This section gives an overview of LDAP from a user's perspective. The LDAP directory service model is based on entries . The DN is used to refer to the entry unambiguously. Each of the entry's attributes has a type and one or more values . The values depend on what type of attribute it is.
Entries representing countries appear at the top of the tree.
Below them are entries representing states or national organizations. Below them might be entries representing people, organizational units, printers, documents, or just about anything else you can think of. Figure 1 shows an example LDAP directory tree, which should help make things clear. An example LDAP directory tree. In addition, LDAP allows you to control which attributes are required and allowed in an entry through the use of a special attribute called objectclass .