Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have different account types:

  • Personal - For employees
  • Sponsored - For users that are affiliated with the organization but not official employees
  • E-mail only - Only for e-mail usage (campaigns, etc)
  • Shared - For offices or departments

Right now, we use an Oracle database to distinguish account types but are looking to move this information into LDAP.

Anyone aware of a schema and attribute that would be applicable to denote these accounts?

Schemas currently loaded: Default OpenLDAP schemas along with the eduPerson and eduOrg schemas.

share|improve this question
up vote 2 down vote accepted

The employeeType of the inetOrgPerson objectclass would appear to be the appropriate field.

You may be able to determine E-mail only by lack of certain fields.

share|improve this answer
I ended up going with userClass, part of the cosine schema: – Belmin Fernandez Dec 2 '10 at 1:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.