People OU - SPA LDAP Attributes

In the CalNet LDAP directory, SPA CalNet IDs are found as OU=People entries. Some typical attributes are listed below:

 

Attribute name
Example value

givenname

Econ

sn

SP_Account

departmentNumber

SECON

berkeleyEduHierarchyString

UCBKL-COLLS-LS1SS-SECON

berkeleyEduKerberosPrincipalString

spa-econ

berkeleyEduAlternateID

econ@berkeley.edu

berkeleyEduAffiliations AFFILIATE-TYPE-SPA
berkeleyEduAffTypes SPA

 

Additional attributes are defined in the new SPA-related auxiliary objectClass berkeleyEduSpecialPurposeAccount:

  • berkeleyEduSPAApproverUID (required)
  • berkeleyEduSPAAdminGroup (required; DN for the group with all Admins for this SPA as members)
  • berkeleyEduSPAUsersGroup (DN for the group with all Users of this SPA as members; includes all Admins as well) 
  • berkeleyEduSPACollection
  • berkeleyEduSPAPurpose
  • berkeleyEduSPAType

Additional Information

To create SPAs and manage membership, use the Special Purpose Accounts Admin App

If you have any questions regarding SPA CalNet IDs, contact itcsshelp@berkeley.edu.