Overview #Distinguished Names is a Distinguished Name (often referred to as a DN or FDN) is a string that uniquely identifies an entry in the DIT.
An LDAP Entry's Distinguished Names can be thought of as a kind of an analog to an absolute path in a filesystem in that it specifies both the name and hierarchical location.
Attribute Definition #The Distinguished Names AttributeTypes is defined as:
- OID of 220.127.116.11
- NAME: Distinguished Names
- EQUALITY: distinguishedNameMatch
- SYNTAX: 18.104.22.168.4.1.1422.214.171.124.12 DN Syntax
The RDN components for a Distinguished Names are separated by commas and are ordered from right to left. The rightmost components of a DN are closest to the server's Naming Context, and the leftmost components are closest to the leaf entries. That is, if you think of a directory hierarchy as a kind of pyramid with the Naming Context at the top and the branches descending downward, then the order of RDN components in a DN are listed from bottom to top.
Even though a DN is comprised of a series of RDN components, when one refers to an LDAP Entry's RDN, then it is a reference to the leftmost RDN component (Naming Attribute). The attribute values contained in an LDAP Entry's DN must also be contained in that LDAP Entry.
Consider the following Example DIT:
In this case, the top entry is the naming context and its DN is "dc=example,dc=com". To conserve space, only the RDNs of the subordinate entries are displayed, but the full DNs can be obtained by appending the RDN components from bottom to top. For example, the DN of the leftmost entry on the bottom row would be "uid=ann,ou=People,dc=example,dc=com".
See RFC 4514 for more information about LDAP distinguished names and the way in which they should be represented as strings.Distinguished Name Case Sensitivity is not consistent across LDAP Server Implementations
More Information #There might be more information for this subject on one of the following:
- DN Escape Values
- DN Syntax
- Distinguished Name Case Sensitivity
- Distinguished Names
- Global Catalog
- Groups Are Bad
- NCP Primary Authentication Protocol
- Relative Distinguished Name
- Subject Alternative Name
- Which Jane Doe