OID reference

ms-DNS-NSEC3-User-Salt

1.2.840.113556.1.4.2148

Description

This attribute is written onto dnsZone objects. It is used to store DNS configuration information.

Full description and source information

Identification

Identifier and names

Parent

1.2.840.113556.1.4 (4)

Node code

2148

Node names

ms-DNS-NSEC3-User-Salt
msDNS-NSEC3UserSalt

Numeric OID

1.2.840.113556.1.4.2148

URN notation

urn:oid:1.2.840.113556.1.4.2148

ASN.1, OID-IRI and named path variants

ASN.1 notation

{1 2 840 113556 1 4 2148}

{iso(1) member-body(2) us(840) microsoft(113556) 1 4 ms-DNS-NSEC3-User-Salt(2148)}
{iso(1) member-body(2) us(840) microsoft(113556) 1 4 msDNS-NSEC3UserSalt(2148)}
{iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 ms-DNS-NSEC3-User-Salt(2148)}
{iso(1) member-body(2) us-iso(840) microsoft(113556) 1 4 msDNS-NSEC3UserSalt(2148)}
{iso(1) memberBody(2) us(840) microsoft(113556) 1 4 ms-DNS-NSEC3-User-Salt(2148)}
{iso(1) memberBody(2) us(840) microsoft(113556) 1 4 msDNS-NSEC3UserSalt(2148)}
{iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 ms-DNS-NSEC3-User-Salt(2148)}
{iso(1) memberBody(2) us-iso(840) microsoft(113556) 1 4 msDNS-NSEC3UserSalt(2148)}

OID-IRI notation

/1/2/840/113556/1/4/2148
/ISO/Member-Body/US/113556/1/4/2148
/ISO/Member-Body/840/113556/1/4/2148
/ISO/2/840/113556/1/4/2148

Named path variants

/iso/member-body/us/microsoft/1/4/ms-DNS-NSEC3-User-Salt
/iso/member-body/us/microsoft/1/4/msDNS-NSEC3UserSalt
/iso/member-body/us-iso/microsoft/1/4/ms-DNS-NSEC3-User-Salt
/iso/member-body/us-iso/microsoft/1/4/msDNS-NSEC3UserSalt
/iso/memberBody/us/microsoft/1/4/ms-DNS-NSEC3-User-Salt
/iso/memberBody/us/microsoft/1/4/msDNS-NSEC3UserSalt
/iso/memberBody/us-iso/microsoft/1/4/ms-DNS-NSEC3-User-Salt
/iso/memberBody/us-iso/microsoft/1/4/msDNS-NSEC3UserSalt

Meaning

Descriptions

2 unique

Identical descriptions are grouped. Different wording and device-specific notes are retained.

Description 1

This attribute is written onto dnsZone objects. It is used to store DNS configuration information.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Description 2

An attribute that defines a user-specified NSEC3 salt string to use when signing the DNS zone. If empty, random salt will be used.

Sources for this description

Microsoft Active Directory schema

See 1 matching source record

Evidence

Source records

2 records

Matching descriptions are grouped; open a group to compare definitions and supporting files.

Records for description 1Microsoft Active Directory schema1 record · 1 source

Description 1

ms-DNS-NSEC3-User-Salt, msDNS-NSEC3UserSalt · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: ms-DNS-NSEC3-User-Salt, msDNS-NSEC3UserSalt

Technical details

{
  "ldap_properties": {
    "cn": [
      "ms-DNS-NSEC3-User-Salt"
    ],
    "omsyntax": [
      "64"
    ],
    "rangelower": [
      "0"
    ],
    "rangeupper": [
      "510"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2148"
    ],
    "searchflags": [
      "fPRESERVEONDELETE"
    ],
    "systemflags": [
      "FLAG_SCHEMA_BASE_OBJECT"
    ],
    "schemaidguid": [
      "aff16770-9622-4fbc-a128-3088777605b9"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.12"
    ],
    "ldapdisplayname": [
      "msDNS-NSEC3UserSalt"
    ]
  },
  "version_and_implementation_notes": [
    "Version-Specific Behavior: First implemented on Windows Server 2012."
  ]
}

Microsoft Active Directory schema · Publisher's source file: Microsoft Active Directory — [MS-ADA2]-240423.docx (DOCX) · Download Microsoft Active Directory — [MS-ADA2]-240423.docx (DOCX)

Records for description 2Microsoft Active Directory schema1 record · 1 source

Description 2

msDNS-NSEC3UserSalt · unspecifiedMicrosoft Active Directory schema1 source

Status in source: unspecified.

Names: msDNS-NSEC3UserSalt

Technical details

{
  "ldap_properties": {
    "dn": [
      "CN=ms-DNS-NSEC3-User-Salt,CN=Schema,CN=Configuration,DC=X"
    ],
    "omsyntax": [
      "64"
    ],
    "changetype": [
      "ntdsSchemaAdd"
    ],
    "rangelower": [
      "0"
    ],
    "rangeupper": [
      "510"
    ],
    "systemonly": [
      "FALSE"
    ],
    "attributeid": [
      "1.2.840.113556.1.4.2148"
    ],
    "objectclass": [
      "attributeSchema"
    ],
    "searchflags": [
      "8"
    ],
    "systemflags": [
      "16"
    ],
    "schemaidguid": [
      "aff16770-9622-4fbc-a128-3088777605b9"
    ],
    "issinglevalued": [
      "TRUE"
    ],
    "attributesyntax": [
      "2.5.5.12"
    ],
    "ldapdisplayname": [
      "msDNS-NSEC3UserSalt"
    ],
    "admindescription": [
      "An attribute that defines a user-specified NSEC3 salt string to use when signing the DNS zone. If empty, random salt will be used."
    ],
    "admindisplayname": [
      "ms-DNS-NSEC3-User-Salt"
    ],
    "showinadvancedviewonly": [
      "TRUE"
    ]
  }
}

Microsoft Active Directory schema · Download Microsoft Active Directory — schema updates (HTML)

Registration

Registration authorities

Current Registration Authority (inferred from ancestor 1.2.840.113556)

Koos Rommelse

Siblings (1492)

OID	Name	Direct children	Descendants	Description
1.2.840.113556.1.4.2101	ms-DS-Claim-Shares-Possible-Values-With, msDS-ClaimSharesPossibleValuesWith	0	0
1.2.840.113556.1.4.2102	msDS-ClaimSharesPossibleValuesWithBL, ms-DS-Claim-Shares-Possible-Values-With-BL	0	0
1.2.840.113556.1.4.2103	ms-DS-Members-Of-Resource-Property-List, msDS-MembersOfResourcePropertyList	0	0
1.2.840.113556.1.4.2104	msDS-MembersOfResourcePropertyListBL, ms-DS-Members-Of-Resource-Property-List-BL	0	0
1.2.840.113556.1.4.2105	ms-SPP-CSVLK-Pid, msSPP-CSVLKPid	0	0
1.2.840.113556.1.4.2106	ms-SPP-CSVLK-Partial-Product-Key, msSPP-CSVLKPartialProductKey	0	0
1.2.840.113556.1.4.2107	ms-TPM-Srk-Pub-Thumbprint, msTPM-SrkPubThumbprint	0	0
1.2.840.113556.1.4.2108	ms-TPM-Owner-Information-Temp, msTPM-OwnerInformationTemp	0	0
1.2.840.113556.1.4.2109	msTPM-TpmInformationForComputer, ms-TPM-Tpm-Information-For-Computer	0	0
1.2.840.113556.1.4.2110	ms-TPM-Tpm-Information-For-Computer-BL, msTPM-TpmInformationForComputerBL	0	0
1.2.840.113556.1.4.2128	ms-DNS-Keymaster-Zones, msDNS-KeymasterZones	0	0
1.2.840.113556.1.4.2129	ms-DNS-Server-Settings, msDNS-ServerSettings	0	0
1.2.840.113556.1.4.2130	ms-DNS-Is-Signed, msDNS-IsSigned	0	0
1.2.840.113556.1.4.2131	ms-DNS-Sign-With-NSEC3, msDNS-SignWithNSEC3	0	0
1.2.840.113556.1.4.2132	ms-DNS-NSEC3-OptOut, msDNS-NSEC3OptOut	0	0
1.2.840.113556.1.4.2133	ms-DNS-Maintain-Trust-Anchor, msDNS-MaintainTrustAnchor	0	0
1.2.840.113556.1.4.2134	ms-DNS-DS-Record-Algorithms, msDNS-DSRecordAlgorithms	0	0
1.2.840.113556.1.4.2135	ms-DNS-RFC5011-Key-Rollovers, msDNS-RFC5011KeyRollovers	0	0
1.2.840.113556.1.4.2136	ms-DNS-NSEC3-Hash-Algorithm, msDNS-NSEC3HashAlgorithm	0	0
1.2.840.113556.1.4.2137	ms-DNS-NSEC3-Random-Salt-Length, msDNS-NSEC3RandomSaltLength	0	0
1.2.840.113556.1.4.2138	ms-DNS-NSEC3-Iterations, msDNS-NSEC3Iterations	0	0
1.2.840.113556.1.4.2139	ms-DNS-DNSKEY-Record-Set-TTL, msDNS-DNSKEYRecordSetTTL	0	0
1.2.840.113556.1.4.2140	ms-DNS-DS-Record-Set-TTL, msDNS-DSRecordSetTTL	0	0
1.2.840.113556.1.4.2141	ms-DNS-Signature-Inception-Offset, msDNS-SignatureInceptionOffset	0	0
1.2.840.113556.1.4.2142	ms-DNS-Secure-Delegation-Polling-Period, msDNS-SecureDelegationPollingPeriod	0	0
1.2.840.113556.1.4.2143	ms-DNS-Signing-Key-Descriptors, msDNS-SigningKeyDescriptors	0	0
1.2.840.113556.1.4.2144	ms-DNS-Signing-Keys, msDNS-SigningKeys	0	0
1.2.840.113556.1.4.2145	ms-DNS-DNSKEY-Records, msDNS-DNSKEYRecords	0	0
1.2.840.113556.1.4.2146	ms-DNS-Parent-Has-Secure-Delegation, msDNS-ParentHasSecureDelegation	0	0
1.2.840.113556.1.4.2147	ms-DNS-Propagation-Time, msDNS-PropagationTime	0	0
1.2.840.113556.1.4.2149	ms-DNS-NSEC3-Current-Salt, msDNS-NSEC3CurrentSalt	0	0
1.2.840.113556.1.4.2150	ms-Authz-Effective-Security-Policy, msAuthz-EffectiveSecurityPolicy	0	0
1.2.840.113556.1.4.2151	ms-Authz-Proposed-Security-Policy, msAuthz-ProposedSecurityPolicy	0	0
1.2.840.113556.1.4.2152	ms-Authz-Last-Effective-Security-Policy, msAuthz-LastEffectiveSecurityPolicy	0	0
1.2.840.113556.1.4.2153	ms-Authz-Resource-Condition, msAuthz-ResourceCondition	0	0
1.2.840.113556.1.4.2154	ms-Authz-Central-Access-Policy-ID, msAuthz-CentralAccessPolicyID	0	0
1.2.840.113556.1.4.2155	ms-Authz-Member-Rules-In-Central-Access-Policy, msAuthz-MemberRulesInCentralAccessPolicy	0	0
1.2.840.113556.1.4.2156	ms-Authz-Member-Rules-In-Central-Access-Policy-BL, msAuthz-MemberRulesInCentralAccessPolicyBL	0	0
1.2.840.113556.1.4.2157	ms-DS-Claim-Source, msDS-ClaimSource	0	0
1.2.840.113556.1.4.2158	ms-DS-Claim-Source-Type, msDS-ClaimSourceType	0	0
1.2.840.113556.1.4.2159	ms-DS-Claim-Is-Value-Space-Restricted, msDS-ClaimIsValueSpaceRestricted	0	0
1.2.840.113556.1.4.2160	ms-DS-Claim-Is-Single-Valued, msDS-ClaimIsSingleValued	0	0
1.2.840.113556.1.4.2161	ms-Authz-Central-Access-Policies, msAuthz-CentralAccessPolicies	0	0
1.2.840.113556.1.4.2162	ms-Authz-Central-Access-Rules, msAuthz-CentralAccessRules	0	0
1.2.840.113556.1.4.2163	ms-Authz-Central-Access-Rule, msAuthz-CentralAccessRule	0	0
1.2.840.113556.1.4.2164	ms-Authz-Central-Access-Policy, msAuthz-CentralAccessPolicy	0	0
1.2.840.113556.1.4.2166	msDS-GenerationId, ms-DS-Generation-Id	0	0
1.2.840.113556.1.4.2167	msDS-PrimaryComputer, ms-DS-Primary-Computer	0	0
1.2.840.113556.1.4.2168	msDS-IsPrimaryComputerFor, ms-DS-Is-Primary-Computer-For	0	0
1.2.840.113556.1.4.2169	ms-Kds-KDF-AlgorithmID, msKds-KDFAlgorithmID	0	0