Zhang Weiwu <[EMAIL PROTECTED]> kirjoitti:
Do you mean using a special attribute on business branch entry,
value of which is a DN referring to a person in ou=people?

No.


Or do you mean adding an attribute to each person entry which is a DN
referring to the business branch this person is working for?

Not exactly. I would do it more like this:


dc=foo,dc=com
.  |
.  +-ou=business units
.   |     |
.   |     +-ou=marketing
.   |      |
.   |      +-ou=sales
.   |
.   +-ou=people
.         |
.         +-john doe
.             cn: john doe
.             businessUnit: marketing


Then when you program a data-driven web application for your HR group to manage people, 
you build a drop-down box of business units which are found in the above branch, so there 
is no free text entry here. The objects in "ou=business units" could contain a 
very small amount of metadata, such as description, and no child objects.

I hope this helps.


BR,
Mike

http://www.netauth.com - LDAP Directory Consulting

---
You are currently subscribed to ldap@umich.edu as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.

Reply via email to