KNOCK KNOCK KNOCKING ON LDAP'S DOOR, PART 2

摘要

In part one of Knock, Knock, Knocking on LDAP's Door, (MacTech September, '05) I examined some of the new additions to Open Directory III such as DACs (Directory Access Controls) and Schema Replication which enabled customized LDAP directories to be replicated across networks, titillating us with the promise of an enterprise-wide structure of Organizational Units (OUs) within a single LDAP directory, which up until OS X (Tiger) Server 10.4, seemed only like a pipe dream. The benefits of OUs harkens back to the days of NetInfo directory domains in OS X Server 10.1 and 10.2 that were often deployed in hierarchies that tended to look a lot like the following diagram.