<xsd:element name="activedirectory_state" substitutionGroup="oval-def:state">
<xsd:annotation>
<xsd:documentation>The activedirectory_state element defines the different information that can be used to evaluate the specified entries in active directory. An active directory test will reference a specific instance of this state that defines the exact settings that need to be evaluated. Please refer to the individual elements in the schema for more details about what each represents.</xsd:documentation>
</xsd:annotation>
<xsd:complexType>
<xsd:complexContent>
<xsd:extension base="oval-def:StateType">
<xsd:sequence>
<xsd:element name="naming_context" type="win-def:EntityStateNamingContextType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Each object in active directory exists under a certain naming context (also known as a partition). A naming context is defined as a single object in the Directory Information Tree (DIT) along with every object in the tree subordinate to it. There are three default naming contexts in Active Directory: domain, configuration, and schema.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="adstenaming_context" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:activedirectory_state/win-def:naming_context">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the naming_context entity of an activedirectory_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="relative_dn" type="oval-def:EntityStateStringType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>The relative_dn field is used to uniquely identify an object inside the specified naming context. It contains all the parts of the objects distinguished name except those outlined by the naming context.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="adsterelative_dn" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:activedirectory_state/win-def:relative_dn">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the relative_dn entity of an activedirectory_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="attribute" type="oval-def:EntityStateStringType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Specifies a named value contained by the object.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="adsteattribute" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:activedirectory_state/win-def:attribute">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the attribute entity of an activedirectory_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="object_class" type="oval-def:EntityStateStringType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>The name of the class of which the object is an instance.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="adsteobject_class" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:activedirectory_state/win-def:object_class">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the object_class entity of an activedirectory_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="adstype" type="win-def:EntityStateAdstypeType" minOccurs="0">
<xsd:annotation>
<xsd:documentation>Specifies the type of information that the specified attribute represents.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="adsteadstype" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:activedirectory_state/win-def:adstype">
<sch:assert test="not(@datatype) or @datatype='string'">
<sch:value-of select="../@id" /> - datatype attribute for the adstype entity of an activedirectory_state should be 'string'</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
<xsd:element name="value" type="oval-def:EntityStateAnyType" minOccurs="0" maxOccurs="unbounded">
<xsd:annotation>
<xsd:documentation>The actual value of the specified active directory attribute.</xsd:documentation>
<xsd:appinfo>
<sch:pattern id="adstevalue" xmlns:sch="http://purl.oclc.org/dsdl/schematron">
<sch:rule context="win-def:activedirectory_state/win-def:value">
<sch:assert test="(@datatype='int' and (floor(.) = number(.))) or not(@datatype='int') or not(node())">
<sch:value-of select="../@id" /> - The datatype has been set to 'int' but the value is not an integer.</sch:assert>
</sch:rule>
</sch:pattern>
</xsd:appinfo>
</xsd:annotation>
</xsd:element>
</xsd:sequence>
</xsd:extension>
</xsd:complexContent>
</xsd:complexType>
</xsd:element>
|