Options
Multivalued
Remarks
This attribute is used only on role objects.
IP restrictions are satisfied when the address matches and general
access is denied. They are unsatisfied when the address matches
and general access is allowed.
Values are an identifier byte followed by a type-specific number of
bytes that specify a network address.
• For IP subnets, the identifier is <0x01>, followed by the IP
network address in network order, followed by the IP network
subnet mask in network order. For example, the IP subnet
127.0.0.1/255.0.0.0 would be represented as <0x01 0x7F 0x00
0x00 0x01 0xFF 0x00 0x00 0x00>. For IP ranges, the identifier
is <0x02>, followed by the lower bound IP address, followed by
the upper bound IP address. Both are inclusive and in network
order. For example, the IP range 10.0.0.1 to 10.0.10.255 would
be represented as <0x02 0x0A 0x00 0x00 0x01 0x0A 0x00
0x0A 0xFF>.
• For DNS names or domains, the identifier is <0x03>, followed
by the ASCII encoded DNS name. DNS names can be prefixed
with an * (ASCII 0x2A), to indicate they must match all names
that end with the specified string. For example, the DNS
domain *.acme.com is represented as <0x03 0x2A 0x2E 0x61
0x63 0x6D 0x65 0x2E 0x63 0x6F 0x6D>. General access is
allowed.
hpqRoleTimeRestriction
OID
1.3.6.1.4.1.232.1001.1.1.2.6
Description
A 7-day time grid, with 30-minute resolution, which specifies rights
restrictions under a time constraint.
Syntax
Octet String {42} - 1.3.6.1.4.1.1466.115.121.1.40
Options
Single valued
Remarks
This attribute is used only on role objects.
Time restrictions are satisfied when the bit that corresponds to the
current local time of the device is 1 and unsatisfied when the bit is
0.
• The least significant bit of the first byte corresponds to Sunday,
from midnight to 12:30 a.m.
• Each more significant bit and sequential byte corresponds to the
next consecutive half-hour blocks within the week.
• The most significant (eighth) bit of the 42nd byte corresponds to
Saturday at 11:30 p.m. to Sunday at midnight.
Kerberos authentication and Directory services
353
