attributetype ( 1.1.2.1.1.501
    NAME 'cmsIsSuperAdmin'
        EQUALITY booleanMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )

attributetype ( 1.1.2.1.1.502 NAME 'cmsIsAdmin'
	EQUALITY booleanMatch
	SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )

attributetype ( 1.1.2.1.1.503 NAME 'cmsMayEditUsers'
        EQUALITY booleanMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 )

attributetype ( 1.1.2.1.1.505 NAME 'cmsServer'
	EQUALITY caseIgnoreMatch
	SYNTAX	1.3.6.1.4.1.1466.115.121.1.15{100} )

attributetype ( 1.1.2.1.1.506 NAME 'cmsGroups'
        EQUALITY caseIgnoreMatch
        SYNTAX  1.3.6.1.4.1.1466.115.121.1.15{255} )


objectclass ( 1.1.2.2.1.500 NAME 'cms'
       	DESC 'The cms-class contains infos about cms-rights'
        SUP top AUXILIARY
	MAY ( cmsIsSuperAdmin ) )

objectclass ( 1.1.2.2.1.501 NAME 'cmsServerClass'
	DESC 'The name of the server the user is granted cms-rights for'
	SUP top
	MUST ( cmsServer )
	MAY ( cmsIsAdmin $ cmsMayEditUsers $ cmsGroups )
	X-NDS_CONTAINMENT ( 'cms' ) )