Red Hat DIRECTORY SERVER 8.1 - DEPLOYMENT Deployment Manual page 162

Chapter 9. Directory Design Examples
Figure 9.14. Multi-Master Replication Design for Example Corp. Europe and Example Corp. US
The same relationship exists between Example Corp. US and Example Corp. Asia, and between
Example Corp. Europe and Example Corp. Asia.
9.2.6. Multinational Enterprise Security Design
Example Corp. International builds upon its previous security design, adding the following access
controls to support its new multinational intranet:
• Example Corp. adds general ACIs to the root of the intranet, creating more restrictive ACIs in each
country and the branches beneath each country.
• Example Corp. decides to use macro ACIs to minimize the number of ACIs in the directory.
Example Corp. uses a macro to represent a DN in the target or bind rule portion of the ACI. When
the directory gets an incoming LDAP operation, the ACI macros are matched against the resource
targeted by the LDAP operation. If there is a match, the macro is replaced by the value of the DN of
the targeted resource.
152