We're using LDAP to store user profiles. Each person has several
associations, and each person has several atrtibutes that are different
for each association. (E.g. a person might have an office location in
different orgunits.)

I don't think a multivalue attribute on the user profile directly will
work. We would need to label each attribute in that case.

What would be the best way to store such attributes? Can we store these
with a separate entry for each peron / ou association?

We could reference these separate entries either by the convention that
their dn is the dn for the user profile + the attribute, eg. the dn for
the person would be "dn: uid=veimot o=aerius.com" and the dn for the
attributes relative to the Payroll association would be "dn= uid=veimot,
o=aerius.com ou=Payroll".

What does the expert say on this?
--
- Torgeir



Reply via email to