Suffix DN

A suffix is a distinguished name (DN) that identifies the top entry in a locally held directory hierarchy. Because of the relative naming scheme used in LDAP, this DN is also the suffix of every other entry within that directory hierarchy. A directory server can have multiple suffixes, each identifying a locally held directory hierarchy; for example, o=ibm,c=us.

Note: The specific entry that matches the suffix must be added to the directory. For example, if you add o=ibm,c=us as a suffix, you must add the following entry into the database before data can be loaded into the database for that suffix:

dn: o=ibm,c=us
objectclass: top
objectclass: organization
o: ibm

Entries to be added to the directory must have a suffix that matches the DN value, such as ou=Marketing,o=ibm,c=us. If a query contains a suffix that does not match any suffix configured for the local database, the query is referred to the LDAP server that is identified by the default referral. If no LDAP default referral is specified, an Object does not exist result is returned.