CIRT LDAP Data Dictionary as of Jan 2003

AKA	Attribute	Description	Format	Business Rules	Req’d	Constraint	Index	Source	Used for display	Used for auth.	Used for ACL
affiliation, person	eduPersonAffiliation	Relationship with UNM, in broad categories	Value: student, faculty, staff, retiree, emeriti, UNMH, affiliate		X	multi		$HS87			X
affiliation, primary person^*	eduPersonPrimaryAffiliation	Primary relationship	Same as affiliation values			single		Self service			X
birthday	unmbday		yymmdd		X			$HS87	X
campus	l	Campus / location	Value: Main, Gallup, Valencia, Taos, UNMH, Los Alamos, Santa Fe	Students and employees only		multi	X	$HS87	X		X
e-mail address *	unmmail	CIRT mail address				single		CIRT e-mail	X
e-mail address, preferred	mail	Current: UNM mail address Future: Where person prefers to read e-mail				single		Override& CIRT e-mail Future: Self service	X
employee, temp	unmEmployeeTemp			Y, A, null?		single		$HS87			X
home address	homepostaladdress	populated only for emeriti				single		Override Future: Self service	X
home phone	homephonenumber	populated only for emeriti?	CCAAANNNNNNN			single		OverrideFuture: Self service	X

AKA	Attribute	Description	Format	Business Rules	Req’d	Constraint	Index	Source	Used for display	Used for auth.	Used for ACL
ID	uid	UNM NetID				single	X	CIRT NetID creation		X
ID, ssn	unmid	Current: SSN Future: PSN	encrypted		X	single	X	$HS87		X	X
ID, Net	eduPersonPrincipleName	NetID and UNM domain	uid@unm.edu			single		Derived		X
ID, per_seq_no	unmEno	Current: PSN Future: encrypted SSN				single		$HS87		X
ID, pin	unmpin	For students to reset their CIRT e-mail password	encrypted	Students only		single		$HS87		X
job title	title	Job title and related org name	title:orgname	Employees only		multi	X	$HS87	X
job title, preferred	UNMDisplayTitle	Person’s preferred title(s)	title:orgname	Employees only		multi	X	Override Future: Self service	X
MAC address **	macaddress	Address of NIC, used for wireless authentication				multi		Self service			X
name, first	givenName	first name			X	single	X	$HS87
name, full	cn	Name of record	Employee name used over student name		X	single	X	$HS87	X
name, preferred **	displayName	Preferred full name				single	X	Self service	X

AKA	Attribute	Description	Format	Business Rules	Req’d	Constraint	Index	Source	Used for display	Used for auth.	Used for ACL
name, surname	sn	surname			X	single	X	$HS87	X
name, nickname **	eduPersonNickname	Single preferred name				single	X	Self service	X
org code	departmentnumber	HRD 5 digit code	nnnnn	Employees Affiliates		multi	X	$HS87	X
org name	ou	department name of affiliation		Employees Affiliates		multi	X	$HS87	X
pgp key **	unmpgpkey	Public encryption key used for e-mail (corr. to preferred e-mail)				single		Self service	X
student, academic program	unmAcademic Program	Degree pursued and major		Students only		single	X	$HS87	X
student, college of major	unmcollege			Students only		multi	X	$HS87	X
student, year	unmYear	Year in school	Values: freshman, sophomore, junior, senior	Students only		single		$HS87	X
Web URL **	labeluri	URL for Web site associated with this person				multi		Self service	X
work mailing address	postaladdress	Street address		Employees only		single		Override/Derived from org of primary assignmt	X

AKA	Attribute	Description	Format	Business Rules	Req’d	Constraint	Index	Source	Used for display	Used for auth.	Used for ACL
work phone number	telephonenumber		AAA NNN-NNNN	Employees only		single		Override self service	X
work phone number, preferred *			AAA NNN-NNNN	Employees only		multi		self service	X
work, mail stop *	postofficebox	Used for internal mailings		Future state		single		HRS	X
work, physical location **	physicaldeliveryofficename	Where person is located				single		self service	X

Notes:

$HS87 is the nightly feed from the IDMS legacy systems (SIS, HR, Person Area).

The demographic self service application has not yet been implemented

Override – this is a function currently performed manually by a CIRT staff person, upon request by an individual or departmental representative. It is slated to go away when the self service application is fully in production.

* -- The attribute does not yet exist.

** -- The attribute exists but is not yet populated.

Authoritative sources for LDAP: Any attribute populated by $HS87 is considered to be an authoritative source (i.e. there is not directory with more accurate information) for UNM students and employees and for non-hospital affiliates.