attribute       fw1auth-method                          ces
attribute       fw1auth-server                          ces
attribute       fw1pwdlastmod                           ces
attribute       fw1skey-number                          ces
attribute       fw1skey-seed                            ces
attribute       fw1skey-passwd                          ces
attribute       fw1skey-mdm                             ces
attribute       fw1expiration-date                      ces
attribute       fw1hour-range-from                      ces
attribute       fw1hour-range-to                        ces
attribute       fw1day                                  ces
attribute       fw1allowed-src                          ces
attribute       fw1allowed-dst                          ces
attribute       fw1allowed-vlan                         ces
attribute       fw1SR-keym                              ces
attribute       fw1SR-datam                             ces
attribute       fw1SR-mdm                               ces
attribute       fw1enc-fwz-expiration                   ces
attribute       fw1sr-auth-track                        ces
attribute       fw1grouptemplate                        ces
attribute       fw1ISAKMP-EncMethod                     ces
attribute       fw1ISAKMP-AuthMethods                   ces
attribute       fw1ISAKMP-HashMethods                   ces
attribute       fw1ISAKMP-Transfork                     ces
attribute       fw1ISAKMP-DataIntegrityMethod           ces
attribute       fw1ISAKMP-SharedSecret                  ces
attribute       fw1ISAKMP-DataEncMethod                 ces
attribute       fw1enc-methods                          ces
attribute       fw1userPwdPolicy                        ces
attribute       fw1badPwdCount                          ces
attribute       fw1lastLoginFailure                     ces
attribute       memberoftemplate                        ces

objectclass fw1template
	requires
		objectClass,
		cn
	allows
		member,
		description,
		fw1auth-method,
		fw1auth-server,
		fw1pwdlastmod,
		fw1skey-number,
		fw1skey-seed,
		fw1skey-passwd,
		fw1skey-mdm,
		fw1expiration-date,
		fw1hour-range-from,
		fw1hour-range-to,
		fw1day,
		fw1allowed-src,
		fw1allowed-dst,
		fw1allowed-vlan,
		fw1SR-keym,
		fw1SR-datam,
		fw1SR-mdm,
		fw1enc-fwz-expiration,
		fw1sr-auth-track,
		fw1grouptemplate,
		fw1ISAKMP-EncMethod,
		fw1ISAKMP-AuthMethods,
		fw1ISAKMP-HashMethods,
		fw1ISAKMP-Transform,
		fw1ISAKMP-DataIntegrityMethod,
		fw1ISAKMP-SharedSecret,
		fw1ISAKMP-DataEncMethod,
		fw1enc-methods,
		fw1userPwdPolicy

objectclass fw1person
	requires
		objectClass,
		cn,
		sn
	allows 
		description,
		userpassword,
		mail,
		uid,
		fw1auth-method,
		fw1auth-server,
		fw1pwdlastmod,
		fw1skey-number,
		fw1skey-seed,
		fw1skey-passwd,
		fw1skey-mdm,
		fw1expiration-date,
		fw1hour-range-from,
		fw1hour-range-to,
		fw1day,
		fw1allowed-src,
		fw1allowed-dst,
		fw1allowed-vlan,
		fw1SR-keym,
		fw1SR-datam,
		fw1SR-mdm,
		fw1enc-fwz-expiration,
		fw1sr-auth-track,
		fw1grouptemplate,
		fw1ISAKMP-EncMethod,
		fw1ISAKMP-AuthMethods,
		fw1ISAKMP-HashMethods,
		fw1ISAKMP-Transform,
		fw1ISAKMP-DataIntegrityMethod,
		fw1ISAKMP-SharedSecret,
		fw1ISAKMP-DataEncMethod,
		fw1enc-methods,
		fw1userPwdPolicy,
		fw1badPwdCount,
		fw1lastLoginFailure,
		memberoftemplate