On 08/23/2011 09:39 AM, Francis Swasey wrote:
> On 8/22/11 3:18 PM, Jacob Beauregard wrote:
>> My questions to the more experienced ears:
>> 1. What is the process for obtaining an OID from IANA like?
> It's been 10 years since I did it for UVM, so it may be different now, but my memory of the
> experience was I filled out the form as requested with why and then waited, and waited, and
> waited, and finally (about a month later, I think) got an email with the number they had
> assigned me.
The whole system of assigning numbers amazes me. What would happen to 
the world if someone tried to overthrow IANA? Think we would go into an 
internet dark age?
>> 2. How can I generate OIDs for learning purposes?
> for something that is purely for learning purposes and not ever going to be shared with someone
> else, pick a number, any number...
>
Sounds good.
> If you want to see all the schema that are deployed on the ldap.uvm.edu servers, run the
> following (and you have something with an ldapsearch command that uses the OpenLDAP syntax - a
> mac, a linux system, or zoo.uvm.edu):
>
> ldapsearch -x -h ldap.uvm.edu -LLL -b 'cn=subschema' -s base 'objectclass=*' '*' '+'
>
> You will get back every facet of the set of schemas that have been loaded on the ldap.uvm.edu
> servers.
Wow... that's a lot of data to sift through. Thanks!
> What that won't tell you is what the access control lists (ACLs) are and what you can really
> see or modify of those attributes in those various object classes.  However, it will tell you
> which attributes have matching rules, what those matching rules and syntaxes are, if they allow
> substring searches (or not), and if the attribute specifically takes a SINGLE value or allows
> MULTIple values.
>
Exactly what I'm looking for. Again, thank you!

-Jacob