Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007, Руководство по установке

Страница: 682 / 982

Figure 36.1 Structure of an LDAP Directory
ou=devel
cn=Tux Linux cn=Geeko Linux
dc=example,dc=com
ou=doc ou=it
The complete diagram is a fictional directory information tree. The entries on three
levels are depicted. Each entry corresponds to one box in the picture. The complete,
valid distinguished name for the fictional employee
Geeko Linux
, in this case, is
cn=Geeko Linux,ou=doc,dc=example,dc=com
. It is composed by adding
the RDN
cn=Geeko Linux
to the DN of the preceding entry
ou=doc,dc=example,dc=com
.
The types of objects that should be stored in the DIT are globally determined following
a scheme. The type of an object is determined by the object class. The object class de-
termines what attributes the concerned object must or can be assigned. A scheme,
therefore, must contain definitions of all object classes and attributes used in the desired
application scenario. There are a few common schemes (see RFC 2252 and 2256). It
is, however, possible to create custom schemes or to use multiple schemes complement-
ing each other if this is required by the environment in which the LDAP server should
operate.
Table 36.1, “Commonly Used Object Classes and Attributes” (page 665) offers a small
overview of the object classes from
core.schema
and
inetorgperson.schema
used in the example, including required attributes and valid attribute values.
664 Installation and Administration