如何向开放的 LDAP 架构添加新字段
将新字段添加到现有 LDAP 架构上的潜在字段列表中的最简单方法是什么?
这将如何影响现有记录?
该字段将添加到 dn(每个用户帐户)的最深层。
What would be the easiest way to add a new field to a list of potential fields on an existing ldap schema?
How would this affect existing records?
The field would be added at the deepest level of the dn (each user account).
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
通常,您可以扩展 LDAP 服务器的架构。具体细节取决于提供 LDAP 的底层服务。 (Active Directory 与 eDirectory 略有不同,并且与 OpenLDAP 或 SunOne 中也略有不同)。
然而,所有这些可能的 LDAP 服务器的共同点是辅助类的概念。
服务器附带的基本模式通常具有结构类,这些类是您真正可以用于对象的类。另一个是抽象类,它们实际上只是占位符,因此您可以让其他类(例如结构类)继承它。也许两个结构类可以继承自同一个抽象类,从而使定义更容易、更清晰。
最后我们来看看可能是最有用的辅助类。这些类不能独立存在,但您可以将类名添加到对象类 (objectClass) 属性列表中,然后可以使用 Aux 类中定义的附加属性。
这是扩展 LDAP 模式最安全、最不痛苦的方法。它不涉及基本模式,也不涉及任何标准运输类别。相反,您拥有一个完全独立的类,可以将其添加到您想要的任何对象,并且很容易修改。
Typically you can extend the schema of the LDAP server. Specific details depend on the underlying service providing the LDAP. (Active Directory is slightly different than eDirectory, and slightly different than in OpenLDAP or SunOne).
However, common to all those possible LDAP servers is the concept of an Auxiliary Class.
The base schema that comes with the server usually has Structural classes which are ones you can really use for objects. Another is Abstract classes, which are really just placeholders, so that you can have other classes (Say a structural class) inherit from it. Perhaps two Structural classes might inherit from the same abstract class, thus making definitions easier and cleaner.
Finally we come to Auxiliary classes which are probably the most useful. These classes cannot stand on their own, but you can add the class name to the Object Class (objectClass) attribute list, and then the additional attributes defined in the Aux class can be used.
This is the safest, least painful way to extend an LDAP Schema. It does not touch Base schema, nor any of the standard shipping classes. Rather, you have a completely standalone class that you can add to any object you would like, and it is easy to modify.