Escaping Distinguished Names is described in RFC 4514 and required for 'Special Characters'.For example, the DN of the leftmost entry on the bottom row would be 'uid=ann,ou=People,dc=example,dc=com'.Īdditional Information on Distinguished Names # To conserve space, only the RDNs of the subordinate entries are displayed, but the full DNs can be obtained by appending the RDN components from bottom to top. In this case, the top entry is the naming context and its DN is 'dc=example,dc=com'.

The attribute values contained in an LDAP Entry's DN must also be contained in that LDAP Entry. That is, if you think of a directory hierarchy as a kind of pyramid with the Naming Context at the top and the branches descending downward, then the order of RDN components in a DN are listed from bottom to top.Įven though a DN is comprised of a series of RDN components, when one refers to an LDAP Entry's RDN, then it is a reference to the leftmost RDN component (Naming Attribute). The rightmost components of a DN are closest to the server's Naming Context, and the leftmost components are closest to the leaf entries. The RDN components for a Distinguished Names are separated by commas and are ordered from right to left. The Distinguished Names AttributeTypes is defined as: Distinguished Names is a Distinguished Name (often referred to as a DN or FDN) is a string that uniquely identifies an entry in the DIT.Ī Distinguished Names is comprised of zero or more Relative Distinguished Name components that identify the location of the entry in the DIT.Īn LDAP Entry's Distinguished Names can be thought of as a kind of an analog to an absolute path in a File System in that it specifies both the name and hierarchical location.ĭistinguished Names are composed of Naming Attributes ( Relative Distinguished Names or RDNs) and should therefore follow Best Practices For LDAP Naming Attributes Attribute Definition #

Ldap query user distinguished name