Ldap connections, how? ou cn ugh!

[reggiep]

I really am not getting this at all, I have always managed to fluke my way through connecting to ladp in the past on things like moodle.
Anyway i have installed zimbra on our mac server (well why not, it§s just sat there doing nothing) and I am now following the wiki on how to authenticate zimbra to active directory. My proiblem is I am not sure how to convert the following in the script...

banned = 'CN=Banned,CN=yourschool,DC=sch,DC=uk'
# an OU for banned users
scope = 'ou=users,dc=yourschool,dc=sch,dc=uk'
#the search scope
domain = "yourschool.sch.uk" # "example.com"

I have a CC3 network with the following structure...

prentonhigh.internal > establishments > prh > students > yeargroup

Can someone explain to me how I convert that in to cns and ous and dcs?

Thanks.

Reg via logme in on home computer as edugeek is still blocked by LA!!!!

[powdarrmonkey]

ou=yeargroup,ou=students,ou=prh,ou=establishments,dc=prentonhigh,dc=internal

(assuming that yeargroup is an OU, not a security group)

[DMcCoy]

I really am not getting this at all, I have always managed to fluke my way through connecting to ladp in the past on things like moodle.
Anyway i have installed zimbra on our mac server (well why not, it§s just sat there doing nothing) and I am now following the wiki on how to authenticate zimbra to active directory. My proiblem is I am not sure how to convert the following in the script...

banned = 'CN=Banned,CN=yourschool,DC=sch,DC=uk'
# an OU for banned users
scope = 'ou=users,dc=yourschool,dc=sch,dc=uk'
#the search scope
domain = "yourschool.sch.uk" # "example.com"

I have a CC3 network with the following structure...

prentonhigh.internal > establishments > prh > students > yeargroup

Can someone explain to me how I convert that in to cns and ous and dcs?

Thanks.

Reg via logme in on home computer as edugeek is still blocked by LA!!!!

working backwards for OUs, dc will be the domain suffix

so

for a user in that location

cn=user,ou=Yeargroup,ou=students,ou=prh,ou=establi shments,dc=prentonhigh,dc=internal

search path would just not have the cn= at the front. You can use cn with groups too

[reggiep]

Thanks guys I§ll give that a go!

Still a bit confused but the mist is clearing slowly

[reggiep]

Can I ask what the difference is between a cn and an ou?

[Geoff]

cn = common name (usually a username or computer)
ou = organisational unit

[powdarrmonkey]

You might also come across a distinguished name. Common names only identify an object according to its location; a dn must be unique across the directory.