From Free IPA

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaContainer' 
   SUP nsContainer 
   STRUCTURAL
   MAY description
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaPolicyType' 
   DESC 'Type of the policy' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaSchemaFile' 
   DESC 'Name of the file with schema definition' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaTrasformFile' 
   DESC 'Name of the policy transformation file' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   X-ORIGIN 'IPA v2' )

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaPolicyTemplate' 
   SUP top 
   STRUCTURAL
   MUST ( cn $ ipaUniqueID $ ipaPolicyType $ ipaSchemaFile )
   MAY ( ipaTrasformFile $ description )
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaOrderedUUIDList' 
   DESC 'Defines order of the entities within some sort of ordered group' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD  
   NAME 'ipaLastChangeBy' 
   DESC 'DN of the user who caused the configuration change' 
   SUP owner
   EQUALITY distinguishedNameMatch 
   ORDERING distinguishedNameMatch 
   SUBSTR distinguishedNameMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 
   X-ORIGIN 'IPA v2' )
 
 attributeType ( 2.16.840.1.113730.3.8.3.TBD  
   NAME 'ipaLastChanged' 
   DESC 'Last time there was some change to the data'
   EQUALITY generalizedTimeMatch 
   ORDERING generalizedTimeOrderingMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 
   SINGLE-VALUE 
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD  
   NAME 'ipaAllowedTemplateRef' 
   DESC 'DN of the allowed policy template' 
   SUP distinguishedName
   EQUALITY distinguishedNameMatch 
   ORDERING distinguishedNameMatch 
   SUBSTR distinguishedNameMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 
   X-ORIGIN 'IPA v2' )

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaOrderedContainer' 
   SUP ipaContainer 
   STRUCTURAL
   MAY ( ipaOrderedUUIDList $ ipaLastChangeBy $ ipaLastChanged )
   X-ORIGIN 'IPA v2' )

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaPolicyGroup' 
   SUP ipaOrderedContainer 
   STRUCTURAL
   MUST ( ipaUniqueID $ ipaEnabledFlag )
   MAY ipaAllowedTemplateRef 
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD  
   NAME 'ipaTemplateRef' 
   DESC 'DN of the allowed policy template'
   SUP distinguishedName
   EQUALITY distinguishedNameMatch 
   ORDERING distinguishedNameMatch 
   SUBSTR distinguishedNameMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 
   SINGLE-VALUE 
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaPolicyBlob'
   DESC 'Compressed XML policy data in binary format'
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.5
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaPolicyState' 
   DESC 'State of the policy data' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   SINGLE-VALUE
   X-ORIGIN 'IPA v2' )

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaPolicy' 
   SUP ipaContainer 
   STRUCTURAL
   MUST ( ipaUniqueID $ ipaEnabledFlag $ ipaTemplateRef )
   MAY ( ipaLastChangeBy $ ipaLastChanged )  
   X-ORIGIN 'IPA v2' )

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaPolicyData' 
   SUP top 
   STRUCTURAL
   MUST ( ipaUniqueID $ cn $ ipaPolicyState $ ipaLastChangeBy $ ipaLastChanged )
   MAY ( ipaPolicyBlob $ description ) 
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD  
   NAME 'ipaPolicyGroupRef' 
   DESC 'DN of the member policy group reference' 
   SUP distinguishedName
   EQUALITY distinguishedNameMatch 
   ORDERING distinguishedNameMatch 
   SUBSTR distinguishedNameMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 
   X-ORIGIN 'IPA v2' )

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaPolicyLink' 
   SUP ipaAssociation 
   STRUCTURAL
   MAY ( ipaPolicyGroupRef $ owner ) 
   X-ORIGIN 'IPA v2' )

attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaRoleType' 
   DESC 'Type of the role' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   X-ORIGIN 'IPA v2')

attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaRoleOrder' 
   DESC 'List of possible roles in priority order' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   X-ORIGIN 'IPA v2')

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaRelationsContainer' 
   SUP ipaContainer 
   STRUCTURAL
   MUST ( ipaRoleType $ ipaRoleOrder ) 
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD  
   NAME 'ipaRoleRef' 
   DESC 'DN of the role definition policy' 
   SUP distinguishedName
   EQUALITY distinguishedNameMatch 
   ORDERING distinguishedNameMatch 
   SUBSTR distinguishedNameMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 
   X-ORIGIN 'IPA v2' )

 attributeType ( 2.16.840.1.113730.3.8.3.TBD
   NAME 'ipaRoleName' 
   DESC 'Name of the role' 
   EQUALITY caseIgnoreMatch 
   ORDERING caseIgnoreMatch 
   SUBSTR caseIgnoreSubstringsMatch 
   SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
   X-ORIGIN 'IPA v2' )

objectclass ( 2.16.840.1.113730.3.8.4.TBD
   NAME 'ipaRelation' 
   SUP ipaAssociation 
   STRUCTURAL
   MUST ( ipaRoleRef $ ipaRoleName ) 
   X-ORIGIN 'IPA v2' )