Previous Topic: LDAP Search Filter BasicsNext Topic: Output Parameters


Common LDAP Attribute Names

Some common LDAP attributes are listed below. The complete list of LDAP object classes and attributes used in the LDAP server schema is located on the LDAP server.

LDAP Attribute Name

Description

cn

Common Name attribute, which contains the name of the object

dc

Domain Component attribute

objectClass

Object Class attribute, which contains the LDAP type(s) of the object

distinguishedName

Distinguished Name attribute in Active Directory

This is the attribute that uniquely identifies the object in the Active Directory.

entrydn

Distinguished Name attribute in LDAP servers (other than Active Directory)

This is the attribute that uniquely identifies the object in an LDAP server.

o

Organization Name attribute which contains the name of the organization

ou

Organizational Unit Name attribute which contains the name of the organizational unit

sn

Surname attribute which contains the family name of an individual

givenName

First name attribute which contains the first name of an individual

personalTitle

Personal Title attribute which contains the personal title of a person

Examples of personal titles are "Mr", "Dr", "Prof" and "Rev".

initials

Initials attribute which contains the initials of some or all of an individual's names, but not the surname(s)

uid

User ID attribute

userPassword

Password attribute which contains a user's password

Passwords are stored using an Octet String syntax and are not encrypted.

title

Title attribute which specifies the designated position or function of the object within the organization

mail

Mail attribute which contains a user's email address

company

Company or organization name attribute

department

Department Name attribute

manager

Boss, manager attribute

mobile

Mobile Phone number attribute

homephone

Home Phone number attribute

telephoneNumber

Telephone Number attribute

facsimileTelephoneNumber

Fax Number attribute

postalAddress

Postal Address attribute, which contains information required for the physical delivery of postal messages

postalCode

Postal Code attribute

If this attribute value is present it will be part of the object's postal address.

c

Country Name attribute which contains a two-letter ISO 3166 country code

l

Locality Name attribute which contains the name of a locality, such as a city, county or other geographic region

st

State Or Province Name attribute

street

Street attribute which contains the physical address of the object, such as an address for package delivery

owner

Owner attribute which specifies the name of some object which has some responsibility for the associated object

The value is a Distinguished Name

description

Description attribute which contains a human-readable description of the object

seeAlso

See Also attribute.

serialNumber

Serial Number attribute which stores the serial number of a device

member

The member attribute is used in entries defining groups

It has Distinguished Name syntax, so each value is effectively a pointer to another entry in the directory. Note that the standard groupOfNames object class makes the member attribute mandatory. As attributes cannot have empty values, this effectively requires all groups to have at least one member at all times.

uniqueMember

The uniqueMember attribute is similar to the Member attribute stated above, and it is used to store the unique members in a groupOfUniqueNames object

sAMAccountName

Old NT 4.0 logon name attribute (Active Directory only), which must be unique in an Active Directory domain

LastLogonTimeStamp

Last Logon Time Stamp attribute (Active Directory 2003/2008 only), which contains the last logon date of a user; but it is replicated across all domain controllers only after a period of time defined in the msDS-LogonTimeSyncInterval attribute of the Active Directory

LastLogon

Last Logon attribute (Active Directory only), which contains the last logon date of a user but it is NOT replicated across all domain controllers