couldn’t they make it simple, all you need is just uid and passwd, but they have all this stuff like cn and dn and base dn, it’s too complicated
: dc=,dc=
objectclass: dcObject
objectclass: organization
o:
dc:
dn: cn=Manager,dc=,dc=
objectclass: organizationalRole
cn: Manager
As for the 2-letter-codes: To keep the format terse. There is “no reason” (except to not annoy the system admins more than necessary 😉 why full names couldn’t have been forced.
Now as to the complexity (and it is complex!) and why all these different parts exist? Well, that’s just LDAP:
That is, LDAP is not just a user/password scheme.
Happy coding.