[plug] LDAP Design thoughts

[Tim]

I'm posting this to the main list hoping someone with some experience
can offer suggestions.

Basically we are implementing a LDAP directory to hold our membership database.
I've created a new objectClass to hold payments (just basic details,
amount, date, description).

What I'm trying to work out, is the best place to store these objects.
If I store them underneath each user, then they are automatically
connected to the user, and I don't need to store a reference between
the users and their payments (and the reverse).
Or, I can store them in another organisational unit, and store a link.

The first option could look like

Users dn
cn=user,ou=Users,dc=plug,dc=org,dc=au

Payment dn's
paymentid=34,cn=user,ou=Users,dc=plug,dc=org,dc=au
paymentid=121,cn=user,ou=Users,dc=plug,dc=org,dc=au
paymentid=422,cn=user,ou=Users,dc=plug,dc=org,dc=au

The second would have payments like so:
paymentid=34,ou=Payments,dc=plug,dc=org,dc=au
paymentid=121,ou=Payments,dc=plug,dc=org,dc=au
paymentid=422,ou=Payments,dc=plug,dc=org,dc=au

This second way would require another attribute (most likely in each
payment) referring back the user who's payments they are.

Is there any reason for one over the other? Efficiency? Structural organisation?

Thanks

Tim
-- 
Timothy White - Somewhere in Australia