NetWare Directory Services

2-11
Understanding NetWare Directory Services
The Hierarchical Directory Tree
The [Root] object can also be a trustee. Most likely, however, you will not
assign trustee rights to the [Root] object. If you do, every object in the tree
has the same rights as the [Root] object by virtue of inheritance. In effect,
you assign every user that logs in rights to the [Root] object. See “Security
Equal To” in this chapter for more information.
Container Objects
Container objects hold (or contain) other Directory objects. Container
objects are a means of logically organizing all other objects in the Directory
tree. Just as directories are used to group related files together in a file
system, container objects are used to group related objects in the Directory
tree.
A container object that contains other Directory objects is known as a parent
object.
There are four types of container objects, defined as follows:
• Country (C). The Country object designates the countries where your network
resides and organizes other objects within the country. Country objects can be
placed only immediately below the [Root] object and their names are limited to
two characters.
Country objects are optional. They are typically used only if your organization
spans multiple countries or if you must include a Country object to interact with
other X.500 specification compliant directory services. For more information,
see”NDS and the X.500 Specification” in this chapter.
You can use a Country object to designate the country where your organization
headquarters reside or, if you have a multinational network, to designate each
country that is part of your network.
Because of the following considerations, you should plan to use a Country
object only if your environment requires one:
Country objects add an extra organizational level to the name of each object in
your Directory tree. For more information, see”Context and Names” in this
chapter.
Country objects require you to use typeful names instead of typeless names
when referring to contexts within your Directory tree.
• Locality (L). The Locality object designates the location where this portion of
your network resides and organizes other objects within the location.