Changes

Jump to: navigation, search

stoney core: OpenLDAP directory data organisation

758 bytes added, 12:50, 21 July 2021
/* nextfreeuid */
=== nextfreeuid ===
The entry <code>cn=nextfreeuid,ou=administration,dc=stoney-cloud,dc=org</code> stores the next free UID (Unique Identifier). The UID <code><uid></code> is unique over the whole directory and is enforced through the directory and is incremented by one.<source lang="'ldif"'>
dn: cn=nextfreeuid,ou=administration,dc=stoney-cloud,dc=org
objectclass: sstNextFreeUID
uidNumber: 3724591
</source>
 
The following table describes the different attributes:
{| border="1" style="border-collapse: collapse; font-size:80%;" width="100%" class="wikitable sortable"
! style="text-align:left; width: 180px" | Attribute
! style="text-align:left; width: 220px" | Objectclass
! style="width: 80px" | Existance
! style="width: 80px" | Mandatory
! style="text-align:left;" | Description
 
|-
| cn
| ...
| <center>MUST</center>
| <center>x</center>
| The name of the leaf.
 
For the next free uid, this is: <code>nextfreeuid</code>.
 
|-
| uid
| ...
| <center>...</center>
| <center>x</center>
| ...
 
|}
 
Legend:
* '''x''': Mandatory in all cases.
Before using this attribute <code>uidNumber</code>, you need to be sure, that your directory server actually supports atomic increments (LDAP Modify-Increment). See [https://www.iana.org/assignments/ldap-parameters/ldap-parameters.xhtml Lightweight Directory Access Protocol (LDAP) Parameters] and [https://tools.ietf.org/html/rfc4525 Lightweight Directory Access Protocol (LDAP) Modify-Increment Extension (RFC4525)].
The following search should tell you, if you LDAP server supports the LDAP Modify-Increment Object Identifier Descriptor (OID 1.3.6.1.1.14):
<source lang='bash'>ldapsearch -H ldaps://ldapm.stepping-stone.ch -b "" -s base -D "cn=Manager,dc=stoney-cloud,dc=org" -W \* + | grep 1.3.6.1.1.14</source>
<source lang='bash'>supportedFeatures: 1.3.6.1.1.14</source>
Options:
3,368
edits