Table of Contents
Advertisement
Naming Entries
After designing the hierarchy of your directory tree, you need to decide which
attributes to use when naming the entries within the structure. Generally, names
are created by choosing one or more of the attribute values to form a relative
distinguished name (RDN). The RDN is the left-most DN attribute value. The
attributes you use depend on the type of entry you are naming.
Your entry names should adhere to the following rules:
•
The attribute you select for naming should be unlikely to change.
•
The name must be unique across your directory.
A unique name ensures that a DN can refer to at most one entry in your
directory.
When creating entries, define the RDN within the entry. By defining at least the
RDN within the entry, you can locate the entry more easily. This is because
searches are not performed against the actual DN but rather the attribute values
stored in the entry itself.
Attribute names have a meaning, so try to use the attribute name that matches the
type of entry it represents. For example, do not use
organization, or
(
c
country
The following sections provide tips on naming entries:
•
Naming Person Entries
•
Naming Group Entries
•
Naming Organization Entries
•
Naming Other Kinds of Entries
Naming Person Entries
The person entry's name, the DN, must be unique. Traditionally, distinguished
names use the
commonName
entry for a person named Babs Jensen might have the distinguished name of:
cn=Babs Jensen,dc=example,dc=com
While allowing you to instantly recognize the person associated with the entry, it
might not be unique in an include people with identical names. This quickly leads
to a problem known as DN name collisions, multiple entries with the same
distinguished name.
) to represent an organizational unit.
, or
, attribute to name their person entries. That is, an
cn
Designing Your Directory Tree
(
) to represent an
l
locality
Chapter 4
Designing the Directory Tree
67
Advertisement
Table of Contents
