The LDAP information model is based on the entry that contains information about an object.
The following entities represent the LDAP information model:
Entries. An entry is a basic unit of information stored in a directory and consists of a collection of attributes.
Attribute. Each attribute has a type and is associated with one or more values.
The following figure shows the LDAP information model:
In LDAP, directory entries are arranged in a tree-like structure called Directory Information Tree (DIT).
The following figure shows an example of LDAP DIT:
The following example shows an LDAP record for Sam Carter, an employee with Airius, Inc.:
dn: uid=Scarter,ou=People,o=airius.com
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: top
uid: scarter
givenname: Sam
sn: Scarter
telephonenumber: +1 408 555 4798
roomnumber: 4612
mail: scarter@airius.com
userpassword: SSHA encrypted password
This example shows the full DN of the LDAP entry for Sam Carter, including the absolute path to the entry in the DIT.
The entry belongs to the following object classes:
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: airiusPerson
The person object class requires that the common name and surname have values. You can add optional fields, such as givenname and telephonenumber, to the object class. The object class organizationalPerson adds more options to the values from person, and inetOrgPerson adds more options to the object class. The Airius customized object class airiusPerson adds all the custom attributes confirming to the schema that the organization wants to track.