OID reference

ms-DNS-NSEC3-Iterations

1.2.840.113556.1.4.2138

Description

An attribute that defines how many NSEC3 hash iterations to perform when signing the DNS zone.

Full description and source information

Identification

Identifier and names

Parent

1.2.840.113556.1.4 (4)

Node code

2138

Node names

ms-DNS-NSEC3-Iterations
msDNS-NSEC3Iterations

Numeric OID

1.2.840.113556.1.4.2138

URN notation

urn:oid:1.2.840.113556.1.4.2138

ASN.1, OID-IRI and named path variants

ASN.1 notation

{1 2 840 113556 1 4 2138}

{iso(1) member-body(2) us(840) microsoft(113556) 1 4 ms-DNS-NSEC3-Iterations(2138)}
{iso(1) member-body(2) us(840) microsoft(113556) 1 4 msDNS-NSEC3Iterations(2138)}
{iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 ms-DNS-NSEC3-Iterations(2138)}
{iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 msDNS-NSEC3Iterations(2138)}
{iso(1) memberBody(2) us(840) microsoft(113556) 1 4 ms-DNS-NSEC3-Iterations(2138)}
{iso(1) memberBody(2) us(840) microsoft(113556) 1 4 msDNS-NSEC3Iterations(2138)}
{iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 ms-DNS-NSEC3-Iterations(2138)}
{iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 msDNS-NSEC3Iterations(2138)}

OID-IRI notation

/1/2/840/113556/1/4/2138
/ISO/Member-Body/US/113556/1/4/2138
/ISO/Member-Body/840/113556/1/4/2138
/ISO/2/840/113556/1/4/2138

Named path variants

/iso/member-body/us/microsoft/1/4/ms-DNS-NSEC3-Iterations
/iso/member-body/us/microsoft/1/4/msDNS-NSEC3Iterations
/iso/member-body/us-iso/microsoft/1/4/ms-DNS-NSEC3-Iterations
/iso/member-body/us-iso/microsoft/1/4/msDNS-NSEC3Iterations
/iso/memberBody/us/microsoft/1/4/ms-DNS-NSEC3-Iterations
/iso/memberBody/us/microsoft/1/4/msDNS-NSEC3Iterations
/iso/memberBody/us-iso/microsoft/1/4/ms-DNS-NSEC3-Iterations
/iso/memberBody/us-iso/microsoft/1/4/msDNS-NSEC3Iterations

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

An attribute that defines how many NSEC3 hash iterations to perform when signing the DNS zone.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Description 2

This attribute is written onto dnsZone objects. It is used to store DNS configuration information.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Evidence

Source records

2 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Microsoft Active Directory schema1 record · 1 source

Description 1

msDNS-NSEC3Iterations · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: msDNS-NSEC3Iterations

Technical details

{
  "ldap_properties": {
    "dn": [
      "CN=ms-DNS-NSEC3-Iterations,CN=Schema,CN=Configuration,DC=X"
    ],
    "omsyntax": [
      "2"
    ],
    "changetype": [
      "ntdsSchemaAdd"
    ],
    "rangelower": [
      "0"
    ],
    "rangeupper": [
      "10000"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2138"
    ],
    "objectclass": [
      "attributeSchema"
    ],
    "searchflags": [
      "8"
    ],
    "systemflags": [
      "16"
    ],
    "schemaidguid": [
      "80b70aab-8959-4ec0-8e93-126e76df3aca"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.9"
    ],
    "ldapdisplayname": [
      "msDNS-NSEC3Iterations"
    ],
    "admindescription": [
      "An attribute that defines how many NSEC3 hash iterations to perform when signing the DNS zone."
    ],
    "admindisplayname": [
      "ms-DNS-NSEC3-Iterations"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ]
  }
}

Microsoft Active Directory schema · Download Microsoft Active Directory — schema updates (HTML)

Records for description 2Microsoft Active Directory schema1 record · 1 source

Description 2

ms-DNS-NSEC3-Iterations, msDNS-NSEC3Iterations · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: ms-DNS-NSEC3-Iterations, msDNS-NSEC3Iterations

Technical details

{
  "ldap_properties": {
    "cn": [
      "ms-DNS-NSEC3-Iterations"
    ],
    "omsyntax": [
      "2"
    ],
    "rangelower": [
      "0"
    ],
    "rangeupper": [
      "10000"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2138"
    ],
    "searchflags": [
      "fPRESERVEONDELETE"
    ],
    "systemflags": [
      "FLAG_SCHEMA_BASE_OBJECT"
    ],
    "schemaidguid": [
      "80b70aab-8959-4ec0-8e93-126e76df3aca"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.9"
    ],
    "ldapdisplayname": [
      "msDNS-NSEC3Iterations"
    ]
  },
  "version_and_implementation_notes": [
    "Version-Specific Behavior: First implemented on Windows Server 2012."
  ]
}

Microsoft Active Directory schema · Publisher's source file: Microsoft Active Directory — [MS-ADA2]-240423.docx (DOCX) · Download Microsoft Active Directory — [MS-ADA2]-240423.docx (DOCX)

Registration

Registration authorities

Current Registration Authority (inferred from ancestor 1.2.840.113556)

Koos Rommelse

Siblings (1492)

OID	Name	Direct children	Descendants	Description
1.2.840.113556.1.4.2101	ms-DS-Claim-Shares-Possible-Values-With, msDS-ClaimSharesPossibleValuesWith	0	0
1.2.840.113556.1.4.2102	msDS-ClaimSharesPossibleValuesWithBL, ms-DS-Claim-Shares-Possible-Values-With-BL	0	0
1.2.840.113556.1.4.2103	ms-DS-Members-Of-Resource-Property-List, msDS-MembersOfResourcePropertyList	0	0
1.2.840.113556.1.4.2104	msDS-MembersOfResourcePropertyListBL, ms-DS-Members-Of-Resource-Property-List-BL	0	0
1.2.840.113556.1.4.2105	ms-SPP-CSVLK-Pid, msSPP-CSVLKPid	0	0
1.2.840.113556.1.4.2106	ms-SPP-CSVLK-Partial-Product-Key, msSPP-CSVLKPartialProductKey	0	0
1.2.840.113556.1.4.2107	ms-TPM-Srk-Pub-Thumbprint, msTPM-SrkPubThumbprint	0	0
1.2.840.113556.1.4.2108	ms-TPM-Owner-Information-Temp, msTPM-OwnerInformationTemp	0	0
1.2.840.113556.1.4.2109	msTPM-TpmInformationForComputer, ms-TPM-Tpm-Information-For-Computer	0	0
1.2.840.113556.1.4.2110	ms-TPM-Tpm-Information-For-Computer-BL, msTPM-TpmInformationForComputerBL	0	0
1.2.840.113556.1.4.2128	ms-DNS-Keymaster-Zones, msDNS-KeymasterZones	0	0
1.2.840.113556.1.4.2129	ms-DNS-Server-Settings, msDNS-ServerSettings	0	0
1.2.840.113556.1.4.2130	ms-DNS-Is-Signed, msDNS-IsSigned	0	0
1.2.840.113556.1.4.2131	ms-DNS-Sign-With-NSEC3, msDNS-SignWithNSEC3	0	0
1.2.840.113556.1.4.2132	ms-DNS-NSEC3-OptOut, msDNS-NSEC3OptOut	0	0
1.2.840.113556.1.4.2133	ms-DNS-Maintain-Trust-Anchor, msDNS-MaintainTrustAnchor	0	0
1.2.840.113556.1.4.2134	ms-DNS-DS-Record-Algorithms, msDNS-DSRecordAlgorithms	0	0
1.2.840.113556.1.4.2135	ms-DNS-RFC5011-Key-Rollovers, msDNS-RFC5011KeyRollovers	0	0
1.2.840.113556.1.4.2136	ms-DNS-NSEC3-Hash-Algorithm, msDNS-NSEC3HashAlgorithm	0	0
1.2.840.113556.1.4.2137	ms-DNS-NSEC3-Random-Salt-Length, msDNS-NSEC3RandomSaltLength	0	0
1.2.840.113556.1.4.2139	ms-DNS-DNSKEY-Record-Set-TTL, msDNS-DNSKEYRecordSetTTL	0	0
1.2.840.113556.1.4.2140	ms-DNS-DS-Record-Set-TTL, msDNS-DSRecordSetTTL	0	0
1.2.840.113556.1.4.2141	ms-DNS-Signature-Inception-Offset, msDNS-SignatureInceptionOffset	0	0
1.2.840.113556.1.4.2142	ms-DNS-Secure-Delegation-Polling-Period, msDNS-SecureDelegationPollingPeriod	0	0
1.2.840.113556.1.4.2143	ms-DNS-Signing-Key-Descriptors, msDNS-SigningKeyDescriptors	0	0
1.2.840.113556.1.4.2144	ms-DNS-Signing-Keys, msDNS-SigningKeys	0	0
1.2.840.113556.1.4.2145	ms-DNS-DNSKEY-Records, msDNS-DNSKEYRecords	0	0
1.2.840.113556.1.4.2146	ms-DNS-Parent-Has-Secure-Delegation, msDNS-ParentHasSecureDelegation	0	0
1.2.840.113556.1.4.2147	ms-DNS-Propagation-Time, msDNS-PropagationTime	0	0
1.2.840.113556.1.4.2148	ms-DNS-NSEC3-User-Salt, msDNS-NSEC3UserSalt	0	0
1.2.840.113556.1.4.2149	ms-DNS-NSEC3-Current-Salt, msDNS-NSEC3CurrentSalt	0	0
1.2.840.113556.1.4.2150	ms-Authz-Effective-Security-Policy, msAuthz-EffectiveSecurityPolicy	0	0
1.2.840.113556.1.4.2151	ms-Authz-Proposed-Security-Policy, msAuthz-ProposedSecurityPolicy	0	0
1.2.840.113556.1.4.2152	ms-Authz-Last-Effective-Security-Policy, msAuthz-LastEffectiveSecurityPolicy	0	0
1.2.840.113556.1.4.2153	ms-Authz-Resource-Condition, msAuthz-ResourceCondition	0	0
1.2.840.113556.1.4.2154	ms-Authz-Central-Access-Policy-ID, msAuthz-CentralAccessPolicyID	0	0
1.2.840.113556.1.4.2155	ms-Authz-Member-Rules-In-Central-Access-Policy, msAuthz-MemberRulesInCentralAccessPolicy	0	0
1.2.840.113556.1.4.2156	ms-Authz-Member-Rules-In-Central-Access-Policy-BL, msAuthz-MemberRulesInCentralAccessPolicyBL	0	0
1.2.840.113556.1.4.2157	ms-DS-Claim-Source, msDS-ClaimSource	0	0
1.2.840.113556.1.4.2158	ms-DS-Claim-Source-Type, msDS-ClaimSourceType	0	0
1.2.840.113556.1.4.2159	ms-DS-Claim-Is-Value-Space-Restricted, msDS-ClaimIsValueSpaceRestricted	0	0
1.2.840.113556.1.4.2160	ms-DS-Claim-Is-Single-Valued, msDS-ClaimIsSingleValued	0	0
1.2.840.113556.1.4.2161	ms-Authz-Central-Access-Policies, msAuthz-CentralAccessPolicies	0	0
1.2.840.113556.1.4.2162	ms-Authz-Central-Access-Rules, msAuthz-CentralAccessRules	0	0
1.2.840.113556.1.4.2163	ms-Authz-Central-Access-Rule, msAuthz-CentralAccessRule	0	0
1.2.840.113556.1.4.2164	ms-Authz-Central-Access-Policy, msAuthz-CentralAccessPolicy	0	0
1.2.840.113556.1.4.2166	msDS-GenerationId, ms-DS-Generation-Id	0	0
1.2.840.113556.1.4.2167	msDS-PrimaryComputer, ms-DS-Primary-Computer	0	0
1.2.840.113556.1.4.2168	msDS-IsPrimaryComputerFor, ms-DS-Is-Primary-Computer-For	0	0
1.2.840.113556.1.4.2169	ms-Kds-KDF-AlgorithmID, msKds-KDFAlgorithmID	0	0