Mar 26, 2018

An LDAP directory has entries that contain information pertaining to entities. Each attribute has a name and one or more values. The names of the attributes are mnemonic strings, such as cn for common name, or mail for email address. For example, a company may have an employee directory. Each entry in the employee directory represents an employee. is the name of LDAP object on FortiGate (not actual LDAP server name!) For username/password, use any from the AD. However, it is recommended (at least at the first stage) to test credentials used in the LDAP object itself. Before we start, lets just clarify exactly what a distinguished name is and what the purpose of it is. The purpose of a distinguished name is to provide a unique 'path' to any object in the LDAP database that is Active Directory. The component "cn=Test2" is an object whose Common Name is "Test2". The moniker "cn" means Common Name. Similarly, the moniker "dc" means domain component. The component "dc=MyDomain" is a domain component with the name "MyDomain". As an example, the Distinguished Name "cn=Joe Smith,ou=East,dc=MyDomain,dc=com" has four components. A distinguished name (usually just shortened to “DN”) uniquely identifies an entry and describes its position in the DIT. A DN is much like an absolute path on a filesystem, except whereas filesystem paths usually start with the root of the filesystem and descend the tree from left to right, LDAP DNs ascend the tree…

A distinguished name (usually just shortened to “DN”) uniquely identifies an entry and describes its position in the DIT. A DN is much like an absolute path on a filesystem, except whereas filesystem paths usually start with the root of the filesystem and descend the tree from left to right, LDAP DNs ascend the tree from left to right.

LDAP Namespace Structure | Understanding Active Directory The common name cn=CSantana is an example of an RDN. So is cn=CSantana,cn=Users. The RDN serves the same purpose as a path fragment in a filename. It is a convenient navigational shortcut. Two objects can have the same RDN, but LDAP has a rule that no two objects can have the same DN. This makes sense if you think of the object-oriented nature

LDAP and JNDI: Together forever | InfoWorld

active directory - How can we increase Common-Name