Search code examples
directoryldapldap-query

Is it normal for an LDAP extract to have multiple OUs for a single record?

I have an LDAP extract with records that are in the format: CN=, OU=, OU=, OU=, and so on with up to 8 OUs! Some also have two CNs...

Solution

  • Sure, no problem, my DIT has

    dc=com,dc=mydomain,ou=Users,ou=Customers,ou=clientnameXXX,cn=userNameYYY

    for example, reading it backwards.

    But I would add that any DIT that goes 8 deep is probably over-organised. All the books warn against it using it to mirror your organisational structure, for example.