Overview #

Distinguished Names is a Distinguished Name (often referred to as a DN or FDN) is a string that uniquely identifies an entry in the DIT.

A Distinguished Names is comprised of zero or more Relative Distinguished Name components that identify the location of the entry in the DIT.

An LDAP Entry's Distinguished Names can be thought of as a kind of an analog to an absolute path in a filesystem in that it specifies both the name and hierarchical location.

Attribute Definition #

The Distinguished Names AttributeTypes is defined as:

The RDN components for a Distinguished Names are separated by commas and are ordered from right to left. The rightmost components of a DN are closest to the server's Naming Context, and the leftmost components are closest to the leaf entries. That is, if you think of a directory hierarchy as a kind of pyramid with the Naming Context at the top and the branches descending downward, then the order of RDN components in a DN are listed from bottom to top.

Even though a DN is comprised of a series of RDN components, when one refers to an LDAP Entry's RDN, then it is a reference to the leftmost RDN component (Naming Attribute). The attribute values contained in an LDAP Entry's DN must also be contained in that LDAP Entry.

Consider the following Example DIT:

DIT Example

In this case, the top entry is the naming context and its DN is "dc=example,dc=com". To conserve space, only the RDNs of the subordinate entries are displayed, but the full DNs can be obtained by appending the RDN components from bottom to top. For example, the DN of the leftmost entry on the bottom row would be "uid=ann,ou=People,dc=example,dc=com".

See RFC 4514 for more information about LDAP distinguished names and the way in which they should be represented as strings.

Distinguished Name Case Sensitivity#

Distinguished Name Case Sensitivity is not consistent across LDAP Server Implementations

More Information #

There might be more information for this subject on one of the following:

Add new attachment

Only authorized users are allowed to upload new attachments.
« This page (revision-15) was last changed on 13-Sep-2016 11:10 by jim