what are the different ldap objectclass that can be used to create ldap user?

LEX Online Manual Content

• Introduction to LEX
  • First steps
    • License Splashscreen
    • ReadOnly PopUp
    • Outset LDAP Connection
  • LEX GUI Elements
    • The Treeview Panel
      • Reloading the Tree Structure
      • Hiding the Tree Structure
      • The currently selected Container
    • The Object List Panel
      • Reloading the Object Listing
      • Object List Scope
      • Object List Filter
      • Object Names Display
      • Object Aspect Columns
      • Sorting the Object Listing
      • Object Icons
    • The Attribute List Panel
      • Showing and Hiding the Attribute List
      • Aspect Listing Position
      • Refreshing the Attribute List Contents
      • Aspect Listing Filter
    • The Address Bar
    • The Command Button Bar
    • The Status Bar
    • The Attribute Window
      • Attribute Window Hotkeys
      • Attribute Window Control Buttons
      • Refreshing the Attribute Window Contents
      • Attribute Window Filter
      • Text Output
  • Command Line Parameters
• Control Buttons
  • Treeview Buttons
  • Object List Buttons
  • Attribute Listing Buttons
  • Attribute Window Buttons
• Menu Aid
  • Connection Card
    • Connect
    • Relieve
    • New LEX
    • Disconnect
    • Connection Info
    • Attributes
    • RootDSE
    • Get out
  • Edit Menu
    • Copy Attribute Proper name
    • Copy Attribute Value
    • Paste Aspect
    • Search
    • Undelete
    • Set Password
    • Permissions
    • New Object
    • Delete Object
    • Motility Object
    • Rename Object
    • Add New Attribute
    • Add together Array Member
    • Remoe Aspect
    • Set empty Value
    • Quick Edit Value
    • Edit Attribute Value
  • View Carte
    • Set Attribute every bit List Cavalcade
    • Column Field Chooser
      • Object blazon
      • Appointment modified
      • Modifiers name
      • Date created
      • Creators Name
      • More
      • Load Cavalcade Prepare
      • Salve Column Set
    • Filter Display for this Attribute
    • Jump to Object
    • Toolbars
      • Address Bar
      • Push button Bar
      • Status Bar
    • Directory Tree
    • Attribute List
    • List Output Settings
      • Show Objects in all Subcontainers
      • Testify Friendly Object Names
      • Testify DNs in Novell Annotation
      • Show Hex Output for Attributes with Hex Values
    • Attribute Output Settings
      • Show Hex Output for Attributes with Hex Values
      • Show just Attribute that accept Values
      • Show Multivalued Attributes
    • Refresh
    • Reload Entire Tree
  • Favorites Carte du jour
    • Add to Favorites
    • Organize Favorites
    • Sort past Name
  • Tools Carte
    • Use in Filter Mill
    • Select for Compare
    • Compare with...
    • Directory Export - Object List
    • Directory Consign - Aspect List
    • Directory Import - LDIF
    • Filter Factory
    • TreeMap Manufactory
    • Observation Manufacturing plant
    • Pipage Factory
    • Additional Infos/Tools
      • Resolve SID Attributes to Objects
      • Converter for numeric values
      • Converter for hex values
      • Converter for GUID values
      • Converter for SID values
    • Options
  • Help Menu
    • Index
    • Search
    • Online Support
    • Check for Updates
    • Activate existing License
    • About
• Application Options
  • General Tab
  • LDAP Settings Tab
  • Object Filter Tab
  • Aspect Filter Tab
  • Container Classes Tab
  • Aspect Syntaxes Tab
  • Linked Attributes Tab
  • Dialog Settings Tab
  • Colors Tab
• Application Hotkeys
• Connecting to LDAP Servers
  • The LDAP Connections Dialog
    • Server Tab
    • Advanced Tab
    • Attribute Filter Tab
    • Column Tabs
  • Connection Profiles
  • LDAPS / LDAP over SSL
• Working with LDAP Objects
  • Creating Directory Objects
  • Renaming Directory Objects
  • Moving Directory Objects
  • Deleting Directory Objects
  • Editing Multiple Objects
  • LDAP Object Classes
  • LDAP Attributes
    • Aspect Syntaxes
    • Aspect Editors
      • Cord Editor
      • Integer Editor
      • Boolean Editor
      • DN Editor
      • Generalized Timestring Editor
      • Binary / Hex Editor
      • Password Editor
      • Bitmap Editor
      • GUID Editor
      • Microsoft Security Descriptor Editor
      • Microsoft Access Control Entry Editor
      • Microsoft SID Editor
      • Microsoft Large Integer Editor
      • Microsoft Interval Editor
      • Microsoft Timestamp Editor
      • Microsoft DN with Binary Editor
      • Microsoft DN with String Editor
      • Novell Object ACL Editor
      • Novell Path Editor
      • Novell EMail Address Editor
      • Novell Timestamp Editor
      • Novell Backlink Editor
      • Novell Typed Name Editor
      • Flag Aspect Editor
    • Operational Attributes
    • Binary Attributes
    • Displaying Multivalued Attributes
    • Displaying Hex/Octetstring Attributes
    • Displaying DN Attributes
    • Displaying Unused Attributes
  • Undeleting Active Directory Objects
    • AD Tombstone Downtime
    • Advertizing Recycle Bin
  • Copy and Paste of Attribute Values
• Working with LDAP Directories
  • ReadOnly Way
  • Directory Tree Caching
  • Container Grade Evaluation
• Building LDAP Filters
  • LDAP Filter Syntax
  • The Filter Manufacturing plant
  • The Filter Constructor
  • The Unmarried Filter Editor
  • Famous Filters
• Searching The Directory
  • Search Results
  • Searching the Global Catalog in Advertizing Environments
• Comparing Objects
  • Compare Window Hotkeys
  • Compare Window Command Buttons
• Exporting Directory Data
  • Exporting Object Listing Data
  • Exporting Aspect Listing Data
• Importing Directory Data
• Licensing Contract for Users

LDAP Object Classes

Each object in an LDAP directory has at least i object class associated with it. The object class determines the characteristics of this object, in particular the set of attributes which the object can take (and the ones it must have).

The object classes are defined in the LDAP directory schema - they constitute a grade hierarchy there, there is one central top level class (which is called ' top '), all other classes are derived from that.

This leads to the fact that normally each object of a sure class has really all the parent classes also as associated classes. You run into this if you lot look at the ' objectClass ' attribute which exists for all objects in all LDAP directories:

One of these object classes is the primary class which defines the nature of the object and which is sometimes is called 'structural class'. Some directories store an attribute named structuralClass for each object - in other directory environment you tin can derive the master object class from the order in which the classes are stored in the multi-valued attribute objectClass. LEX tries to evaluate the main form for each object according to the current directory blazon. Yous tin run into the consequence in the object list column Object Type:

---

Class Types and Attributes

LEX tin can evaluate the Structural Course of each object - and the superior classes from which this grade is derived. These superior classes are called Abstruse Classes. Additionally, there can be Auxiliary Classes associated with an object.

All this classes together define a sure ready of attributes for each object. LEX loads information about the directory schema, this is done in the first seconds of each LDAP connection to a new LDAP server. If the schema information could be evaluated correctly, LEX knows exactly the complete set up of attributes for each type of object in this directory, including the characteristics of attributes: Is it mandatory, is information technology operational, is it indexed? ...and and then on.

---

Object Classes in the Creation Process

If you lot create an LDAP directory object, you ave to specify the structural (=the main) object course for this object - according to this LEX shows yous what attributes can be prepare and have to be set up in the creation process.

You volition detect that LEX besides associate several object classes with the object, according to the class hierarchy described in the paragraphs above. This can be done because LEX performed the internal directory schema evaluation at the commencement of the connection:

Please note that in Microsoft Agile Directory environments there could be auxiliary classes associated with an object class without being listed in the objectClass aspect of the regarding objects. Look for example at an AD user object: It has the object classes user, organizationalPerson, person and top.

In fact an Active Directory user has as well the auxiliary object form securityPrincipal, in Substitution environments, there could be the auxiliary form mailRecipent, among with several other mail specific classes. You don't have to be worried nigh these auxiliary classes in the object cosmos, LEX knows them and shows you lot the right set of attributes.

---

Adding an Object Class to an existing Object

In many LDAP directory environments, y'all can add auxiliary classes to an existing object. At that place could be normal inetOrgPerson objects in an OpenLDAP directory for example, which y'all want to 'expand' to posix users or samba users. And so you would have to add together the object form sambaUser or posixUser to the regarding objects.

Delight be careful when you expand objects with new object classes. There might exist intrinsic rules about the valid combinations of object classes in the directory - peradventure an object cannot be used anymore correctly afterward the object class expansion. It is very likely that is difficult to remove an associated object grade from an object, so don't practise this if you do non know the consequences for the regarding objects.

You tin add object classes to existing objects past editing the objectClass attribute. Only select this aspect of the regarding object in the aspect list in the LEX master window or in an standalone attribute window, and utilise the carte choice Edit - Add Array Member, or but press the PLUS fundamental on your keyboard or use the Add Add attribute element to an array push .

In this case, information technology'due south non the normal aspect editor which appears. Instead, the Add New Object Form to Object dialog is shown:

So yous tin can choose an object form from the drib down list at the Objectclass text box. LEX knows what attributes this object grade can take and prove y'all the appropriate list. Some object classes may have must-have attributes which you lot have to set in this dialog- without these mandatory attributes yous will probably go an error when you try to add the object class.

peacockreste1943.blogspot.com

Source: http://www.ldapexplorer.com/en/manual/107060000-ldap-object-classes.htm

Share this post