Configuration Guide › LDAP User Store Management › User, Group, and Organization Managed Object Descriptions › Managed Object Descriptions › Containers › Containers and Well-Known Attributes

Containers and Well-Known Attributes

Well-known attributes are attributes that have special meaning in CA IdentityMinder. When CA IdentityMinder manages a user store including containers, the following well-known attributes identify information about the container:

%ORG_MEMBERSHIP%

Identifies the attribute that stores the full name (DN) of the container.

For example, the full name resembles as:

ou=People, ou=Employee, ou=NeteAuto, dc=security, dc=com

%ORG_MEMBERSHIP_NAME%

Identifies the attribute that stores the user-friendly name of the attribute.

For example, the user-friendly name of the container in the previous example is People.

These well-known attributes appear in the attribute descriptions in the User Object and Group Object sections of the directory.xml file, as follows:

 <ImsManagedObjectAttr physicalname="someattribute" description="Organization" displayname="Organization" valuetype="String" required="true" wellknown="%ORG_MEMBERSHIP%" maxlength="0" permission="WRITEONCE" searchable="false" /> 

For hierarchical user store structures, the physicalname and wellknown parameters are mapped to the well-known attribute as follows:

<ImsManagedObjectAttr physicalname="%ORG_MEMBERSHIP%" description="Organization" displayname="Organization" valuetype="String" required="true" wellknown="%ORG_MEMBERSHIP%" maxlength="0" permission="WRITEONCE" searchable="false" /> 

The example indicates that CA IdentityMinder automatically derives the container DN and user-friendly name from other information in the directory.xml file.

For flat user store structures, supply the physical attribute names.

Note: See How to Describe a Flat User Directory Structure for instructions.