3.4.7 Creating custom schema files..................................................................................................

34

3.4.8 Custom schema best practices.................................................................................................

35

3.4.8.1 Naming schema files.......................................................................................................

35

3.4.8.2 Using 'user defined' as the origin....................................................................................

36

3.4.8.3 Defining attributes before object classes.........................................................................

36

3.4.8.4 Defining schema in a single file......................................................................................

36

3.5 Maintaining consistent schema.......................................................................................................

36

3.5.1 Schema checking.....................................................................................................................

37

3.5.2 Selecting consistent data formats............................................................................................

37

3.5.3 Maintaining consistency in replicated schema.......................................................................

37

3.6 Other schema resources...................................................................................................................

38

4 Designing the directory tree........................................................................................

39

4.1 Introduction to the directory tree....................................................................................................

39

4.2 Designing the directory tree............................................................................................................

39

4.2.1 Choosing a suffix.....................................................................................................................

39

4.2.1.1 Suffix naming conventions..............................................................................................

40

4.2.1.2 Naming multiple suffixes................................................................................................

40

4.2.2 Creating the directory tree structure.......................................................................................

41

4.2.2.1 Branching the directory...................................................................................................

41

4.2.2.2 Identifying branch points................................................................................................

42

4.2.2.3 Replication considerations..............................................................................................

44

4.2.2.4 Access control considerations.........................................................................................

45

4.2.3 Naming Entries.......................................................................................................................

46

4.2.3.1 Naming person entries....................................................................................................

46

4.2.3.2 Naming group entries.....................................................................................................

47

4.2.3.3 Naming organization entries..........................................................................................

47

4.2.3.4 Naming other kinds of entries........................................................................................

48

4.3 Grouping directory entries..............................................................................................................

48

4.3.1 About roles..............................................................................................................................

48

4.3.2 Deciding between roles and groups........................................................................................

49

4.3.3 About class of service..............................................................................................................

49

4.4 Virtual directory information tree views........................................................................................

50

4.4.1 About virtual DIT views.........................................................................................................

50

4.4.2 Advantages of using virtual DIT views..................................................................................

53

4.4.3 Example of virtual DIT views.................................................................................................

54

4.4.4 Views and other directory features.........................................................................................

55

4.4.5 Effects of virtual views on performance.................................................................................

55

4.4.6 Compatibility with existing applications................................................................................

55

4.5 Directory tree design examples.......................................................................................................

56

4.5.1 Directory tree for an international enterprise.........................................................................

56

4.5.2 Directory tree for an ISP..........................................................................................................

57

4.6 Other directory tree resources.........................................................................................................

57

5 Designing the directory topology...............................................................................

59

5.1 Topology overview..........................................................................................................................

59

5.2 Distributing the directory data........................................................................................................

59

5.2.1 About using multiple databases..............................................................................................

60

5.2.2 About suffixes.........................................................................................................................

61

5.3 About knowledge references...........................................................................................................

62

5.3.1 Using referrals.........................................................................................................................

62

5.3.1.1 The structure of an LDAP referral..................................................................................

63

5.3.1.2 About default referrals....................................................................................................

63

4Table of Contents