Table of Contents
Advertisement
Designing Your Directory Tree
Table 4-1
Attribute Name
c
o
ou
st
l
dc
NOTE
Replication Considerations
During directory tree design, consider which entries you are replicating. A
natural way to describe a set of entries to be replicated is to specify the
distinguished name (DN) at the top of a subtree and replicate all entries below it.
This subtree also corresponds to a database, a directory partition containing a
portion of the directory data.
64
Netscape Directory Server Deployment Guide • October 2004
Traditional DN Branch Point Attributes
Definition
A country name.
An organization name. This attribute is typically used to
represent a large divisional branching such as a corporate
division, academic discipline (the humanities, the sciences),
subsidiary, or other major branching within the enterprise. You
should also use this attribute to represent a domain name as
discussed in "Suffix Naming Conventions," on page 59.
An organizational unit. This attribute is typically used to
represent a smaller divisional branching of your enterprise than
an organization. Organizational units are generally subordinate
to the preceding organization.
A state or province name.
A locality, such as a city, country, office, or facility name.
A domain component as discussed in "Suffix Naming
Conventions," on page 59.
A common mistake is to assume that you search your directory
based on the attributes used in the distinguished name. However,
the distinguished name is only a unique identifier for the directory
entry and cannot be searched against.
Instead, search for entries based on the attribute-data pairs stored
on the entry itself. Thus, if the distinguished name of an entry is
,
cn=Babs Jensen
ou=People,dc=example,dc=com
for
will not match that entry unless you have explicitly
dc=example
put
as an attribute in that entry.
dc:example
, then a search
Advertisement
Table of Contents
