why does ldap have all these funny two letter codes [closed]

As it currently stands, this question is not a good fit for our Q&A format. We expect answ开发者_高级运维ers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance. Closed 11 years ago.

couldn't they make it simple, all you need is just uid and passwd, but they have all this stuff like cn and dn and base dn, it's too complicated

: dc=,dc= objectclass: dcObject objectclass: organization o: dc:

dn: cn=Manager,dc=,dc= objectclass: organizationalRole cn: Manager

---

As for the 2-letter-codes: To keep the format terse. There is "no reason" (except to not annoy the system admins more than necessary ;-) why full names couldn't have been forced.

Now as to the complexity (and it is complex!) and why all these different parts exist? Well, that's just LDAP:

The complexity and power of LDAP comes from the fact that there are bucket loads of attributes and bucket loads of objectclasses liberally scattered round in apparently randomly (and invariably unhelpfully) named schemas.

That is, LDAP is not just a user/password scheme.

Happy coding.