O'Reilly logo

LDAP Implementation Cookbook by Permana Widhiasta, Harri Stranden, Michel Melot, Heinz Johner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

2.4. Relationship Between Objects

The associations between two directory entries can be defined in two ways:

  • By containment: the DIT hierarchy

  • By reference: the use of attributes of type (syntax) distinguished name (DN)

The directory entry associations provide both logical correlation (for example, an operating system is part of a computer system and a user is authorized to use certain system resources) and directory traversal paths for the operations supported by the schema. The use of the DIT containment hierarchy permits certain searches to be made more efficiently; searches may be scoped and filtered to retrieve all of a related set of objects in one LDAP request.

Traversals based on DN pointer associations, on the other hand, cannot be grouped ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required