The LDAP directory can be extended with the ua schema, so that specific attributes can be assigned to individual objects.

## Attribute (1.3.6.1.4.1.30259.1.2.1) # global attributes attributetype ( 1.3.6.1.4.1.30259.1.2.1.1 NAME 'bennoContainer' DESC 'Benno Container the user has access to' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) # user attributes attributetype ( 1.3.6.1.4.1.30259.1.2.1.2 NAME 'bennoEmailAddress' DESC 'Additional E-Mail addresses that could be searched by user' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) attributetype ( 1.3.6.1.4.1.30259.1.2.1.3 NAME 'bennoRole' DESC 'Role of the user: [USER|ADMIN|REVISOR]' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} SINGLE-VALUE) ## Objektklassen (1.3.6.1.4.1.30259.1.2.2) objectclass ( 1.3.6.1.4.1.30259.1.1.2.2 NAME 'BennoMailarchivUser' DESC 'Per user configuration data of Benno Mailarchiv' SUP top AUXILIARY MAY ( bennoContainer $ bennoEmailAddress $ bennoRole ) )

QlpoOTFBWSZTWQaoNlkAAE9fgEAQTON/MD6n/2o//99uQAG9RmsBoU1NNGjQyaNG0jQAAA0NMg0G ip4p6mmyammQAAAA0BkAA5gE0wCZDAAEwTAAABFJqaBKek/VPaiepp6jagNpANAzU9QG1KKXMw2r 09bYHAgtQCFLOFnObIIadbdG/RrgVsJ0CV3pL5OGE1s0QRvVBckcWEvEqa7WY7Phth5NzKqX05Og PIXWlddOz+2gHPG2PHFCZN25mZCkQUkdoPmbAsiIQDoV6WYggXANkMUQasIQ93UMqMravsIlDF0M 6Fy+Bx7Xf9Qsy3v26txZSDmAtIOQCJYDFc1EvkBM8L7jC5FvwpJQ6U3ANMBvN0GusEAUNhG5EUeI q7ZWKNRCet43FVJBTFG3q3NExBMsosmicU+lBw/gYUXOaKMepyQJI0WVsciWgiMzNMHwEkCVlIni NITBAaKpJgA7ktYhhE7k+DL4k53sTwDMVJY/EUcCL8oJcyuXpM7mbWjcPDUBYasjkJ5a4xAYd3Hv vH0F8lzFEPAhUloYwvh2aja4Gni33k4fx7wnJk2GbeNTWVpQo6aXPqgpWsERGMaGGlRuZ05yYj5a pg6c7U5hwOamD9+X3U/4u5IpwoSANUGyyA==

Dieses ist der Base64-String der per Bzip2 komprimierten Schema-Datei. Dieser String wird beim Univention Server benötigt, um das Schema per Web-UI zu erweiteren.