LDAP Implementation Cookbook

3.5. Evaluate Data and Its Placement in the Namespace

Every LDAP directory will implement a structure, usually hierarchical, that defines the namespace. The namespace definition will determine where you should place your objects and attributes. This will then determine the distinguished name (DN) of your entries. If your application data does not fit into the existing namespace and you have considered possible adoptions to the existing namespace with no success, the namespace will need to be extended.

It is important that namespace extensions are coordinated within your organization to avoid any duplication and inconsistencies, just as IP addresses and hostnames need to be coordinated within an organization.

When deciding on suffixes, where ...