Naming Organization Entries; Naming Other Kinds Of Entries - Red Hat DIRECTORY SERVER 7.1 - DEPLOYMENT Deployment Manual

Designing Your Directory Tree
• A Directory Server role—Roles unify the static and dynamic group concept.
Refer to "About Roles," on page 75, for more information.
In a deployment containing hosted organizations, we recommend using the
groupOfUniqueNames
groups used in directory administration. In a hosted organization, we also
recommend that group entries used for directory administration be located under
the
ou=Groups

Naming Organization Entries

The organization entry name, like other entry names, must be unique. Using the
legal name of the organization along with other attribute values helps ensure the
name is unique. For example, you might name an organization entry as follows:
o=example_a+st=Washington,o=ISP,c=US
You can also use trademarks; however, they are not guaranteed to be unique.
In a hosting environment, you need to include the following attributes in the
organization's entry:
•
o (organizationName)
•
objectClass

Naming Other Kinds of Entries

Your directory will contain entries that represent many things, such as localities,
states, countries, devices, servers, network information, and other kinds of data.
For these types of entries, use the
possible. Then, if you are naming a group entry, name it as follows:
cn=administrators,dc=example,dc=com
However, sometimes you need to name an entry whose object class does not
support the
the entry's object class.
There does not have to be any correspondence between the attributes used for the
entry's DN and the attributes actually used in the entry. However, a
correspondence between the DN attributes and attributes used by the entry
simplifies administration of your directory tree.
74 Red Hat Directory Server Deployment Guide • May 2005
object class to contain the values naming the members of
branch.
with values of
attribute. Instead, use an attribute that is supported by
commonName
, , and
top organization
attribute in the RDN if
commonName (cn)
nsManagedDomain