Designing the DIT

Designing the DIT

Best Practices

This is actually a very important step and you can spend the rest of your life designing your DIT. People even write books about the subject. There are some generally accepted practices that we have documented but they may not work in your specific case. Take them for what they are - a starting point for your own thinking on the subject.

We have elected to follow the classic RFC 2377 format and use a dc format for the DIT root.

We will also organise the address book hierarchy under people and use an ou attribute for department. So we will end up with a DIT structure that looks like this:

DIT Structure

Obtain an Enterprise OID via IANA

follow this page to issue an Private Enterprise Number (PEN) Request

PS: There is no fee for obtaining a PEN assignment.

Query Registered Enterprise PEN

Tags:ldap   Tags:dit
Written on February 14, 2019