reference material or to cite
dc724d5
them other than as "work in progress."  The list of current Internet-
dc724d5
Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt The
dc724d5
list of Internet-Draft Shadow Directories can be accessed at
dc724d5
http://www.ietf.org/shadow.html.
dc724d5
dc724d5
1. Abstract
dc724d5
dc724d5
This document defines a schema for representing DHCP configuration in an
dc724d5
LDAP directory. It can be used to represent the DHCP Service
dc724d5
configuration(s) for an entire enterprise network, a subset of the
dc724d5
network, or even a single server. Representing DHCP configuration in an
dc724d5
LDAP directory enables centralized management of DHCP services offered
dc724d5
by one or more DHCP Servers within the enterprise.
dc724d5
dc724d5
2. Conventions used in this document
dc724d5
dc724d5
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
dc724d5
"SHOULD", "SHOULD NOT", "RECOMMENDED",  "MAY", and "OPTIONAL" in this
dc724d5
document are to be interpreted as described in RFC-2119 [ ].
dc724d5
dc724d5
In places where different sets of terminology are commonly used to
dc724d5
represent similar DHCP concepts, this schema uses the terminology of the
dc724d5
Internet Software Consortium's DHCP server reference implementation.
dc724d5
For more information see www.isc.org.
dc724d5
dc724d5
3. Design Considerations
dc724d5
dc724d5
The DHCP LDAP schema is designed to be a simple multi-server schema. The
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 1]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
intent of this schema is to provide a basic framework for representing
dc724d5
the most common elements used in the configuration of DHCP Server.  This
dc724d5
should allow other network services to obtain and use basic DHCP
dc724d5
configuration information in a server-independent but knowledgeable way.
dc724d5
dc724d5
It is expected that some implementations may need to extend the schema
dc724d5
objects, in order to implement all of their features or needs. It is
dc724d5
recommended that you use the schema defined in this draft to represent
dc724d5
DHCP configuration information in an LDAP directory.  Conforming to a
dc724d5
standard schema improves interoperability between DHCP implementations
dc724d5
from different vendors.
dc724d5
dc724d5
Some implementations may choose not to support all of the objects
dc724d5
defined here.
dc724d5
dc724d5
Two decisions are explicitly left up to each implementation:
dc724d5
dc724d5
First, implementations may choose not to store the lease information in
dc724d5
the directory, so those objects would not be used.
dc724d5
dc724d5
Second, implementations may choose not to implement the auditing
dc724d5
information.
dc724d5
dc724d5
It is up to the implementation to determine if the data in the directory
dc724d5
is considered "authoritative", or if it is simply a copy of data from an
dc724d5
authoritative source. Validity of the information if used as a copy is
dc724d5
to be ensured by the implementation.
dc724d5
dc724d5
Primarily two types of applications will use the information in this
dc724d5
schema: 1. DHCP servers (for loading their configuration) 2. Management
dc724d5
Interfaces (for defining/editing configurations).
dc724d5
dc724d5
The schema should be efficient for the needs of both types of
dc724d5
applications.  The schema is designed to allow objects managed by DHCP
dc724d5
(such as computers, subnets, etc) to be present anywhere in a directory
dc724d5
hierarchy (to allow those objects to be placed in the directory for
dc724d5
managing administrative control and access to the objects).
dc724d5
dc724d5
The schema uses a few naming conventions - all object classes and
dc724d5
attributes are prefixed with "dhcp" to decrease the chance that object
dc724d5
classes and attributes will have the same name.  The schema also uses
dc724d5
standard naming attributes ("cn", "ou", etc) for all objects.
dc724d5
dc724d5
4. Common DHCP Configuration Attributes
dc724d5
dc724d5
Although DHCP manages several different types of objects, the
dc724d5
configuration of those objects is often similar.  Consequently, most of
dc724d5
these objects have a common set of attributes, which are defined below.
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 2]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
4.1. Attributes Definitions
dc724d5
dc724d5
The schema definitions listed below are for readability.  The LDIF
dc724d5
layout for this schema will follow in section 8.
dc724d5
dc724d5
Name: dhcpPrimaryDN Description: The Distinguished Name of the
dc724d5
dhcpServer object, which is the primary server for the configuration.
dc724d5
Syntax: DN Flags: SINGLE-VALUE
dc724d5
dc724d5
Named: dhcpSecondaryDN Description: The Distinguished Name(s) of the
dc724d5
dhcpServer object(s), which are secondary servers for the configuration.
dc724d5
Syntax: DN
dc724d5
dc724d5
Name: dhcpStatements Description: Flexible storage for representing any
dc724d5
specific data depending on the object to which it is attached. Examples
dc724d5
include conditional statements, Server parameters, etc.  This also
dc724d5
serves as a 'catch-all' attribute that allows the standard to evolve
dc724d5
without needing to update the schema.  Syntax: IA5String
dc724d5
dc724d5
Name: dhcpRange Description: The starting and ending IP Addresses in the
dc724d5
range (inclusive), separated by a hyphen; if the range only contains one
dc724d5
address, then just the address can be specified with no hyphen.  Each
dc724d5
range is defined as a separate value.  Syntax: IA5String
dc724d5
dc724d5
Name: dhcpPermitList Description: This attribute contains the permit
dc724d5
lists associated with a pool. Each permit list is defined as a separate
dc724d5
value.  Syntax: IA5String
dc724d5
dc724d5
Name: dhcpNetMask Description: The subnet mask length for the subnet.
dc724d5
The mask can be easily computed from this length.  Syntax: Integer
dc724d5
Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpOption Description: Encoded option values to be sent to
dc724d5
clients.  Each value represents a single option and contains (OptionTag,
dc724d5
Length, OptionData) encoded in the format used by DHCP.  For more
dc724d5
information see [DHCPOPT].  Syntax: OctetString
dc724d5
dc724d5
Name: dhcpClassData Description: Encoded text string or list of bytes
dc724d5
expressed in hexadecimal, separated by colons. Clients match subclasses
dc724d5
based on matching the class data with the results of a 'match' or 'spawn
dc724d5
with' statement in the class name declarations.  Syntax: IA5String
dc724d5
Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpSubclassesDN Description: List of subclasses, these are the
dc724d5
actual DN of each subclass object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpClassesDN Description: List of classes, these are the actual
dc724d5
DN of each class object.  Syntax: DN
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 3]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
Name: dhcpSubnetDN Description: List of subnets, these are the actual DN
dc724d5
of each subnet object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpPoolDN Description: List of pools, these are the actual DN of
dc724d5
each Pool object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpOptionsDN Description: List of options, these are the actual
dc724d5
DN of each Options object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpHostDN Description: List of hosts, these are the actual DN of
dc724d5
each host object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpSharedNetworkDN Description: List of shared networks, these
dc724d5
are the actual DN of each shared network object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpGroupDN Description: List of groups, these are the actual DN
dc724d5
of each Group object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpLeaseDN Description: Single Lease DN. A dhcpHost configuration
dc724d5
uses this attribute to identify a static IP address assignment.  Syntax:
dc724d5
DN Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpLeasesDN Description: List of leases, these are the actual DN
dc724d5
of each lease object.  Syntax: DN
dc724d5
dc724d5
Name: dhcpServiceDN Description: The DN of dhcpService object(s)which
dc724d5
contain the configuration information. Each dhcpServer object has this
dc724d5
attribute identifying the DHCP configuration(s) that the server is
dc724d5
associated with.  Syntax: DN
dc724d5
dc724d5
Name: dhcpHWAddress Description: The hardware address of the client
dc724d5
associated with a lease Syntax: OctetString Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpVersion Description: This is the version identified for the
dc724d5
object that this attribute is part of. In case of the dhcpServer object,
dc724d5
this represents the DHCP software version.  Syntax: IA5String Flags:
dc724d5
SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpImplementation Description: DHCP Server implementation
dc724d5
description e.g. DHCP Vendor information.  Syntax: IA5String Flags:
dc724d5
SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpHashBucketAssignment Description: HashBucketAssignment bit map
dc724d5
for the DHCP Server, as defined in DHC Load Balancing Algorithm [RFC
dc724d5
3074].  Syntax: Octet String Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpDelayedServiceParameter Description: Delay in seconds
dc724d5
corresponding to Delayed Service Parameter configuration, as defined in
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 4]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
DHC Load Balancing Algorithm [RFC 3074].  Syntax: Integer Flags: SINGLE-
dc724d5
VALUE
dc724d5
dc724d5
Name: dhcpMaxClientLeadTime Description: Maximum Client Lead Time
dc724d5
configuration in seconds, as defined in DHCP Failover Protocol [FAILOVR]
dc724d5
Syntax: Integer Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpFailOverEndpointState Description: Server (Failover Endpoint)
dc724d5
state, as defined in DHCP Failover Protocol [FAILOVR] Syntax: IA5String
dc724d5
Flags: SINGLE-VALUE
dc724d5
dc724d5
5. Configurations and Services
dc724d5
dc724d5
The schema definitions below are for readability the LDIF layout for
dc724d5
this schema will follow in section 8.
dc724d5
dc724d5
The DHC working group is currently considering several proposals for
dc724d5
fail-over and redundancy of DHCP servers.  These may require sharing of
dc724d5
configuration information between servers.  This schema provides a
dc724d5
generalized mechanism for supporting any of these proposals, by
dc724d5
separating the definition of a server from the definition of
dc724d5
configuration service provided by the server.
dc724d5
dc724d5
Separating the DHCP Server (dhcpServer) and the DHCP Configuration
dc724d5
(dhcpService) representations allows a configuration service to be
dc724d5
provided by one or more servers. Similarly, a server may provide one or
dc724d5
more configurations. The schema allows a server to be configured as
dc724d5
either a primary or secondary provider of a DHCP configuration.
dc724d5
dc724d5
Configurations are also defined so that one configuration can include
dc724d5
some of the objects that are defined in another configuration.  This
dc724d5
allows for sharing and/or a hierarchy of related configuration items.
dc724d5
dc724d5
Name: dhcpService Description:  Service object that represents the
dc724d5
actual DHCP Service configuration. This will be a container with the
dc724d5
following attributes.  Must: cn, dhcpPrimaryDN May: dhcpSecondaryDN,
dc724d5
dhcpSharedNetworkDN, dhcpSubnetDN, dhcpGroupDN, dhcpHostDN,
dc724d5
dhcpClassesDN, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
The following objects could exist inside the dhcpService container:
dc724d5
dhcpSharedNetwork, dhcpSubnet, dhcpGroup, dhcpHost, dhcpClass,
dc724d5
dhcpOptions, dhcpLog
dc724d5
dc724d5
Name: dhcpServer Description:  Server object that the DHCP server will
dc724d5
login as.  The configuration information is in the dhcpService container
dc724d5
that the dhcpServiceDN points to.  Must: cn, dhcpServiceDN May:
dc724d5
dhcpVersion, dhcpImplementation, dhcpHashBucketAssignment,
dc724d5
dhcpDelayedServiceParameter, dhcpMaxClientLeadTime, 
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 5]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dhcpFailOverEndpointState, dhcpStatements
dc724d5
dc724d5
5.1. DHCP Declaration related classes:
dc724d5
dc724d5
Name: dhcpSharedNetwork Description: Shared Network class will list what
dc724d5
pools and subnets are in this network.
dc724d5
dc724d5
This will be a container with the following attributes.  Must: cn May:
dc724d5
dhcpSubnetDN, dhcpPoolDN, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
The following objects can exist within a dhcpSharedNetwork container:
dc724d5
dhcpSubnet, dhcpPool, dhcpOptions, dhcpLog
dc724d5
dc724d5
Name: dhcpSubnet Description: Subnet object will include configuration
dc724d5
information associated with a subnet, including a range and a net mask.
dc724d5
dc724d5
This will be a container with the following attributes.  Must: cn
dc724d5
(Subnet address), dhcpNetMask May: dhcpRange, dhcpPoolDN, dhcpGroupDN,
dc724d5
dhcpHostDN, dhcpClassesDN, dhcpLeasesDN, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
The following objects can exist within a dhcpSubnet container: dhcpPool,
dc724d5
dhcpGroup, dhcpHost, dhcpClass, dhcpOptions, dhcpLease, dhcpLog
dc724d5
dc724d5
Name: dhcpGroup Description: Group object will have configuration
dc724d5
information associated with a group.
dc724d5
dc724d5
This will be a container with the following attributes.  Must: cn May:
dc724d5
dhcpHostDN, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
The following objects can exist within a dhcpGroup container: dhcpHost,
dc724d5
dhcpOptions
dc724d5
dc724d5
Name: dhcpHost Description: The host object includes DHCP host
dc724d5
declarations to assign a static IP address or declare the client as
dc724d5
known or specify statements for a specific client.  Must: cn May:
dc724d5
dhcpLeaseDN, dhcpHWAddress, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
The following objects can exist within a dhcpHost container: dhcpLease,
dc724d5
dhcpOptions
dc724d5
dc724d5
Name: dhcpOptions Description: The options class is for option space
dc724d5
declarations, it contains a list of options.  Must: cn, dhcpOption
dc724d5
dc724d5
Name: dhcpClass Description: This is a class to group clients together
dc724d5
based on matching rules.
dc724d5
dc724d5
This will be a container with the following attributes.  Must: cn May:
dc724d5
dhcpSubClassesDN, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
The following object can exist within a dhcpClass container:
dc724d5
dhcpSubclass, dhcpOptions
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 6]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
Name: dhcpSubClass Description: This includes configuration information
dc724d5
for a subclass associated with a class. The dhcpSubClass object will
dc724d5
always be contained within the corresponding class container object.
dc724d5
Must: cn May:  dhcpClassData, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
Name: dhcpPool Description: This contains configuration for a pool that
dc724d5
will have the range of addresses, permit lists and point to classes and
dc724d5
leases that are members of this pool.
dc724d5
dc724d5
This will be a container that could be contained by dhcpSubnet or a
dc724d5
dhcpSharedNetwork.  Must: cn, dhcpRange May: dhcpClassesDN,
dc724d5
dhcpPermitList, dhcpLeasesDN, dhcpOptionsDN, dhcpStatements
dc724d5
dc724d5
The following objects can exist within a dhcpPool container: dhcpClass,
dc724d5
dhcpOptions, dhcpLease, dhcpLog
dc724d5
dc724d5
6. Tracking Address Assignments
dc724d5
dc724d5
The behavior of a DHCP server is influenced by two factors - it's
dc724d5
configuration and the current state of the addresses that have been
dc724d5
assigned to clients. This schema defines a set of objects for
dc724d5
representing the DHCP configuration associated with a server. The
dc724d5
following object classes provide the ability to record how addresses are
dc724d5
used including maintaining history (audit log) on individual leases.
dc724d5
Recording lease information in a directory could result in a significant
dc724d5
performance impact and is therefore optional. Implementations supporting
dc724d5
logging of leases need to consider the performance impact.
dc724d5
dc724d5
6.1. dhcpLeases Attribute Definitions
dc724d5
dc724d5
The schema definitions below are for readability the LDIF layout for
dc724d5
this schema will follow in section 8.
dc724d5
dc724d5
Name: dhcpAddressState Description: This stores information about the
dc724d5
current binding-status of an address.  For dynamic addresses managed by
dc724d5
DHCP, the values should be restricted to the states defined in the DHCP
dc724d5
Failover Protocol draft [FAILOVR]: 'FREE', 'ACTIVE', 'EXPIRED',
dc724d5
'RELEASED', 'RESET', 'ABANDONED', 'BACKUP'.  For more information on
dc724d5
these states see [FAILOVR].  For other addresses, it SHOULD be one of
dc724d5
the following: 'UNKNOWN', 'RESERVED' (an address that is managed by DHCP
dc724d5
that is reserved for a specific client), 'RESERVED-ACTIVE' (same as
dc724d5
reserved, but address is currently in use),  'ASSIGNED' (assigned
dc724d5
manually or by some other mechanism), 'UNASSIGNED', 'NOTASSIGNABLE'.
dc724d5
Syntax: IA5String Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpExpirationTime Description: This is the time the current lease
dc724d5
for an address expires.  Syntax: DateTime Flags: SINGLE-VALUE
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 7]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
Name: dhcpStartTimeOfState Description: This is the time of the last
dc724d5
state change for a leased address.  Syntax: DateTime Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpLastTransactionTime Description: This is the last time a valid
dc724d5
DHCP packet was received from the client.  Syntax: DateTime Flags:
dc724d5
SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpBootpFlag Description: This indicates whether the address was
dc724d5
assigned via BOOTP Syntax: Boolean Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpDomainName Description: This is the name of the domain sent to
dc724d5
the client by the server.  It is essentially the same as the value for
dc724d5
DHCP option 15 sent to the client, and represents only the domain - not
dc724d5
the full FQDN.  To obtain the full FQDN assigned to the client you must
dc724d5
prepend the "dhcpAssignedHostName" to this value with a ".".  Syntax:
dc724d5
IA5String Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpDnsStatus Description: This indicates the status of updating
dc724d5
DNS resource records on behalf of the client by the DHCP server for this
dc724d5
address.  The value is a 16-bit bitmask that has the same values as
dc724d5
specified by the Failover-DDNS option (see [FAILOVR]).  Syntax: Integer
dc724d5
Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpRequestedHostName Description: This is the hostname that was
dc724d5
requested by the client.  Syntax: IA5String Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpAssignedHostName Description: This is the actual hostname that
dc724d5
was assigned to a client. It may not be the name that was requested by
dc724d5
the client.  The fully qualified domain name can be determined by
dc724d5
appending the value of "dhcpDomainName" (with a dot separator) to this
dc724d5
name.  Syntax: IA5String Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpReservedForClient Description: This is the distinguished name
dc724d5
of the "dhcpHost" that an address is reserved for.  This may not be the
dc724d5
same as the "dhcpAssignedToClient" attribute if the address is being
dc724d5
reassigned but the current lease has not yet expired.  Syntax: DN Flags:
dc724d5
SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpAssignedToClient Description: This is the distinguished name
dc724d5
of a "dhcpHost" that an address is currently assigned to.  This
dc724d5
attribute is only present in the class when the address is leased.
dc724d5
Syntax: DN Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpRelayAgentInfo Description: If the client request was received
dc724d5
via a relay agent, this contains information about the relay agent that
dc724d5
was available from the DHCP request.  This is a hex-encoded option
dc724d5
value.  Syntax: OctetString Flags: SINGLE-VALUE
dc724d5
dc724d5
Name: dhcpErrorLog Description: Generic error log attribute that allows
dc724d5
logging error conditions within a dhcpService or a dhcpSubnet, like no IP 
dc724d5
addresses available for lease. Syntax: IA5String 
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 8]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
6.2.  dhcpLeases Object Class
dc724d5
dc724d5
This class represents an IP address.  It may or may not be leaseable,
dc724d5
and the object may exist even though a lease is not currently active for
dc724d5
the associated IP address.
dc724d5
dc724d5
It is recommended that all Lease objects for a single DHCP Service be
dc724d5
centrally located within a single container. This ensures that the lease
dc724d5
objects and the corresponding logs do not have to be relocated, when
dc724d5
address ranges allocated to individual DHCP subnets and/or pools change.
dc724d5
dc724d5
The schema definitions below are for readability the LDIF layout for
dc724d5
this schema will follow in section 8.
dc724d5
dc724d5
Name: dhcpLeases Description: This is the object that holds state
dc724d5
information about an IP address. The cn (which is the IP address), and
dc724d5
the current address-state are mandatory attributes. If the address is
dc724d5
assigned then, some of the optional attributes will have valid data.
dc724d5
Must: cn, dhcpAddressState May: dhcpExpirationTime,
dc724d5
dhcpStartTimeOfState, dhcpLastTransactionTime, dhcpBootpFlag,
dc724d5
dhcpDomainName, dhcpDnsStatus, dhcpRequestedHostName,
dc724d5
dhcpAssignedHostName, dhcpReservedForClient, dhcpAssignedToClient,
dc724d5
dhcpRelayAgentInfo, dhcpHWAddress
dc724d5
dc724d5
6.3 Audit Log Information
dc724d5
dc724d5
A dhcpLog object is created whenever a lease is assigned or released.
dc724d5
This object is intended to be created under the corresponding dhcpLeases
dc724d5
container, or dhcpPool, dhcpSubnet, dhcpSharedNetwork or dhcpService
dc724d5
containers.
dc724d5
dc724d5
The log information under the dhcpLeases container would be for
dc724d5
addresses matching that lease information. The log information in the
dc724d5
other containers could be used for errors, i.e. when a pool or subnet is
dc724d5
out our addresses or if a server is not able to assign any more
dc724d5
addresses for a particular dhcpService.
dc724d5
dc724d5
Name: dhcpLog Description: This is the object that holds past
dc724d5
information about an IP address. The cn is the time/date stamp when the
dc724d5
address was assigned or released, the address state at the time, if the
dc724d5
address was assigned or released.  Must: cn May: dhcpAddressState,
dc724d5
dhcpExpirationTime, dhcpStartTimeOfState, dhcpLastTransactionTime,
dc724d5
dhcpBootpFlag, dhcpDomainName, dhcpDnsStatus, dhcpRequestedHostName,
dc724d5
dhcpAssignedHostName, dhcpReservedForClient, dhcpAssignedToClient,
dc724d5
dhcpRelayAgentInfo, dhcpHWAddress, dhcpErrorLog
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                 [Page 9]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
7. Determining settings
dc724d5
dc724d5
The dhcpStatements attribute is the key to DHC enhancements that may
dc724d5
come along, and the different key words that a particular server
dc724d5
implementation may use. This attribute can be used to hold conditional
dc724d5
DHCP Statements and DHCP server parameters. Having a generic settings
dc724d5
attribute that is just a string, allows this schema to be extensible and
dc724d5
easy to configure.
dc724d5
dc724d5
All of the attributes that end with DN are references to the class that
dc724d5
precedes the DN e.g. the dhcpPrimaryDN and dhcpSecondaryDN attributes
dc724d5
hold the Distinguished Names of the dhcpServer objects that are
dc724d5
associated with the dhcpService object.
dc724d5
dc724d5
8. LDIF format for attributes and classes.
dc724d5
dc724d5
# Attributes
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.1 NAME 'dhcpPrimaryDN' DESC
dc724d5
'The DN of the dhcpServer which is the primary server for the
dc724d5
configuration.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.2 NAME 'dhcpSecondaryDN' DESC 'The DN of
dc724d5
dhcpServer(s) which provide backup service for the configuration.'
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.3 NAME 'dhcpStatements' DESC 'Flexible
dc724d5
storage for specific data depending on what object this exists in. Like
dc724d5
conditional statements, server parameters, etc. This allows the standard
dc724d5
to evolve without needing to adjust the schema.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.26 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.4 NAME 'dhcpRange' DESC 'The starting &
dc724d5
ending IP Addresses in the range (inclusive), separated by a hyphen; if
dc724d5
the range only contains one address, then just the address can be
dc724d5
specified with no hyphen.  Each range is defined as a separate value.'
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.5 NAME 'dhcpPermitList' DESC 'This attribute
dc724d5
contains the permit lists associated with a pool. Each permit list is
dc724d5
defined as a separate value.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.6 NAME 'dhcpNetMask' DESC 'The subnet mask
dc724d5
length for the subnet.  The mask can be easily computed from this
dc724d5
length.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.7 NAME 'dhcpOption' DESC 'Encoded option
dc724d5
values to be sent to clients.  Each value represents a single option and
dc724d5
contains (OptionTag, Length, OptionValue) encoded in the format used by
dc724d5
DHCP.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 )
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 10]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.8 NAME 'dhcpClassData' DESC 'Encoded text
dc724d5
string or list of bytes expressed in hexadecimal, separated by colons.
dc724d5
Clients match subclasses based on matching the class data with the
dc724d5
results of match or spawn with statements in the class name
dc724d5
declarations.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.9 NAME 'dhcpOptionsDN' DESC 'The
dc724d5
distinguished name(s) of the dhcpOption objects containing the
dc724d5
configuration options provided by the server.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.10 NAME 'dhcpHostDN' DESC 'the distinguished
dc724d5
name(s) of the dhcpHost objects.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.11 NAME 'dhcpPoolDN' DESC 'The distinguished
dc724d5
name(s) of pools.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.12 NAME 'dhcpGroupDN' DESC 'The
dc724d5
distinguished name(s)   of the groups.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.13 NAME 'dhcpSubnetDN' DESC 'The
dc724d5
distinguished name(s) of the subnets.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.14 NAME 'dhcpLeaseDN' DESC 'The
dc724d5
distinguished name of a client address.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE)
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.15 NAME 'dhcpLeasesDN' DESC 'The
dc724d5
distinguished name(s) client addresses.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.16 NAME 'dhcpClassesDN' DESC 'The
dc724d5
distinguished name(s) of a class(es) in a subclass.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.17 NAME 'dhcpSubclassesDN' DESC 'The
dc724d5
distinguished name(s) of subclass(es).' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.18 NAME 'dhcpSharedNetworkDN' DESC 'The
dc724d5
distinguished name(s) of sharedNetworks.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.19 NAME 'dhcpServiceDN' DESC 'The DN of
dc724d5
dhcpService object(s)which contain the configuration information. Each
dc724d5
dhcpServer object has this attribute identifying the DHCP
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 11]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
configuration(s) that the server is associated with.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.12 )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.20 NAME 'dhcpVersion' DESC 'The version
dc724d5
attribute of this object.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-
dc724d5
VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.21 NAME 'dhcpImplementation' DESC
dc724d5
'Description of the DHCP Server implementation e.g. DHCP Server's
dc724d5
vendor.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.22 NAME 'dhcpAddressState' DESC 'This stores
dc724d5
information about the current binding-status of an address.  For dynamic
dc724d5
addresses managed by DHCP, the values should be restricted to the
dc724d5
following: "FREE", "ACTIVE", "EXPIRED", "RELEASED", "RESET",
dc724d5
"ABANDONED", "BACKUP".  For other addresses, it SHOULD be one of the
dc724d5
following: "UNKNOWN", "RESERVED" (an address that is managed by DHCP
dc724d5
that is reserved for a specific client), "RESERVED-ACTIVE" (same as
dc724d5
reserved, but address is currently in use), "ASSIGNED" (assigned
dc724d5
manually or by some other mechanism), "UNASSIGNED", "NOTASSIGNABLE".'
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.23 NAME 'dhcpExpirationTime' DESC 'This is
dc724d5
the time the current lease for an address expires.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.24 NAME 'dhcpStartTimeOfState' DESC 'This is
dc724d5
the time of the last state change for a leased address.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.25 NAME 'dhcpLastTransactionTime' DESC 'This
dc724d5
is the last time a valid DHCP packet was received from the client.'
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.26 NAME 'dhcpBootpFlag' DESC 'This indicates
dc724d5
whether the address was assigned via BOOTP.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.27 NAME 'dhcpDomainName' DESC 'This is the
dc724d5
name of the domain sent to the client by the server.  It is essentially
dc724d5
the same as the value for DHCP option 15 sent to the client, and
dc724d5
represents only the domain - not the full FQDN.  To obtain the full FQDN
dc724d5
assigned to the client you must prepend the "dhcpAssignedHostName" to
dc724d5
this value with a ".".' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-
dc724d5
VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.28 NAME 'dhcpDnsStatus' DESC 'This indicates
dc724d5
the status of updating DNS resource records on behalf of the client by
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 12]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
the DHCP server for this address.  The value is a 16-bit bitmask.'
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.29 NAME 'dhcpRequestedHostName' DESC 'This
dc724d5
is the hostname that was requested by the client.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.30 NAME 'dhcpAssignedHostName' DESC 'This is
dc724d5
the actual hostname that was assigned to a client. It may not be the
dc724d5
name that was requested by the client.  The fully qualified domain name
dc724d5
can be determined by appending the value of "dhcpDomainName" (with a dot
dc724d5
separator) to this name.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-
dc724d5
VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.31 NAME 'dhcpReservedForClient' DESC 'The
dc724d5
distinguished name of a "dhcpClient" that an address is reserved for.
dc724d5
This may not be the same as the "dhcpAssignedToClient" attribute if the
dc724d5
address is being reassigned but the current lease has not yet expired.'
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.32 NAME 'dhcpAssignedToClient' DESC 'This is
dc724d5
the distinguished name of a "dhcpClient" that an address is currently
dc724d5
assigned to.  This attribute is only present in the class when the
dc724d5
address is leased.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.33 NAME 'dhcpRelayAgentInfo' DESC 'If the
dc724d5
client request was received via a relay agent, this contains information
dc724d5
about the relay agent that was available from the DHCP request.  This is
dc724d5
a hex-encoded option value.' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
dc724d5
SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.34 NAME 'dhcpHWAddress' DESC 'The clients
dc724d5
hardware address that requested this IP address.' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.35 NAME 'dhcpHashBucketAssignment' DESC
dc724d5
'HashBucketAssignment bit map for the DHCP Server, as defined in DHC
dc724d5
Load Balancing Algorithm [RFC 3074].' SYNTAX
dc724d5
1.3.6.1.4.1.1466.115.121.1.40 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.36 NAME 'dhcpDelayedServiceParameter' DESC
dc724d5
'Delay in seconds corresponding to Delayed Service Parameter
dc724d5
configuration, as defined in  DHC Load Balancing Algorithm [RFC 3074]. '
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.37 NAME 'dhcpMaxClientLeadTime' DESC
dc724d5
'Maximum Client Lead Time configuration in seconds, as defined in DHCP
dc724d5
Failover Protocol [FAILOVR]' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 13]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.38 NAME 'dhcpFailOverEndpointState' DESC
dc724d5
'Server (Failover Endpoint) state, as defined in DHCP Failover Protocol
dc724d5
[FAILOVR]' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.4.39 NAME 'dhcpErrorLog' DESC
dc724d5
Generic error log attribute that allows logging error conditions within a 
dc724d5
dhcpService or a dhcpSubnet, like no IP addresses available for lease. 
dc724d5
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )
dc724d5
dc724d5
#Classes
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.1 NAME 'dhcpService' DESC ' Service object
dc724d5
that represents the actual DHCP Service configuration. This is a
dc724d5
container object.' SUP top MUST (cn $ dhcpPrimaryDN) MAY
dc724d5
(dhcpSecondaryDN $ dhcpSharedNetworkDN $ dhcpSubnetDN $ dhcpGroupDN $
dc724d5
dhcpHostDN $  dhcpClassesDN $ dhcpOptionsDN $ dhcpStatements ) )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.2 NAME 'dhcpSharedNetwork' DESC 'This stores
dc724d5
configuration information for a shared network.' SUP top MUST  cn MAY
dc724d5
(dhcpSubnetDN $ dhcpPoolDN $ dhcpOptionsDN $ dhcpStatements) X-
dc724d5
NDS_CONTAINMENT ('dhcpService' ) )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.3 NAME 'dhcpSubnet' DESC 'This class defines
dc724d5
a subnet. This is a container object.' SUP top MUST ( cn $ dhcpNetMask )
dc724d5
MAY (dhcpRange $ dhcpPoolDN $ dhcpGroupDN $ dhcpHostDN $ dhcpClassesDN $
dc724d5
dhcpLeasesDN $ dhcpOptionsDN $ dhcpStatements) X-NDS_CONTAINMENT
dc724d5
('dhcpService' 'dhcpSharedNetwork') )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.4 NAME 'dhcpPool' DESC 'This stores
dc724d5
configuration information about a pool.' SUP top MUST ( cn $ dhcpRange )
dc724d5
MAY (dhcpClassesDN $ dhcpPermitList $ dhcpLeasesDN $ dhcpOptionsDN $
dc724d5
dhcpStatements) X-NDS_CONTAINMENT ('dhcpSubnet' 'dhcpSharedNetwork') )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.5 NAME 'dhcpGroup' DESC 'Group object that
dc724d5
lists host DNs and parameters. This is a container object.' SUP top MUST
dc724d5
cn MAY ( dhcpHostDN $ dhcpOptionsDN $ dhcpStatements ) X-NDS_CONTAINMENT
dc724d5
('dhcpSubnet' 'dhcpService' ) )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.6 NAME 'dhcpHost' DESC 'This represents
dc724d5
information about a particular client' SUP top MUST cn MAY  (dhcpLeaseDN
dc724d5
$ dhcpHWAddress $ dhcpOptionsDN $ dhcpStatements) X-NDS_CONTAINMENT
dc724d5
('dhcpService' 'dhcpSubnet' 'dhcpGroup') )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.7 NAME 'dhcpClass' DESC 'Represents
dc724d5
information about a collection of related clients.' SUP top MUST cn MAY
dc724d5
(dhcpSubClassesDN $ dhcpOptionsDN $ dhcpStatements) X-NDS_CONTAINMENT
dc724d5
('dhcpService' 'dhcpSubnet' ) )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.8 NAME 'dhcpSubClass' DESC 'Represents
dc724d5
information about a collection of related classes.' SUP top MUST cn MAY
dc724d5
(dhcpClassData $ dhcpOptionsDN $ dhcpStatements) X-NDS_CONTAINMENT
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 14]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
'dhcpClass' )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.9 NAME 'dhcpOptions' DESC 'Represents
dc724d5
information about a collection of options defined.' SUP top MUST cn MAY
dc724d5
( dhcpOption ) X-NDS_CONTAINMENT  ('dhcpService' 'dhcpSharedNetwork'
dc724d5
'dhcpSubnet' 'dhcpPool' 'dhcpGroup' 'dhcpHost' 'dhcpClass' )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.10 NAME 'dhcpLeases' DESC 'This class
dc724d5
represents an IP Address, which may or may not have been leased.' SUP
dc724d5
top MUST ( cn $ dhcpAddressState ) MAY ( dhcpExpirationTime $
dc724d5
dhcpStartTimeOfState $ dhcpLastTransactionTime $ dhcpBootpFlag $
dc724d5
dhcpDomainName $ dhcpDnsStatus $ dhcpRequestedHostName $
dc724d5
dhcpAssignedHostName $ dhcpReservedForClient $ dhcpAssignedToClient $
dc724d5
dhcpRelayAgentInfo $ dhcpHWAddress ) X-NDS_CONTAINMENT ( 'dhcpService'
dc724d5
'dhcpSubnet' 'dhcpPool') )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.11 NAME 'dhcpLog' DESC 'This is the object
dc724d5
that holds past information about the IP address. The cn is the
dc724d5
time/date stamp when the address was assigned or released, the address
dc724d5
state at the time, if the address was assigned or released.' SUP top
dc724d5
MUST ( cn ) MAY ( dhcpAddressState $ dhcpExpirationTime $
dc724d5
dhcpStartTimeOfState $ dhcpLastTransactionTime $ dhcpBootpFlag $
dc724d5
dhcpDomainName $ dhcpDnsStatus $ dhcpRequestedHostName $
dc724d5
dhcpAssignedHostName $ dhcpReservedForClient $ dhcpAssignedToClient $
dc724d5
dhcpRelayAgentInfo $ dhcpHWAddress $ dhcpErrorLog) X-NDS_CONTAINMENT 
dc724d5
('dhcpLeases' 'dhcpPool' 'dhcpSubnet' 'dhcpSharedNetwork' 'dhcpService' ) )
dc724d5
dc724d5
( 2.16.840.1.113719.1.203.6.12 NAME 'dhcpServer' DESC 'DHCP Server
dc724d5
Object' SUP top MUST (cn, dhcpServiceDN) MAY (dhcpVersion $
dc724d5
dhcpImplementation $ dhcpHashBucketAssignment $
dc724d5
dhcpDelayedServiceParameter $ dhcpMaxClientLeadTime $
dc724d5
dhcpFailOverEndpointState $ dhcpStatements) X-NDS_CONTAINMENT ('O' 'OU' 
dc724d5
'dc') )
dc724d5
dc724d5
9. Security Considerations
dc724d5
dc724d5
Since the DHCP Configuration information is stored in a directory, the
dc724d5
security of the information is limited to the security offered by the
dc724d5
directory including the security of the objects within that directory.
dc724d5
dc724d5
10.  Intellectual Property Rights Notices
dc724d5
dc724d5
The IETF takes no position regarding the validity or scope of any
dc724d5
intellectual property or other rights that might be claimed to pertain
dc724d5
to the implementation or use of the technology described in this
dc724d5
document or the extent to which any license under such rights might or
dc724d5
might not be available; neither does it represent that it has made any
dc724d5
effort to identify any such rights.  Information on the IETF's
dc724d5
procedures with respect to rights in standards-track and standards-
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 15]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
related documentation can be found in BCP-11.  Copies of claims of
dc724d5
rights made available for publication and any assurances of licenses to
dc724d5
be made available, or the result of an attempt made to obtain a general
dc724d5
license or permission for the use of such proprietary rights by
dc724d5
implementors or users of this specification can be obtained from the
dc724d5
IETF Secretariat.
dc724d5
dc724d5
The IETF invites any interested party to bring to its attention any
dc724d5
copyrights, patents or patent applications, or other proprietary rights
dc724d5
which may cover technology that may be required to practice this
dc724d5
standard.  Please address the information to the IETF Executive
dc724d5
Director.
dc724d5
dc724d5
11.  Full Copyright Statement
dc724d5
dc724d5
Copyright (C) The Internet Society (2001).  All Rights Reserved.
dc724d5
dc724d5
This document and translations of it may be copied and furnished to
dc724d5
others, and derivative works that comment on or otherwise explain it or
dc724d5
assist in its implementation may be prepared, copied, published and
dc724d5
distributed, in whole or in part, without restriction of any kind,
dc724d5
provided that the above copyright notice and this paragraph are included
dc724d5
on all such copies and derivative works.  However, this document itself
dc724d5
may not be modified in any way, such as by removing the copyright notice
dc724d5
or references to the Internet Society or other Internet organizations,
dc724d5
except as needed for the purpose of developing Internet standards in
dc724d5
which case the procedures for copyrights defined in the Internet
dc724d5
Standards process must be followed, or as required to translate it into
dc724d5
languages other than English.
dc724d5
dc724d5
The limited permissions granted above are perpetual and will not be
dc724d5
revoked by the Internet Society or its successors or assigns.
dc724d5
dc724d5
This document and the information contained herein is provided on an "AS
dc724d5
IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK
dc724d5
FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT
dc724d5
LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT
dc724d5
INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR
dc724d5
FITNESS FOR A PARTICULAR PURPOSE.
dc724d5
dc724d5
12. References
dc724d5
dc724d5
[RFC2131] Droms, R., "Dynamic Host Configuration Protocol", RFC 2131,
dc724d5
March 1997.
dc724d5
dc724d5
[RFC2132] Alexander, S., Droms, R., "DHCP Options and BOOTP Vendor
dc724d5
Extensions", RFC 2132, March 1997.
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 16]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
[MSDHCP]  Gu, Y., Vyaghrapuri, R., "An LDAP Schema for Dynamic Host
dc724d5
Configuration Protocol Service", Internet Draft 
dc724d5
schema-00.txt>, August 1998.
dc724d5
dc724d5
[NOVDHCP] Miller, T., Patel, A., Rao, P., "Lightweight Directory Access
dc724d5
Protocol (v3): Schema for Dynamic Host Configuration Protocol (DHCP)",
dc724d5
Internet Draft <draft-miller-dhcp-ldap-schema-00.txt>, June 1998.
dc724d5
dc724d5
[FAILOVR] Droms, R., Rabil, G., Dooley, M., Kapur, A., Gonczi, S., Volz,
dc724d5
B., "DHCP Failover Protocol", Internet Draft 
dc724d5
failover-08.txt>, July 2000.
dc724d5
dc724d5
[RFC 3074] Volz B., Gonczi S., Lemon T., Stevens R., "DHC Load Balancing
dc724d5
Algorithm", February 2001
dc724d5
dc724d5
[AGENT]   Patrick, M., "DHCP Relay Agent Information Option", Internet
dc724d5
Draft <draft-ietf-dhc-agent-options-09.txt>, March 2000.
dc724d5
dc724d5
[DHCPOPT] Carney, M., "New Option Review Guidelines and Additional
dc724d5
Option Namespace", Internet Draft 
dc724d5
option_review_and_namespace-01.txt>, October 1999.
dc724d5
dc724d5
[POLICY]  Strassner, J., Elleson, E., Moore, B., "Policy Framework LDAP
dc724d5
Core Schema", Internet Draft <draft-ietf-policy-core-schema-06.txt>,
dc724d5
November 1999.
dc724d5
dc724d5
[RFC2251] Wahl, M., Howes, T., Kille, S., "Lightweight Directory Access
dc724d5
Protocol (v3)", RFC 2251, December 1997.
dc724d5
dc724d5
[RFC2252] Wahl, M., Coulbeck, A., Howes, T., Kille, S., "Lightweight
dc724d5
Directory Access Protocol (v3) Attribute Syntax Definitions", RFC 2252,
dc724d5
December 1997.
dc724d5
dc724d5
[RFC2255] Howes, T., Smith, M., "The LDAP URL Format", RFC 2255,
dc724d5
December 1997.
dc724d5
dc724d5
[RFC951]  Croft, B., Gilmore, J., "Bootstrap Protocol (BOOTP)", RFC 951,
dc724d5
September 1985.
dc724d5
dc724d5
[RFC2119] Bradner, S. "Key words for use in RFCs to Indicate Requirement
dc724d5
Levels", RFC 2119, March 1997.
dc724d5
dc724d5
13. Acknowledgments
dc724d5
dc724d5
This work is partially based on a previous draft draft-ietf-dhc-
dc724d5
schema-02.doc.
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 17]
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
INTERNET-DRAFT            LDAP Schema for DHCP              16 June 2001
dc724d5
dc724d5
dc724d5
14. Author's Addresses
dc724d5
dc724d5
Comments regarding this draft may be sent to the authors at the
dc724d5
following address:
dc724d5
dc724d5
Mark Meredith
dc724d5
Mark Hinckley
dc724d5
Novell Inc.
dc724d5
1800 S. Novell Place
dc724d5
Provo, Utah 84606
dc724d5
dc724d5
Vijay K. Nanjundaswamy
dc724d5
Novell Software Development (I) Ltd
dc724d5
49/1 & 49/3, Garvebhavi Palya,
dc724d5
7th Mile, Hosur Road
dc724d5
Bangalore 560068
dc724d5
dc724d5
email: mark_meredith@novell.com
dc724d5
email: knvijay@novell.com
dc724d5
email: mhinckley@novell.com
dc724d5
dc724d5
This Internet Draft expires December 16, 2001.
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
dc724d5
M. Meredith et al.        Expires December 2001                [Page 18]
dc724d5
dc724d5
dc724d5
dc724d5