Table of Contents
Advertisement
Placing Person Entries in the DIT
Here are some guidelines for placing people entries in your directory tree:
•
People in an enterprise should be located in the directory tree below the
organization's entry.
•
Subscribers to a hosting organization need to be below the
for the hosted organization.
Naming Group Entries
There are four main ways to represent a group:
•
A static group—The entry for this type of group uses the
groupOfUniqueNames
of the group. Static groups are suitable for groups with few members, such as
the group of directory administrators. Static groups are not suitable for groups
with thousands of members.
Static group entries must contain a
is a mandatory attribute of the
uniqueMember
This object class requires the
the group entry.
•
A member-based group—This type of group uses a
entry of each group member.
•
A dynamic group—This type of group uses an entry representing the group
with a search filter and subtree. Entries matching the filter are members of the
group.
•
A Directory Server role—Roles are a new feature of Directory Server that unify
the static and dynamic group concept. Refer to "About Roles," on page 71 for
more information.
In a deployment containing hosted organizations, we recommend using the
groupOfUniqueNames
groups used in directory administration. In a hosted organization, we also
recommend that group entries used for directory administration are located under
the
branch.
ou=Groups
Naming Organization Entries
The organization entry name, like other entry names, must be unique. Using the
legal name of the organization along with other attribute values helps ensure the
name is unique. For example, you might name an organization entry as follows:
object class, which contains values naming the members
uniqueMember
attribute, which can be used to form the DN of
cn
object class to contain the values naming the members of
Designing Your Directory Tree
ou=people
groupOfNames
attribute value, because
groupOfUniqueNames
attribute in the
memberOf
Chapter 4
Designing the Directory Tree
branch
or
object.
69
Advertisement
Table of Contents
