OID reference

ms-DNS-NSEC3-OptOut

1.2.840.113556.1.4.2132

Description

This attribute is written onto dnsZone objects. It is used to store DNS configuration information.

Full description and source information

Identification

Identifier and names

Parent
1.2.840.113556.1.4 (4)
Node code
2132
Node names
  • ms-DNS-NSEC3-OptOut
  • msDNS-NSEC3OptOut
Numeric OID
1.2.840.113556.1.4.2132
URN notation
urn:oid:1.2.840.113556.1.4.2132
ASN.1, OID-IRI and named path variants
ASN.1 notation

{1 2 840 113556 1 4 2132}

  • {iso(1) member-body(2) us(840) microsoft(113556) 1 4 ms-DNS-NSEC3-OptOut(2132)}
  • {iso(1) member-body(2) us(840) microsoft(113556) 1 4 msDNS-NSEC3OptOut(2132)}
  • {iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 ms-DNS-NSEC3-OptOut(2132)}
  • {iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 msDNS-NSEC3OptOut(2132)}
  • {iso(1) memberBody(2) us(840) microsoft(113556) 1 4 ms-DNS-NSEC3-OptOut(2132)}
  • {iso(1) memberBody(2) us(840) microsoft(113556) 1 4 msDNS-NSEC3OptOut(2132)}
  • {iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 ms-DNS-NSEC3-OptOut(2132)}
  • {iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 msDNS-NSEC3OptOut(2132)}
OID-IRI notation
  • /1/2/840/113556/1/4/2132
  • /ISO/Member-Body/US/113556/1/4/2132
  • /ISO/Member-Body/840/113556/1/4/2132
  • /ISO/2/840/113556/1/4/2132
Named path variants
  • /iso/member-body/us/microsoft/1/4/ms-DNS-NSEC3-OptOut
  • /iso/member-body/us/microsoft/1/4/msDNS-NSEC3OptOut
  • /iso/member-body/us-iso/microsoft/1/4/ms-DNS-NSEC3-OptOut
  • /iso/member-body/us-iso/microsoft/1/4/msDNS-NSEC3OptOut
  • /iso/memberBody/us/microsoft/1/4/ms-DNS-NSEC3-OptOut
  • /iso/memberBody/us/microsoft/1/4/msDNS-NSEC3OptOut
  • /iso/memberBody/us-iso/microsoft/1/4/ms-DNS-NSEC3-OptOut
  • /iso/memberBody/us-iso/microsoft/1/4/msDNS-NSEC3OptOut

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

This attribute is written onto dnsZone objects. It is used to store DNS configuration information.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Description 2

An attribute used to define whether or not the DNS zone should be signed using NSEC opt-out.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Evidence

Source records

2 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Microsoft Active Directory schema1 record · 1 source

Description 1

ms-DNS-NSEC3-OptOut, msDNS-NSEC3OptOut · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: ms-DNS-NSEC3-OptOut, msDNS-NSEC3OptOut

Technical details
{
  "ldap_properties": {
    "cn": [
      "ms-DNS-NSEC3-OptOut"
    ],
    "omsyntax": [
      "1"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2132"
    ],
    "searchflags": [
      "fPRESERVEONDELETE"
    ],
    "systemflags": [
      "FLAG_SCHEMA_BASE_OBJECT"
    ],
    "schemaidguid": [
      "7bea2088-8ce2-423c-b191-66ec506b1595"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.8"
    ],
    "ldapdisplayname": [
      "msDNS-NSEC3OptOut"
    ]
  },
  "version_and_implementation_notes": [
    "Version-Specific Behavior: First implemented on Windows Server 2012."
  ]
}
Records for description 2Microsoft Active Directory schema1 record · 1 source

Description 2

msDNS-NSEC3OptOut · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: msDNS-NSEC3OptOut

Technical details
{
  "ldap_properties": {
    "dn": [
      "CN=ms-DNS-NSEC3-OptOut,CN=Schema,CN=Configuration,DC=X"
    ],
    "omsyntax": [
      "1"
    ],
    "changetype": [
      "ntdsSchemaAdd"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2132"
    ],
    "objectclass": [
      "attributeSchema"
    ],
    "searchflags": [
      "8"
    ],
    "systemflags": [
      "16"
    ],
    "schemaidguid": [
      "7bea2088-8ce2-423c-b191-66ec506b1595"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.8"
    ],
    "ldapdisplayname": [
      "msDNS-NSEC3OptOut"
    ],
    "admindescription": [
      "An attribute used to define whether or not the DNS zone should be signed using NSEC opt-out."
    ],
    "admindisplayname": [
      "ms-DNS-NSEC3-OptOut"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ]
  }
}

Registration

Registration authorities

Current Registration Authority (inferred from ancestor 1.2.840.113556)

Koos Rommelse

Siblings (1492)

OIDNameDirect childrenDescendantsDescription
1.2.840.113556.1.4.2101 ms-DS-Claim-Shares-Possible-Values-With, msDS-ClaimSharesPossibleValuesWith00
1.2.840.113556.1.4.2102 msDS-ClaimSharesPossibleValuesWithBL, ms-DS-Claim-Shares-Possible-Values-With-BL00
1.2.840.113556.1.4.2103 ms-DS-Members-Of-Resource-Property-List, msDS-MembersOfResourcePropertyList00
1.2.840.113556.1.4.2104 msDS-MembersOfResourcePropertyListBL, ms-DS-Members-Of-Resource-Property-List-BL00
1.2.840.113556.1.4.2105 ms-SPP-CSVLK-Pid, msSPP-CSVLKPid00
1.2.840.113556.1.4.2106 ms-SPP-CSVLK-Partial-Product-Key, msSPP-CSVLKPartialProductKey00
1.2.840.113556.1.4.2107 ms-TPM-Srk-Pub-Thumbprint, msTPM-SrkPubThumbprint00
1.2.840.113556.1.4.2108 ms-TPM-Owner-Information-Temp, msTPM-OwnerInformationTemp00
1.2.840.113556.1.4.2109 msTPM-TpmInformationForComputer, ms-TPM-Tpm-Information-For-Computer00
1.2.840.113556.1.4.2110 ms-TPM-Tpm-Information-For-Computer-BL, msTPM-TpmInformationForComputerBL00
1.2.840.113556.1.4.2128 ms-DNS-Keymaster-Zones, msDNS-KeymasterZones00
1.2.840.113556.1.4.2129 ms-DNS-Server-Settings, msDNS-ServerSettings00
1.2.840.113556.1.4.2130 ms-DNS-Is-Signed, msDNS-IsSigned00
1.2.840.113556.1.4.2131 ms-DNS-Sign-With-NSEC3, msDNS-SignWithNSEC300
1.2.840.113556.1.4.2133 ms-DNS-Maintain-Trust-Anchor, msDNS-MaintainTrustAnchor00
1.2.840.113556.1.4.2134 ms-DNS-DS-Record-Algorithms, msDNS-DSRecordAlgorithms00
1.2.840.113556.1.4.2135 ms-DNS-RFC5011-Key-Rollovers, msDNS-RFC5011KeyRollovers00
1.2.840.113556.1.4.2136 ms-DNS-NSEC3-Hash-Algorithm, msDNS-NSEC3HashAlgorithm00
1.2.840.113556.1.4.2137 ms-DNS-NSEC3-Random-Salt-Length, msDNS-NSEC3RandomSaltLength00
1.2.840.113556.1.4.2138 ms-DNS-NSEC3-Iterations, msDNS-NSEC3Iterations00
1.2.840.113556.1.4.2139 ms-DNS-DNSKEY-Record-Set-TTL, msDNS-DNSKEYRecordSetTTL00
1.2.840.113556.1.4.2140 ms-DNS-DS-Record-Set-TTL, msDNS-DSRecordSetTTL00
1.2.840.113556.1.4.2141 ms-DNS-Signature-Inception-Offset, msDNS-SignatureInceptionOffset00
1.2.840.113556.1.4.2142 ms-DNS-Secure-Delegation-Polling-Period, msDNS-SecureDelegationPollingPeriod00
1.2.840.113556.1.4.2143 ms-DNS-Signing-Key-Descriptors, msDNS-SigningKeyDescriptors00
1.2.840.113556.1.4.2144 ms-DNS-Signing-Keys, msDNS-SigningKeys00
1.2.840.113556.1.4.2145 ms-DNS-DNSKEY-Records, msDNS-DNSKEYRecords00
1.2.840.113556.1.4.2146 ms-DNS-Parent-Has-Secure-Delegation, msDNS-ParentHasSecureDelegation00
1.2.840.113556.1.4.2147 ms-DNS-Propagation-Time, msDNS-PropagationTime00
1.2.840.113556.1.4.2148 ms-DNS-NSEC3-User-Salt, msDNS-NSEC3UserSalt00
1.2.840.113556.1.4.2149 ms-DNS-NSEC3-Current-Salt, msDNS-NSEC3CurrentSalt00
1.2.840.113556.1.4.2150 ms-Authz-Effective-Security-Policy, msAuthz-EffectiveSecurityPolicy00
1.2.840.113556.1.4.2151 ms-Authz-Proposed-Security-Policy, msAuthz-ProposedSecurityPolicy00
1.2.840.113556.1.4.2152 ms-Authz-Last-Effective-Security-Policy, msAuthz-LastEffectiveSecurityPolicy00
1.2.840.113556.1.4.2153 ms-Authz-Resource-Condition, msAuthz-ResourceCondition00
1.2.840.113556.1.4.2154 ms-Authz-Central-Access-Policy-ID, msAuthz-CentralAccessPolicyID00
1.2.840.113556.1.4.2155 ms-Authz-Member-Rules-In-Central-Access-Policy, msAuthz-MemberRulesInCentralAccessPolicy00
1.2.840.113556.1.4.2156 ms-Authz-Member-Rules-In-Central-Access-Policy-BL, msAuthz-MemberRulesInCentralAccessPolicyBL00
1.2.840.113556.1.4.2157 ms-DS-Claim-Source, msDS-ClaimSource00
1.2.840.113556.1.4.2158 ms-DS-Claim-Source-Type, msDS-ClaimSourceType00
1.2.840.113556.1.4.2159 ms-DS-Claim-Is-Value-Space-Restricted, msDS-ClaimIsValueSpaceRestricted00
1.2.840.113556.1.4.2160 ms-DS-Claim-Is-Single-Valued, msDS-ClaimIsSingleValued00
1.2.840.113556.1.4.2161 ms-Authz-Central-Access-Policies, msAuthz-CentralAccessPolicies00
1.2.840.113556.1.4.2162 ms-Authz-Central-Access-Rules, msAuthz-CentralAccessRules00
1.2.840.113556.1.4.2163 ms-Authz-Central-Access-Rule, msAuthz-CentralAccessRule00
1.2.840.113556.1.4.2164 ms-Authz-Central-Access-Policy, msAuthz-CentralAccessPolicy00
1.2.840.113556.1.4.2166 msDS-GenerationId, ms-DS-Generation-Id00
1.2.840.113556.1.4.2167 msDS-PrimaryComputer, ms-DS-Primary-Computer00
1.2.840.113556.1.4.2168 msDS-IsPrimaryComputerFor, ms-DS-Is-Primary-Computer-For00
1.2.840.113556.1.4.2169 ms-Kds-KDF-AlgorithmID, msKds-KDFAlgorithmID00