Choosing A Suffix; Suffix Naming Conventions; Naming Multiple Suffixes - Red Hat DIRECTORY SERVER 8.1 - DEPLOYMENT Deployment Manual

Chapter 4. Designing the Directory Tree

4.2.1. Choosing a Suffix

The suffix is the name of the entry at the root of the directory tree, and the directory data are stored
beneath it. The directory can contain more than one suffix. It is possible to use multiple suffixes if there
are two or more directory trees of information that do not have a natural common root.
By default, the standard Directory Server deployment contains multiple suffixes, one for storing data
and the others for data needed by internal directory operations (such as configuration information and
the directory schema). For more information on these standard directory suffixes, refer to the Red Hat
Directory Server Administrator's Guide.

4.2.1.1. Suffix Naming Conventions

All entries in the directory should be located below a common base entry, the root suffix. When
choosing a name for the root directory suffix, consider the following:
• Globally unique.
• Static, so it rarely, if ever, changes.
• Short, so that entries beneath it are easier to read on screen.
• Easy for a person to type and remember.
In a single enterprise environment, choose a directory suffix that aligns with a DNS name or
Internet domain name of the enterprise. For example, if the enterprise owns the domain name of
example.com, then the directory suffix is logically dc=example, dc=com.
The dc attribute represents the suffix by breaking the domain name into its component parts.
Normally, any attribute can be used to name the root suffix. However, for a hosting organization, we
recommend that the root suffix contain only the following attributes:
• dc defines an component of the domain name.
• c contains the two-digit code representing the country name, as defined by ISO.
• l identifies the county, city, or other geographical area where the entry is located or that is
associated with the entry.
• st identifies the state or province where the entry resides.
• o identifies the name of the organization to which the entry belongs.
The presence of these attributes allows for interoperability with subscriber applications. For example,
a hosting organization might use these attributes to create a root suffix for one of its clients,
example_a, such as o=example_a, st=Washington,c=US.
Using an organization name followed by a country designation is typical of the X.500 naming
convention for suffixes.

4.2.1.2. Naming Multiple Suffixes

Each suffix used with the directory is a unique directory tree. There are several ways to include
multiple trees in the directory service. The first is to create multiple directory trees stored in separate
databases served by Directory Server.
34