Sample Organization Data: Directory Information Tree View

Figure A–3 shows a Directory Information Tree (DIT) view of the sample organization data.

The example shown in Figure A–3, like the logical view shown in Figure A–1, contains the following organizations:

• VIS and ESG (provider organizations)

• DEF, a shared organization subordinate to the VIS provider organization

• SESTA, a full organization subordinate to the VIS provider organization

Figure A–3 Sample Organization Data: Directory Information Tree View

Nodes in the Sample Directory Information Tree

The nodes in the sample organization file (da.sample.data.ldif) are as follows:

• ugldapbasedn - This parameter represents the root suffix.

• o=business - A node that contains all businesses in the directory.

• o=SharedDomainsRoot - A node needed to contain the domains used by shared organizations.

  In this Directory Information Tree, shared organizations subordinate to different service provider organizations can use the same shared domain. This can be done because both the provider organizations have nodes under the SharedDomainsRoot node.

• o=ESGDomainsRoot and o=VISDomainsRoot - These nodes contain any full organizations that are subordinate to the ESG and VIS provider organizations.

  Each provider organization that manages full organizations must have a node at this level (under the root suffix).

  Multiple full organizations, each with its own domain, can exist under ESGDomainsRoot or VISDomainsRoot.

• o=siroe.com - The shared domain. It is used by the shared organization, DEF.

• o=VIS and o=ESG - These provider organization nodes contain any shared organizations subordinate to the VIS and ESG provider organizations.

  For example, the shared organization, DEF, is subordinate to the VIS provider organization.

• o=SESTA - The full organization. It has its own domain, sesta.com.

• o=DEF - The shared organization. It uses the domain siroe.com.

• ou=people - The standard LDAP organization unit required for containing users.

User DNs in the Sample Directory Information Tree

Some user DNs in the sample organization file shown in Figure A–3 are as follows:

• For the user named user1_def, who belongs to the DEF organization:

  dn: uid=user1_def,ou=People,o=DEF,o=VIS,o=siroe.com, \ o=SharedDomainsRoot,o=Business,ugldapbasedn

• For the user named user1, who belongs to the SESTA organization:

  dn: uid=user1,ou=People,o=SESTA,o=VISDomainsRoot, \ o=Business,ugldapbasedn