08Apr2009 (UTC +8) I think you know this already, but design the tree to be as flat as possible, so queries can be much faster.
Disclaimer: haven't managed an LDAP since my Netscape Directory Server and Entrust Certificate Manager server days! On Wed, Apr 8, 2009 at 09:20, Jerome Macaranas <[email protected]> wrote: > hi, > > I'm testing linux user authentication using ldap including sudo... but > ldap itself is a monster.. :( i was wondering if anyone can give me a > suggestion in building the directory information tree. > > I need to give access on users based on their job? sample below: > > dn: dc=test,dc=com > dn: cn=Manager,dc=test,dc=com > dn: ou=Servers,dc=test,dc=com > dn: ou=dbadmin,ou=Servers,dc=test,dc=com > dn: ou=netadmin,ou=Servers,dc=test,dc=com > dn: ou=devadmin,ou=Servers,dc=test,dc=com > dn: ou=appadmin,ou=Servers,dc=test,dc=com > dn: cn=Juan delaCruz,ou=dbadmin,ou=Servers,dc=test,dc=com > dn: cn=Juan Tamad,ou=dbadmin,ou=Servers,dc=test,dc=com > > Is this this optmized way of implementing it.. Drexx Laggui -- CISA, CISSP, CFE Associate, ISO27001 LA, CCSI, CSA http://www.laggui.com ( Singapore / Manila / California ) Computer forensics; Penetration testing; QMS & ISMS developers; K-Transfer PGP fingerprint = 6E62 A089 E3EA 1B93 BFB4 8363 FFEC 3976 FF31 8A4E _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
