public marks

PUBLIC MARKS with tag iana

2012

2008

2007

LDAP Schema Design

by ogrisel
It is possible to make one LDAP directory serve many applications in an organisation. This has the advantage of reducing the effort required to maintain the data, but it does mean that the design must be thought out very carefully before implementation starts. LDAP directories are structured as a tree of entries, where each entry consists of a set of attribute-value pairs describing one object. The objects are often people, organisations, and departments, but can be anything at all. Schema is the term used to describe the shape of the directory and the rules that govern its content. A hypothetical organisation is described, with requirements for “white pages” directory service as well as a wide range of authentication, authorisation, and application-specific directory needs. The issues arising from the LDAP standards are discussed, along with the problems of maintaining compatibility with a range of existing LDAP clients. A plan is proposed for the layout of the directory tree, with particular emphasis on avoiding the need to re-organise it later. This involves careful separation of the data describing people, departments, groups, and application-specific objects. A simple approach to entry design is shown, based on the use of locally-defined auxiliary object classes. The effects of schema design on lookup performance are discussed. Some design tricks and pitfalls are presented, based on recent consulting experience.

2005

PUBLIC TAGS related to tag iana

attributeType +   code langue +   code pays +   custom schema +   dns +   faille +   faq +   i18n +   kaminsky +   l10n +   langue +   ldap +   objectClass +   pays +   performance +   tree +   uri +   urn +  

Active users

mfaure
last mark : 25/06/2012 16:32

marco
last mark : 07/08/2008 16:52

ogrisel
last mark : 04/10/2007 21:31

digitalmonkey
last mark : 07/09/2005 13:54