1、Information technology Open Systems Interconnection The Directory Part 6: Selected attribute types BS ISO/IEC 9594-6:2017 BSI Standards Publication WB11885_BSI_StandardCovs_2013_AW.indd 1 15/05/2013 15:06Information technology Open Systems Interconnection The Directory Part 6: Selected attribute typ
2、es Technologies de linformation Interconnexion de systmes ouverts (OSI) L annuaire Partie 6: Types dattributs slectionns INTERNATIONAL STANDARD ISO/IEC 9594-6 Reference number ISO/IEC 9594-6:2017(E) Eighth edition 2017-05 ISO/IEC 2017 National foreword This British Standard is the UK implementation
3、of ISO/IEC 9594-6:2017. It supersedes BS ISO/IEC 9594-6:2014 which is withdrawn. The UK participation in its preparation was entrusted to Technical Committee IST/6, Data communications. A list of organizations represented on this committee can be obtained on request to its secretary. This publicatio
4、n does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2017 Published by BSI Standards Limited 2017 ISBN 978 0 580 96321 6 ICS 35.100.70 Compliance with a British Standard cannot confer immunity f
5、rom legal obligations. This British Standard was published under the authority of the Standards Policy and Strategy Committee on 31 July 2017. Amendments/corrigenda issued since publication Date Text affected BRITISH STANDARD BS ISO/IEC 9594-6:2017Information technology Open Systems Interconnection
6、The Directory Part 6: Selected attribute types Technologies de linformation Interconnexion de systmes ouverts (OSI) L annuaire Partie 6: Types dattributs slectionns INTERNATIONAL STANDARD ISO/IEC 9594-6 Reference number ISO/IEC 9594-6:2017(E) Eighth edition 2017-05 ISO/IEC 2017 BS ISO/IEC 9594-6:201
7、7 ii ISO/IEC 2017 All rights reserved COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2017, Published in Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying
8、, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Ch. de Blandonnet 8 CP 401 CH-1214 Vernier, Geneva, Switzerland Tel. +41 22 749 01
9、 11 Fax +41 22 749 09 47 copyrightiso.org www.iso.org ISO/IEC 9594-6:2017(E) BS ISO/IEC 9594-6:2017 ii ISO/IEC 2017 All rights reserved COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2017, Published in Switzerland All rights reserved. Unless otherwise specified, no part of this publication may be reproduced o
10、r utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISOs member body in the country of the requester. ISO c
11、opyright office Ch. de Blandonnet 8 CP 401 CH-1214 Vernier, Geneva, Switzerland Tel. +41 22 749 01 11 Fax +41 22 749 09 47 copyrightiso.org www.iso.org ISO/IEC 9594-6:2017(E)ISO/IEC 9594-6:2017(E) ISO/IEC 2017 All rights reserved ii-1 Foreword ISO (the I nternation al O rgani z atio n fo r Standard
12、iz ation) a nd I EC (the I nter nation al E lec trotechnical C om m i ssi o n ) f orm the s pe c i a l i z e d s ystem for worldwide s tandardiz at ion. N ational bo dies that a r e mem b ers of I SO o r IEC participate in t he d evelop ment o f Int e rna tion al S tandards through technic al commit
13、t ees e stablished by the resp ective o r g an ization to d eal w ith par ticular f i e l d s o f technical a ct iv it y . IS O a nd IE C technical committees c o l l ab or at e in fields of m utual interest. Other internati onal organiz a tio n s, g overn m ental and no ngovern mental, i n l i a i
14、s o n w i th I S O a n d I E C , a l s o ta ke p art in the w ork. In the field of i nformatio n technolo g y, I SO an d IEC have e stab li shed a jo i n t technical committee, ISO /IEC J TC 1. The pr oce du r es used to d evelop this document a nd those i nt ended f or its f u r th e r m a i n te n
15、 a n c e a r e d e s c r ib e d in the I S O / I E C Dir e c ti ves, Part 1. In p articul ar the d ifferent a pproval criter ia needed f or the differ e nt types o f document s hould be noted. T his document w as d rafted in accordance w ith the e di to ri a l rul e s of the ISO /I EC Directives, Pa
16、rt 2 (see www.iso.org/directives ). A tt en ti o n is d rawn to t he possibility t hat some o f the el ements of t h i s d oc u men t m a y b e t h e s u bj ec t of p atent rights. ISO and IEC shall not be he l d r e sponsible f or identifying a ny or all such patent rig h ts. D e ta i l s o f a n y
17、 pa t e n t rig h ts i d e n tif i e d d u rin g th e d e v el opment o f th e document w ill be i n the Introduction and/or on t he ISO list of patent declarations rec e ived (see ww w.iso.org/patents ). Any t r ade na me used in this document is information given for t h e co n v e n i e n c e o f
18、 us e r s a n d d o e s not constitu t e an endorsement. For an e xpl a nati on on t he meanin g of I SO s peci fic terms an d expr essions related to c on f or mi t y a ss es s me nt, as well a s informati o n about ISOs a d h e r e n c e to the W o r l d T r a d e O rgan izat ion (WTO) principles
19、in the Technic a l B a r r i e r s to T r a d e (TBT) s e e the f o l lowing URL: www.iso.org/iso/foreword.html. This e ight h e dition c ancels a nd r eplaces t he s eventh e dition ( ISO/IEC 95946:2014), w hich has been t e c h n i c a l l y r e v i s e d . te This d ocum ent was pr e p ared b y I
20、S O/IEC J T C 1 , Information technology, SC 6, Telecommunications and information exchange between systems , i n c o ll a b o r a ti o n w i th I T U T . T he i d e n ti c a l te x t i s published as ITU T X.5 20 (10/ 20 16). A li st o f al l pa rt s in t he ISO/I E C 9 5 94 s e rie s, publishe d u
21、nde r t h e g en eral ti t le Information technology Open Systems Interconnection The Directory , c a n be fou nd on t h e IS O w e bsite. BS ISO/IEC 9594-6:2017 BS ISO/IEC 9594-6:2017 Rec. ITU-T X.520 (10/2016) iii CONTENTS Page 1 Scope 1 2 Normative references 1 2.1 Identical Recommendations | Int
22、ernational Standards 1 2.2 Other references 2 2.3 ISO/IEC Standards 3 3 Definitions 3 4 Abbreviations . 3 5 Conventions 3 6 Definition of selected attribute types 5 6.1 System attribute types . 5 6.2 Labelling attribute types 5 6.3 Geographical attribute types 9 6.4 Organizational attribute types .
23、11 6.5 Explanatory attribute types 12 6.6 Postal addressing attribute types . 14 6.7 Telecommunications addressing attribute types 16 6.8 Preferences attribute types 19 6.9 OSI application attribute types 20 6.10 Relational attribute types . 20 6.11 Domain attribute types 22 6.12 Hierarchical attrib
24、ute types . 22 6.13 Attributes for applications using tag-based identification . 23 6.14 Simple Authentication attributes held by object entries 26 6.15 Password policy attributes . 29 6.16 Notification attributes 33 6.17 LDAP defined attribute types 37 7 String preparation . 39 7.1 Transcode 39 7.2
25、 Map . 39 7.3 Normalize 39 7.4 Prohibit 39 7.5 Check bidi . 40 7.6 Insignificant Character Removal . 40 8 Definition of matching rules . 40 8.1 String matching rules 40 8.2 Syntax-based matching rules . 43 8.3 Time matching rules 46 8.4 First component matching rules 47 8.5 Word matching rules . 48
26、8.6 Approximate Matching Rules . 51 8.7 Special Matching Rules . 51 8.8 Zonal Match 51 8.9 Identity matching rules 54 8.10 Password policy matching rules 55 8.11 LDAP defined matching rules . 56 9 Definition of syntaxes. 57 9.1 Directory syntaxes . 57 9.2 IETF syntaxes 58 10 Definition of Context Ty
27、pes . 64 10.1 Language Context . 64 10.2 Temporal Context 64 BS ISO/IEC 9594-6:2017iv Rec. ITU-T X.520 (10/2016) Page 10.3 Locale Context 68 10.4 LDAP Attribute Option Context . 68 Annex A Selected attribute types in ASN.1 69 Annex B Attribute types for password policy in ASN.1 . 99 Annex C Upper bo
28、unds 105 Annex D Alphabetical index of attributes, matching rules and contexts 106 Annex E Examples for zonal match matching rules . 108 Annex F Mapping Object Identifiers and Uniform Resource Names into Distinguished Names . 110 F.1 Scope of this annex . 110 F.2 Object identifier resolution 110 F.3
29、 Uniform Resource Name (URN) resolution 111 Annex G Object identifier based Directory names . 114 G.1 Scope of this annex . 114 G.2 Transformation of object identifiers into Directory names . 114 G.3 The use of object-identifier-based Directory names 114 Annex H Amendments and corrigenda . 116 BS IS
30、O/IEC 9594-6:2017iv Rec. ITU-T X.520 (10/2016) Page 10.3 Locale Context 68 10.4 LDAP Attribute Option Context . 68 Annex A Selected attribute types in ASN.1 69 Annex B Attribute types for password policy in ASN.1 . 99 Annex C Upper bounds 105 Annex D Alphabetical index of attributes, matching rules
31、and contexts 106 Annex E Examples for zonal match matching rules . 108 Annex F Mapping Object Identifiers and Uniform Resource Names into Distinguished Names . 110 F.1 Scope of this annex . 110 F.2 Object identifier resolution 110 F.3 Uniform Resource Name (URN) resolution 111 Annex G Object identif
32、ier based Directory names . 114 G.1 Scope of this annex . 114 G.2 Transformation of object identifiers into Directory names . 114 G.3 The use of object-identifier-based Directory names 114 Annex H Amendments and corrigenda . 116 Rec. ITU-T X.520 (10/2016) v Introduction This Recommendation | Interna
33、tional Standard, together with other Recommendations | International Standards, has been produced to facilitate the interconnection of information processing systems to provide directory services. A set of such systems, together with the directory information that they hold, can be viewed as an inte
34、grated whole, called the Directory. The information held by the Directory, collectively known as the Directory Information Base (DIB), is typically used to facilitate communication between, with or about objects such as application entities, people, terminals, and distribution lists. The Directory p
35、lays a significant role in Open Systems Interconnection, whose aim is to allow, with a minimum of technical agreement outside of the interconnection standards themselves, the interconnection of information processing systems: from different manufacturers; under different managements; of different le
36、vels of complexity; and of different ages. This Recommendation | International Standard defines a number of attribute types which may be found useful across a range of applications of the Directory, as well as a number of standard attribute syntaxes and matching rules. One particular use for many of
37、 the attributes defined herein is in the formation of names, particularly for the classes of objects defined in Rec. ITU-T X.521 | ISO/IEC 9594-7. This Recommendation | International Standard provides the foundation frameworks upon which industry profiles can be defined by other standards groups and
38、 industry forums. Many of the features defined as optional in these frameworks may be mandated for use in certain environments through profiles. This eighth edition technically revises and enhances the seventh edition of this Recommendation | International Standard. This eighth edition specifies ver
39、sions 1 and 2 of the Directory protocols. The first and second editions specified only version 1. Most of the services and protocols specified in this edition are designed to function under version 1. However some enhanced services and protocols, e.g., signed errors, will not function unless all Dir
40、ectory entities involved in the operation have negotiated version 2. Whichever version has been negotiated, differences between the services and between the protocols defined in the eight editions, except for those specifically assigned to version 2, are accommodated using the rules of extensibility
41、 defined in Rec. ITU-T X.519 | ISO/IEC 9594-5. Annex A, which is an integral part of this Recommendation | International Standard, provides the ASN.1 notation for the complete module which defines the attributes, attribute syntaxes and matching rules. Annex C, which is not an integral part of this R
42、ecommendation | International Standard, provides a table of attribute types, for easy reference. Annex D, which is not an integral part of this Recommendation | International Standard, provides an example of upper bounds value constraints. These constraints are not reflected in these Directory Speci
43、fications, but are provided as a reference for those implementations applying these constraints. Annex E, which is not an integral part of this Recommendation | International Standard, lists alphabetically the attributes and matching rules defined in this Directory Specification. Annex F, which is n
44、ot an integral part of this Recommendation | International Standard, gives examples relevant to the definition of zonal matching. Annex G, which is not an integral part of this Recommendation | International Standard, describes how a directory distinguished name may be based on object identifiers an
45、d on Uniform Resource Names (URNs). Annex H, which is not an integral part of this Recommendation | International Standard, describes an alternative way of generating directory distinguished based on object identifiers. It contains information retrieved from Rec. ITU-T X.660 | ISO/IEC 9834-1. Annex
46、I, which is not an integral part of this Recommendation | International Standard, lists the amendments and defect reports that have been incorporated to form this edition of this Recommendation | International Standard. BS ISO/IEC 9594-6:2017BS ISO/IEC 9594-6:2017ISO/IEC 9594-6:2017 (E) Rec. ITU-T X
47、.520 (10/2016) 1 INTERNATIONAL STANDARD ITU-T RECOMMENDATION Information technology Open Systems Interconnection The Directory: Selected attribute types SECTION 1 GENERAL 1 Scope This Recommendation | International Standard defines a number of attribute types and matching rules which may be found us
48、eful across a range of applications of the Directory. Attribute types and matching rules fall into three categories, as described below. Some attribute types and matching rules are used by a wide variety of applications or are understood and/or used by the Directory itself. NOTE 1 It is recommended
49、that an attribute type or matching rule defined in this Recommendation | International Standard be used, in preference to the generation of a new one, whenever it is appropriate for the application. NOTE 2 The attribute and context types definitions by this Recommendation | International Standard have some associated semantics. Such specifications should not be used in situations where these semantics do not apply. Some attribute types and matching rules are intern
