LDAP - (LDIF fields|LDAP Attribute)

About

LDAP attributes are Attributes of a LDAP entry in the LDAP tree

This attributes are also used in a X509 certificate

Structure

See Lightweight Directory Access Protocol (LDAP): Schema for User Applications

Name (Type)

The attribute type is identified by:

• a short descriptive name
• and an OID (object identifier).

The name of the attribute is also called its type because it governs whether:

• there can be more than one value of an attribute of that type in an entry,
• the syntax to which the values must conform,
• the kinds of matching which can be performed on values of that attribute,
• and other functions.

Value

The permitted value of an attributes are governed by its type (name) see above.

Example

Common attributes

• dn= distinguished name (unique identifier)
• dc= domain component
• o = organization
• ou= organizational unit
• cn= common name
• uid = user id
• mail= mail
• LDAP - Surname (SN)

Representation / Meaning

You can get more information from the LDAP directory as :

• email,
• title,
• telephone,
• address….
• st = state

A country { relative name 'c=au' , description = 'Australia' }
    |
    |
    ---- A company { relative name = 'o=computer associates', web address = 'www.ca.com'  }
            |
            |
            ----- A person { relative name = 'cn=Chris', favorite drink = 'japanese slipper' }
            |
            ----- A person { relative name = 'cn=Trudi', favorite drink = 'beer' }
            |
            ----- A person { relative name = 'cn=Jay', favorite drink = 'mineral water' }

This shows a simple directory with five entries.

Documentation / Reference

• X500 User Schema: rfc2256
• Lightweight Directory Access Protocol (LDAP): Schema for User Applications