Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Active Directory, OpenLDAP or Apple's Open Directory have different schemas for holding user info and group membership. Having a Open Directory here I can say for example that user's Distinguished Name is attribute dn, while it seems to be distinguishedName for AD.

Is there a site that references how the main DS hold the info, and if not why not start to list them here? I searched for it but couldn't find it.

I'm looking for the following:

  • User
    • distinguished name
    • email address
    • username (aka login)
    • real name (aka full name)
  • Group
    • member list
share|improve this question
up vote 4 down vote accepted

You would have to look at documentation from each vendor, and your own internal documentation as well.
LDAP schemas can be (and often are) extensively customized to meet local needs.

For AD

MSDN Topic (includes a list of classes/attributes)

For Open Directory/OS X

There's a whole sub-chapter on Open Directory

LDAP In General

This page has a good list - See in particular:
RFC 2256 (LDAP Schema)
RFC 2307 (LDAP as a Network Information Service
RFC 4519 (Even More LDAP Schema Extensions)
If you use sudo there are LDAP extensions for that too

share|improve this answer
Great answer, thanks a lot – CharlesB May 22 '12 at 15:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.