LDAP Structure

  • Enteries referenced by distinguished name - DN (RFC1779)
  • Can be referenced by relative distinguised name - RDN
    • DN without the base
  • Top level or base (RFC2377)
    • Use DNS domainname - eg dc=pisoftware,dc=com
  • Object class
    • Determines schema rules the entry must obey
      • Required attributes
      • Allowed attributes
    • Describes what type of object
      • domain
      • posixAccount
      • posixGroup
      • etc