CODEWITHSUNDEEP
ldapopenldap
Jon Smark
Jon Smark

Reputation: 2608

Establishing parent-child relations in LDAP

I'm defining a custom schema for OpenLDAP. If I understand correctly, the SUP field in objectclass definitions may be used to indicate which attributes are inherited from the parent class. However, it does not force an entry of the child object class to be the actual child of an entry of the parent class in the entry tree. So how do I tell OpenLDAP that entries of a certain object class must be the children of entries of another given object class?

(As far as I understand it, there are two hierarchies at play: the attribute hierarchy and the object class hierarchy, and the LDAP tutorials I've found gloss over the distinction.)

Upvotes: 0

Views: 923

Answers (1)

jwilleke
jwilleke

Reputation: 10986

The SUP tag implies all of the required and optional attributes associated with that SUP ObjectClasses are also associated with the subordinate ObjectClasses. ONLY impacts schema elements.

For "child-parent" relations within LDAP Entries would typically be determined from the structure of the Directory Information Tree (DIT).

Upvotes: 1

Related Questions