Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Руководство пользователя

Страница: 86 / 302

Interacting with Directory Server
86 Managing Servers with Netscape Console • December 2001
DN and Attribute Guidelines and Syntax
As you create, select, and use directory entries, follow these guidelines:
Separate RDNs with a comma. If an RDN value contains a comma, enclose the
part of the name that uses the comma in double-quotation marks. For example, to
include the string Ace Industry, Corp in a DN, use the form
o=”Ace Industry, Corp”, c=US
When schema checking is turned on, attributes must match directory schema. If
you are using Netscape Directory Server and schema checking is turned on, use
RDN keywords and attributes that can be recognized by the Directory Server and
are allowed by the entry’s object classes. If schema checking is turned off, you can
use all attributes, regardless of an entry’s object classes. For more information on
required attributes and schema checking, see the
Netscape Directory Server
Administrator’s Guide and the Netscape Directory Server Schema Reference Guide .
Specify RDNs in the same sequence or path. It is important to remember that a
DN represents a path through a directory tree. If RDN keywords are not specified
in the appropriate order, the Directory Server may not be able to locate an entry.
For example,
cn=Ralph Swenson, ou=Accounting, o=Ace Industry, c=US
is not the same as
cn=Ralph Swenson, o=Ace Industry, ou=Accounting, c=US
because the organizational unit (
ou
) and organization (
o
) keywords are not listed in
the same order.
User IDs must be unique. If duplicate user IDs exist in your directory, users with
those IDs will not be able to authenticate to the directory. Exercise caution when
using the
ldapmodify
command line utility to create users, since the utility does
not check for duplicate user IDs.