Overview #

DN is a Distinguished Name (often referred to as a DN or FDN) is a string that uniquely identifies an entry in the Directory Server.

A distinguished name is comprised of zero or more RDN components that identify the location of the entry in the DIT. An entry's distinguished name can be thought of as a kind of an analog to an absolute path in a filesystem in that it specifies both the name and hierarchical location.

Attribute Definition #

The DN AttributeTypes is defined as:

The RDN components for a distinguished name are separated by commas and are ordered from right to left. The rightmost components of a DN are closest to the server's Naming Context, and the leftmost components are closest to the leaf entries. That is, if you think of a directory hierarchy as a kind of pyramid with the naming context at the top and the branches descending downward, then the order of RDN components in a DN are listed from bottom to top.

Even though a DN is comprised of a series of RDN components, when one refers to an entry's RDN, then it is a reference to the leftmost RDN component. The attributes contained in an entry's RDN must also be contained in that entry.

Consider the following sample DIT:

Definition -- Directory Information Tree/DIT.png

In this case, the top entry is the naming context and its DN is "dc=example,dc=com". To conserve space, only the RDNs of the subordinate entries are displayed, but the full DNs can be obtained by appending the RDN components from bottom to top. For example, the DN of the leftmost entry on the bottom row would be "uid=ann,ou=People,dc=example,dc=com".

See RFC 4514 for more information about LDAP distinguished names and the way in which they should be represented as strings.

More Information #

There might be more information for this subject on one of the following:

Add new attachment

Only authorized users are allowed to upload new attachments.
« This page (revision-10) was last changed on 24-Sep-2014 18:03 by jim