�??xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:trackback="http://madskills.com/public/xml/rss/module/trackback/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/"><channel><title>&#32654;&#22899;&#22269;&#20135;&#31934;&#21697;&#20037;&#20037;&#20037;&#44;&#21487;&#20197;&#30452;&#25509;&#22312;&#32447;&#35266;&#30475;&#30340;&#97;&#118;&#44;&#20037;&#20037;&#20037;&#20037;&#32593;&#22336;</title><link>http://www.aygfsteel.com/yifeng/category/34015.html</link><description>光是知道是不够的�Q�必��要加以应用�Q�光是希望是不够的，非去做不可�?/description><language>zh-cn</language><lastBuildDate>Sun, 21 Sep 2008 22:56:39 GMT</lastBuildDate><pubDate>Sun, 21 Sep 2008 22:56:39 GMT</pubDate><ttl>60</ttl><item><title> LDAP学习者必�?/title><link>http://www.aygfsteel.com/yifeng/archive/2008/09/17/229406.html</link><dc:creator>忆风</dc:creator><author>忆风</author><pubDate>Wed, 17 Sep 2008 05:44:00 GMT</pubDate><guid>http://www.aygfsteel.com/yifeng/archive/2008/09/17/229406.html</guid><wfw:comment>http://www.aygfsteel.com/yifeng/comments/229406.html</wfw:comment><comments>http://www.aygfsteel.com/yifeng/archive/2008/09/17/229406.html#Feedback</comments><slash:comments>0</slash:comments><wfw:commentRss>http://www.aygfsteel.com/yifeng/comments/commentRss/229406.html</wfw:commentRss><trackback:ping>http://www.aygfsteel.com/yifeng/services/trackbacks/229406.html</trackback:ping><description><![CDATA[<p><span style="font-family: 宋体">如果你在计算�����业工作，那么�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">可能早有耳闻了。想深入��C���?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">吗？那么可以好好地读一下这���文章。这���介�l�性的文章是一�p�d��介绍如何在企业中设计、实现和集成</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">环境的文章的头一���。主要是先让你熟悉一�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的基本概念，那些比较困难的细节问题将攑ֈ�以后讨论。在�q�篇文章中我们将要介�l�：</span></p>
<br />
<p><strong>什么是LDAP?</strong></p>
<p><strong>什么时候该用LDAP存储数据�Q?/strong></p>
<p><strong>LDAP目录树的�l�构</strong></p>
<p><strong>单独的LDAP记录</strong></p>
<p><strong>作�ؓ例子的一个单独的数据��?/strong></p>
<p><strong>LDAP复制</strong></p>
<p><strong>安全和访问控�?/strong></p>
<p>&nbsp;</p>
<p><span style="font-family: 宋体">现在</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">技术不仅发展得很快而且也是�Ȁ动�h心的。在企业范围内实�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">可以让运行在几乎所有计���机�q�_��上的所有的应用�E�序�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录中获取信息�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录中可以存储各�U�类型的数据�Q�电子邮件地址、邮件�\�׃��息、�h力资源数据、公用密匙、联�p�M�h列表�Q�等�{�。通过�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录作�ؓ�pȝ��集成中的一个重要环节，可以���化员工在企业内部查询信息的步骤，甚至�q�主要的数据源都可以攑֜���M��地方。如�?/span><span lang="EN-US">Oracle</span><span style="font-family: 宋体">�?/span><span lang="EN-US">Sybase</span><span style="font-family: 宋体">�?/span><span lang="EN-US">Informix</span><span style="font-family: 宋体">�?/span><span lang="EN-US">Microsoft SQL</span><span style="font-family: 宋体">数据库中已经存储了类似的数据�Q�那�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">和这些数据库到底有什么不同呢�Q�是什么让它更具优势？��L���l�读下去吧！</span></p>
<br />
<h2><a name="_什么是LDAP?"></a><span style="font-family: 黑体">什么是</span><span lang="EN-US">LDAP?</span></h2>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的英文全�U�是</span><span lang="EN-US" style="color: black">Lightweight Directory Access Protocol</span><span style="font-family: 宋体">�Q�一般都����U�Cؓ</span><span lang="EN-US" style="color: black">LDAP</span><span style="color: black; font-family: 宋体">。它是基�?/span><span lang="EN-US" style="color: black">X.500</span><span style="font-family: 宋体">标准的，但是���单多了�ƈ且可以根据需要定制。与</span><span lang="EN-US" style="color: black">X.500</span><span style="font-family: 宋体">不同�Q?/span><span lang="EN-US" style="color: black">LDAP</span><span style="color: black; font-family: 宋体">支持</span><span lang="EN-US" style="color: black">TCP/IP</span><span style="font-family: 宋体">�Q�这对访�?/span><span lang="EN-US" style="color: black">Internet</span><span style="font-family: 宋体">是必��ȝ���?/span><span lang="EN-US" style="color: black">LDAP</span><span style="font-family: 宋体">的核心规范在</span><span lang="EN-US" style="color: black">RFC</span><span style="font-family: 宋体">中都有定义，所有与</span><span lang="EN-US" style="color: black">LDAP</span><span style="font-family: 宋体">相关�?/span><span lang="EN-US" style="color: black">RFC</span><span style="color: black; font-family: 宋体">都可以在</span><span lang="EN-US" style="color: black"><a >LDAPman RFC</a></span><span style="font-family: 宋体">�|�页中找到�?/span></p>
<br />
<h3><span style="font-family: 宋体">怎么使用</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">�q�个术语呢？</span></h3>
<br />
<p><span style="font-family: 宋体">在日�怺�谈中�Q�你可能会听到有些�h�q�么��_��&#8220;我们要把那些东西存在</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">中吗�Q?#8221;�Q�或�?#8220;�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">数据库中取出那些数据�Q?#8221;�Q�又或�?#8220;我们怎么�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">和关�p�d��数据库集成在一��P��&#8221;。严格地��_��</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">�Ҏ��不是数据库而是用来讉K��存储在信息目录（也就�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录�Q�中的信息的<strong>协议</strong>。更为确切和正式的说法应该是象这��L���Q?#8220;通过使用</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">�Q�可以在信息目录的正���位�|�读取（或存储）数据&#8221;。但是，也没有必要吹毛求疵，���管表达得不够准���，我们也都知道�Ҏ��在说什么�?/span></p>
<br />
<h3><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录是数据库吗？</span></h3>
<br />
<p><span style="font-family: 宋体">���p��</span><span lang="EN-US">Sybase</span><span style="font-family: 宋体">�?/span><span lang="EN-US">Oracle</span><span style="font-family: 宋体">�?/span><span lang="EN-US">Informix</span><span style="font-family: 宋体">�?/span><span lang="EN-US">Microsoft</span><span style="font-family: 宋体">的数据库���理�pȝ���Q?/span><span lang="EN-US">DBMS</span><span style="font-family: 宋体">�Q�是用于处理查询和更新关�p�d��数据库那��P��</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器也是用来处理查询和更新</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录的。换句话来说</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录也是<strong>一�U�类�?/strong>的数据库�Q�但是不是关�p�d��数据库。不象被设计成每分钟需要处理成百上千条数据变化的数据库�Q�例如：在电子商务中�l�常用到的在�U�交易处理（</span><span lang="EN-US">OLTP</span><span style="font-family: 宋体">�Q�系�l�，</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">主要是优化数据读取的性能�?/span></p>
<br />
<h3><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录的优�?/span></h3>
<br />
<p><span style="font-family: 宋体">现在该说�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录到底有些什么优势了。现�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的流行是很多因数共同作用的结果。我在这里说的不�q�是一些基本的原因�Q�请你注意一下这不过是一���部分原因�?/span></p>
<br />
<p><span style="font-family: 宋体">可能</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">最大的优势是：可以在�Q何计���机�q�_��上，用很�Ҏ��获得的而且数目不断增加�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的客��L���E�序讉K��</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录。而且也很�Ҏ��定制应用�E�序为它加上</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的支持�?/span></p>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">协议是跨�q�_��的和标准的协议，因此应用�E�序��׃��用�ؓ</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录攑֜�什么样的服务器上操心了。实际上�Q?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">得到了业界的�q�泛认可�Q�因为它�?/span><span lang="EN-US">Internet</span><span style="font-family: 宋体">的标准。��商都很愿意在产品中加入对</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的支持，因�ؓ他们�Ҏ��不用考虑另一端（客户端或服务端）是怎么��L���?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器可以是��M��一个开发源代码或商用的</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录服务器（或者还可能是具�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">界面的关�p�d��数据库）�Q�因为可以用同样的协议、客��L���q�接软�g包和查询命��o�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器进行交互。与</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">不同的是�Q�如果��Y件��商想在��Y件��品中集成�?/span><span lang="EN-US">DBMS</span><span style="font-family: 宋体">的支持，那么通常都要�Ҏ��一个数据库服务器单独定制�?/span></p>
<br />
<p><span style="font-family: 宋体">不象很多商用的关�p�d��数据库，你不必�ؓ</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的每一个客��L���q�接或许可协议付贏V�?/span></p>
<br />
<p><span style="font-family: 宋体">大多数的</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器安装�v来很���单，也容易维护和优化�?/span></p>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器可以用&#8220;�?#8221;�?#8220;�?#8221;的方法复刉���分或全部数据�Q�例如：可以把数�?#8220;�?#8221;到远�E�的办公室，以增加数据的安全性。复制技术是内置�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器中的而且很容易配�|�。如果要�?/span><span lang="EN-US">DBMS</span><span style="font-family: 宋体">中��用相同的复制功能�Q�数据库产商��׃��要你支付额外的费用，而且也很隄���理�?/span></p>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">允许你根据需要���?/span><span lang="EN-US">ACI</span><span style="font-family: 宋体">�Q�一般都�U�Cؓ</span><span lang="EN-US">ACL</span><span style="font-family: 宋体">或者访问控制列表）控制�Ҏ��据读和写的权限。例如，讑֤����理员可以有权改变员工的工作地点和办公室��L���Q�但是不允许改变记录中其它的域�?/span><span lang="EN-US">ACI</span><span style="font-family: 宋体">可以�Ҏ��谁访问数据、访问什么数据、数据存在什么地方以及其它对数据�q�行讉K��控制。因�����些都是由</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录服务器完成的�Q�所以不用担心在客户端的应用�E�序上是否要�q�行安全���查�?/span></p>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">对于�q�样存储�q�样的信息最为有用，也就是数据需要从不同的地点读取，但是不需要经常更新。例如，�q�些信息存储�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录中是十分有效的：</span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">公司员工的电话号码簿和组�l�结构图</span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">客户的联�p�M���?/span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">计算机管理需要的信息�Q�包�?/span><span lang="EN-US">NIS</span><span style="font-family: 宋体">映射�?/span><span lang="EN-US">email</span><span style="font-family: 宋体">假名�Q�等�{?/span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">软�g包的配置信息</span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">公用证书和安全密�?/span></p>
<br />
<h2><a name="_什么时候该用LDAP存储数据"></a><a name="_什么时候该用LDAP存储数据�Q?></a><span style="font-family: 黑体">什么时候该�?/span><span lang="EN-US">LDAP</span><span style="font-family: 黑体">存储数据�Q?/span></h2>
<br />
<p><span style="color: black; font-family: 宋体">大多数的</span><span lang="EN-US" style="color: black">LDAP</span><span style="font-family: 宋体">服务器都�����密集型的操作�q�行专门的优化。因此，当从</span><span lang="EN-US" style="color: black">LDAP</span><span style="color: black; font-family: 宋体">服务器中��d��数据的时候会比从专门�?/span><span lang="EN-US" style="color: black">OLTP</span><span style="font-family: 宋体">优化的关�p�d��数据库中��d��数据快一个数量��。也是因��Z��门�ؓ�ȝ��性能�q�行优化�Q�大多数�?/span><span lang="EN-US" style="color: black">LDAP</span><span style="color: black; font-family: 宋体">目录服务器�ƈ不适合存储需要需要经常改变的数据。例如，�?/span><span lang="EN-US" style="color: black">LDAP</span><span style="font-family: 宋体">服务器来存储电话��L��是一个很好的选择�Q�但是它不能作�ؓ电子商务站点的数据库服务器�?/span></p>
<br />
<p><span style="color: black; font-family: 宋体">如果下面每一个问题的�{�案都是&#8220;�?#8221;�Q�那么把数据存在</span><span lang="EN-US" style="color: black">LDAP</span><span style="color: black; font-family: 宋体">中就是一个好��L���?/span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">需要在��M���q�_��上都能读取数据吗�Q?/span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">每一个单独的记录��Ҏ��不是每一天都只有很少的改变？</span></p>
<br />
<p class="MsoListBullet"><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">可以把数据存在��^面数据库�Q?/span><span lang="EN-US">flat database</span><span style="font-family: 宋体">�Q�而不是关�p�d��数据库中吗？换句话来��_��也就是不���什么范式不范式的，把所有东襉K��存在一个记录中�Q�差不多只要满���W�一范式�Q��?/span></p>
<br />
<p><span style="font-family: 宋体">最后一个问题可能会唬住一些�h�Q�其实用�q�面数据库去存储一些关�p�d��的数据也是很一般的。例如，一条公司员工的记录���可以包含经理的��d��名。用</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">来存储这�c�M��息是很方便的。一个简单的判断�Ҏ���Q�如果可以把保数据存在一张张的卡片里�Q�就可以很容易地把它存在</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录里�?/span></p>
<br />
<h2><a name="_LDAP目录树的�l�构"></a><span lang="EN-US">LDAP</span><span style="font-family: 黑体">目录树的�l�构</span></h2>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录以树状的层次�l�构来存储数据。如果你对自��向下的</span><span lang="EN-US">DNS</span><span style="font-family: 宋体">树或</span><span lang="EN-US">UNIX</span><span style="font-family: 宋体">文�g的目录树比较熟悉�Q�也���很�Ҏ��掌握</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录树这个概念了。就�?/span><span lang="EN-US">DNS</span><span style="font-family: 宋体">的主机名那样�Q?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录记录的标识名�Q?/span><span lang="EN-US">Distinguished Name</span><span style="font-family: 宋体">�Q�简�U?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">�Q�是用来��d��单个记录�Q�以及回溯到树的�剙��。后面会做详�l�地介绍�?/span></p>
<br />
<p><span style="font-family: 宋体">��Z��么要用层�ơ结构来�l�织数据呢？原因是多斚w��的。下面是可能遇到的一些情况：</span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">如果你想把所有的���国客户的联�p�M��息都&#8220;�?#8221;��C��于到襉K��囑֊�公室�Q�负责营销�Q�的</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器上�Q�但是你不想把公司的资�񔽎�理信息&#8220;�?#8221;到那里�?/span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">你可能想�Ҏ��目录树的�l�构�l�予不同的员工组不同的权限。在下面的例子里�Q�资产管理组�?#8220;</span><span lang="EN-US">asset-mgmt</span><span style="font-family: 宋体">&#8221;部分有完全的讉K��权限�Q�但是不能访问其它地斏V�?/span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">存储和复制功能结合�v来，可以定制目录树的�l�构以降低对</span><span lang="EN-US">WAN</span><span style="font-family: 宋体">带宽的要求。位于西雅图的营销办公室需要每分钟更新的美国销售状�늚�信息�Q�但是欧�z�的销售情况就只要每小时更��C���ơ就行了�?/span></p>
<br />
<h3><span style="font-family: 宋体">刨根问底�Q�基�?/span><span lang="EN-US">DN</span></h3>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录树的最�剙�����是根，也就是所谓的&#8220;基准</span><span lang="EN-US">DN</span><span style="font-family: 宋体">&#8221;。基�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">通常使用下面列出的三�U�格式之一。假定我在名�?/span><span lang="EN-US">FooBar</span><span style="font-family: 宋体">的电子商务公司工作，�q�家公司�?/span><span lang="EN-US">Internet</span><span style="font-family: 宋体">上的名字�?/span><span lang="EN-US">foobar.com</span><span style="font-family: 宋体">�?/span></p>
<br />
<p class="a"><strong><span lang="EN-US">o="FooBar, Inc.", c=US </span></strong></p>
<br />
<p><em><span style="color: black; font-family: 宋体">�Q�以</span><span lang="EN-US" style="color: black">X.500</span></em><em><span style="font-family: 宋体">格式表示的基�?/span><span lang="EN-US" style="color: black">DN</span></em><em><span style="color: black; font-family: 宋体">�Q?/span></em></p>
<br />
<p><span style="font-family: 宋体">在这个例子中�Q?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">o=FooBar, Inc. </span><span style="font-family: 宋体">表示�l�织名，在这里就是公司名的同义词�?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">c=US </span><span style="font-family: 宋体">表示公司的总部在美国。以前，一般都用这�U�方式来表示基准</span><span lang="EN-US">DN</span><span style="font-family: 宋体">。但是事物��L��在不断变化的�Q�现在所有的公司都已�l�（或计划）�?/span><span lang="EN-US">Internet</span><span style="font-family: 宋体">上。随着</span><span lang="EN-US">Internet</span><span style="font-family: 宋体">的全球化�Q�在基准</span><span lang="EN-US">DN</span><span style="font-family: 宋体">中��用国家代码很�Ҏ��让�h产生��h��。现在，</span><span lang="EN-US">X.500</span><span style="font-family: 宋体">格式发展成下面列出的两种格式�?/span></p>
<br />
<p class="a"><strong><span lang="EN-US">o=foobar.com</span></strong></p>
<br />
<p><em><span style="font-family: 宋体">�Q�用公司�?/span><span lang="EN-US">Internet</span></em><em><span style="font-family: 宋体">地址表示的基�?/span><span lang="EN-US">DN</span></em><em><span style="font-family: 宋体">�Q?/span></em></p>
<br />
<p><span style="font-family: 宋体">�q�种格式很直观，用公司的域名作�ؓ基准</span><span lang="EN-US">DN</span><span style="font-family: 宋体">。这也是现在最常用的格式�?/span></p>
<br />
<p class="a"><strong><span lang="EN-US">dc=foobar, dc=com</span></strong></p>
<br />
<p><em><span style="font-family: 宋体">�Q�用</span><span lang="EN-US">DNS</span></em><em><span style="font-family: 宋体">域名的不同部分组成的基准</span><span lang="EN-US">DN</span></em><em><span style="font-family: 宋体">�Q?/span></em></p>
<br />
<p><span style="font-family: 宋体">���p��上面那一�U�格式，�q�种格式也是�?/span><span lang="EN-US">DNS</span><span style="font-family: 宋体">域名为基���的，但是上面那种格式不改变域名（也就更易读）�Q�而这�U�格式把域名�Q?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">foobar.com</span><span style="font-family: 宋体">分成两部�?/span> <span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">dc=foobar, dc=com</span><span style="font-size: 10.5pt; font-family: 黑体">�?/span><span style="font-family: 宋体">在理��Z���Q�这�U�格式可能会更灵�z�M��点，但是对于最�l�用��h��说也更难记忆一炏V��考虑一�?/span><span lang="EN-US">foobar.com</span><span style="font-family: 宋体">�q�个例子。当</span><span lang="EN-US">foobar.com</span><span style="font-family: 宋体">�?/span><span lang="EN-US">gizmo.com</span><span style="font-family: 宋体">合�ƈ之后�Q�可以简单的�?#8220;</span><span lang="EN-US">dc=com</span><span style="font-family: 宋体">&#8221;当作基准</span><span lang="EN-US">DN</span><span style="font-family: 宋体">。把新的记录攑ֈ�已经存在�?/span><span lang="EN-US">dc=gizmo, dc=com</span><span style="font-family: 宋体">目录下，�q�样���q��化了很多工作�Q�当�Ӟ��如果</span><span lang="EN-US">foobar.com</span><span style="font-family: 宋体">�?/span><span lang="EN-US">wocket.edu</span><span style="font-family: 宋体">合�ƈ�Q�这个方法就不能用了�Q�。如�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器是新安装的�Q�我�����你��用这�U�格式。再��h��意一下，如果你打�����用活动目录（</span><span lang="EN-US">Actrive Directory</span><span style="font-family: 宋体">�Q�，</span><span lang="EN-US">Microsoft</span><span style="font-family: 宋体">已经限制你必���M��用这�U�格式�?/span></p>
<br />
<h3><span style="font-family: 宋体">更上一层楼�Q�在目录树中怎么�l�织数据</span></h3>
<br />
<p><span style="font-family: 宋体">�?/span><span lang="EN-US">UNIX</span><span style="font-family: 宋体">文�g�pȝ��中，最��层是根目录�Q?/span><span lang="EN-US">root</span><span style="font-family: 宋体">�Q�。在根目录的下面有很多的文�g和目录。象上面介绍的那��P��</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录也是用同��L���Ҏ���l�织��h��的�?/span></p>
<br />
<p><span style="font-family: 宋体">在根目录下，要把数据从逻辑上区分开。因为历史上�Q?/span><span lang="EN-US">X.500</span><span style="font-family: 宋体">�Q�的原因�Q�大多数</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录�?/span><span lang="EN-US">OU</span><span style="font-family: 宋体">从逻辑上把数据分开来�?/span><span lang="EN-US">OU</span><span style="font-family: 宋体">表示&#8220;</span><span lang="EN-US">Organization Unit</span><span style="font-family: 宋体">&#8221;�Q�在</span><span lang="EN-US">X.500</span><span style="font-family: 宋体">协议中是用来表示公司内部的机构：销售部、胦务部�Q�等�{�。现�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">�q�保�?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">ou=</span><span style="font-family: 宋体">�q�样的命名规则，但是扩展了分�cȝ��范围�Q�可以分�c�Mؓ�Q?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">ou=people, ou=groups, ou=devices</span><span style="font-family: 宋体">�Q�等�{�。更低一�U�的</span><span lang="EN-US" style="color: black">OU</span><span style="font-family: 宋体">有时用来做更�l�的归类。例如：</span><span lang="EN-US" style="color: black">LDAP</span><span style="color: black; font-family: 宋体">目录树（不包括单独的记录�Q�可能会是这��L���Q?/span></p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp; </span>dc=foobar, dc=com </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=customers </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=asia </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=europe </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=usa </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=employees </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=rooms </p>
<br />
<p class="a"><span>&nbsp;&nbsp; </span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;ou=groups </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=assets-mgmt </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=nisgroups </p>
<br />
<p class="a"><span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>ou=recipes</p>
<br />
<h2><a name="_单独的LDAP记录"></a><span style="font-family: 黑体">单独�?/span><span lang="EN-US">LDAP</span><span style="font-family: 黑体">记录</span></h2>
<br />
<h3><span lang="EN-US">DN</span><span style="font-family: 宋体">�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">记录��的名字</span></h3>
<br />
<p><span style="font-family: 宋体">�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录中的所有记录项都有一个唯一�?#8220;</span><span lang="EN-US">Distinguished Name</span><span style="font-family: 宋体">&#8221;�Q�也���是</span><span lang="EN-US">DN</span><span style="font-family: 宋体">。每一�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">记录��的</span><span lang="EN-US">DN</span><span style="font-family: 宋体">是由两个部分�l�成的：相对</span><span lang="EN-US">DN</span><span style="font-family: 宋体">�Q?/span><span lang="EN-US">RDN</span><span style="font-family: 宋体">�Q�和记录�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录中的位置�?/span></p>
<br />
<p><span lang="EN-US">RDN</span><span style="font-family: 宋体">�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">中与目录树的�l�构无关的部分。在</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录中存储的记录��w��要有一个名字，�q�个名字通常存在</span><span lang="EN-US">cn</span><span style="font-family: 宋体">�Q?/span><span lang="EN-US">Common Name</span><span style="font-family: 宋体">�Q�这个属性里。因为几乎所有的东西都有一个名字，�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">中存储的对象都用它们�?/span><span lang="EN-US">cn</span><span style="font-family: 宋体">��g���?/span><span lang="EN-US">RDN</span><span style="font-family: 宋体">的基���。如果我把最喜欢的吃燕麦�_�食谱存��Z��个记录，我就会用</span><strong><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">cn=Oatmeal Deluxe</span></strong><span style="font-family: 宋体">作�ؓ记录��的</span><span lang="EN-US">RDN</span><span style="font-family: 宋体">�?/span></p>
<br />
<p><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">我的</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录的基�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">�?/span><strong><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">dc=foobar,dc=com</span></strong></p>
<br />
<p><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">我把自己的食�׃���?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的记录项存在</span><strong><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">ou=recipes</span></strong></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">我的</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">记录��的</span><span lang="EN-US">RDN</span><span style="font-family: 宋体">设�ؓ</span><strong><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">cn=Oatmeal Deluxe</span></strong></p>
<br />
<p><span style="font-family: 宋体">上面�q�些构成了燕麦粥食谱�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">记录的完�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">。记住，</span><span lang="EN-US">DN</span><span style="font-family: 宋体">的读法和</span><span lang="EN-US">DNS</span><span style="font-family: 宋体">��L��名类伹{��下面就是完整的</span><span lang="EN-US">DN</span><span style="font-family: 宋体">�Q?/span></p>
<br />
<p class="a"><strong><span lang="EN-US">cn=Oatmeal Deluxe,ou=recipes,dc=foobar,dc=com</span></strong></p>
<br />
<h3><span style="font-family: 宋体">举一个实际的例子来说�?/span><span lang="EN-US">DN</span></h3>
<br />
<p><span style="font-family: 宋体">现在为公司的员工讄���一�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">。可以用��Z��</span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">cn</span><span style="font-family: 宋体">�?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">uid</span><span style="font-family: 宋体">�Q?/span><span lang="EN-US">User ID</span><span style="font-family: 宋体">�Q�，作�ؓ典型的用户帐受���例如，</span><span lang="EN-US">FooBar</span><span style="font-family: 宋体">的员�?/span><span lang="EN-US">Fran Smith</span><span style="font-family: 宋体">�Q�登录名�Q?/span><span lang="EN-US">fsmith</span><span style="font-family: 宋体">�Q�的</span><span lang="EN-US">DN</span><span style="font-family: 宋体">可以��Z��面两�U�格式：</span></p>
<br />
<p class="a"><strong><span lang="EN-US">uid=fsmith,ou=employees,dc=foobar,dc=com</span></strong></p>
<br />
<p><em><span style="font-family: 宋体">�Q�基于登录名�Q?/span></em></p>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">�Q�以�?/span><span lang="EN-US">X.500</span><span style="font-family: 宋体">�Q�用</span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">uid</span><span style="font-family: 宋体">表示&#8220;</span><span lang="EN-US">User ID</span><span style="font-family: 宋体">&#8221;�Q�不要把它和</span><span lang="EN-US">UNIX</span><span style="font-family: 宋体">�?/span><span lang="EN-US">uid</span><span style="font-family: 宋体">��h؜淆了。大多数公司都会�l�每一个员工唯一的登录名�Q�因此用�q�个办法可以很好��C��存员工的信息。你不用担心以后�q�会有一个叫</span><span lang="EN-US">Fran Smith</span><span style="font-family: 宋体">的加入公司，如果</span><span lang="EN-US">Fran</span><span style="font-family: 宋体">改变了她的名字（�l�婚�Q�离婚？或宗教原因？�Q�，也用不着改变</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">记录��的</span><span lang="EN-US">DN</span><span style="font-family: 宋体">�?/span></p>
<br />
<p class="a"><strong><span lang="EN-US">cn=Fran Smith,ou=employees,dc=foobar,dc=com</span></strong></p>
<br />
<p><em><span style="font-family: 宋体">�Q�基于姓名）</span></em></p>
<br />
<p><span style="font-family: 宋体">可以看到�q�种格式使用�?/span><span lang="EN-US">Common Name</span><span style="font-family: 宋体">�Q?/span><span lang="EN-US">CN</span><span style="font-family: 宋体">�Q�。可以把</span><span lang="EN-US">Common Name</span><span style="font-family: 宋体">当成一个�h的全名。这�U�格式有一个很明显的缺点就是：如果名字改变了，</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">的记录就要从一�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">转移到另一�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">。但是，我们应该���可能地避免改变一个记录项�?/span><span lang="EN-US">DN</span><span style="font-family: 宋体">�?/span></p>
<br />
<h2><span style="font-family: 黑体">定制目录的对象类�?/span></h2>
<br />
<p><span style="font-family: 宋体">你可以用</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">存储各种�c�d��的数据对象，只要�q�些对象可以用属性来表示�Q�下面这些是可以�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">中存储的一些信息：</span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">员工信息�Q�员工的姓名、登录名、口令、员工号、他的经理的��d��名，邮�g服务器，�{�等�?/span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">物品跟踪信息�Q�计���机名�?/span><span lang="EN-US">IP</span><span style="font-family: 宋体">地址、标�{�、型受���所在位�|�，�{�等�?/span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">客户联系列表�Q�客��L��公司名、主要联�p�M�h的电话、传真和电子邮�g�Q�等�{��?/span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">会议厅信息：会议厅的名字、位�|�、可以坐多少人、电话号码、是否有投媄机�?/span></p>
<br />
<p><span lang="EN-US" style="font-family: Wingdings">l<span style="font: 7pt 'Times New Roman'; font-size-adjust: none; font-stretch: normal">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span><span style="font-family: 宋体">食谱信息�Q�菜的名字、配料、烹调方法以及准备方法�?/span></p>
<br />
<p><span style="font-family: 宋体">因�ؓ</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录可以定制成存储�Q何文本或二进制数据，到底存什么要�׃��自己军_���?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录用对象类型（</span><span lang="EN-US">object classes</span><span style="font-family: 宋体">�Q�的概念来定义运行哪一�cȝ��对象使用什么属性。在几乎所有的</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">服务器中�Q�你都要�Ҏ��自己的需要扩展基本的</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录的功能，创徏新的对象�c�d��或者扩展现存的对象�c�d���?/span></p>
<br />
<p><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录以一�p�d��&#8220;属性对&#8221;的�Ş式来存储记录��，每一个记录项包括属性类型和属性��|���q�与关系型数据库用行和列来存取数据有�Ҏ��的不同）。下面是我存�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录中的一部分食谱记录�Q?/span></p>
<br />
<p class="a"><span>&nbsp; </span>dn: cn=Oatmeal Deluxe, ou=recipes, dc=foobar, dc=com </p>
<br />
<p class="a"><span>&nbsp; </span>cn: Instant Oatmeal Deluxe </p>
<br />
<p class="a"><span>&nbsp; </span>recipeCuisine: breakfast </p>
<br />
<p class="a"><span>&nbsp; </span>recipeIngredient: 1 packet instant oatmeal </p>
<br />
<p class="a"><span>&nbsp; </span>recipeIngredient: 1 cup water </p>
<br />
<p class="a"><span>&nbsp; </span>recipeIngredient: 1 pinch salt </p>
<br />
<p class="a"><span>&nbsp; </span>recipeIngredient: 1 tsp brown sugar </p>
<br />
<p class="a"><span>&nbsp; </span>recipeIngredient: 1/4 apple, any type</p>
<br />
<p><span style="font-family: 宋体">��h��意上面每一�U�配料都作�ؓ属�?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">recipeIngredient</span><span style="font-family: 宋体">倹{�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录被设计成象上面那样�ؓ一个属性保存多个值的�Q�而不是在每一个属性的后面用逗号把一�p�d��值分开�?/span></p>
<br />
<p><span style="font-family: 宋体">因�ؓ用这��L��方式存储数据�Q�所以数据库���有很大的灵�z�L��，不必为加入一些新的数据就重新创徏表和索引。更重要的是�Q?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录不必��p��内存或硬盘空间处�?#8220;�I?#8221;域，也就是说�Q�实际上不��用可选择的域也不会花费你��M��资源�?/span></p>
<br />
<h2><a name="_作�ؓ例子的一个单独的数据��?></a><span style="font-family: 黑体">作�ؓ例子的一个单独的数据��?/span></h2>
<br />
<p><span style="font-family: 宋体">让我们看看下面这个例子。我们用</span><span lang="EN-US">Foobar, Inc.</span><span style="font-family: 宋体">的员�?/span><span lang="EN-US">Fran Smith</span><span style="font-family: 宋体">�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">记录。这个记录项的格式是</span><span lang="EN-US">LDIF</span><span style="font-family: 宋体">�Q�用来导入和导出</span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">目录的记录项�?/span></p>
<br />
<p class="a"><span>&nbsp; </span>dn: uid=fsmith, ou=employees, dc=foobar, dc=com</p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: person</p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: organizationalPerson</p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: inetOrgPerson</p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: foobarPerson</p>
<br />
<p class="a"><span>&nbsp; </span>uid: fsmith</p>
<br />
<p class="a"><span>&nbsp; </span>givenname: Fran</p>
<br />
<p class="a"><span>&nbsp; </span>sn: Smith</p>
<br />
<p class="a"><span>&nbsp; </span>cn: Fran Smith</p>
<br />
<p class="a"><span>&nbsp;</span>&nbsp;cn: Frances Smith</p>
<br />
<p class="a"><span>&nbsp; </span>telephonenumber: 510-555-1234</p>
<br />
<p class="a"><span>&nbsp; </span>roomnumber: 122G</p>
<br />
<p class="a"><span>&nbsp; </span>o: Foobar, Inc.</p>
<br />
<p class="a"><span>&nbsp; </span>mailRoutingAddress: fsmith@foobar.com</p>
<br />
<p class="a"><span>&nbsp; </span>mailhost: mail.foobar.com</p>
<br />
<p class="a"><span>&nbsp; </span>userpassword: {crypt}3x1231v76T89N</p>
<br />
<p class="a"><span>&nbsp; </span>uidnumber: 1234</p>
<br />
<p class="a"><span>&nbsp; </span>gidnumber: 1200</p>
<br />
<p class="a"><span>&nbsp; </span>homedirectory: /home/fsmith</p>
<br />
<p class="a"><span>&nbsp; </span>loginshell: /usr/local/bin/bash</p>
<br />
<p><span style="font-family: 宋体">属性的值在保存的时候是保留大小写的�Q�但是在默认情况下搜索的时候是不区分大���写的。某些特�D�的属性（例如�Q?/span><span lang="EN-US">password</span><span style="font-family: 宋体">�Q�在搜烦的时候需要区分大���写�?/span></p>
<br />
<p><span style="font-family: 宋体">让我们一点一点地分析上面的记录项�?/span></p>
<br />
<p class="a"><span lang="EN-US">dn: uid=fsmith, ou=employees, dc=foobar, dc=com</span></p>
<br />
<p><span style="font-family: 宋体">�q�是</span><span lang="EN-US">Fran</span><span style="font-family: 宋体">�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">记录��的完整</span><span lang="EN-US">DN</span><span style="font-family: 宋体">�Q�包括在目录树中的完整�\径�?/span><span lang="EN-US">LDAP</span><span style="font-family: 宋体">�Q�和</span><span lang="EN-US">X.500</span><span style="font-family: 宋体">�Q����?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">uid</span><span style="font-family: 宋体">�Q?/span><span lang="EN-US">User ID</span><span style="font-family: 宋体">�Q�，不要把它�?/span><span lang="EN-US">UNIX</span><span style="font-family: 宋体">�?/span><span lang="EN-US">uid</span><span style="font-family: 宋体">��h؜淆了�?/span></p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: person </p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: organizationalPerson </p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: inetOrgPerson </p>
<br />
<p class="a"><span>&nbsp; </span>objectclass: foobarPerson</p>
<br />
<p><span style="font-family: 宋体">可以��Z�Q何一个对象根据需要分配多个对象类型�?/span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">person</span><span style="font-family: 宋体">对象�c�d��要求</span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">cn</span><span style="font-family: 宋体">�Q?/span><span lang="EN-US">common name</span><span style="font-family: 宋体">�Q�和</span><span lang="EN-US" style="font-size: 10.5pt; color: black; font-family: 'Courier New'">sn</span><span style="font-family: 宋体">�Q?/span></p>
&nbsp;
 <img src ="http://www.aygfsteel.com/yifeng/aggbug/229406.html" width = "1" height = "1" /><br><br><div align=right><a style="text-decoration:none;" href="http://www.aygfsteel.com/yifeng/" target="_blank">忆风</a> 2008-09-17 13:44 <a href="http://www.aygfsteel.com/yifeng/archive/2008/09/17/229406.html#Feedback" target="_blank" style="text-decoration:none;">发表评论</a></div>]]></description></item></channel></rss>                                                                                                                                                                                                               <footer>
<div class="friendship-link">
<a href="http://www.aygfsteel.com/" title="&#29408;&#29408;&#20037;&#20037;&#20122;&#27954;&#27431;&#32654;&#19987;&#21306;&#95;&#20013;&#25991;&#23383;&#24149;&#20122;&#27954;&#32508;&#21512;&#20037;&#20037;&#50;&#48;&#50;&#95;&#22269;&#20135;&#31934;&#21697;&#20122;&#27954;&#31532;&#20116;&#21306;&#22312;&#32447;&#95;&#26085;&#26412;&#20813;&#36153;&#32593;&#31449;&#35270;&#39057;">&#29408;&#29408;&#20037;&#20037;&#20122;&#27954;&#27431;&#32654;&#19987;&#21306;&#95;&#20013;&#25991;&#23383;&#24149;&#20122;&#27954;&#32508;&#21512;&#20037;&#20037;&#50;&#48;&#50;&#95;&#22269;&#20135;&#31934;&#21697;&#20122;&#27954;&#31532;&#20116;&#21306;&#22312;&#32447;&#95;&#26085;&#26412;&#20813;&#36153;&#32593;&#31449;&#35270;&#39057;</a>

</div>

</footer>


��վ֩���ģ�壺
<a href="http://" target="_blank">ī�񹤿���</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">��³ľ����</a>|
<a href="http://" target="_blank">��ɽ</a>|
<a href="http://" target="_blank">��̶��</a>|
<a href="http://" target="_blank">����</a>|
<a href="http://" target="_blank">ƽ����</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">���</a>|
<a href="http://" target="_blank">��ʯ��</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">����</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">��Ƥ��</a>|
<a href="http://" target="_blank">�ű���</a>|
<a href="http://" target="_blank">�彧��</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">�괨��</a>|
<a href="http://" target="_blank">ԭ����</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">����</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">��Դ��</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">��ˮ��</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">ƽ����</a>|
<a href="http://" target="_blank">����</a>|
<a href="http://" target="_blank">�ϰ���</a>|
<a href="http://" target="_blank">����</a>|
<a href="http://" target="_blank">�������</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">ͨ����</a>|
<a href="http://" target="_blank">��Զ��</a>|
<a href="http://" target="_blank">��ɽ��</a>|
<a href="http://" target="_blank">������</a>|
<a href="http://" target="_blank">�ߴ���</a>|
<a href="http://" target="_blank">����</a>|
<script>
(function(){
    var bp = document.createElement('script');
    var curProtocol = window.location.protocol.split(':')[0];
    if (curProtocol === 'https') {
        bp.src = 'https://zz.bdstatic.com/linksubmit/push.js';
    }
    else {
        bp.src = 'http://push.zhanzhang.baidu.com/push.js';
    }
    var s = document.getElementsByTagName("script")[0];
    s.parentNode.insertBefore(bp, s);
})();
</script>
</body>