mapping of objectGUID

GUID is Globally Unique Identifier. In Active Directory, every object that is created is assigned a GUID which is never changed.

In a Directory, the distinguished name is the primary key for object identification. Distinguished Name is comprised of the identifier of the object (e.g. CN=foobar) followed by the containers the object resides inside in a bottom-up order (CN=Users,DC=acme,DC=com). The GUID in AD acts as more permanent identifier because objects can be relocated to other areas of the tree, which changes the DN of the object.

In practical terms, Active Directory will prevent IDM from creating objects with the same identifer in the same container OR the same GUID. Some ADSI functionality uses the GUID, which may be why IDM includes it in the ResourceInfo.

jsallee at 2007-7-7 2:20:48 >