DirServicesConst.h

Overview

This header contains well known record, attribute and authentication type constants plus others. The attribute and record constants are generally used with the API calls dsDataNodeAllocateString() and dsBuildListFromStrings() to create proper data type arguments for the search methods in the Directory Services API. The auth constants are used with dsDataNodeAllocateString().



Groups

DirectoryService Constants

 

Configure Node attribute type Constants

 

DirectoryService Specific Record Type Constants

 

DirectoryService Authentication Constants

 

DirectoryService Authentication Type Constants

 

DirectoryService Other Attribute Type Constants Not Mapped by Directory Node Plugins

Mainly used internally by the DirectoryService Daemon or made available via dsGetDirNodeInfo()

 

NSL Neighborhood Constants

 

Search Node attribute type Constants

 

DirectoryService Multiple Valued Specific Attribute Type Constants

 

DirectoryService Meta Attribute Type Constants

 

DirectoryService Single Valued Specific Attribute Type Constants

 

DirectoryService Specific Attribute Type Constants

As a guideline for the attribute types the following legend is used:

eDS1xxxxxx Single Valued Attribute

eDSNxxxxxx Multi-Valued Attribute

NOTE #1: Access controls may prevent any particular client from reading/writting various attribute types. In addition some attribute types may not be stored at all and could also represent "real-time" data generated by the directory node plug-in.

NOTE #2: Attributes in the model are available for records and directory nodes.

 

DirectoryService Meta Record Type Constants


Macro Definitions

kDS1AttrAdminLimits
kDS1AttrAdminStatus
kDS1AttrAlias
kDS1AttrAliasData
kDS1AttrAlternateDatastoreLocation
kDS1AttrAttrListRefCount
kDS1AttrAttrListValueRefCount
kDS1AttrAuthCredential
kDS1AttrAuthenticationHint
kDS1AttrAuthorityRevocationList
kDS1AttrBirthday
kDS1AttrBootFile
kDS1AttrBuildVersion
kDS1AttrCACertificate
kDS1AttrCapabilities
kDS1AttrCapacity
kDS1AttrCategory
kDS1AttrCertificateRevocationList
kDS1AttrChange
kDS1AttrComment
kDS1AttrConfigAvail
kDS1AttrConfigFile
kDS1AttrContactGUID
kDS1AttrContactPerson
kDS1AttrCopyTimestamp
kDS1AttrCoreFWVersion
kDS1AttrCreationTimestamp
kDS1AttrCrossCertificatePair
kDS1AttrCSPSearchPath
kDS1AttrDataStamp
kDS1AttrDateRecordCreated
kDS1AttrDirRefCount
kDS1AttrDistinguishedName
kDS1AttrDNSDomain
kDS1AttrDNSNameServer
kDS1AttrENetAddress
kDS1AttrExpire
kDS1AttrFirstName
kDS1AttrFunctionalState
kDS1AttrFWVersion
kDS1AttrGeneratedUID
kDS1AttrHomeDirectoryQuota
kDS1AttrHomeDirectorySoftQuota
kDS1AttrHomeLocOwner
kDS1AttrInternetAlias
kDS1AttrKDCConfigData
kDS1AttrKerberosRealm
kDS1AttrLastName
kDS1AttrLDAPSearchBaseSuffix
kDS1AttrLocation
kDS1AttrLSPSearchPath
kDS1AttrMailAttribute
kDS1AttrMapGUID
kDS1AttrMCXFlags
kDS1AttrMCXSettings
kDS1AttrMetaAutomountMap
kDS1AttrMiddleName
kDS1AttrModificationTimestamp
kDS1AttrNeighborhoodType
kDS1AttrNetworkNumber
kDS1AttrNetworkView
kDS1AttrNFSHomeDirectory
kDS1AttrNodeRefCount
kDS1AttrNote
kDS1AttrNSPSearchPath
kDS1AttrNTDomainComputerAccount
kDS1AttrOriginalNFSHomeDirectory
kDS1AttrOriginalNodeName
kDS1AttrOwner
kDS1AttrOwnerGUID
kDS1AttrPassword
kDS1AttrPasswordPlus
kDS1AttrPasswordPolicyOptions
kDS1AttrPasswordServerList
kDS1AttrPasswordServerLocation
kDS1AttrPicture
kDS1AttrPIDValue
kDS1AttrPluginIndex
kDS1AttrPort
kDS1AttrPresetUserIsAdmin
kDS1AttrPrimaryComputerGUID
kDS1AttrPrimaryComputerList
kDS1AttrPrimaryGroupID
kDS1AttrPrimaryNTDomain
kDS1AttrPrinter1284DeviceID
kDS1AttrPrinterLPRHost
kDS1AttrPrinterLPRQueue
kDS1AttrPrinterMakeAndModel
kDS1AttrPrinterType
kDS1AttrPrinterURI
kDS1AttrPrinterXRISupported
kDS1AttrPrintServiceInfoText
kDS1AttrPrintServiceInfoXML
kDS1AttrPrintServiceUserData
kDS1AttrProcessName
kDS1AttrProtocolNumber
kDS1AttrPwdAgingPolicy
kDS1AttrRARA
kDS1AttrReadOnlyNode
kDS1AttrRealUserID
kDS1AttrRecordImage
kDS1AttrRecRefCount
kDS1AttrRefNumTableList
kDS1AttrRelativeDNPrefix
kDS1AttrRPCNumber
kDS1AttrSearchPath
kDS1AttrSearchPolicy
kDS1AttrServiceType
kDS1AttrSetupAdvertising
kDS1AttrSetupAutoRegister
kDS1AttrSetupLocation
kDS1AttrSetupOccupation
kDS1AttrSMBAcctFlags
kDS1AttrSMBGroupRID
kDS1AttrSMBGroupRID
kDS1AttrSMBHome
kDS1AttrSMBHomeDrive
kDS1AttrSMBKickoffTime
kDS1AttrSMBLogoffTime
kDS1AttrSMBLogonTime
kDS1AttrSMBPrimaryGroupSID
kDS1AttrSMBProfilePath
kDS1AttrSMBPWDLastSet
kDS1AttrSMBRID
kDS1AttrSMBScriptPath
kDS1AttrSMBSID
kDS1AttrSMBUserWorkstations
kDS1AttrTimePackage
kDS1AttrTimeToLive
kDS1AttrTotalRefCount
kDS1AttrTotalSize
kDS1AttrUniqueID
kDS1AttrUserCertificate
kDS1AttrUserPKCS12Data
kDS1AttrUserShell
kDS1AttrUserSMIMECertificate
kDS1AttrVersion
kDS1AttrVFSDumpFreq
kDS1AttrVFSLinkDir
kDS1AttrVFSPassNo
kDS1AttrVFSType
kDS1AttrWeblogURI
kDS1AttrXMLPlist
kDS1StandardAttrHomeLocOwner
kDSAttributesAll
kDSAttributesNativeAll
kDSAttributesStandardAll
kDSAttrNone
kDSNativeAttrTypePrefix
kDSNativeAuthMethodPrefix
kDSNativeRecordTypePrefix
kDSNAttrAccessControlEntry
kDSNAttrAddressLine1
kDSNAttrAddressLine2
kDSNAttrAddressLine3
kDSNAttrAllNames
kDSNAttrAreaCode
kDSNAttrAttributeTypes
kDSNAttrAttrListRefs
kDSNAttrAttrListValueRefs
kDSNAttrAuthenticationAuthority
kDSNAttrAuthMethod
kDSNAttrAutomountInformation
kDSNAttrBootParams
kDSNAttrBuilding
kDSNAttrCity
kDSNAttrCompany
kDSNAttrComputerAlias
kDSNAttrComputers
kDSNAttrCountry
kDSNAttrCSPSearchPath
kDSNAttrDepartment
kDSNAttrDirRefs
kDSNAttrDNSName
kDSNAttrEMailAddress
kDSNAttrEMailContacts
kDSNAttrFaxNumber
kDSNAttrGroup
kDSNAttrGroupMembers
kDSNAttrGroupMembership
kDSNAttrGroupServices
kDSNAttrHomeDirectory
kDSNAttrHomePhoneNumber
kDSNAttrHTML
kDSNAttrIMHandle
kDSNAttrIPAddress
kDSNAttrIPAddressAndENetAddress
kDSNAttrIPv6Address
kDSNAttrJobTitle
kDSNAttrJPEGPhoto
kDSNAttrKDCAuthKey
kDSNAttrKeywords
kDSNAttrLDAPReadReplicas
kDSNAttrLDAPWriteReplicas
kDSNAttrLSPSearchPath
kDSNAttrMachineServes
kDSNAttrMapCoordinates
kDSNAttrMapURI
kDSNAttrMCXSettings
kDSNAttrMember
kDSNAttrMetaNodeLocation
kDSNAttrMIME
kDSNAttrMobileNumber
kDSNAttrNamePrefix
kDSNAttrNameSuffix
kDSNAttrNBPEntry
kDSNAttrNeighborhoodAlias
kDSNAttrNestedGroups
kDSNAttrNetGroups
kDSNAttrNetGroupTriplet
kDSNAttrNickName
kDSNAttrNodePath
kDSNAttrNodePathXMLPlist
kDSNAttrNodeRefs
kDSNAttrNSPSearchPath
kDSNAttrOrganizationInfo
kDSNAttrOrganizationName
kDSNAttrOriginalHomeDirectory
kDSNAttrPagerNumber
kDSNAttrPGPPublicKey
kDSNAttrPhoneContacts
kDSNAttrPhoneNumber
kDSNAttrPlugInInfo
kDSNAttrPostalAddress
kDSNAttrPostalAddressContacts
kDSNAttrPostalCode
kDSNAttrPrinterXRISupported
kDSNAttrProtocols
kDSNAttrRecordAlias
kDSNAttrRecordName
kDSNAttrRecordType
kDSNAttrRecRefs
kDSNAttrRelationships
kDSNAttrResourceInfo
kDSNAttrResourceType
kDSNAttrSchema
kDSNAttrSearchPath
kDSNAttrServicesLocator
kDSNAttrSetPasswdMethod
kDSNAttrState
kDSNAttrStreet
kDSNAttrSubNodes
kDSNAttrURL
kDSNAttrURLForNSL
kDSNAttrVFSOpts
kDSRecordsAll
kDSRecordsNativeAll
kDSRecordsStandardAll
kDSSetPasswdBestOf
kDSStdAttrTypePrefix
kDSStdAuth2WayRandom
kDSStdAuth2WayRandomChangePasswd
kDSStdAuthAPOP
kDSStdAuthChangePasswd
kDSStdAuthCHAP
kDSStdAuthClearText
kDSStdAuthCRAM_MD5
kDSStdAuthCrypt
kDSStdAuthDeleteUser
kDSStdAuthDIGEST_MD5
kDSStdAuthGetEffectivePolicy
kDSStdAuthGetGlobalPolicy
kDSStdAuthGetKerberosPrincipal
kDSStdAuthGetMethodsForUser
kDSStdAuthGetPolicy
kDSStdAuthGetUserData
kDSStdAuthGetUserName
kDSStdAuthKerberosTickets
kDSStdAuthMASKE_A
kDSStdAuthMASKE_B
kDSStdAuthMethodPrefix
kDSStdAuthMPPEMasterKeys
kDSStdAuthMSCHAP1
kDSStdAuthMSCHAP2
kDSStdAuthNewUser
kDSStdAuthNewUserWithPolicy
kDSStdAuthNodeNativeClearTextOK
kDSStdAuthNodeNativeNoClearText
kDSStdAuthNTLMv2
kDSStdAuthNTLMv2WithSessionKey
kDSStdAuthReadSecureHash
kDSStdAuthSecureHash
kDSStdAuthSetGlobalPolicy
kDSStdAuthSetLMHash
kDSStdAuthSetNTHash
kDSStdAuthSetPasswd
kDSStdAuthSetPasswdAsRoot
kDSStdAuthSetPolicy
kDSStdAuthSetPolicyAsRoot
kDSStdAuthSetUserData
kDSStdAuthSetUserName
kDSStdAuthSetWorkstationPasswd
kDSStdAuthSMB_LM_Key
kDSStdAuthSMB_NT_Key
kDSStdAuthSMB_NT_UserSessionKey
kDSStdAuthSMB_NT_WithSessionKey
kDSStdAuthSMB_NT_WithUserSessionKey
kDSStdAuthSMBNTv2UserSessionKey
kDSStdAuthSMBWorkstationCredentialSessionKey
kDSStdAuthWithAuthorizationRef
kDSStdAuthWriteSecureHash
kDSStdMachDebugPortName
kDSStdMachDSLookupPortName
kDSStdMachLocalPortName
kDSStdMachPortName
kDSStdRecordTypeAccessControls
kDSStdRecordTypeAFPServer
kDSStdRecordTypeAFPUserAliases
kDSStdRecordTypeAliases
kDSStdRecordTypeAll
kDSStdRecordTypeAttributeTypes
kDSStdRecordTypeAugments
kDSStdRecordTypeAutomount
kDSStdRecordTypeAutomountMap
kDSStdRecordTypeAutoServerSetup
kDSStdRecordTypeBootp
kDSStdRecordTypeCertificateAuthorities
kDSStdRecordTypeCertificateAuthority
kDSStdRecordTypeComputerGroups
kDSStdRecordTypeComputerLists
kDSStdRecordTypeComputers
kDSStdRecordTypeConfig
kDSStdRecordTypeEthernets
kDSStdRecordTypeFileMakerServers
kDSStdRecordTypeFTPServer
kDSStdRecordTypeGroupAliases
kDSStdRecordTypeGroups
kDSStdRecordTypeHosts
kDSStdRecordTypeHostServices
kDSStdRecordTypeLDAPServer
kDSStdRecordTypeLocations
kDSStdRecordTypeMachines
kDSStdRecordTypeMeta
kDSStdRecordTypeMounts
kDSStdRecordTypeNeighborhoods
kDSStdRecordTypeNetDomains
kDSStdRecordTypeNetGroups
kDSStdRecordTypeNetworks
kDSStdRecordTypeNFS
kDSStdRecordTypePasswordServer
kDSStdRecordTypePeople
kDSStdRecordTypePlugins
kDSStdRecordTypePrefix
kDSStdRecordTypePresetComputerGroups
kDSStdRecordTypePresetComputerLists
kDSStdRecordTypePresetComputers
kDSStdRecordTypePresetGroups
kDSStdRecordTypePresetUsers
kDSStdRecordTypePrinters
kDSStdRecordTypePrintService
kDSStdRecordTypePrintServiceUser
kDSStdRecordTypeProtocols
kDSStdRecordTypeQTSServer
kDSStdRecordTypeRecordTypes
kDSStdRecordTypeRefTableEntries
kDSStdRecordTypeResources
kDSStdRecordTypeRPC
kDSStdRecordTypeServer
kDSStdRecordTypeServices
kDSStdRecordTypeSharePoints
kDSStdRecordTypeSMBServer
kDSStdRecordTypeUserAliases
kDSStdRecordTypeUsers
kDSStdRecordTypeWebServer
kDSStdRecordTypMounts
kDSStdRecordTypProtocols
kDSStdRecordTypRPC
kDSStdUserNamesMeta
kDSTagAuthAuthorityBasic
kDSTagAuthAuthorityBetterHashOnly
kDSTagAuthAuthorityDisabledUser
kDSTagAuthAuthorityKerberosv5
kDSTagAuthAuthorityLocalCachedUser
kDSTagAuthAuthorityLocalWindowsHash
kDSTagAuthAuthorityPasswordServer
kDSTagAuthAuthorityShadowHash
kDSValueAuthAuthorityBasic
kDSValueAuthAuthorityDefault
kDSValueAuthAuthorityDisabledUser
kDSValueAuthAuthorityKerberosv5
kDSValueAuthAuthorityLocalCachedUser
kDSValueAuthAuthorityLocalWindowsHash
kDSValueAuthAuthorityPasswordServerPrefix
kDSValueAuthAuthorityShadowHash
kDSValueNonCryptPasswordMarker
kDSValueNSLDynamicNeighborhoodType
kDSValueNSLLocalNeighborhoodType
kDSValueNSLStaticNeighborhoodType
kDSValueNSLTopLevelNeighborhoodType
kStandardSourceAlias
kStandardTargetAlias

kDS1AttrAdminLimits


#define kDS1AttrAdminLimits "dsAttrTypeStandard:AdminLimits" 
Discussion

XML plist indicating what an admin user can edit. Found in kDSStdRecordTypeUsers records.


kDS1AttrAdminStatus


#define kDS1AttrAdminStatus "dsAttrTypeStandard:AdminStatus" 
Discussion

Retained only for backward compatibility.


kDS1AttrAlias


#define kDS1AttrAlias "dsAttrTypeStandard:Alias" 
Discussion

Alias attribute, contain pointer to another node/record/attribute.


kDS1AttrAliasData


#define kDS1AttrAliasData "dsAttrTypeStandard:AppleAliasData" 
Discussion

Used to identify alias data.


kDS1AttrAlternateDatastoreLocation


#define kDS1AttrAlternateDatastoreLocation "dsAttrTypeStandard:AlternateDatastoreLocation" 
Discussion

Unix path used for determining where a user's email is stored.


kDS1AttrAttrListRefCount


#define kDS1AttrAttrListRefCount "dsAttrTypeStandard:AttrListRefCount" 
Discussion

Attr List reference count for a process.


kDS1AttrAttrListValueRefCount


#define kDS1AttrAttrListValueRefCount "dsAttrTypeStandard:AttrListValueRefCount" 
Discussion

Attr List Value reference count for a process.


kDS1AttrAuthCredential


#define kDS1AttrAuthCredential "dsAttrTypeStandard:AuthCredential" 
Discussion

An "auth" credential, to be used to authenticate to other Directory nodes.


kDS1AttrAuthenticationHint


#define kDS1AttrAuthenticationHint "dsAttrTypeStandard:AuthenticationHint" 
Discussion

Used to identify the authentication hint phrase.


kDS1AttrAuthorityRevocationList


#define kDS1AttrAuthorityRevocationList "dsAttrTypeStandard:AuthorityRevocationList" 
Discussion

Attribute containing the binary of the authority revocation list. A certificate revocation list that defines certificate authority certificates which are no longer trusted. No user certificates are included in this list. Usually found in kDSStdRecordTypeCertificateAuthority records.


kDS1AttrBirthday


#define kDS1AttrBirthday "dsAttrTypeStandard:Birthday" 
Discussion

Single-valued attribute that defines the user's birthday. Format is x.208 standard YYYYMMDDHHMMSSZ which we will require as GMT time.


kDS1AttrBootFile


#define kDS1AttrBootFile "dsAttrTypeStandard:BootFile" 
Discussion

Attribute type in host or machine records for the name of the kernel that this machine will use by default when NetBooting.


kDS1AttrBuildVersion


#define kDS1AttrBuildVersion "dsAttrTypeStandard:BuildVersion" 
Discussion

Build version for reference.


kDS1AttrCACertificate


#define kDS1AttrCACertificate "dsAttrTypeStandard:CACertificate" 
Discussion

Attribute containing the binary of the certificate of a certificate authority. Its corresponding private key is used to sign certificates. Usually found in kDSStdRecordTypeCertificateAuthority records.


kDS1AttrCapabilities


#define kDS1AttrCapabilities "dsAttrTypeStandard:Capabilities" 
Discussion

Used with directory nodes so that clients can "discover" the API capabilities for this Directory Node.


kDS1AttrCapacity


#define kDS1AttrCapacity "dsAttrTypeStandard:Capacity" 
Discussion

Attribute type for the capacity of a resource. found in resource records (kDSStdRecordTypeResources). Example: 50


kDS1AttrCategory


#define kDS1AttrCategory "dsAttrTypeStandard:Category" 
Discussion

The category of an item used for browsing


kDS1AttrCertificateRevocationList


#define kDS1AttrCertificateRevocationList "dsAttrTypeStandard:CertificateRevocationList" 
Discussion

Attribute containing the binary of the certificate revocation list. This is a list of certificates which are no longer trusted. Usually found in kDSStdRecordTypeCertificateAuthority records.


kDS1AttrChange


#define kDS1AttrChange "dsAttrTypeStandard:Change" 
Discussion

Retained for backward compatibility.


kDS1AttrComment


#define kDS1AttrComment "dsAttrTypeStandard:Comment" 
Discussion

Attribute used for unformatted comment.


kDS1AttrConfigAvail


#define kDS1AttrConfigAvail "dsAttrTypeStandard:ConfigAvail" 
Discussion

Config avail tag.


kDS1AttrConfigFile


#define kDS1AttrConfigFile "dsAttrTypeStandard:ConfigFile" 
Discussion

Config file name.


kDS1AttrContactGUID


#define kDS1AttrContactGUID "dsAttrTypeStandard:ContactGUID" 
Discussion

Attribute type for the contact GUID of a group. found in group records (kDSStdRecordTypeGroups).


kDS1AttrContactPerson


#define kDS1AttrContactPerson "dsAttrTypeStandard:ContactPerson" 
Discussion

Attribute type for the contact person of the machine. Found in host or machine records.


kDS1AttrCopyTimestamp


#define kDS1AttrCopyTimestamp "dsAttrTypeStandard:CopyTimestamp" 
Discussion

Timestamp used in local account caching.


kDS1AttrCoreFWVersion


#define kDS1AttrCoreFWVersion "dsAttrTypeStandard:CoreFWVersion" 
Discussion

Core FW version for reference.


kDS1AttrCreationTimestamp


#define kDS1AttrCreationTimestamp "dsAttrTypeStandard:CreationTimestamp" 
Discussion

Attribute showing date/time of record creation. Format is x.208 standard YYYYMMDDHHMMSSZ which we will require as GMT time.


kDS1AttrCrossCertificatePair


#define kDS1AttrCrossCertificatePair "dsAttrTypeStandard:CrossCertificatePair" 
Discussion

Attribute containing the binary of a pair of certificates which verify each other. Both certificates have the same level of authority. Usually found in kDSStdRecordTypeCertificateAuthority records.


kDS1AttrCSPSearchPath


#define kDS1AttrCSPSearchPath "dsAttrTypeStandard:CSPSearchPath" 
Discussion

Admin user configured custom search path defined by the search node.


kDS1AttrDataStamp


#define kDS1AttrDataStamp "dsAttrTypeStandard:DataStamp" 
Discussion

checksum/meta data


kDS1AttrDateRecordCreated


#define kDS1AttrDateRecordCreated "dsAttrTypeStandard:DateRecordCreated" 
Discussion

Date of record creation.


kDS1AttrDirRefCount


#define kDS1AttrDirRefCount "dsAttrTypeStandard:DirRefCount" 
Discussion

Directory reference count for a process.


kDS1AttrDistinguishedName


#define kDS1AttrDistinguishedName "dsAttrTypeStandard:RealName" 
Discussion

Users distinguished or real name


kDS1AttrDNSDomain


#define kDS1AttrDNSDomain "dsAttrTypeStandard:DNSDomain" 
Discussion

DNS Resolver domain attribute.


kDS1AttrDNSNameServer


#define kDS1AttrDNSNameServer "dsAttrTypeStandard:DNSNameServer" 
Discussion

DNS Resolver nameserver attribute.


kDS1AttrENetAddress


#define kDS1AttrENetAddress "dsAttrTypeStandard:ENetAddress" 
Discussion

Single-valued attribute for hardware Ethernet address (MAC address). Found in machine records (kDSStdRecordTypeMachines) and computer records (kDSStdRecordTypeComputers).


kDS1AttrExpire


#define kDS1AttrExpire "dsAttrTypeStandard:Expire" 
Discussion

Used for expiration date or time depending on association.


kDS1AttrFirstName


#define kDS1AttrFirstName "dsAttrTypeStandard:FirstName" 
Discussion

Used for first name of user or person record.


kDS1AttrFunctionalState


#define kDS1AttrFunctionalState "dsAttrTypeStandard:FunctionalState" 
Discussion

Functional state of plugin for example.


kDS1AttrFWVersion


#define kDS1AttrFWVersion "dsAttrTypeStandard:FWVersion" 
Discussion

FW version for reference.


kDS1AttrGeneratedUID


#define kDS1AttrGeneratedUID "dsAttrTypeStandard:GeneratedUID" 
Discussion

Used for 36 character (128 bit) unique ID. Usually found in user, group, and computer records. An example value is "A579E95E-CDFE-4EBC-B7E7-F2158562170F". The standard format contains 32 hex characters and four hyphen characters.


kDS1AttrHomeDirectoryQuota


#define kDS1AttrHomeDirectoryQuota "dsAttrTypeStandard:HomeDirectoryQuota" 
Discussion

Represents the allowed usage for a user's home directory in bytes. Found in user records (kDSStdRecordTypeUsers).


kDS1AttrHomeDirectorySoftQuota


#define kDS1AttrHomeDirectorySoftQuota "dsAttrTypeStandard:HomeDirectorySoftQuota" 
Discussion

Used to define home directory size limit in bytes when user is notified that the hard limit is approaching.


kDS1AttrHomeLocOwner


#define kDS1AttrHomeLocOwner "dsAttrTypeStandard:HomeLocOwner" 
Discussion

Represents the owner of a workgroup's shared home directory. Typically found in kDSStdRecordTypeGroups records.


kDS1AttrInternetAlias


#define kDS1AttrInternetAlias "dsAttrTypeStandard:InetAlias" 
Discussion

Used to track internet alias.


kDS1AttrKDCConfigData


#define kDS1AttrKDCConfigData "dsAttrTypeStandard:KDCConfigData" 
Discussion

Contents of the kdc.conf file.


kDS1AttrKerberosRealm


#define kDS1AttrKerberosRealm "dsAttrTypeStandard:KerberosRealm" 
Discussion

Supports Kerberized SMB Server services.


kDS1AttrLastName


#define kDS1AttrLastName "dsAttrTypeStandard:LastName" 
Discussion

Used for the last name of user or person record.


kDS1AttrLDAPSearchBaseSuffix


#define kDS1AttrLDAPSearchBaseSuffix "dsAttrTypeStandard:LDAPSearchBaseSuffix" 
Discussion

Search base suffix for a LDAP server.


kDS1AttrLocation


#define kDS1AttrLocation "dsAttrTypeStandard:Location" 
Discussion

Represents the location a service is available from (usually domain name). Typically found in service record types including kDSStdRecordTypeAFPServer, kDSStdRecordTypeLDAPServer, and kDSStdRecordTypeWebServer.


kDS1AttrLSPSearchPath


#define kDS1AttrLSPSearchPath "dsAttrTypeStandard:LSPSearchPath" 
Discussion

Local only search path defined by the search node.


kDS1AttrMailAttribute


#define kDS1AttrMailAttribute "dsAttrTypeStandard:MailAttribute" 
Discussion

Holds the mail account config data.


kDS1AttrMapGUID


#define kDS1AttrMapGUID "dsAttrTypeStandard:MapGUID" 
Discussion

Represents the GUID for a record's map.


kDS1AttrMCXFlags


#define kDS1AttrMCXFlags "dsAttrTypeStandard:MCXFlags" 
Discussion

Used by MCX.


kDS1AttrMCXSettings


#define kDS1AttrMCXSettings "dsAttrTypeStandard:MCXSettings" 
Discussion

Used by MCX.


kDS1AttrMetaAutomountMap


#define kDS1AttrMetaAutomountMap "dsAttrTypeStandard:MetaAutomountMap" 
Discussion

Used to query for kDSStdRecordTypeAutomount entries associated with a specific kDSStdRecordTypeAutomountMap.


kDS1AttrMiddleName


#define kDS1AttrMiddleName "dsAttrTypeStandard:MiddleName" 
Discussion

Used for the middle name of user or person record.


kDS1AttrModificationTimestamp


#define kDS1AttrModificationTimestamp "dsAttrTypeStandard:ModificationTimestamp" 
Discussion

Attribute showing date/time of record modification. Format is x.208 standard YYYYMMDDHHMMSSZ which we will require as GMT time.


kDS1AttrNeighborhoodType


#define kDS1AttrNeighborhoodType "dsAttrTypeStandard:NeighborhoodType" 
Discussion

Attribute type in Neighborhood records describing their function.


kDS1AttrNetworkNumber


#define kDS1AttrNetworkNumber "dsAttrTypeStandard:NetworkNumber" 
Discussion

Single-valued attribute that defines a network number. Usually found in network records (kDSStdRecordTypeNetworks)


kDS1AttrNetworkView


#define kDS1AttrNetworkView "dsAttrTypeStandard:NetworkView" 
Discussion

The name of the managed network view a computer should use for browsing.


kDS1AttrNFSHomeDirectory


#define kDS1AttrNFSHomeDirectory "dsAttrTypeStandard:NFSHomeDirectory" 
Discussion

Defines a user's home directory mount point on the local machine.


kDS1AttrNodeRefCount


#define kDS1AttrNodeRefCount "dsAttrTypeStandard:NodeRefCount" 
Discussion

Node reference count for a process.


kDS1AttrNote


#define kDS1AttrNote "dsAttrTypeStandard:Note" 
Discussion

Note attribute. Commonly used in printer records.


kDS1AttrNSPSearchPath


#define kDS1AttrNSPSearchPath "dsAttrTypeStandard:NSPSearchPath" 
Discussion

Automatic search path defined by the search node.


kDS1AttrNTDomainComputerAccount


#define kDS1AttrNTDomainComputerAccount "dsAttrTypeStandard:NTDomainComputerAccount" 
Discussion

Supports Kerberized SMB Server services.


kDS1AttrOriginalNFSHomeDirectory


#define kDS1AttrOriginalNFSHomeDirectory "dsAttrTypeStandard:OriginalNFSHomeDirectory" 
Discussion

NFS home directory used in local account caching.


kDS1AttrOriginalNodeName


#define kDS1AttrOriginalNodeName "dsAttrTypeStandard:OriginalNodeName" 
Discussion

Nodename used in local account caching.


kDS1AttrOwner


#define kDS1AttrOwner "dsAttrTypeStandard:Owner" 
Discussion

Attribute type for the owner of a record. Typically the value is a LDAP distinguished name.


kDS1AttrOwnerGUID


#define kDS1AttrOwnerGUID "dsAttrTypeStandard:OwnerGUID" 
Discussion

Attribute type for the owner GUID of a group. found in group records (kDSStdRecordTypeGroups).


kDS1AttrPassword


#define kDS1AttrPassword "dsAttrTypeStandard:Password" 
Discussion

Holds the password or credential value.


kDS1AttrPasswordPlus


#define kDS1AttrPasswordPlus "dsAttrTypeStandard:PasswordPlus" 
Discussion

Holds marker data to indicate possible authentication redirection.


kDS1AttrPasswordPolicyOptions


#define kDS1AttrPasswordPolicyOptions "dsAttrTypeStandard:PasswordPolicyOptions" 
Discussion

Collection of password policy options in single attribute. Used in user presets record.


kDS1AttrPasswordServerList


#define kDS1AttrPasswordServerList "dsAttrTypeStandard:PasswordServerList" 
Discussion

Represents the attribute for storing the password server's replication information.


kDS1AttrPasswordServerLocation


#define kDS1AttrPasswordServerLocation "dsAttrTypeStandard:PasswordServerLocation" 
Discussion

Specifies the IP address or domain name of the Password Server associated with a given directory node. Found in a config record named PasswordServer.


kDS1AttrPicture


#define kDS1AttrPicture "dsAttrTypeStandard:Picture" 
Discussion

Represents the path of the picture for each user displayed in the login window. Found in user records (kDSStdRecordTypeUsers).


kDS1AttrPIDValue


#define kDS1AttrPIDValue "dsAttrTypeStandard:PIDValue" 
Discussion

PID value.


kDS1AttrPluginIndex


#define kDS1AttrPluginIndex "dsAttrTypeStandard:PluginIndex" 
Discussion

Plugin index for reference.


kDS1AttrPort


#define kDS1AttrPort "dsAttrTypeStandard:Port" 
Discussion

Represents the port number a service is available on. Typically found in service record types including kDSStdRecordTypeAFPServer, kDSStdRecordTypeLDAPServer, and kDSStdRecordTypeWebServer.


kDS1AttrPresetUserIsAdmin


#define kDS1AttrPresetUserIsAdmin "dsAttrTypeStandard:PresetUserIsAdmin" 
Discussion

Flag to indicate whether users created from this preset are administrators by default. Found in kDSStdRecordTypePresetUsers records.


kDS1AttrPrimaryComputerGUID


#define kDS1AttrPrimaryComputerGUID "dsAttrTypeStandard:PrimaryComputerGUID" 
Discussion

Single-valued attribute that defines a primary computer of the computer group. added via extensible object for computer group record type (kDSStdRecordTypeComputerGroups)


kDS1AttrPrimaryComputerList


#define kDS1AttrPrimaryComputerList "dsAttrTypeStandard:PrimaryComputerList" 
Discussion

The GUID of the computer list with which this computer record is associated.


kDS1AttrPrimaryGroupID


#define kDS1AttrPrimaryGroupID "dsAttrTypeStandard:PrimaryGroupID" 
Discussion

This is the 32 bit unique ID that represents the primary group a user is part of, or the ID of a group. Format is a signed 32 bit integer represented as a string.


kDS1AttrPrimaryNTDomain


#define kDS1AttrPrimaryNTDomain "dsAttrTypeStandard:PrimaryNTDomain" 
Discussion

Supports Kerberized SMB Server services.


kDS1AttrPrinter1284DeviceID


#define kDS1AttrPrinter1284DeviceID "dsAttrTypeStandard:Printer1284DeviceID" 
Discussion

Single-valued attribute that defines the IEEE 1284 DeviceID of a printer. This is used when configuring a printer.


kDS1AttrPrinterLPRHost


#define kDS1AttrPrinterLPRHost "dsAttrTypeStandard:PrinterLPRHost" 
Discussion

Standard attribute type for kDSStdRecordTypePrinters.


kDS1AttrPrinterLPRQueue


#define kDS1AttrPrinterLPRQueue "dsAttrTypeStandard:PrinterLPRQueue" 
Discussion

Standard attribute type for kDSStdRecordTypePrinters.


kDS1AttrPrinterMakeAndModel


#define kDS1AttrPrinterMakeAndModel "dsAttrTypeStandard:PrinterMakeAndModel" 
Discussion

Single-valued attribute for definition of the Printer Make and Model. An example Value would be "HP LaserJet 2200". This would be used to determine the proper PPD file to be used when configuring a printer from the Directory. This attribute is based on the IPP Printing Specification RFC and IETF IPP-LDAP Printer Record.


kDS1AttrPrinterType


#define kDS1AttrPrinterType "dsAttrTypeStandard:PrinterType" 
Discussion

Standard attribute type for kDSStdRecordTypePrinters.


kDS1AttrPrinterURI


#define kDS1AttrPrinterURI "dsAttrTypeStandard:PrinterURI" 
Discussion

Single-valued attribute that defines the URI of a printer "ipp://address" or "smb://server/queue". This is used when configuring a printer. This attribute is based on the IPP Printing Specification RFC and IETF IPP-LDAP Printer Record.


kDS1AttrPrinterXRISupported


See Also:

kDSNAttrPrinterXRISupported

#define kDSNAttrPrinterXRISupported "dsAttrTypeStandard:PrinterXRISupported" 
Discussion

Multi-valued attribute that defines additional URIs supported by a printer. This is used when configuring a printer. This attribute is based on the IPP Printing Specification RFC and IETF IPP-LDAP Printer Record.


kDS1AttrPrintServiceInfoText


#define kDS1AttrPrintServiceInfoText "dsAttrTypeStandard:PrintServiceInfoText" 
Discussion

Standard attribute type for kDSStdRecordTypePrinters.


kDS1AttrPrintServiceInfoXML


#define kDS1AttrPrintServiceInfoXML "dsAttrTypeStandard:PrintServiceInfoXML" 
Discussion

Standard attribute type for kDSStdRecordTypePrinters.


kDS1AttrPrintServiceUserData


#define kDS1AttrPrintServiceUserData "dsAttrTypeStandard:PrintServiceUserData" 
Discussion

Single-valued attribute for print quota configuration or statistics (XML data). Found in user records (kDSStdRecordTypeUsers) or print service statistics records (kDSStdRecordTypePrintServiceUser).


kDS1AttrProcessName


#define kDS1AttrProcessName "dsAttrTypeStandard:ProcessName" 
Discussion

Process Name.


kDS1AttrProtocolNumber


#define kDS1AttrProtocolNumber "dsAttrTypeStandard:ProtocolNumber" 
Discussion

Single-valued attribute that defines a protocol number. Usually found in protocol records (kDSStdRecordTypeProtocols)


kDS1AttrPwdAgingPolicy


#define kDS1AttrPwdAgingPolicy "dsAttrTypeStandard:PwdAgingPolicy" 
Discussion

Contains the password aging policy data for an authentication capable record.


kDS1AttrRARA


#define kDS1AttrRARA "dsAttrTypeStandard:RARA" 
Discussion

Retained only for backward compatibility.


kDS1AttrReadOnlyNode


#define kDS1AttrReadOnlyNode "dsAttrTypeStandard:ReadOnlyNode" 
Discussion

Can be found using dsGetDirNodeInfo and will return one of ReadOnly, ReadWrite, or WriteOnly strings. Note that ReadWrite does not imply fully readable or writable


kDS1AttrRealUserID


#define kDS1AttrRealUserID "dsAttrTypeStandard:RealUserID" 
Discussion

Used by MCX.


kDS1AttrRecordImage


#define kDS1AttrRecordImage "dsAttrTypeStandard:RecordImage" 
Discussion

A binary image of the record and all it's attributes. Has never been supported.


kDS1AttrRecRefCount


#define kDS1AttrRecRefCount "dsAttrTypeStandard:RecRefCount" 
Discussion

Record reference count for a process.


kDS1AttrRefNumTableList


#define kDS1AttrRefNumTableList "dsAttrTypeStandard:RefNumTableList" 
Discussion

Summary of the reference table entries presented as attr values from the Configure node via dsGetDirNodeInfo.


kDS1AttrRelativeDNPrefix


#define kDS1AttrRelativeDNPrefix "dsAttrTypeStandard:RelativeDNPrefix" 
Discussion

Used to map the first native LDAP attribute type required in the building of the Relative Distinguished Name for LDAP record creation.


kDS1AttrRPCNumber


#define kDS1AttrRPCNumber "dsAttrTypeStandard:RPCNumber" 
Discussion

Single-valued attribute that defines an RPC number. Usually found in RPC records (kDSStdRecordTypeRPC)


kDS1AttrSearchPath


#define kDS1AttrSearchPath "dsAttrTypeStandard:SearchPath" 
Discussion

Search path used by the search node.


kDS1AttrSearchPolicy


#define kDS1AttrSearchPolicy "dsAttrTypeStandard:SearchPolicy" 
Discussion

Search policy for the search node.


kDS1AttrServiceType


#define kDS1AttrServiceType "dsAttrTypeStandard:ServiceType" 
Discussion

Represents the service type for the service. This is the raw service type of the service. For example a service record type of kDSStdRecordTypeWebServer might have a service type of "http" or "https".


kDS1AttrSetupAdvertising


#define kDS1AttrSetupAdvertising "dsAttrTypeStandard:SetupAssistantAdvertising" 
Discussion

Used for Setup Assistant automatic population.


kDS1AttrSetupAutoRegister


#define kDS1AttrSetupAutoRegister "dsAttrTypeStandard:SetupAssistantAutoRegister" 
Discussion

Used for Setup Assistant automatic population.


kDS1AttrSetupLocation


#define kDS1AttrSetupLocation "dsAttrTypeStandard:SetupAssistantLocation" 
Discussion

Used for Setup Assistant automatic population.


kDS1AttrSetupOccupation


#define kDS1AttrSetupOccupation "dsAttrTypeStandard:Occupation" 
Discussion

Used for Setup Assistant automatic population.


kDS1AttrSMBAcctFlags


#define kDS1AttrSMBAcctFlags "dsAttrTypeStandard:SMBAccountFlags" 
Discussion

Account control flag.


kDS1AttrSMBGroupRID


#define kDS1AttrSMBGroupRID "dsAttrTypeStandard:SMBGroupRID" 
Discussion

Constant for supporting PDC SMB interaction with DS.


kDS1AttrSMBGroupRID


#define kDS1AttrSMBGroupRID "dsAttrTypeStandard:SMBGroupRID" 
Discussion

Attributefor supporting PDC SMB interaction.


kDS1AttrSMBHome


#define kDS1AttrSMBHome "dsAttrTypeStandard:SMBHome" 
Discussion

UNC address of Windows homedirectory mount point (\\server\\sharepoint).


kDS1AttrSMBHomeDrive


#define kDS1AttrSMBHomeDrive "dsAttrTypeStandard:SMBHomeDrive" 
Discussion

Drive letter for homedirectory mount point.


kDS1AttrSMBKickoffTime


#define kDS1AttrSMBKickoffTime "dsAttrTypeStandard:SMBKickoffTime" 
Discussion

Attribute in support of SMB interaction.


kDS1AttrSMBLogoffTime


#define kDS1AttrSMBLogoffTime "dsAttrTypeStandard:SMBLogoffTime" 
Discussion

Attribute in support of SMB interaction.


kDS1AttrSMBLogonTime


#define kDS1AttrSMBLogonTime "dsAttrTypeStandard:SMBLogonTime" 
Discussion

Attribute in support of SMB interaction.


kDS1AttrSMBPrimaryGroupSID


#define kDS1AttrSMBPrimaryGroupSID "dsAttrTypeStandard:SMBPrimaryGroupSID" 
Discussion

SMB Primary Group Security ID, stored as a string attribute of up to 64 bytes. Found in user, group, and computer records (kDSStdRecordTypeUsers, kDSStdRecordTypeGroups, kDSStdRecordTypeComputers).


kDS1AttrSMBProfilePath


#define kDS1AttrSMBProfilePath "dsAttrTypeStandard:SMBProfilePath" 
Discussion

Desktop management info (dock, desktop links, etc).


kDS1AttrSMBPWDLastSet


#define kDS1AttrSMBPWDLastSet "dsAttrTypeStandard:SMBPasswordLastSet" 
Discussion

Attribute in support of SMB interaction.


kDS1AttrSMBRID


#define kDS1AttrSMBRID "dsAttrTypeStandard:SMBRID" 
Discussion

Attribute in support of SMB interaction.


kDS1AttrSMBScriptPath


#define kDS1AttrSMBScriptPath "dsAttrTypeStandard:SMBScriptPath" 
Discussion

Login script path.


kDS1AttrSMBSID


#define kDS1AttrSMBSID "dsAttrTypeStandard:SMBSID" 
Discussion

SMB Security ID, stored as a string attribute of up to 64 bytes. Found in user, group, and computer records (kDSStdRecordTypeUsers, kDSStdRecordTypeGroups, kDSStdRecordTypeComputers).


kDS1AttrSMBUserWorkstations


#define kDS1AttrSMBUserWorkstations "dsAttrTypeStandard:SMBUserWorkstations" 
Discussion

List of workstations user can login from (machine account names).


kDS1AttrTimePackage


#define kDS1AttrTimePackage "dsAttrTypeStandard:TimePackage" 
Discussion

Data of Create, Modify, Backup time in UTC.


kDS1AttrTimeToLive


#define kDS1AttrTimeToLive "dsAttrTypeStandard:TimeToLive" 
Discussion

Attribute recommending how long to cache the record's attribute values. Format is an unsigned 32 bit representing seconds. ie. 300 is 5 minutes.


kDS1AttrTotalRefCount


#define kDS1AttrTotalRefCount "dsAttrTypeStandard:TotalRefCount" 
Discussion

Total count of references for a process.


kDS1AttrTotalSize


#define kDS1AttrTotalSize "dsAttrTypeStandard:TotalSize" 
Discussion

checksum/meta data.


kDS1AttrUniqueID


#define kDS1AttrUniqueID "dsAttrTypeStandard:UniqueID" 
Discussion

This is the 32 bit unique ID that represents the user in the legacy manner. Format is a signed integer represented as a string.


kDS1AttrUserCertificate


#define kDS1AttrUserCertificate "dsAttrTypeStandard:UserCertificate" 
Discussion

Attribute containing the binary of the user's certificate. Usually found in user records. The certificate is data which identifies a user. This data is attested to by a known party, and can be independently verified by a third party.


kDS1AttrUserPKCS12Data


#define kDS1AttrUserPKCS12Data "dsAttrTypeStandard:UserPKCS12Data" 
Discussion

Attribute containing binary data in PKCS #12 format. Usually found in user records. The value can contain keys, certificates, and other related information and is encrypted with a passphrase.


kDS1AttrUserShell


#define kDS1AttrUserShell "dsAttrTypeStandard:UserShell" 
Discussion

Used to represent the user's shell setting.


kDS1AttrUserSMIMECertificate


#define kDS1AttrUserSMIMECertificate "dsAttrTypeStandard:UserSMIMECertificate" 
Discussion

Attribute containing the binary of the user's SMIME certificate. Usually found in user records. The certificate is data which identifies a user. This data is attested to by a known party, and can be independently verified by a third party. SMIME certificates are often used for signed or encrypted emails.


kDS1AttrVersion


#define kDS1AttrVersion "dsAttrTypeStandard:Version" 
Discussion

Version label.


kDS1AttrVFSDumpFreq


#define kDS1AttrVFSDumpFreq "dsAttrTypeStandard:VFSDumpFreq" 
Discussion

Attribute used to support mount records.


kDS1AttrVFSLinkDir


#define kDS1AttrVFSLinkDir "dsAttrTypeStandard:VFSLinkDir" 
Discussion

Attribute used to support mount records.


kDS1AttrVFSPassNo


#define kDS1AttrVFSPassNo "dsAttrTypeStandard:VFSPassNo" 
Discussion

Attribute used to support mount records.


kDS1AttrVFSType


#define kDS1AttrVFSType "dsAttrTypeStandard:VFSType" 
Discussion

Attribute used to support mount records.


kDS1AttrWeblogURI


#define kDS1AttrWeblogURI "dsAttrTypeStandard:WeblogURI" 
Discussion

Single-valued attribute that defines the URI of a user's weblog. Usually found in user records (kDSStdRecordTypeUsers). Example: http://example.com/blog/jsmith


kDS1AttrXMLPlist


#define kDS1AttrXMLPlist "dsAttrTypeStandard:XMLPlist" 
Discussion

SA config settings plist.


kDS1StandardAttrHomeLocOwner


#define kDS1StandardAttrHomeLocOwner "dsAttrTypeStandard:HomeLocOwner" 
Discussion

Retained for backward compatibility.


kDSAttributesAll


#define kDSAttributesAll "dsAttributesAll" 
Discussion

Used in requesting all attribute types in a search.


kDSAttributesNativeAll


#define kDSAttributesNativeAll "dsAttributesNativeAll" 
Discussion

Used in requesting all native attribute types in a search.


kDSAttributesStandardAll


#define kDSAttributesStandardAll "dsAttributesStandardAll" 
Discussion

Used in requesting all standard attribute types in a search.


kDSAttrNone


#define kDSAttrNone "dsNone" 
Discussion

Retained for backward compatibility.


kDSNativeAttrTypePrefix


#define kDSNativeAttrTypePrefix "dsAttrTypeNative:" 
Discussion

Prefix used to identify directory native attribute types.


kDSNativeAuthMethodPrefix


#define kDSNativeAuthMethodPrefix "dsAuthMethodNative:" 
Discussion

Native authentication method prefix.


kDSNativeRecordTypePrefix


#define kDSNativeRecordTypePrefix "dsRecTypeNative:" 
Discussion

Prefix used to identify a native record type.


kDSNAttrAccessControlEntry


#define kDSNAttrAccessControlEntry "dsAttrTypeStandard:AccessControlEntry" 
Discussion

Attribute type which stores directory access control directives.


kDSNAttrAddressLine1


#define kDSNAttrAddressLine1 "dsAttrTypeStandard:AddressLine1" 
Discussion

Line one of multiple lines of address data for a user.


kDSNAttrAddressLine2


#define kDSNAttrAddressLine2 "dsAttrTypeStandard:AddressLine2" 
Discussion

Line two of multiple lines of address data for a user.


kDSNAttrAddressLine3


#define kDSNAttrAddressLine3 "dsAttrTypeStandard:AddressLine3" 
Discussion

Line three of multiple lines of address data for a user.


kDSNAttrAllNames


#define kDSNAttrAllNames "dsAttrTypeStandard:AllNames" 
Discussion

Backward compatibility only - all possible names for a record. Has never been supported.


kDSNAttrAreaCode


#define kDSNAttrAreaCode "dsAttrTypeStandard:AreaCode" 
Discussion

Area code of a user's phone number.


kDSNAttrAttributeTypes


#define kDSNAttrAttributeTypes "dsAttrTypeStandard:AttributeTypes" 
Discussion

Used to indicated recommended attribute types for a record type in the Config node.


kDSNAttrAttrListRefs


#define kDSNAttrAttrListRefs "dsAttrTypeStandard:AttrListRefs" 
Discussion

All the attr list references for a process.


kDSNAttrAttrListValueRefs


#define kDSNAttrAttrListValueRefs "dsAttrTypeStandard:AttrListValueRefs" 
Discussion

All the attr list value references for a process.


kDSNAttrAuthenticationAuthority


#define kDSNAttrAuthenticationAuthority "dsAttrTypeStandard:AuthenticationAuthority" 
Discussion

Determines what mechanism is used to verify or set a user's password. If multiple values are present, the first attributes returned take precedence. Typically found in User records (kDSStdRecordTypeUsers).


kDSNAttrAuthMethod


#define kDSNAttrAuthMethod "dsAttrTypeStandard:AuthMethod" 
Discussion

Authentication method for an authentication capable record.


kDSNAttrAutomountInformation


#define kDSNAttrAutomountInformation "dsAttrTypeStandard:AutomountInformation" 
Discussion

Used to store automount information in kDSStdRecordTypeAutomount records.


kDSNAttrBootParams


#define kDSNAttrBootParams "dsAttrTypeStandard:BootParams" 
Discussion

Attribute type in host or machine records for storing boot params.


kDSNAttrBuilding


#define kDSNAttrBuilding "dsAttrTypeStandard:Building" 
Discussion

Represents the building name for a user or person record. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrCity


#define kDSNAttrCity "dsAttrTypeStandard:City" 
Discussion

Usually, city for a user or person record. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrCompany


#define kDSNAttrCompany "dsAttrTypeStandard:Company" 
Discussion

attribute that defines the user's company. Example: Apple Computer, Inc


kDSNAttrComputerAlias


#define kDSNAttrComputerAlias "dsAttrTypeStandard:ComputerAlias" 
Discussion

Attribute type in Neighborhood records describing computer records pointed to by this neighborhood.


kDSNAttrComputers


#define kDSNAttrComputers "dsAttrTypeStandard:Computers" 
Discussion

List of computers.


kDSNAttrCountry


#define kDSNAttrCountry "dsAttrTypeStandard:Country" 
Discussion

Represents country of a record entry. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrCSPSearchPath


#define kDSNAttrCSPSearchPath "dsAttrTypeStandard:CSPSearchPath" 
Discussion

Retained only for backward compatibility.


kDSNAttrDepartment


#define kDSNAttrDepartment "dsAttrTypeStandard:Department" 
Discussion

Represents the department name of a user or person. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrDirRefs


#define kDSNAttrDirRefs "dsAttrTypeStandard:DirRefs" 
Discussion

All the directory references for a process.


kDSNAttrDNSName


#define kDSNAttrDNSName "dsAttrTypeStandard:DNSName" 
Discussion

Domain Name Service name.


kDSNAttrEMailAddress


#define kDSNAttrEMailAddress "dsAttrTypeStandard:EMailAddress" 
Discussion

Email address of usually a user record.


kDSNAttrEMailContacts


#define kDSNAttrEMailContacts "dsAttrTypeStandard:EMailContacts" 
Discussion

multi-valued attribute that defines a record's custom email addresses . found in user records (kDSStdRecordTypeUsers). Example: home:[email protected]


kDSNAttrFaxNumber


#define kDSNAttrFaxNumber "dsAttrTypeStandard:FAXNumber" 
Discussion

Represents the FAX numbers of a user or person. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrGroup


#define kDSNAttrGroup "dsAttrTypeStandard:Group" 
Discussion

List of groups.


kDSNAttrGroupMembers


#define kDSNAttrGroupMembers "dsAttrTypeStandard:GroupMembers" 
Discussion

Attribute type in group records containing lists of GUID values for members other than groups.


kDSNAttrGroupMembership


#define kDSNAttrGroupMembership "dsAttrTypeStandard:GroupMembership" 
Discussion

Usually a list of users that below to a given group record.


kDSNAttrGroupServices


#define kDSNAttrGroupServices "dsAttrTypeStandard:GroupServices" 
Discussion

xml-plist attribute that defines a group's services . found in group records (kDSStdRecordTypeGroups).


kDSNAttrHomeDirectory


#define kDSNAttrHomeDirectory "dsAttrTypeStandard:HomeDirectory" 
Discussion

Network home directory URL.


kDSNAttrHomePhoneNumber


#define kDSNAttrHomePhoneNumber "dsAttrTypeStandard:HomePhoneNumber" 
Discussion

Home telephone number of a user or person.


kDSNAttrHTML


#define kDSNAttrHTML "dsAttrTypeStandard:HTML" 
Discussion

HTML location.


kDSNAttrIMHandle


#define kDSNAttrIMHandle "dsAttrTypeStandard:IMHandle" 
Discussion

Represents the Instant Messaging handles of a user. Values should be prefixed with the appropriate IM type ie. AIM:, Jabber:, MSN:, Yahoo:, or ICQ: Usually found in user records (kDSStdRecordTypeUsers).


kDSNAttrIPAddress


#define kDSNAttrIPAddress "dsAttrTypeStandard:IPAddress" 
Discussion

IP address expressed either as domain or IP notation.


kDSNAttrIPAddressAndENetAddress


#define kDSNAttrIPAddressAndENetAddress "dsAttrTypeStandard:IPAddressAndENetAddress" 
Discussion

A pairing of IPv4 or IPv6 addresses with Ethernet addresses (e.g., "10.1.1.1/00:16:cb:92:56:41"). Usually found on kDSStdRecordTypeComputers for use by services that need specific pairing of the two values. This should be in addition to kDSNAttrIPAddress, kDSNAttrIPv6Address and kDS1AttrENetAddress. This is necessary because not all directories return attribute values in a guaranteed order.


kDSNAttrIPv6Address


#define kDSNAttrIPv6Address "dsAttrTypeStandard:IPv6Address" 
Discussion

IPv6 address expressed in the standard notation (e.g., "fe80::236:caff:fcc2:5641" ) Usually found on kDSStdRecordTypeComputers, kDSStdRecordTypeHosts, and kDSStdRecordTypeMachines.


kDSNAttrJobTitle


#define kDSNAttrJobTitle "dsAttrTypeStandard:JobTitle" 
Discussion

Represents the job title of a user. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrJPEGPhoto


#define kDSNAttrJPEGPhoto "dsAttrTypeStandard:JPEGPhoto" 
Discussion

Used to store binary picture data in JPEG format. Usually found in user, people or group records (kDSStdRecordTypeUsers, kDSStdRecordTypePeople, kDSStdRecordTypeGroups).


kDSNAttrKDCAuthKey


#define kDSNAttrKDCAuthKey "dsAttrTypeStandard:KDCAuthKey" 
Discussion

KDC master key RSA encrypted with realm public key.


kDSNAttrKeywords


#define kDSNAttrKeywords "dsAttrTypeStandard:Keywords" 
Discussion

Keywords using for searching capability.


kDSNAttrLDAPReadReplicas


#define kDSNAttrLDAPReadReplicas "dsAttrTypeStandard:LDAPReadReplicas" 
Discussion

List of LDAP server URLs which can each be used to read directory data.


kDSNAttrLDAPWriteReplicas


#define kDSNAttrLDAPWriteReplicas "dsAttrTypeStandard:LDAPWriteReplicas" 
Discussion

List of LDAP server URLs which can each be used to write directory data.


kDSNAttrLSPSearchPath


#define kDSNAttrLSPSearchPath "dsAttrTypeStandard:LSPSearchPath" 
Discussion

Retained only for backward compatibility.


kDSNAttrMachineServes


#define kDSNAttrMachineServes "dsAttrTypeStandard:MachineServes" 
Discussion

Attribute type in host or machine records for storing NetInfo domains served.


kDSNAttrMapCoordinates


#define kDSNAttrMapCoordinates "dsAttrTypeStandard:MapCoordinates" 
Discussion

attribute that defines coordinates for a user's location . found in user records (kDSStdRecordTypeUsers) and resource records (kDSStdRecordTypeResources). Example: 7.7,10.6


kDSNAttrMapURI


#define kDSNAttrMapURI "dsAttrTypeStandard:MapURI" 
Discussion

attribute that defines the URI of a user's location. Usually found in user records (kDSStdRecordTypeUsers). Example: http://example.com/bldg1


kDSNAttrMCXSettings


#define kDSNAttrMCXSettings "dsAttrTypeStandard:MCXSettings" 
Discussion

Used by MCX.


kDSNAttrMember


#define kDSNAttrMember "dsAttrTypeStandard:Member" 
Discussion

List of member records.


kDSNAttrMetaNodeLocation


#define kDSNAttrMetaNodeLocation "dsAttrTypeStandard:AppleMetaNodeLocation" 
Discussion

Meta attribute returning registered node name by directory node plugin.


kDSNAttrMIME


#define kDSNAttrMIME "dsAttrTypeStandard:MIME" 
Discussion

Data contained in this attribute type is a fully qualified MIME Type.


kDSNAttrMobileNumber


#define kDSNAttrMobileNumber "dsAttrTypeStandard:MobileNumber" 
Discussion

Represents the mobile numbers of a user or person. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrNamePrefix


#define kDSNAttrNamePrefix "dsAttrTypeStandard:NamePrefix" 
Discussion

Represents the title prefix of a user or person. ie. Mr., Ms., Mrs., Dr., etc. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrNameSuffix


#define kDSNAttrNameSuffix "dsAttrTypeStandard:NameSuffix" 
Discussion

Represents the name suffix of a user or person. ie. Jr., Sr., etc. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrNBPEntry


#define kDSNAttrNBPEntry "dsAttrTypeStandard:NBPEntry" 
Discussion

Appletalk data.


kDSNAttrNeighborhoodAlias


#define kDSNAttrNeighborhoodAlias "dsAttrTypeStandard:NeighborhoodAlias" 
Discussion

Attribute type in Neighborhood records describing sub-neighborhood records.


kDSNAttrNestedGroups


#define kDSNAttrNestedGroups "dsAttrTypeStandard:NestedGroups" 
Discussion

Attribute type in group records for the list of GUID values for nested groups.


kDSNAttrNetGroups


#define kDSNAttrNetGroups "dsAttrTypeStandard:NetGroups" 
Discussion

Attribute type that indicates which netgroups its record is a member of. Found in user, host, and netdomain records.


kDSNAttrNetGroupTriplet


#define kDSNAttrNetGroupTriplet "dsAttrTypeStandard:NetGroupTriplet" 
Discussion

Multivalued attribute that defines the host, user and domain triplet combinations to support NetGroups. Each attribute value is comma separated string to maintain the triplet (e.g., host,user,domain).


kDSNAttrNickName


#define kDSNAttrNickName "dsAttrTypeStandard:NickName" 
Discussion

Represents the nickname of a user or person. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrNodePath


#define kDSNAttrNodePath "dsAttrTypeStandard:NodePath" 
Discussion

Sub strings of a Directory Service Node given in order.


kDSNAttrNodePathXMLPlist


#define kDSNAttrNodePathXMLPlist "dsAttrTypeStandard:NodePathXMLPlist" 
Discussion

Attribute type in Neighborhood records describing the DS Node to search while looking up aliases in this neighborhood.


kDSNAttrNodeRefs


#define kDSNAttrNodeRefs "dsAttrTypeStandard:NodeRefs" 
Discussion

All the node references for a process.


kDSNAttrNSPSearchPath


#define kDSNAttrNSPSearchPath "dsAttrTypeStandard:NSPSearchPath" 
Discussion

Retained only for backward compatibility.


kDSNAttrOrganizationInfo


#define kDSNAttrOrganizationInfo "dsAttrTypeStandard:OrganizationInfo" 
Discussion

Usually the organization info of a user.


kDSNAttrOrganizationName


#define kDSNAttrOrganizationName "dsAttrTypeStandard:OrganizationName" 
Discussion

Usually the organization of a user.


kDSNAttrOriginalHomeDirectory


#define kDSNAttrOriginalHomeDirectory "dsAttrTypeStandard:OriginalHomeDirectory" 
Discussion

Home directory URL used in local account caching.


kDSNAttrPagerNumber


#define kDSNAttrPagerNumber "dsAttrTypeStandard:PagerNumber" 
Discussion

Represents the pager numbers of a user or person. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrPGPPublicKey


#define kDSNAttrPGPPublicKey "dsAttrTypeStandard:PGPPublicKey" 
Discussion

Pretty Good Privacy public encryption key.


kDSNAttrPhoneContacts


#define kDSNAttrPhoneContacts "dsAttrTypeStandard:PhoneContacts" 
Discussion

multi-valued attribute that defines a record's custom phone numbers . found in user records (kDSStdRecordTypeUsers). Example: home fax:408-555-4444


kDSNAttrPhoneNumber


#define kDSNAttrPhoneNumber "dsAttrTypeStandard:PhoneNumber" 
Discussion

Telephone number of a user.


kDSNAttrPlugInInfo


#define kDSNAttrPlugInInfo "dsAttrTypeStandard:PlugInInfo" 
Discussion

Information (version, signature, about, credits, etc.) about the plug-in that is actually servicing a particular directory node. Has never been supported.


kDSNAttrPostalAddress


#define kDSNAttrPostalAddress "dsAttrTypeStandard:PostalAddress" 
Discussion

The postal address usually excluding postal code.


kDSNAttrPostalAddressContacts


#define kDSNAttrPostalAddressContacts "dsAttrTypeStandard:PostalAddressContacts" 
Discussion

multi-valued attribute that defines a record's alternate postal addresses . found in user records (kDSStdRecordTypeUsers) and resource records (kDSStdRecordTypeResources).


kDSNAttrPostalCode


#define kDSNAttrPostalCode "dsAttrTypeStandard:PostalCode" 
Discussion

The postal code such as zip code in the USA.


kDSNAttrPrinterXRISupported


See Also:

kDS1AttrPrinterXRISupported

#define kDSNAttrPrinterXRISupported "dsAttrTypeStandard:PrinterXRISupported" 
Discussion

Multi-valued attribute that defines additional URIs supported by a printer. This is used when configuring a printer. This attribute is based on the IPP Printing Specification RFC and IETF IPP-LDAP Printer Record.


kDSNAttrProtocols


#define kDSNAttrProtocols "dsAttrTypeStandard:Protocols" 
Discussion

List of protocols.


kDSNAttrRecordAlias


#define kDSNAttrRecordAlias "dsAttrTypeStandard:RecordAlias" 
Discussion

No longer supported in Mac OS X 10.4 or later.


kDSNAttrRecordName


#define kDSNAttrRecordName "dsAttrTypeStandard:RecordName" 
Discussion

List of names/keys for this record.


kDSNAttrRecordType


#define kDSNAttrRecordType "dsAttrTypeStandard:RecordType" 
Discussion

Single Valued for a Record, Multi-valued for a Directory Node.


kDSNAttrRecRefs


#define kDSNAttrRecRefs "dsAttrTypeStandard:RecRefs" 
Discussion

All the record references for a process.


kDSNAttrRelationships


#define kDSNAttrRelationships "dsAttrTypeStandard:Relationships" 
Discussion

multi-valued attribute that defines the relationship to the record type . found in user records (kDSStdRecordTypeUsers). Example: brother:John


kDSNAttrResourceInfo


#define kDSNAttrResourceInfo "dsAttrTypeStandard:ResourceInfo" 
Discussion

multi-valued attribute that defines a resource record's info.


kDSNAttrResourceType


#define kDSNAttrResourceType "dsAttrTypeStandard:ResourceType" 
Discussion

Attribute type for the kind of resource. found in resource records (kDSStdRecordTypeResources). Example: ConferenceRoom


kDSNAttrSchema


#define kDSNAttrSchema "dsAttrTypeStandard:Scheama" 
Discussion

List of attribute types.


kDSNAttrSearchPath


#define kDSNAttrSearchPath "dsAttrTypeStandard:SearchPath" 
Discussion

Retained only for backward compatibility.


kDSNAttrServicesLocator


#define kDSNAttrServicesLocator "dsAttrTypeStandard:ServicesLocator" 
Discussion

the URI for a record's calendar


kDSNAttrSetPasswdMethod


#define kDSNAttrSetPasswdMethod "dsAttrTypeStandard:SetPasswdMethod" 
Discussion

Retained only for backward compatibility.


kDSNAttrState


#define kDSNAttrState "dsAttrTypeStandard:State" 
Discussion

The state or province of a country.


kDSNAttrStreet


#define kDSNAttrStreet "dsAttrTypeStandard:Street" 
Discussion

Represents the street address of a user or person. Usually found in user or people records (kDSStdRecordTypeUsers or kDSStdRecordTypePeople).


kDSNAttrSubNodes


#define kDSNAttrSubNodes "dsAttrTypeStandard:SubNodes" 
Discussion

Attribute of a node which lists the available subnodes of that node.


kDSNAttrURL


#define kDSNAttrURL "dsAttrTypeStandard:URL" 
Discussion

List of URLs.


kDSNAttrURLForNSL


#define kDSNAttrURLForNSL "dsAttrTypeStandard:URLForNSL" 
Discussion

List of URLs used by NSL.


kDSNAttrVFSOpts


#define kDSNAttrVFSOpts "dsAttrTypeStandard:VFSOpts" 
Discussion

Used in support of mount records.


kDSRecordsAll


#define kDSRecordsAll "dsRecordsAll" 
Discussion

Used to indicate that all records should be returned of a certain type as opposed to an actual pattern match.


kDSRecordsNativeAll


#define kDSRecordsNativeAll "dsRecordsNativeAll" 
Discussion

Retained only for backward compatibility.


kDSRecordsStandardAll


#define kDSRecordsStandardAll "dsRecordsStandardAll" 
Discussion

Retained only for backward compatibility.


kDSSetPasswdBestOf


#define kDSSetPasswdBestOf "dsSetPasswdBestOf" 
Discussion

Retained only for backward compatibility.


kDSStdAttrTypePrefix


#define kDSStdAttrTypePrefix "dsAttrTypeStandard:" 
Discussion

Prefix used to identify all standard attribute types.


kDSStdAuth2WayRandom


#define kDSStdAuth2WayRandom "dsAuthMethodStandard:dsAuth2WayRandom" 
Discussion

Two way random authentication method. This method uses two passes to complete the authentication.

The buffer for pass one is packed as follows: user name in UTF8 encoding

The buffer for pass two is packed as follows: 8 byte DES digest + 8 bytes of random


kDSStdAuth2WayRandomChangePasswd


#define kDSStdAuth2WayRandomChangePasswd "dsAuthMethodStandard:dsAuth2WayRandomChangePasswd" 
Discussion

Change the password for a user using the two-way random method. Does not require prior authentication. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of old password encrypted with new (should be 8), old password encrypted with new, 4 byte length of new password encrypted with old (should be 8), new password encrypted with old


kDSStdAuthAPOP


#define kDSStdAuthAPOP "dsAuthMethodStandard:dsAuthAPOP" 
Discussion

APOP authentication method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge, server challenge in UTF8 encoding, 4 byte length of client response, client response in UTF8 encoding


kDSStdAuthChangePasswd


#define kDSStdAuthChangePasswd "dsAuthMethodStandard:dsAuthChangePasswd" 
Discussion

Change the password for a user. Does not require prior authentication. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of old password, old password in UTF8 encoding, 4 byte length of new password, new password in UTF8 encoding


kDSStdAuthCHAP


#define kDSStdAuthCHAP "dsAuthMethodStandard:dsAuthCHAP" 
Discussion

CHAP authentication method. This method is not implemented.


kDSStdAuthClearText


#define kDSStdAuthClearText "dsAuthMethodStandard:dsAuthClearText" 
Discussion

Clear text authentication method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of password, password in UTF8 encoding


kDSStdAuthCRAM_MD5


#define kDSStdAuthCRAM_MD5 "dsAuthMethodStandard:dsAuthNodeCRAM-MD5" 
Discussion

CRAM MD5 authentication method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge, server challenge in UTF8 encoding, 4 byte length of client response, client response data


kDSStdAuthCrypt


#define kDSStdAuthCrypt "dsAuthMethodStandard:dsAuthCrypt" 
Discussion

Use a crypt password stored in the user record if available to do the authentication. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of password, password in UTF8 encoding

This method may not be supported by all plug-ins or for all users.


kDSStdAuthDeleteUser


#define kDSStdAuthDeleteUser "dsAuthMethodStandard:dsAuthDeleteUser" 
Discussion

Used for Apple password server user deletion. This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of authenticator Password Server ID, Password Server ID in UTF8 encoding, 4 byte length of authenticator password, authenticator password in UTF8 encoding, 4 byte length of user's Password Server ID, user's Password Server ID in UTF8 encoding


kDSStdAuthDIGEST_MD5


#define kDSStdAuthDIGEST_MD5 "dsAuthMethodStandard:dsAuthNodeDIGEST-MD5" 
Discussion

Digest MD5 authentication method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge, server challenge in UTF8 encoding, 4 byte length of client response, client response data, 4 byte length of HTTP method used, HTTP method in UTF8 encoding


kDSStdAuthGetEffectivePolicy


#define kDSStdAuthGetEffectivePolicy "dsAuthMethodStandard:dsAuthGetEffectivePolicy" 
Discussion

Used to extract, from a password server, the actual policies that will be applied to a user; a combination of global and user policies. The buffer is packed as follows:

4 byte length of user name or Password Server ID, user name or Password Server ID in UTF8 encoding


kDSStdAuthGetGlobalPolicy


#define kDSStdAuthGetGlobalPolicy "dsAuthMethodStandard:dsAuthGetGlobalPolicy" 
Discussion

Used for extraction of global auth policy. Authentication is not required to get policies. The authenticator name and password fields may be left blank by using eight bytes of zeros. The buffer is packed as follows:

4 byte length of authenticator name, user name in UTF8 encoding 4 byte length of authenticator password, password in UTF8 encoding


kDSStdAuthGetKerberosPrincipal


#define kDSStdAuthGetKerberosPrincipal "dsAuthMethodStandard:dsAuthGetKerberosPrincipal" 
Discussion

Kerberos Principal name. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding


kDSStdAuthGetMethodsForUser


#define kDSStdAuthGetMethodsForUser "dsAuthMethodStandard:dsAuthGetMethodsForUser" 
Discussion

Allows a service to query the authentication methods available for a user at the time of authentication. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding.

The output buffer contains a list of the form: 4 byte length, authentication method constant (example: "dsAuthMethodStandard:dsAuthNodeCRAM-MD5") 4 byte length, next authentication method constant, etc.


kDSStdAuthGetPolicy


#define kDSStdAuthGetPolicy "dsAuthMethodStandard:dsAuthGetPolicy" 
Discussion

The plug-in should determine which specific authentication method to use. Authentication is not required to get policies. The authenticator name and password fields may be left blank by using a length of 1 and a zero-byte for the data. The buffer is packed as follows:

4 byte length of authenticator's name or Password Server ID, authenticator's name or Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of account's name or Password Server ID, account's name or Password Server ID

The Password Server does not require authentication for this auth method. The first two fields are to cover us for future policy changes and to keep the buffer format as standardized as possible.


kDSStdAuthGetUserData


#define kDSStdAuthGetUserData "dsAuthMethodStandard:dsAuthGetUserData" 
Discussion

Used with Apple password server. The password server maintains a space for a small amount of miscellaneous data. This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of authenticator's Password Server ID, authenticator's Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of user's Password Server ID, Password Server ID in UTF8 encoding


kDSStdAuthGetUserName


#define kDSStdAuthGetUserName "dsAuthMethodStandard:dsAuthGetUserName" 
Discussion

Used with Apple password server. This name is the same as the primary short name for the user. This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of authenticator's Password Server ID, authenticator's Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of user's Password Server ID, user's Password Server ID in UTF8 encoding


kDSStdAuthKerberosTickets


#define kDSStdAuthKerberosTickets "dsAuthMethodStandard:dsAuthKerberosTickets" 
Discussion

Provides write-access to LDAP with an existing Kerberos ticket The buffer is packed as follows:

4 byte length of authenticator name, user name in UTF8 encoding 4 byte length of krb5_data krb5_data struct containing a service ticket


kDSStdAuthMASKE_A


#define kDSStdAuthMASKE_A "dsAuthMethodStandard:dsAuthMASKE-A" 
Discussion

Retained only for backward compatibility.


kDSStdAuthMASKE_B


#define kDSStdAuthMASKE_B "dsAuthMethodStandard:dsAuthMASKE-B" 
Discussion

Retained only for backward compatibility.


kDSStdAuthMethodPrefix


#define kDSStdAuthMethodPrefix "dsAuthMethodStandard:" 
Discussion

Standard authentication constant prefix.


kDSStdAuthMPPEMasterKeys


#define kDSStdAuthMPPEMasterKeys "dsAuthMethodStandard:dsAuthMPPEMasterKeys" 
Discussion

Generated 40-bit or 128-bit master keys from MS-CHAPv2 credentials (RFC 3079). The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of session's MS-CHAPv2 digest (P24), MS-CHAPv2 digest (P24) 4 byte length of key size (always 1) key size, 8 or 16 (packed as a byte, not a string)


kDSStdAuthMSCHAP1


#define kDSStdAuthMSCHAP1 "dsAuthMethodStandard:dsAuthMSCHAP1" 
Discussion

MS CHAP 1 authentication method. This method is not implemented.


kDSStdAuthMSCHAP2


#define kDSStdAuthMSCHAP2 "dsAuthMethodStandard:dsAuthMSCHAP2" 
Discussion

MS-CHAP2 is a mutual authentication method. The plug-in will generate the data to send back to the client and put it in the step buffer.

The input buffer format: 4 byte length, user name in UTF8 encoding, 4 byte length, server challenge, 4 byte length, peer challenge, 4 byte length, client's digest, 4 byte length, client's user name (the name used for MS-CHAPv2, usually the first short name)

The output buffer format: 4 byte length, return digest for the client's challenge


kDSStdAuthNewUser


#define kDSStdAuthNewUser "dsAuthMethodStandard:dsAuthNewUser" 
Discussion

Create a new user record with the authentication authority This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of authenticator's Password Server ID, authenticator's Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of new user's short-name, user's short-name, 4 byte length of new user's password, user's password


kDSStdAuthNewUserWithPolicy


#define kDSStdAuthNewUserWithPolicy "dsAuthMethodStandard:dsAuthNewUserWithPolicy" 
Discussion

Create a new user record with the authentication authority and initial policy settings This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of authenticator's Password Server ID, authenticator's Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of new user's short-name, user's short-name, 4 byte length of new user's password, user's password 4 byte length of policy string policy string in UTF8 encoding


kDSStdAuthNodeNativeClearTextOK


#define kDSStdAuthNodeNativeClearTextOK "dsAuthMethodStandard:dsAuthNodeNativeCanUseClearText" 
Discussion

The plug-in should determine which specific authentication method to use. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of password, password in UTF8 encoding

The plug-in may choose to use a cleartext authentication method if necessary.


kDSStdAuthNodeNativeNoClearText


#define kDSStdAuthNodeNativeNoClearText "dsAuthMethodStandard:dsAuthNodeNativeCannotUseClearText" 
Discussion

The plug-in should determine which specific authentication method to use. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of password, password in UTF8 encoding

The plug-in must not use an authentication method that sends the password in cleartext.


kDSStdAuthNTLMv2


#define kDSStdAuthNTLMv2 "dsAuthMethodStandard:dsAuthNodeNTLMv2" 
Discussion

Verifies an NTLMv2 challenge and response. The session keys (if any) must be retrieved separately with a trusted authentication. The input buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of samba server challenge, samba server challenge 4 byte length of the NTLMv2 client "blob" the client "blob" which includes 16 bytes of client digest prefixed to the the blob data 4 byte length of the user name used to calculate the digest, the user name used to calculate the digest in UTF8 encoding 4 byte length of the samba domain, the samba domain in UTF8 encoding


kDSStdAuthNTLMv2WithSessionKey


#define kDSStdAuthNTLMv2WithSessionKey "dsAuthMethodStandard:dsAuthNodeNTLMv2WithSessionKey" 
Discussion

An optimized method that checks the user's challenge and response and retrieves session keys in a single call. If the NTLMv2 session key is supported, it is returned in the step buffer.

The input buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of samba server challenge, samba server challenge 4 byte length of the NTLMv2 client "blob" the client "blob" which includes 16 bytes of client digest prefixed to the the blob data 4 byte length of the user name used to calculate the digest, the user name used to calculate the digest in UTF8 encoding 4 byte length of the samba domain, the samba domain in UTF8 encoding, 4 byte length of authenticator name, user name in UTF8 encoding, 4 byte length of authenticator password, user name in UTF8 encoding,


kDSStdAuthReadSecureHash


#define kDSStdAuthReadSecureHash "dsAuthMethodStandard:dsAuthReadSecureHash" 
Discussion

Returns the SHA1 or salted SHA1 hash for a local user Only accessible by root processes. Only implemented by the local node. The buffer is packed as follows:

4 byte length of user's name, user's name in UTF8 encoding

The output buffer format: 4 byte length (20 or 24) value, either the old 20-byte SHA1 or the new salted 24-byte SHA1.


kDSStdAuthSecureHash


#define kDSStdAuthSecureHash "dsAuthMethodStandard:dsAuthSecureHash" 
Discussion

Auth specifically using the secure hash. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of salted SHA1 hash (24 bytes), salted SHA1 hash


kDSStdAuthSetGlobalPolicy


#define kDSStdAuthSetGlobalPolicy "dsAuthMethodStandard:dsAuthSetGlobalPolicy" 
Discussion

Used to set the global policy. The buffer is packed as follows:

4 byte length of authenticator name or Password Server ID, user name or Password Server ID in UTF8 encoding 4 byte length of authenticator password, password in UTF8 encoding 4 byte length of policy string, policy string in UTF8 encoding


kDSStdAuthSetLMHash


#define kDSStdAuthSetLMHash "dsAuthMethodStandard:dsAuthSetLMHash" 
Discussion

Set the LAN Manager hash for an account. This method requires prior authentication. Setting the LM hash for an account instead of the plain text password can cause the Windows password to get out-of-sync with the password for other services. Therefore, this authentication method should only be used when there is no other choice. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of LAN Manager hash (16 bytes), LAN Manager hash buffer


kDSStdAuthSetNTHash


#define kDSStdAuthSetNTHash "dsAuthMethodStandard:dsAuthSetNTHash" 
Discussion

Set the NT hash for a user. This method requires prior authentication. Setting the NT hash for an account instead of the plain text password can cause the Windows password to get out-of-sync with the password for other services. Therefore, this authentication method should only be used when there is no other choice. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of NT hash (16 bytes), NT hash buffer


kDSStdAuthSetPasswd


#define kDSStdAuthSetPasswd "dsAuthMethodStandard:dsAuthSetPasswd" 
Discussion

Set password method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of new password, new password in UTF8 encoding 4 byte length of authenticator's name, authenticator's name in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding


kDSStdAuthSetPasswdAsRoot


#define kDSStdAuthSetPasswdAsRoot "dsAuthMethodStandard:dsAuthSetPasswdAsRoot" 
Discussion

Set password as root user method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of new password, new password in UTF8 encoding


kDSStdAuthSetPolicy


#define kDSStdAuthSetPolicy "dsAuthMethodStandard:dsAuthSetPolicy" 
Discussion

The plug-in should determine which specific authentication method to use. The buffer is packed as follows:

4 byte length of authenticator's name or Password Server ID, authenticator's name or Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of name or Password Server ID of the target account, name or Password Server ID of the target account in UTF8 encoding 4 byte length of policy data, policy data


kDSStdAuthSetPolicyAsRoot


#define kDSStdAuthSetPolicyAsRoot "dsAuthMethodStandard:dsAuthSetPolicyAsRoot" 
Discussion

A two-item buffer version of set policy for the password server. The buffer is packed as follows:

4 byte length of user name or Password Server ID of the target account, user name or Password Server ID of the target account in UTF8 encoding 4 byte length of policy data, policy data


kDSStdAuthSetUserData


#define kDSStdAuthSetUserData "dsAuthMethodStandard:dsAuthSetUserData" 
Discussion

Used for Apple password server. This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of authenticator's Password Server ID, authenticator's Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of user's Password Server ID, Password Server ID in UTF8 encoding 4 byte length of data to store, data


kDSStdAuthSetUserName


#define kDSStdAuthSetUserName "dsAuthMethodStandard:dsAuthSetUserName" 
Discussion

Used for Apple password server. This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of authenticator's Password Server ID, authenticator's Password Server ID in UTF8 encoding, 4 byte length of authenticator's password, authenticator's password in UTF8 encoding 4 byte length of user's Password Server ID, Password Server ID in UTF8 encoding 4 byte length of user's short name, user's short name in UTF8 encoding


kDSStdAuthSetWorkstationPasswd


#define kDSStdAuthSetWorkstationPasswd "dsAuthMethodStandard:dsAuthSetWorkstationPasswd" 
Discussion

Supports PDC SMB interaction with DS. The buffer is packed as follows:

4 byte length of workstation's Password Server ID, workstation's Password Server ID in UTF8 encoding, 4 byte length of NT hash (16 bytes), NT hash


kDSStdAuthSMB_LM_Key


#define kDSStdAuthSMB_LM_Key "dsAuthMethodStandard:dsAuthSMBLMKey" 
Discussion

SMB Lan Manager authentication method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge (always 8 bytes) 8 byte server challenge 4 byte length of client response (always 24 bytes) 24 byte client response


kDSStdAuthSMB_NT_Key


#define kDSStdAuthSMB_NT_Key "dsAuthMethodStandard:dsAuthSMBNTKey" 
Discussion

SMB NT authentication method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge (always 8 bytes) 8 byte server challenge 4 byte length of client response (always 24 bytes) 24 byte client response


kDSStdAuthSMB_NT_UserSessionKey


#define kDSStdAuthSMB_NT_UserSessionKey "dsAuthMethodStandard:dsAuthSMBNTUserSessionKey" 
Discussion

Used by Samba to get session keys This authentication method is only implemented by the PasswordServer node. The buffer is packed as follows:

4 byte length of user's Password Server ID, Password Server ID in UTF8 encoding

The output buffer format: 4 byte length, MD4( ntHash )


kDSStdAuthSMB_NT_WithSessionKey


See Also:

kDSStdAuthSMB_NT_WithUserSessionKey

#define kDSStdAuthSMB_NT_WithUserSessionKey "dsAuthMethodStandard:dsAuthNTWithSessionKey" 
Discussion

Used by Samba to authenticate and get session keys The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge (always 8 bytes) 8 byte server challenge 4 byte length of client response (always 24 bytes) 24 byte client response 4 byte length of authenticator name, authenticator name in UTF8 encoding, 4 byte length of authenticator password, authenticator password in UTF8 encoding,

The output buffer format: 4 byte length, MD4( ntHash )


kDSStdAuthSMB_NT_WithUserSessionKey


See Also:

kDSStdAuthSMB_NT_WithSessionKey

#define kDSStdAuthSMB_NT_WithUserSessionKey "dsAuthMethodStandard:dsAuthNTWithSessionKey" 
Discussion

Used by Samba to authenticate and get session keys The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge (always 8 bytes) 8 byte server challenge 4 byte length of client response (always 24 bytes) 24 byte client response 4 byte length of authenticator name, authenticator name in UTF8 encoding, 4 byte length of authenticator password, authenticator password in UTF8 encoding,

The output buffer format: 4 byte length, MD4( ntHash )


kDSStdAuthSMBNTv2UserSessionKey


#define kDSStdAuthSMBNTv2UserSessionKey "dsAuthMethodStandard:dsSMBNTv2UserSessionKey" 
Discussion

generate the ntlm-v2 user session key. Requires prior authentication with a trusted authentication method. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge (always 8 bytes) 8 byte server challenge 4 byte length of client response client response buffer


kDSStdAuthSMBWorkstationCredentialSessionKey


#define kDSStdAuthSMBWorkstationCredentialSessionKey "dsAuthMethodStandard:dsAuthSMBWorkstationCredentialSessionKey" 
Discussion

The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of server challenge and client challenge (always 16 bytes) 8 byte server challenge + 8 byte client challenge


kDSStdAuthWithAuthorizationRef


#define kDSStdAuthWithAuthorizationRef "dsAuthMethodStandard:dsAuthWithAuthorizationRef" 
Discussion

Allows access to local directories as root with a valid AuthorizationRef.

The input buffer format: externalized AuthorizationRef


kDSStdAuthWriteSecureHash


#define kDSStdAuthWriteSecureHash "dsAuthMethodStandard:dsAuthWriteSecureHash" 
Discussion

Supports ONLY a root process to be able to directly write the secure hash of a user record. The buffer is packed as follows:

4 byte length of user name, user name in UTF8 encoding, 4 byte length of salted SHA1 hash (24 bytes), salted SHA1 hash


kDSStdMachDebugPortName


#define kDSStdMachDebugPortName "com.apple.DirectoryServiceDebug" 
Discussion

Registered name used with mach_init for DirectoryService debug daemon.


kDSStdMachDSLookupPortName


#define kDSStdMachDSLookupPortName "com.apple.system.DirectoryService.libinfo_v1" 
Discussion

Registered name used with mach_init for DirectoryService Lookup MIG server for the DirectoryService daemon.


kDSStdMachLocalPortName


#define kDSStdMachLocalPortName "com.apple.DirectoryService.localonly" 
Discussion

Registered name used with mach_init for DirectoryService local only daemon.


kDSStdMachPortName


#define kDSStdMachPortName "com.apple.DirectoryService" 
Discussion

Registered name used with mach_init for DirectoryService daemon.


kDSStdRecordTypeAccessControls


#define kDSStdRecordTypeAccessControls "dsRecTypeStandard:AccessControls" 
Discussion

Record type that contains directory access control directives.


kDSStdRecordTypeAFPServer


#define kDSStdRecordTypeAFPServer "dsRecTypeStandard:AFPServer" 
Discussion

Record type of AFP server records.


kDSStdRecordTypeAFPUserAliases


#define kDSStdRecordTypeAFPUserAliases "dsRecTypeStandard:AFPUserAliases" 
Discussion

Record type of AFP user aliases used exclusively by AFP processes.


kDSStdRecordTypeAliases


#define kDSStdRecordTypeAliases "dsRecTypeStandard:Aliases" 
Discussion

Used to represent alias records.


kDSStdRecordTypeAll


#define kDSStdRecordTypeAll "dsRecTypeStandard:All" 
Discussion

Used to convey that all record types need to be searched over.


kDSStdRecordTypeAttributeTypes


#define kDSStdRecordTypeAttributeTypes "dsRecTypeStandard:AttributeTypes" 
Discussion

Identifies records that represent each possible attribute type.


kDSStdRecordTypeAugments


#define kDSStdRecordTypeAugments "dsRecTypeStandard:Augments" 
Discussion

Used to store augmented record data.


kDSStdRecordTypeAutomount


#define kDSStdRecordTypeAutomount "dsRecTypeStandard:Automount" 
Discussion

Used to store automount record data.


kDSStdRecordTypeAutomountMap


#define kDSStdRecordTypeAutomountMap "dsRecTypeStandard:AutomountMap" 
Discussion

Used to store automountMap record data.


kDSStdRecordTypeAutoServerSetup


#define kDSStdRecordTypeAutoServerSetup "dsRecTypeStandard:AutoServerSetup" 
Discussion

Used to discover automated server setup information.


kDSStdRecordTypeBootp


#define kDSStdRecordTypeBootp "dsRecTypeStandard:Bootp" 
Discussion

Record in the local node for storing bootp info.


kDSStdRecordTypeCertificateAuthorities


See Also:

kDSStdRecordTypeCertificateAuthority

#define kDSStdRecordTypeCertificateAuthorities "dsRecTypeStandard:CertificateAuthorities" 
Discussion

Record type that contains certificate authority information.


kDSStdRecordTypeCertificateAuthority


See Also:

kDSStdRecordTypeCertificateAuthorities

#define kDSStdRecordTypeCertificateAuthorities "dsRecTypeStandard:CertificateAuthorities" 
Discussion

Record type that contains certificate authority information.


kDSStdRecordTypeComputerGroups


#define kDSStdRecordTypeComputerGroups "dsRecTypeStandard:ComputerGroups" 
Discussion

Identifies computer group records.


kDSStdRecordTypeComputerLists


#define kDSStdRecordTypeComputerLists "dsRecTypeStandard:ComputerLists" 
Discussion

Identifies computer list records.


kDSStdRecordTypeComputers


#define kDSStdRecordTypeComputers "dsRecTypeStandard:Computers" 
Discussion

Identifies computer records.


kDSStdRecordTypeConfig


#define kDSStdRecordTypeConfig "dsRecTypeStandard:Config" 
Discussion

Identifies config records.


kDSStdRecordTypeEthernets


#define kDSStdRecordTypeEthernets "dsRecTypeStandard:Ethernets" 
Discussion

Record in the local node for storing ethernets.


kDSStdRecordTypeFileMakerServers


#define kDSStdRecordTypeFileMakerServers "dsRecTypeStandard:FileMakerServers" 
Discussion

FileMaker servers record type. Describes available FileMaker servers, used for service discovery.


kDSStdRecordTypeFTPServer


#define kDSStdRecordTypeFTPServer "dsRecTypeStandard:FTPServer" 
Discussion

Identifies ftp server records.


kDSStdRecordTypeGroupAliases


#define kDSStdRecordTypeGroupAliases "dsRecTypeStandard:GroupAliases" 
Discussion

No longer supported in Mac OS X 10.4 or later.


kDSStdRecordTypeGroups


#define kDSStdRecordTypeGroups "dsRecTypeStandard:Groups" 
Discussion

Identifies group records.


kDSStdRecordTypeHosts


#define kDSStdRecordTypeHosts "dsRecTypeStandard:Hosts" 
Discussion

Identifies host records.


kDSStdRecordTypeHostServices


#define kDSStdRecordTypeHostServices "dsRecTypeStandard:HostServices" 
Discussion

Record in the local node for storing host services.


kDSStdRecordTypeLDAPServer


#define kDSStdRecordTypeLDAPServer "dsRecTypeStandard:LDAPServer" 
Discussion

Identifies LDAP server records.


kDSStdRecordTypeLocations


#define kDSStdRecordTypeLocations "dsRecTypeStandard:Locations" 
Discussion

Location record type.


kDSStdRecordTypeMachines


#define kDSStdRecordTypeMachines "dsRecTypeStandard:Machines" 
Discussion

Identifies machine records.


kDSStdRecordTypeMeta


#define kDSStdRecordTypeMeta "dsRecTypeStandard:AppleMetaRecord" 
Discussion

Identifies meta records.


kDSStdRecordTypeMounts


#define kDSStdRecordTypeMounts "dsRecTypeStandard:Mounts" 
Discussion

Identifies mount records.


kDSStdRecordTypeNeighborhoods


#define kDSStdRecordTypeNeighborhoods "dsRecTypeStandard:Neighborhoods" 
Discussion

Neighborhood record type. Describes a list of computers and other neighborhoods, used for network browsing.


kDSStdRecordTypeNetDomains


#define kDSStdRecordTypeNetDomains "dsRecTypeStandard:NetDomains" 
Discussion

Record in the local node for storing net domains.


kDSStdRecordTypeNetGroups


#define kDSStdRecordTypeNetGroups "dsRecTypeStandard:NetGroups" 
Discussion

Record in the local node for storing net groups.


kDSStdRecordTypeNetworks


#define kDSStdRecordTypeNetworks "dsRecTypeStandard:Networks" 
Discussion

Identifies network records.


kDSStdRecordTypeNFS


#define kDSStdRecordTypeNFS "dsRecTypeStandard:NFS" 
Discussion

Identifies NFS records.


kDSStdRecordTypePasswordServer


#define kDSStdRecordTypePasswordServer "dsRecTypeStandard:PasswordServer" 
Discussion

Used to discover password servers via Bonjour.


kDSStdRecordTypePeople


#define kDSStdRecordTypePeople "dsRecTypeStandard:People" 
Discussion

Record type that contains "People" records used for contact information.


kDSStdRecordTypePlugins


#define kDSStdRecordTypePlugins "dsRecTypeStandard:Plugins" 
Discussion

Identifies records that represent specific DS plugin data.


kDSStdRecordTypePrefix


#define kDSStdRecordTypePrefix "dsRecTypeStandard:" 
Discussion

Used as the prefix for all standard record types.


kDSStdRecordTypePresetComputerGroups


#define kDSStdRecordTypePresetComputerGroups "dsRecTypeStandard:PresetComputerGroups" 
Discussion

The computer group record type used for presets in record creation.


kDSStdRecordTypePresetComputerLists


#define kDSStdRecordTypePresetComputerLists "dsRecTypeStandard:PresetComputerLists" 
Discussion

The computer list record type used for presets in record creation.


kDSStdRecordTypePresetComputers


#define kDSStdRecordTypePresetComputers "dsRecTypeStandard:PresetComputers" 
Discussion

The computer record type used for presets in record creation.


kDSStdRecordTypePresetGroups


#define kDSStdRecordTypePresetGroups "dsRecTypeStandard:PresetGroups" 
Discussion

The group record type used for presets in record creation.


kDSStdRecordTypePresetUsers


#define kDSStdRecordTypePresetUsers "dsRecTypeStandard:PresetUsers" 
Discussion

The user record type used for presets in record creation.


kDSStdRecordTypePrinters


#define kDSStdRecordTypePrinters "dsRecTypeStandard:Printers" 
Discussion

Identifies printer records.


kDSStdRecordTypePrintService


#define kDSStdRecordTypePrintService "dsRecTypeStandard:PrintService" 
Discussion

Identifies print service records.


kDSStdRecordTypePrintServiceUser


#define kDSStdRecordTypePrintServiceUser "dsRecTypeStandard:PrintServiceUser" 
Discussion

Record in the local node for storing quota usage for a user.


kDSStdRecordTypeProtocols


#define kDSStdRecordTypeProtocols "dsRecTypeStandard:Protocols" 
Discussion

Identifies protocol records.


kDSStdRecordTypeQTSServer


#define kDSStdRecordTypeQTSServer "dsRecTypeStandard:QTSServer" 
Discussion

Identifies quicktime streaming server records.


kDSStdRecordTypeRecordTypes


#define kDSStdRecordTypeRecordTypes "dsRecTypeStandard:RecordTypes" 
Discussion

Identifies records that represent each possible record type.


kDSStdRecordTypeRefTableEntries


#define kDSStdRecordTypeRefTableEntries "dsRecTypeStandard:RefTableEntries" 
Discussion

Identifies records that represent a DS reference table entry.


kDSStdRecordTypeResources


#define kDSStdRecordTypeResources "dsRecTypeStandard:Resources" 
Discussion

Identifies resources used in group services.


kDSStdRecordTypeRPC


#define kDSStdRecordTypeRPC "dsRecTypeStandard:RPC" 
Discussion

Identifies remote procedure call records.


kDSStdRecordTypeServer


#define kDSStdRecordTypeServer "dsRecTypeStandard:Server" 
Discussion

Identifies generic server records.


kDSStdRecordTypeServices


#define kDSStdRecordTypeServices "dsRecTypeStandard:Services" 
Discussion

Identifies directory based service records.


kDSStdRecordTypeSharePoints


#define kDSStdRecordTypeSharePoints "dsRecTypeStandard:SharePoints" 
Discussion

Share point record type.


kDSStdRecordTypeSMBServer


#define kDSStdRecordTypeSMBServer "dsRecTypeStandard:SMBServer" 
Discussion

Identifies SMB server records.


kDSStdRecordTypeUserAliases


#define kDSStdRecordTypeUserAliases "dsRecTypeStandard:UserAliases" 
Discussion

No longer supported in Mac OS X 10.4 or later.


kDSStdRecordTypeUsers


#define kDSStdRecordTypeUsers "dsRecTypeStandard:Users" 
Discussion

Identifies user records.


kDSStdRecordTypeWebServer


#define kDSStdRecordTypeWebServer "dsRecTypeStandard:WebServer" 
Discussion

Identifies web server records.


kDSStdRecordTypMounts


#define kDSStdRecordTypMounts "dsRecTypeStandard:Mounts" 
Discussion

Supported only for backward compatibility to kDSStdRecordTypeMounts.


kDSStdRecordTypProtocols


#define kDSStdRecordTypProtocols "dsRecTypeStandard:Protocols" 
Discussion

Supported only for backward compatibility to kDSStdRecordTypeProtocols.


kDSStdRecordTypRPC


#define kDSStdRecordTypRPC "dsRecTypeStandard:RPC" 
Discussion

Supported only for backward compatibility to kDSStdRecordTypeRPC.


kDSStdUserNamesMeta


#define kDSStdUserNamesMeta "dsRecTypeStandard:MetaUserNames" 
Discussion

Retained only for backward compatibility.


kDSTagAuthAuthorityBasic


#define kDSTagAuthAuthorityBasic "basic" 
Discussion

Standard center tag data of auth authority value for basic (crypt) authentication.


kDSTagAuthAuthorityBetterHashOnly


#define kDSTagAuthAuthorityBetterHashOnly "BetterHashOnly" 
Discussion

Standard tag data of auth authority value for better hash only selection authentication.


kDSTagAuthAuthorityDisabledUser


#define kDSTagAuthAuthorityDisabledUser "DisabledUser" 
Discussion

Standard center tag data of auth authority value for disabled user authentication.


kDSTagAuthAuthorityKerberosv5


#define kDSTagAuthAuthorityKerberosv5 "Kerberosv5" 
Discussion

Standard center tag data of auth authority value for Kerberos v5 authentication.


kDSTagAuthAuthorityLocalCachedUser


#define kDSTagAuthAuthorityLocalCachedUser "LocalCachedUser" 
Discussion

Standard center tag data of auth authority value for local cached user authentication.


kDSTagAuthAuthorityLocalWindowsHash


#define kDSTagAuthAuthorityLocalWindowsHash "LocalWindowsHash" 
Discussion

Standard center tag data of auth authority value for local windows hash authentication. Retained only for backward compatibility.


kDSTagAuthAuthorityPasswordServer


#define kDSTagAuthAuthorityPasswordServer "ApplePasswordServer" 
Discussion

Standard center tag data of auth authority value for Apple password server authentication.


kDSTagAuthAuthorityShadowHash


#define kDSTagAuthAuthorityShadowHash "ShadowHash" 
Discussion

Standard center tag data of auth authority value for shadowhash authentication.


kDSValueAuthAuthorityBasic


#define kDSValueAuthAuthorityBasic ";basic;" 
Discussion

Standard auth authority value for basic (crypt) authentication.


kDSValueAuthAuthorityDefault


#define kDSValueAuthAuthorityDefault kDSValueAuthAuthorityBasic 
Discussion

The default value to use for the kDSNAttrAuthenticationAuthority attribute. When creating a user record, set this value for authentication authority before setting the password with dsDoDirNodeAuth.


kDSValueAuthAuthorityDisabledUser


#define kDSValueAuthAuthorityDisabledUser ";DisabledUser;" 
Discussion

Standard auth authority value for disabled user authentication.


kDSValueAuthAuthorityKerberosv5


#define kDSValueAuthAuthorityKerberosv5 ";Kerberosv5;" 
Discussion

Standard auth authority value for Kerberos v5 authentication.


kDSValueAuthAuthorityLocalCachedUser


#define kDSValueAuthAuthorityLocalCachedUser ";LocalCachedUser;" 
Discussion

Standard auth authority value for local cached user authentication.


kDSValueAuthAuthorityLocalWindowsHash


#define kDSValueAuthAuthorityLocalWindowsHash ";LocalWindowsHash;" 
Discussion

Standard auth authority value for local windows hash authentication. Retained only for backward compatibility.


kDSValueAuthAuthorityPasswordServerPrefix


#define kDSValueAuthAuthorityPasswordServerPrefix ";ApplePasswordServer;" 
Discussion

Standard auth authority value for Apple password server authentication.


kDSValueAuthAuthorityShadowHash


#define kDSValueAuthAuthorityShadowHash ";ShadowHash;" 
Discussion

Standard auth authority value for shadowhash authentication.


kDSValueNonCryptPasswordMarker


#define kDSValueNonCryptPasswordMarker "********" 
Discussion

Marker used for password attribute value indicating non-crypt authentication.


kDSValueNSLDynamicNeighborhoodType


#define kDSValueNSLDynamicNeighborhoodType "NSLDynamicNeighborhoodType" 
Discussion

Value type of Neighborhood record


kDSValueNSLLocalNeighborhoodType


#define kDSValueNSLLocalNeighborhoodType "NSLLocalNeighborhoodType" 
Discussion

Value type of Neighborhood record


kDSValueNSLStaticNeighborhoodType


#define kDSValueNSLStaticNeighborhoodType "NSLStaticNeighborhoodType" 
Discussion

Value type of Neighborhood record


kDSValueNSLTopLevelNeighborhoodType


#define kDSValueNSLTopLevelNeighborhoodType "NSLTopLevelNeighborhoodType" 
Discussion

Value type of Neighborhood record


kStandardSourceAlias


#define kStandardSourceAlias "dsAttrTypeStandard:AppleMetaAliasSource" 
Discussion

No longer supported in Mac OS X 10.4 or later.


kStandardTargetAlias


#define kStandardTargetAlias "dsAttrTypeStandard:AppleMetaAliasTarget" 
Discussion

No longer supported in Mac OS X 10.4 or later.

 

Last Updated: 2009-08-12