Re: Schematta and hiearchy for use in EMail Addy books

[Andrew Findlay <andrew.findlay@skills-1st.co.uk>]

On Sun, Oct 06, 2002 at 05:19:48AM -0500, Hanasaki JiJi wrote:
> 
> Could someone point to a refernce on what Object Classes are necessary, 
> and how to use them together for:
> 	- Samba auth
> 	- MicroSo.. OS auth
> 	- Unix auth
> 	- Listing and search via Mozilla Addy Book

I don't know of a document set up that way, but it is easy to work out
from the schema files (and easier still if you set up a server with
all schemas enabled and use gq to browse them).

Start by listing the attributes you want to use, then look for
objectclasses that permit them. Most will be covered by core.schema
but you may well need to add classes from other schema files and in
some cases will have to define your own auxiliary objectclass to
permit particular combinations.

If you don't know what attributes you need then it does get harder!

> Also, is there a reference to the hierarchy for above.  For example: 
> does the address bock find names by matching DN?  CN? ... Will the name 

That can be discovered by running slapd with log level 768 and looking
for SRCH entries in the log when the clients do searches. Any
attribute named in the search is probably worth indexing too.

> be found if the prefix is:
> 	dc=com, dc=company
> 
> and the names are under:
> 	o=HR
> 
> or under:
> 	O=IT
> 		several more arbitary levels
> 	O=Marketing
> 		OU=TomsGroup

That depends on whether the client specifies subtree search or not. If
it does, then anything under the search base at any depth is available
to be matched.

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------