Attributes as Pointers

To preserve organizational affiliation information while allowing for change, many companies and institutions are now choosing a fairly flat DIT for user entries and using attributes of the user entries to maintain the organizational relationships. All person entries are in a single pool or a small number of pools. Each person entry has an attribute indicating the organization to which the person belongs.

Figure 12-2 shows the Acme DIT restructured to use attributes to represent the organizational hierarchy. In this example, all employees are in a single pool. If there is little possibility of change between divisions, then Acme might decide to have one pool for each division instead. With the directory organization of ...

Get LDAP Programming with Java™ now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.