“Create an LDAP directory tree with base DN dc=example,dc=com, People, Groups and Service Accounts organizational units, and entries for alice, developers, and app-bind.”
Die dahinterstehenden Entscheidungen verstehen.
Start at the directory root.
Group entries by purpose.
Place people below the People OU.
Show group and service-account entries.
Use it to document a directory's intended hierarchy; replace the sample DNs with the names in the actual directory.
Häufige Fragen
What is the base DN?
The base distinguished name is the directory root from which LDAP searches and subordinate entries are organized.
What is an organizational unit?
An organizational unit, or OU, is a container that groups related directory entries, such as users or service accounts.
Why separate service accounts?
A separate OU makes application bind accounts easier to identify, manage and review independently from human users.