Specifying Directory Entries Using Ldif; Specifying Domain Entries - Red Hat DIRECTORY SERVER 8.0 - ADMINISTRATION Administration Manual

Appendix A. LDAP Data Interchange Format
A.4. Specifying Directory Entries Using LDIF
Many types of entries can be stored in the directory. This section concentrates on three of the most
common types of entries used in a directory: domain, organizational unit, and organizational person
entries.
The object classes defined for an entry are what indicate whether the entry represents a domain or
domain component, an organizational unit, an organizational person, or some other type of entry.
A.4.1. Specifying Domain Entries
Directories often have at least one domain entry. Typically this is the first, or topmost, entry in the
directory. The domain entry often corresponds to the DNS host and domain name for your directory.
For example, if the Directory Server host is called ldap.example.com, then the domain entry for the
directory is probably named dc=ldap,dc=example,dc=com or simply dc=example,dc=com.
The LDIF entry used to define a domain appears as follows:
dn: distinguished_name
objectClass: top
objectClass: domain
dc: domain_component_name
list_of_optional_attributes
...
The following is a sample domain entry in LDIF format:
dn: dc=example,dc=com
objectclass: top
objectclass: domain
dc: example
description: Fictional example company
Each element of the LDIF-formatted domain entry is defined in
Entries".
LDIF Element
dn: distinguished_name
objectClass: top
objectClass: domain
dc: domain_component
470
Table A.2, "LDIF Elements in Domain
Description
Required. Specifies the distinguished name for
the entry.
Required. Specifies the top object class.
Specifies the domain object class. This line
defines the entry as a domain or domain
component.
Attribute that specifies the domain's name. The
server is typically configured during the initial
setup to have a suffix or naming context in the
form dc=hostname,dc=domain,dc=toplevel.
For example, dc=ldap,dc=example,dc=com.
The domain entry should use the leftmost dc
value, such as dc: ldap. If the suffix were
dc=example,dc=com, the dc value is dc:
example. Do not create the entry for dn: