Security Framework Guide

10.1
- 10.5 HotFix 2
- 10.5 HotFix 1
- 10.5
- 10.2 HotFix 1
- 10.2
- 10.0 HotFix 1
- 10.0

Back Next

Directory Tree Structure for LDAP

Directory structure depicts the hierarchy of the organization. The following provides the directory tree structure for LDAP:

The following object classes for entities are provided:

Root DN Record for organization

DN: dc=informatica,dc=com
Attribute	Value
objectClass	dcObject
dc	organization (structural)
o	informatica
description	Informatica.com

DN for Users

DN: ou=Users,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalUnit
ou	Users
description	Users of informatica.com

DN for User

DN: uid=xxxxx,ou=Users,dc=informatica,dc=com
Attribute	Value
objectClass	inetOrgPerson
objectClass	organizationalPerson
objectClass	Person
cn	Common name
uid	Unique ID of user (xxxx)
userPassword	User password

DN for Roles

DN: ou=Users,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalUnit
ou	Roles
description	Roles for the informatica.com

DN for Role

DN: ou=Roles,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalRole
objectClass	top
cn	Name of a role
roleOccupant	uid=xxxx,ou=Users,dc=informatica,dc=com
roleOccupant	uid=yyyy,ou=Users,dc=informatica,dc=com

DN for Resources

DN: ou=Resources,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalUnit
ou	Resources
description	Resources of informatica.com

DN for Resource

DN: cn=RESOURCE_NAME,ou=Resources,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalRole
objectClass	top
cn	Name of a resource
Description	Description about the resource

DN for Privileges

DN: ou= Privileges,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalUnit
ou	Privileges
Description	Access privileges for the system resources

DN for Privilege

DN: cn=PRIVILEGE_NAME,ou=Privileges,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalRole
objectClass	top
cn	Name of a privilege
Description	Description about the privilege

DN for Groups

DN: ou= Groups,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalUnit
ou	Groups
Description	Groups for the informatica.com

DN for Group

DN: cn=GROUP_NAME,ou=Groups,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalRole
objectClass	top
cn	Name of a group
Description	Description about the group
roleOccupant	Users of the group

The ACL (access control list) uses the group entities to add restrictions on users. To provide admin users a write access to all, define the

slapd.conf

file as:

## Give Admins immediate write access:
access to dn.subtree="dc=informatica,dc=com"
by group/organizationalRole/roleOccupant= "cn=Administrators,ou=Groups,dc=informatica,dc=com" write
       by * none break

DN for Permissions

DN: ou= Permissions,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalUnit
ou	Permissions
Description	Permissions for the informatica.com

DN for Permission

DN: cn=PERMISSION_NAME,ou= Permissions,dc=informatica,dc=com
Attribute	Value
objectClass	organizationalRole
objectClass	top
cn	Name of a permission
Description	Description about the permission
roleOccupant	Role entity cn=Admin,ou=Roles,dc=informatica,dc=com
roleOccupant	Resource entity cn=IDD_APPLICATION,ou=Resources,dc=informatica,dc=com
roleOccupant	Privilege entity cn=CREATE,ou=Privileges,dc=informatica,dc=com