Directory information tree

A directory information tree (DIT) is data represented in a hierarchical tree-like structure consisting of the Distinguished Names (DNs) of directory service entries.

Both the X.500 protocols and the Lightweight Directory Access Protocol (LDAP) use directory information trees as their fundamental data structure.

Typically, an X.500 or LDAP deployment for a single organization will have a directory information tree that consists of two parts:

  • a top level name structure for the name of the organization itself
  • a representation of the data model structure within the organization