WPC  2%.Bpz W"S^11>bbu"::Dg1:11bbbbbbbbbb11gggbuuuk1Xubuukuuuk111Rb:bbXbb1bb''X'bbbb:X1bXXXX;.;g:=::m:::mmmmm::::::mm:k1mubububububXubububub11111111bbbbbbbbbuXubbkbuXmmmmumububXXXXbububububbmbbbbbb:k:k::=kmmX:uXb'b:b:b:b'bmbbbb:::uXuXuXuXk:k:k:mbbbmbuXkXkXKQmmmm^b:kbbbbmbA@mmbmmbmmmmmmm:b:mmmbbmmmmmmmmmmmmXXmmmmmmmmmmmmmmmmmmcm`m`mm`m:mmmmmm}}}mjjmmmmmmmmmmmmmmm0mm}mmmmmmmmmmmmmmmmmmmmmmm}Mmmmmmmmmmmmmjmmmtmmmmmmmmm`'mmm`mmjmlWmmmmmmmmmmmmmmmmmmmW`mmmmjmM#|OaHelveticaCourierCourier Bold4PkCQMS PS Jet Plus /800 II QPJPII.PRSPl`D4PkCg2W _a.s|x-HelveticaCourierHelveticaCourierCourier BoldHelvetica BoldmQrrr r  @C2M.IzPw@ ,`H1`D4PkCmQrrr r  @CmQrrrr  `C"S^1:Sbb1::Dg1:11bbbbbbbbbb::gggkuk1bkuukuuuk:1:gb1bkbkb:kk11b1kkkkDb:kbbbXD1Dg:=::r:::rrrrr::::::rr:k1rbbbbbbubububub11111111kkkkkkkkkubbkkkubrrrrrbbbbbbkububububkrkkkkkk:k:k::=krrb:bk1k:k:k:k1krkkkkDDDububububk:k:k:rkkkrkubkXkXKQrrrrbb:kbbbbrbA@rrbrrbrrrrrrrXb::rrbbrrrrrrrrrrrrkkrrrrrrrrrrrrrrrrrrcr`r`rr`r:rrrrrr}}}rjjrrrrrrrrrrrrrrr0rr}rrrrrrrrrrrrrrrrrrrrrrr}Mrrrrrrrrrrrrjrrrtrrrrrrrrr`'rrr`rrjrlWrrrrrrrrrrrrrrrrrrrW`rrrrjrM@ ,`H1`D4PkCmQrrr r  @CmQrrrr  `C@,dK1dD4p}wC2. ' x "S^"55U@ %8 55555555558885a@@EE@;KE0@5PEK@KE@;E@[@@;-5 55055550P5555 050E000  8 " m mmmmm mm ;m@5@5@5@5@5`UE0@5@5@5@5E5K5K5K5K5E5E5E5E5@0@5E5K;K5@0mmmmmm@5@5E0E0E0E0E5@5@5@5@5K5mmK5K5K5K5E5E5 ; ; ";mm0 @055 5 5 5E5mmE5E5K5K5`[E E E @0@0@0@0; ; ; mmE5E5E5mmE5[E@0;0;0K,mmmm45 ;5555m5$#mm5mmLL5mmmmmmm 5` mmm55Ummmmmmmmmmmm00`mmmmmmmmmmmmmmmmmm`cm5m5mm5m mmmmmJmDDDm::mdmmmmmmmmmmmmmmmmDmmmmmmmmmmmm__mmdmmmmmmmmmD*Ommmmmmmmmmmm:mmm?mmmmmmmmm5'mmm5mm:m;/mmmmmmmmmmmmmmmmmmm/H5Jmmmm:m*@ ,`H1`D4PkCmQrrr r  @CmQrrrr  `C@,dK1dD4p}wC@H4': 4D4PkC  X` hp x (#%'( ,x-    3'3'Standard6'6'StandardC6QMS $=R- :$  x|@  Fascicle VIII.8 Rec. X.511 y:&  x|@   Fascicle VIII.8 Rec. X.511 y   k) ( outOfScope : No referrals were available within the requested scope;   l)X ( ditError : The Directory is unable to accomplish the request due to a DIT consistency problem.'( 12.9 Update Error 12.9.1   An UpdateError reports problems related to attempts to add, delete, or modify information in the DIB.  UpdateError ::= ABSTRACTERROR  ( PARAMETER SET {  (  problem [0] UpdateProblem }  UpdateProblem ::= INTEGER {  ( namingViolation (1),  ( objectClassViolation (2),  ( notAllowedOnNonLeaf (3),  ( notAllowedOnRDN (4),  ( entryAlreadyExists (5),  ( affectsMultipleDSAs (6),  ( objectClassModificationProhibited (7) } 12.9.2   The error has a single problem parameter, which reports the particular problem encountered. The following problems may be indicated:   a)X ( namingViolation : The attempted addition or modification would violate the structure rules of the DIT as defined in the Directory schema and RecommendationX.501. That is, it would place an entry as the subordinate of an alias entry, or in a region of the DIT not permitted to a member of its object class or would define an RDN for an entry to include a forbidden attribute type; '(   b)( ( objectClassViolation : The attempted update would produce an entry inconsistent with the definition provided by its object class or with the definitions of Recommendation X.501 as they pertain to object classes;'(   c) ( notAllowedOnNonLeaf : The attempted operation is only allowed on leaf entries of the DIT;   d)( ( notAllowedOnRDN : The attempted operation would affect the RDN (e.g. removal of an attribute which is a part of the RDN);'(   e) ( entryAlreadyExists : An attempted AddEntry operation names an entry which already exists;   f)( ( affectsMultipleDSAs : An attempted update would need to operate on multiple DSAs, which is not permitted;'(   g)( ( objectClassModificationProhibited : An operation attempted to modify the object class attribute.'(   Note The UpdateError is not used to report problems with attribute types, values or constraint violations encountered in an AddEntry , RemoveEntry , ModifyEntry or ModifyRDN operation. Such problems are reported via an AttributeError . @ @ @ =ANNEX A @ 4(to Recommendation X.511) @ @ 4 Abstract service in ASN.1 ă  This Annex is part of the standard.   This Annex includes all of the ASN.1 type, value and macro definitions contained in this Recommendation in the form of the ASN.1 module DirectoryAbstractService .  ( ,x-(p 0 ,x- DirectoryAbstractService {jointISOCCITT ds(5) modules(1) directoryAbstractService(2)} '  DEFINITIONS ::=  BEGIN (p 0 ,x-p 0 ,x- EXPORTS   directory, readPort, searchPort, modifyPort,   DirectoryBind, DirectoryBindArgument,   DirectoryUnbind,   Read, ReadArgument, ReadResult,   Abandon, AbandonArgument, AbandonResult,   Compare, CompareArgument, CompareResult,   List, ListArgument, ListResult,   Search, SearchArgument, SearchResult,   AddEntry, AddEntryArgument, AddEntryResult,  x0Ԍ  RemoveEntry, RemoveEntryArgument, RemoveEntryResult,   ModifyEntry, ModifyEntryArgument, ModifyEntryResult,   ModifyRDN, ModifyRDNArgument, ModifyRDNResult,   Abandoned, AbandonFailed, AttributeError, NameError,   Referral, SecurityError, ServiceError, UpdateError,   SecurityParameters;  IMPORTS   informationFramework, authenticationFramework,  p distributedOperations, directoryObjectIdentifiers   FROM UsefulDefinitions {jointisoccitt ds(5) modules(1)  p 0 ''< usefulDefinitions(0)}  OBJECT, PORT, ABSTRACTBIND, ABSTRACTUNBIND,  ABSTRACTOPERATION, ABSTRACTERROR   FROM AbstractServiceNotation {jointisoccitt mhsmotis(6)   p 0 ''<<D asdc(2) modules(0) notation(1) }  Attribute, AttributeType, AttributeValue, AttributeValueAssertion,  DistinguishedName, Name, RelativeDistinguishedName   FROM InformationFramework InformationFramework  idotdirectory, idotdua, idptread, idptsearch, idptmodify   FROM DirectoryObjectIdentifiers directoryObjectIdentifiers  ContinuationReference, OperationProgress   FROM DistributedOperations distributedOperations  Certificate, CertificationPath, SIGNED,  PROTECTED, AlgorithmIdentifier   FROM AuthenticationFramework authenticationFramework  InvokeID, p 0 ,x-p 0 ,x-  FROM RemoteOperationsNotation {jointisoccitt   p 0 ''<<DDJ remoteOperations(4) notation(0)}; p 0 ,x-p 0 ,x- é macro for representing optional signing é  OPTIONALLYSIGNED MACRO ::=  BEGIN   TYPE NOTATION ::= type (Type)   VALUE NOTATION ::= value (VALUE CHOICE { Type, SIGNED Type})  END  é objects and ports é  directory   OBJECT   PORTS { !0 ' readPort [S].  p 0 ' searchPort [S],  p 0 ' modifyPort [S]}  ::= idotdirectory  dua   OBJECT  p PORTS { readPort [C],  p  searchPort [C]  p  modifyPort [C]}  ::= idotdua  readPort   PORT  p CONSUMER INVOKES {  p 0 ' Read, Compare, Abandon}  ::= idptread  searchPort   PORT  p CONSUMER INVOKES {  p 0 ' List, Search }  ::= idptsearch  modifyPort   PORT  p CONSUMER INVOKES {  p 0 ' AddEntry, RemoveEntry,  0Ԍ p 0 ' ModifyEntry, ModifyRDN}  ::= idptmodify  é bind and unbind é  DirectoryBind ::=  ABSTRACTBIND   TO { readPort, searchPort, modifyPort }   BIND   ARGUMENT  0 ' DirectoryBindArgument   RESULT p  DirectoryBindResult   BINDERROR 0 ' DirectoryBindError  DirectoryBindArgument ::= SET {   credentials   [0] Credentials OPTIONAL,   versions   [1] Versions DEFAULT v1988}  Credentials ::= p CHOICE {   simple p [0] SimpleCredentials,   strong p [1] StrongCredentials,   externalProcedure [2] EXTERNAL }  SimpleCredentials ::= SEQUENCE {   name p  [0] DistinguishedName,   validity [1] SET { p 0 ,x-p 0 ,x-  time1   " [0] UTCTime OPTIONAL,   time2   " [1] UTCTime OPTIONAL,   random1  " [2] BIT STRING OPTIONAL,   random2  " [3] BIT STRING OPTIONAL }  p ! " OPTIONAL,   password [2] OCTET STRING OPTIONAL }  StrongCredentials ::= SET { p 0 ,x-p 0 ,x-  certificationpath $0 ' [0] CertificationPath OPTIONAL,   bindtoken   ""0 '' * [1] Token } p 0 ,x-p 0 ,x- Token ::= SIGNED SEQUENCE {   algorithm  [0]   AlgorithmIdentifier   name   [1] #0 ' DistinguishedName,   time  [2] " UTCTime,   random   [3] #0 ' BIT STRING } p 0 ,x-p 0 ,x- Versions ::= BIT STRING (v1988(0)}  DirectoryBindResult   ::= DirectoryBindArgument  DirectoryBindError ::= SET {   versions [0] Versions DEFAULT v1988,   CHOICE { p 0 ,x-p 0 ,x-  serviceError "0 ' [1] * , ServiceProblem,   securityError #0 ' [2] * , SecurityProblem }} p 0 ,x-p 0 ,x- DirectoryUnbind ::= ABSTRACTUNBIND   FROM {readPort, searchPort, modifyPort }  é operations, arguments, and results é  Read ::= ABSTRACTOPERATION   ARGUMENT  0 ' ReadArgument   RESULT p  ReadResult   ERRORS {  p AttributeError, NameError,  p ServiceError, Referral, Abandoned,  p SecurityError }  ReadArgument ::= OPTIONALLYSIGNED SET {   object p  [0] Name,   selection  [1] EntryInformationSelection p 0 ,x-p 0 ,x- p 0 ''6 DEFAULT {}, p 0 ,x-p 0 ,x-  COMPONENTS OF CommonArguments }  ReadResult ::= OPTIONALLYSIGNED SET {   entry [0] EntryInformation,   COMPONENTS OF CommonResults }  Compare ::= ABSTRACTOPERATION   ARGUMENT  0 ' CompareArgument   RESULT p  CompareResult  x0Ԍ  ERRORS {  p AttributeError, NameError,  p ServiceError, Referral, Abandoned,  p SecurityError }  CompareArgument ::= OPTIONALLYSIGNED SET {   object p 0 ' [0] Name,   purported  [1] AttributeValueAssertion,   COMPONENTS OF CommonArguments }  CompareResult ::= OPTIONALLYSIGNED SET {   DistinguishedName OPTIONAL,   matched  [0] BOOLEAN,   fromEntry [1] BOOLEAN DEFAULT TRUE,   COMPONENTS OF CommonResults }  Abandon ::= ABSTRACTOPERATION   ARGUMENT AbandonArgument   RESULT p AbandonResult   ERRORS {AbandonFailed}  AbandonArgument ::= SEQUENCE {   InvokeID [0] InvokeID}  AbandonResult ::=   NULL  List ::= ABSTRACTOPERATION   ARGUMENT  0 ' ListArgument   RESULT p  ListResult   ERRORS {  p AttributeError, NameError,  p ServiceError, Referral, Abandoned,  p SecurityError }  ListArgument ::= OPTIONALLYSIGNED SET {   object [0] Name,   COMPONENTS OF CommonArguments }  ListResult  ::= OPTIONALLYSIGNED CHOICE{   listInfo SET {   DistinguishedName OPTIONAL   subordinates [1] SET OF SEQUENCE {  p RelativeDistinguishedName, p 0 ,x-p 0 ,x- p aliasEntry %0 ' [0] BOOLEAN DEFAULT FALSE,  p fromEntry $0 ' [1] BOOLEAN DEFAULT TRUE }, p 0 ,x-p 0 ,x- p partialOutcomeQualifier [2] PartialOutcomeQualifier 0 ' OPTIONAL,  p COMPONENTS OF CommonResults},   uncorrelatedListInfo [0] SET OF  p ListResult }  PartialOutcomeQualifier ::= SET {   limitProblem   [0] LimitProblem OPTIONAL,   unexplored   [1] SET OF  p ContinuationReference OPTIONAL,   unavailableCriticalExtensions [2] BOOLEAN DEFAULT FALSE }  LimitProblem ::= INTEGER { p 0 ,x-p 0 ,x-  timeLimitExceeded #0 ' (0),   sizeLimitExceeded #0 ' (1), p 0 ,x-p 0 ,x-  administrativeLimitExceeded (2) }  Search ::= ABSTRACTOPERATION   ARGUMENT  0 ' SearchArgument   RESULT p  SearchResult   ERRORS {  p AttributeError, NameError,  p ServiceError, Referral, Abandoned,  p SecurityError }  SearchArgument ::=   OPTIONALLYSIGNED SET {   baseObject   [0] Name,   subset p  [1] INTEGER {  p baseObject(0),  p oneLevel(1),  p wholeSubtree(2)} DEFAULT baseObject,   filter p [2] Filter DEFAULT and {},  0Ԍ  searchAliases 0 ' [3] BOOLEAN DEFAULT TRUE,   selection  [4] EntryInformationSelection DEFAULT {},   COMPONENTS OF CommonArguments }  SearchResult ::=  OPTIONALLYSIGNED   CHOICE {   searchInfo SET {   DistinguishedName OPTIONAL,   entries [0] SET OF EntryInformation,   partialOutcomeQualifier   [2] partialOutcomeQualifier OPTIONAL,  COMPONENTS OF CommonResults },   uncorrelatedSearchInfo [0] SET OF  p SearchResult }  AddEntry ::= ABSTRACTOPERATION   ARGUMENT  0 ' AddEntryArgument   RESULT p  AddEntryResult   ERRORS {  p AttributeError, NameError,  p ServiceError, Referral, SecurityError  p UpdateError }  AddEntryArgument ::= OPTIONALLYSIGNED SET {  p object !0 ' [0] DistinguishedName,  p entry 0 ' [1] SET OF Attribute,  p COMPONENTS OF CommonArguments}  AddEntryResult Ġ ::=   NULL  RemoveEntry ::= ABSTRACTOPERATION   ARGUMENT  0 ' RemoveEntryArgument   RESULT p  RemoveEntryResult   ERRORS {  p NameError,  p ServiceError, Referral, SecurityError,  p UpdateError}  RemoveEntryArgument ::= OPTIONALLYSIGNED SET {  p object !0 ' [0] DistinguishedName,  p COMPONENTS OF CommonArguments }  RemoveEntryResult ::= NULL  ModifyEntry ::= ABSTRACTOPERATION   ARGUMENT  0 ' ModifyEntryArgument   RESULT p  ModifyEntryResult   ERRORS {  p AttributeError, NameError,  p ServiceError, Referral, SecurityError,  p UpdateError}  ModifyEntryArgument ::= OPTIONALLYSIGNED SET {   object p [0]   DistinguishedName,   changes p [1]   SEQUENCE OF EntryModification,   COMPONENTS OF CommonArguments }  ModifyEntryResult ::= NULL  EntryModification ::= CHOICE { p 0 ,x-p 0 ,x-  addAttribute   0 ' [0] * , Attribute,   removeAttribute !0 ' [1] * , AttributeType,   addValues  0 ' [2] * , Attribute,   removeValues 0 '' , [3] /3 Attribute} p 0 ,x-p 0 ,x- ModifyRDN  ::= ABSTRACTOPERATION   ARGUMENT  0 ' ModifyRDNArgument   RESULT p  ModifyRDNResult   ERRORS  {  p NameError,  p ServiceError, Referral, SecurityError,  p UpdateError }  ModifyRDNArgument ::= OPTIONALLYSIGNED SET {   object p  [0] DistinguishedName,   newRDN  0 ' [1] RelativeDistinguishedName,   deleteoldRDN 0 ' [2] BOOLEAN DEFAULT FALSE,  /Ԍ  COMPONENTS OF CommonArguments }  ModifyRDNResult ::= NULL  é errors and parameters é  Abandoned ::= ABSTRACTERROR not literally an "error"  AbandonFailed ::= ABSTRACTERROR   PARAMETER SET {   problem Ġ [0] AbandonProblem,   operation Ġ [1] InvokeID}  AbandonProblem ::= 0 ' INTEGER {   noSuchOperation (1),   tooLate (2),   cannotAbandon (3)}  AttributeError ::=  ABSTRACTERROR   PARAMETER SET {   object   [0] Name,   problems 0 ' [1] SET OF SEQUENCE { p 0 ,x-p 0 h,x- p problem "0 ''/ [0] 2h5 AttributeProblem,  p type 0 ''/ [1] 2h5 AttributeType,  p value 0 ''/ [2] 2h5 AttributeValue OPTIONAL }} p 0 h,x-p 0 ,x- AttributeProblem ::=   INTEGER {   noSuchAttributeOrValue (1),   invalidAttributeSyntax (2),   undefinedAttributeType (3),   inappropriateMatching (4),   constraintViolation (5),   attributeOrValueAlreadyExists (6) }  NameError ::= ABSTRACTERROR   PARAMETER SET {  p problem [0] NameProblem,  p matched [1] Name}  NameProblem ::=  INTEGER {  p noSuchObject (1),  p aliasProblem (2),  p invalidAttributeSyntax (3),  p aliasDereferencingProblem (4)}  Referral ::= ABSTRACTERROR not literally an "error"   PARAMETER SET {  p candidate [0] ContinuationReference}  SecurityError ::=  ABSTRACTERROR   PARAMETER SET {   problem [0] SecurityProblem }  SecurityProblem ::= INTEGER {   inappropriateAuthentication (1),   invalidCredentials (2),   insufficientAccessRights (3),   invalidSignature (4),   protectionRequired (5),   noInformation (6) }  ServiceError ::= ABSTRACTERROR   PARAMETER SET {   problem [0] ServiceProblem }  ServiceProblem ::=   INTEGER {   busy (1),   unavailable (2),   unwillingToPerform (3),   chainingRequired (4),   unableToProceed (5),   invalidReference (6),   timeLimitExceeded (7),  x0Ԍ  administrativeLimitExceeded (8),   loopDetected (9),   unavailableCriticalExtension (10),   outOfScope (11),   ditError (12) }  UpdateError ::= ABSTRACTERROR   PARAMETER SET {  p problem [0] UpdateProblem }  UpdateProblem ::= INTEGER {   namingViolation (1),   objectClassViolation (2),   notAllowedOnNonLeaf (3),   notAllowedOnRDN (4),   entryAlreadyExists (5),   affectsMultipleDSAs (6),   objectClassModificationProhibited (7)}  é common arguments/results é  CommonArguments ::= SET {   [30] ServiceControls DEFAULT {}   [29] SecurityParameters DEFAULT {},   requestor [28] DistinguishedName OPTIONAL,   [27] OperationProgress DEFAULT notStarted,   aliasedRDNs [26] INTEGER OPTIONAL,   extensions [25] SET OF Extension OPTIONAL }  Extension ::= p SET {   identifier  [0] INTEGER,   critical p [1] BOOLEAN DEFAULT FALSE,   item p  [2] ANY DEFINED BY identifier }  CommonResults ::=   SET {   [30]  SecurityParameters OPTIONAL,   performer [29] DistinguishedName OPTIONAL,   aliasDereferenced [28] BOOLEAN DEFAULT FALSE}  é common data types é  ServiceControls ::= SET {   options [0]   BIT STRING {   preferChaining (0),   chainingProhibited (1),   localScope (2),   dontUseCopy (3),   dontDereferenceAliases(4)}  p DEFAULT{},   priority [1] INTEGER {   low (0),   medium (1),   high (2) } DEFAULT medium,  timeLimit  [2] p INTEGER OPTIONAL,  sizeLimit  [3] p INTEGER OPTIONAL,  scopeOfReferral [4]   INTEGER {  p dmd(0), "0 ' (<<DDaaaaa country(1)}  p OPTIONAL }  EntryInformationSelection ::= SET {   attributeTypes   CHOICE {  p  allAttributes [0] NULL,  p  select [1] SET OF AttributeType  p  é empty set implies no attributes  p  é are requested é}   DEFAULT allAttributes NULL,   infoTypes [2] INTEGER {  p attributeTypesOnly (0),  p attributeTypesAndValues (1) } DEFAULT  /Ԍ  p  attributeTypesandValues }  EntryInformation ::= SEQUENCE {   DistinguishedName,   fromEntry BOOLEAN DEFAULT TRUE,   SET OF CHOICE {  p AttributeType,  p Attribute} OPTIONAL }  Filter ::=  CHOICE {   item  [0] p FilterItem,   and  [1] p SET OF Filter,   or p [2]   SET OF Filter,   not  [3] p Filter }  FilterItem  ::= CHOICE {   equality p [0] AttributeValueAssertion,   substrings   [1] SEQUENCE {   type   AttributeType,   strings   SEQUENCE OF CHOICE { p 0 ,x-p 0 x,x- p initial #0 ' [0] * * AttributeValue,  p any 0 '' * [1] -x2 AttributeValue,  p final !0 '' * [2] -x2 AttributeValue}},   greaterOrEqual [2] $0 ' AttributeValueAssertion,  p lessOrEqual & * [3] -x2 AttributeValueAssertion,  p present ' * [4] -x2 AttributeType,   approximateMatch $ * [5] -x2 AttributeValueAssertion }  SecurityParameters ::= SET {   certificationPath [0] CertificationPath OPTIONAL,   name p [1]   DistinguishedName OPTIONAL,   time p [2]   UTCTime OPTIONAL,   random p [3]   BIT STRING OPTIONAL,   target p [4]   ProtectionRequest OPTIONAL }  ProtectionRequest ::= INTEGER {  p  0 ' none(0),  p  0 ' signed (1)} p 0 x,x-( ,x- =ANNEX B @ 4(to Recommendation X.511) @ 2 Directory object identifiers ă  This Annex is part of the standard.   This Annex includes all of the ASN.1 object identifiers contained in this Recommendation in the form of the ASN.1 module " DirectoryObjectIdentifiers ". ( ,x-( x,x- DirectoryObjectIdentifiers {jointISOCCITT ds(5) modules(1)   (  %%x223 directoryObjectIdentifiers(9)}  DEFINITIONS ::=  BEGIN  EXPORTS  ( idotdirectory, idotdua, idptread, idptsearch, idptmodify;  IMPORTS  ( idot, idpt  FROM UsefulDefinitions {jointisoccitt ds(5) modules(1),  (  %%x2 usefulDefinitions(0)}; i:: X x|@   Fascicle VIII.8 Rec. X.518 i X  é Objects é ( x,x-( x,x- idotdirectory  OBJECT IDENTIFIER )x2 ::= 6B {idot 1}  idotdua   % OBJECT IDENTIFIER 6B ::= FJ {idot 2}  p/Ԍ  é Port Types é  idptread   OBJECT IDENTIFIER 0B ::= FJ {idpt 1}  idptsearch   OBJECT IDENTIFIER 0B ::= FJ {idpt 2}  idptmodify   OBJECT IDENTIFIER 0B ::= FJ {idpt 3}  END