---
title: ldapSubEntry
description: LDAP subentries are analogous to operational attributes in that they are used by the server for administrative purposes. Examples include password policies, entries for allocating collective attributes, and the entry exposing directory schema.
component: pingds
version: 7.4
page_id: pingds:schemaref:oc-ldapSubEntry
canonical_url: https://docs.pingidentity.com/pingds/8.1/schemaref/oc-ldapSubEntry.html
llms_txt: https://docs.pingidentity.com/pingds/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
superseded_by: https://docs.pingidentity.com/pingds/8.1/schemaref/oc-ldapSubEntry.html
---

# ldapSubEntry

LDAP subentries are analogous to operational attributes in that they are used by the server for administrative purposes. Examples include password policies, entries for allocating collective attributes, and the entry exposing directory schema.

Unlike entries in the server-specific configuration backend, Subentries are present in and replicated with user data. Modifying subentries nevertheless requires the `subentry-write` administrative privilege.

For details, see the Internet-Draft, [*LDAP Subentry Schema*](https://datatracker.ietf.org/doc/html/draft-ietf-ldup-subentry) .

|                       |                                                                                                                      |
| --------------------- | -------------------------------------------------------------------------------------------------------------------- |
| *Names*               | ldapSubEntry                                                                                                         |
| *Origin*              | [draft-ietf-ldup-subentry](https://datatracker.ietf.org/doc/html/draft-ietf-ldup-subentry)                           |
| *Description*         | LDAP Subentry class, version 1                                                                                       |
| *Optional attributes* | [cn](at-cn.html)                                                                                                     |
| *Superior classes*    | [top](oc-top.html)                                                                                                   |
| *OID*                 | 2.16.840.1.113719.2.142.6.1.1                                                                                        |
| *Required attributes* | [objectClass](at-objectClass.html)                                                                                   |
| *Schema file*         | 00-core.ldif                                                                                                         |
| *Class type*          | STRUCTURAL: for structural specification of the DIT. Entries have only one structural object class superclass chain. |