Poul Etto wrote:

As we store a lot of information in our LDAP server, we are looking to
simplify and optimize our LDAP strucutre.

Actually we have plenty OUs (like people and vpn shown hereunder) and lot
of fields are duplicate (same fields with same content in different OUs).
As this is not optimum and makes us push any change for a user into all
concerned OUs, we woul like to use aliasing to avoid duplicating entries:

There are entry aliases which are somewhat problematic though.

But why do you have such tree structure?

BTW: Using 'extensibleObject' disables schema checking. This is bad practice.

Ciao, Michael.