1、 KS X 41011 KSKSKSKS SKSKSKS KSKSKS SKSKS KSKS SKS KS 1：, KS X 41011 : 2007 (2012 ) 2007 11 30 http:/www.kats.go.krKS X 41011：2007 : ( ) ( ) SJ ( ) : (JTC1/SC6) () ( ) SK KS X 41011：2007 : (http:/www.standard.go.kr) ： ：1992 12 31 ：2007 11 30 ：2012 12 28 ： 2012-0797 ： (JTC1/SC6) ( 02-509-7262) (http:
2、/www.kats.go.kr). 10 5 , . KS X 41011：2007 i 1 1 2 1 3 .2 4 .3 5 .3 6 (DIB)5 7 .6 7.1 .7 7.2 7 7.3 .8 7.4 .8 7.5 .9 8 .9 8.1 9 8.2 10 8.3 10 9 13 A() .14 A.1 14 A.2 14 A.3 .14 A.4 17 .18 KS X 41011 : 2007 (2012 ) 1：, Information technology Open systems interconnection The directory Part 1 ：Overview
3、of concepts, models and services 1 1.1 OSI , , . ( ). . , , OSI . 1.2 , . , “ ” . , . . . 1.3 , . ( ) . 2 . . ( ) . KS X 3002, KS X 4002, 1(ASN.1) ISO/IEC 95942, Information technologyOpen Systems InterconnectionThe Directory：Models ISO/IEC 95943, Information technologyOpen Systems InterconnectionTh
4、e Directory：Abstract service definition ISO/IEC 95944, Information technologyOpen Systems InterconnectionThe Directory：Procedures for distributed operation KS X 41011：2007 2 ISO/IEC 95945, Information technologyOpen Systems InterconnectionThe Directory：Protocol specifications ISO/IEC 95946, Informat
5、ion technologyOpen Systems InterconnectionThe Directory：Selected attribute types ISO/IEC 95947, Information technologyOpen Systems InterconnectionThe Directory：Selected object classes ISO/IEC 95948, Information technologyOpen Systems InterconnectionThe Directory：Authentication framework ISO/IEC 9072
6、1, Information processing systemsText communicationRemote OpreationsPart 1： Model, notation and service definition ISO/IEC 90722, Information processing systemsText communicationRemote OperationsPart 2： Protocol specification 3 . 3.1 OSI KS X 3002 . a) (applicationentity) b) (applicationlayer) c) (a
7、pplicationprocess) d) (application protocol data unit) e) (application service element) 3.2 . a) (directory) b) (directory information base：DIB) c) ( ) (directory) user , 3.3 ISO/IEC 95942 . a) (Administration Directory Management Domain：ADDMD) b) (alias) c) (attribute) d) (attribute type) e) (arttr
8、ibute value) f) (Directory Information Tree：DIT) g) (Directory Management Domain：DMD) h) (Directory System Agent：DSA) KS X 41011：2007 3 i) (Directory User Agents：DUA) j) (distinguished name) k) (entry) l) (name) m) () object (of interest) n) (Private Directory Management Domain：PRDMD) o) (Relative D
9、istinguished Name：RDN) p) (root) q) (directory schema) r) (subordinate object) s) (superior entry) t) (superior object) u) (tree) 3.4 ISO/IEC 95944 . a) (chaining) b) (multicasting) c) (referral) 4 . ADDMD (Administration Directory Management Domain) DAP (Directory Access Protocol) DIB (Directory In
10、formation Base) DIT (Directory Information Tree) DMD (Directory System Agent) DSP (Directory System protocol) DUA (Directory User Agent) OSI (Open Systems Interconnection) PRDMD (Private Directory Management Domain) PSAp (Presentation Service Access Point) RDN (Relative Distinguished Name) 5 5.1 . (
11、 ) . (DUA) . 1 . KS X 41011：2007 4 1 , . , 1 . . . , . 5.2 (DIB) . DIB 6. . 5.3 . 7. . DUA . 5.4 . 8. . . 5.5 ( DUA) . . 9. . 5.6 . , , . , . . a) 2 . 1 . . ISO/IEC 95946 ISO/IEC 95947 . b) . A . KS X 41011：2007 5 6 (DIB) . DIB ISO/IEC 95942 . 6.1 DIB . DIB ( ) , 1 . , 1 1 . . 6.2 DIB , (DIT) . ( )
12、 , , , . DIT . . 6.3 . . () . 6.4 . . , . 6.5 DIB . , . 6.6 2 DIT . KS X 41011：2007 6 2 DIT 3 DIT 6.7 3 DIT . . (C L) (O) “Laser Printer” . C=GB, L=Winslow, O=Graphic Services, CN=Laser Printer “Jone Jones” . C=GB, L=Winslow, CN=Jone Jones 6.8 DIT , DIT , , . , . . . 7 . ISO/IEC 95943 . () C ： O ： L
13、 ： CN ： OU ： DIT KS X 41011：2007 7 7.1 7.1.1 DUA . DUA . 7.3 7.4 . 7.2 . . (ISO/IEC 95943 ). (7.5 ). 7.1.2 . . a) b) ( ) c) d) e) DIB . 7.1.3 ( ) DIB . 7.1.4 . , . 7.2 7.2.1 . , , , , . 7.2.2 . . , . 7.2.3 . 1 . . KS X 41011：2007 8 7.3 7.3.1 . . , DUA . 7.3.2 . . , . 7.3.3 . 7.3.4 . . 7.3.5 , . , .
14、7.4 7.4.1 ( ) DIT . . , ( ) . . 7.4.2 DIT . , , . 7.4.3 KS X 41011：2007 9 . . DIB . , . 7.4.4 (RDN) DIT ( ) RDN . 7.5 7.5.1 , . . . (, ) , . 7.5.2 DUA ( ) , . , DUA , . DUA (8.3.3.2 ) . DUA . . 8 . ISO/IEC 95942 . ISO/IEC 95944 . 8.1 4 . KS X 41011：2007 10 4 (DSA) OSI , DUA DSA DIB . DSA DSA . DSA D
15、SA . DSA . 8.2 8.2.1 1 DSA 0 DUA (DMD) . DMD , . 8.2.2 DSA ISO/IEC 95942 ISO/IEC 95948 . DMD DSA DMD DSA . 8.2.3 DMD DMD(ADDMD) DMD(PRDMD) . 8.3 8.3.1 DUA 1 DSA , . DUA DSA . DUA DSA . ( ) DSA . DUA DSA . DSA DSA . 8.3.2 DSA DUA . DUA DSA . 8.3.3 5 7 . KS X 41011：2007 11 8.3.3.1 5 a) DSA C DSA A DSA
16、 A DSA B DUA . 5 b) DUA DSA C DSA C DSA A . DSA C DUA (DSA B ) . DSA C DSA B DUA . a) b) 5 8.3.3.2 6 DSA . DSA DSA . (DSA B) KS X 41011：2007 12 6 8.3.3.3 7 . DUA DSA 2 DSA . DSA . 7 8.3.4 7.3.3 . 5 DSA . 8 . 8 KS X 41011：2007 13 9 . DUA DSA OSI ISO/IEC 95945 . 9.1 2 . a) DUA DUA (DAP) b) 2 DSA (DSP) 9.2 . DAP . 9.3 . (ISO/IEC 90721 ) . , DAP DSP . KS X 41011：2007 14 A () A.1 . A.1 “ ” . OSI , . , . a) , . 1) . 2) (, ) . 3) , , . b) , . ,
