distinguishedName Distinguished This MUST be a Directory String description of name the directory location of this ISAKMP policy. This MUST be in the distinguished name (DN) format of . This MUST be set by the protocol. A typical is },CN=IP Security,CN= System,DC=myDomain,DC=contoso,DC=com". ipsecOwnersReference Distinguished This MUST be a Directory String reference name (DN) to the IPsec policy object with which this ISAKMP object is associated. This MUST be in the DN format of [RFC2251]. A typical value is Security,CN= System,DC=myDomain,DC=contoso,DC=com". ipsecDataType LDAPString The identifier that describes the format of the following ipsecData attribute. This MUST be the base-10 Directory String representation of the unsigned integer value 0x100 (256). ipsecData string The octet string representation of the binary data that specifies additional policy data; stored as described in the following ipsecData-specific table. Note The ipsecISAKMPPolicy object ([MS-ADSC] section 2.72, "Class ipsecISAKMPPolicy") as specified in LDAP messages, is encoded using BER, as described in [RFC2251] section 5.1. The following table specifies the ipsecData attribute-specific sections, corresponding names, and data types for the assigned values for the purpose of IPsec policy configuration. The values of settings MUST NOT be interpreted by this protocol; that is, they are to be applied as is to the IPsec component, which can interpret them independently of the protocol or mechanism that was used to configure them. A description of the interpretation by the IPsec component is provided for informative purposes (as opposed to the syntax, which is normative). Note that all fields specified in the following tables MUST appear in little-endian byte order. 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 ISAKMP-Policy-Type-ID (16 bytes) ... ... Data-Length ISAKMP-Policy-Instance (16 bytes) ...
distinguishedName Distinguished name This MUST be a Directory String description of the directory location of this ISAKMP policy. This MUST be in the distinguished name (DN) format of . This MUST be set by the protocol. A typical is },CN=IP Security,CN= System,DC=myDomain,DC=contoso,DC=com". ipsecOwnersReference Distinguished name This MUST be a Directory String reference (DN) to the IPsec policy object with which this ISAKMP object is associated. This MUST be in the DN format of [RFC2251]. A typical value is Security,CN= System,DC=myDomain,DC=contoso,DC=com". ipsecDataType LDAPString The identifier that describes the format of the following ipsecData attribute. This MUST be the base-10 Directory String representation of the unsigned integer value 0x100 (256). ipsecData string The octet string representation of the binary data that specifies additional policy data; stored as described in the following ipsecData-specific table. Note The ipsecISAKMPPolicy object ([MS-ADSC] section 2.72, "Class ipsecISAKMPPolicy") as specified in LDAP messages, is encoded using BER, as described in [RFC2251] section 5.1. The following table specifies the ipsecData attribute-specific sections, corresponding names, and data types for the assigned values for the purpose of IPsec policy configuration. The values of settings MUST NOT be interpreted by this protocol; that is, they are to be applied as is to the IPsec component, which can interpret them independently of the protocol or mechanism that was used to configure them. A description of the interpretation by the IPsec component is provided for informative purposes (as opposed to the syntax, which is normative). Note that all fields specified in the following tables MUST appear in little-endian byte order. 0 1 2 3 4 5 6 7 8 9 1 0 1 2 3 4 5 6 7 8 9 2 0 1 2 3 4 5 6 7 8 9 3 0 1 ISAKMP-Policy-Type-ID (16 bytes) ... ... Data-Length ISAKMP-Policy-Instance (16 bytes) ...