Show Table of Contents
4.5. Directory Tree Design Examples
The following sections provide examples of directory trees designed to support a flat hierarchy as well as several examples of more complex hierarchies.
4.5.1. Directory Tree for an International Enterprise
To support an international enterprise, use the Internet domain name as the root point for the directory tree, then branch the tree immediately below that root point for each country where the enterprise has operations. Avoid using a country designator as the root point for the directory tree, as mentioned in Section 4.2.1.1, “Suffix Naming Conventions”, especially if the enterprise is international.
Because LDAP places no restrictions on the order of the attributes in the DNs, the
c attribute can represent each country branch:
Figure 4.17. Using the c Attribute to Represent Different Countries
However, some administrators feel that this is stylistically awkward, so instead use the
l attribute to represent different countries:
Figure 4.18. Using the l Attribute to Represent Different Countries
4.5.2. Directory Tree for an ISP
Internet service providers (ISPs) may support multiple enterprises with their directories. ISP should consider each of the customers as a unique enterprise and design their directory trees accordingly. For security reasons, each account should be provided a unique directory tree with a unique suffix and an independent security policy.
An ISP should consider assigning each customer a separate database and storing these databases on separate servers. Placing each directory tree in its own database allows data to be backed up and restored for each directory tree without affecting the other customers.
In addition, partitioning helps reduce performance problems caused by disk contention and reduces the number of accounts potentially affected by a disk outage.
Figure 4.19. Directory tree for Example ISP
Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.