Let TO be the object from which the allowedAttributes
attribute is being read.
The value of TO!allowedAttributes is the set of lDAPDisplayNames
read from each Object O where:
(O.dn is in the schema
and (there exists C in TO!objectClass such that O is in