skip to main content
Infrastructure Division of Information Technology

Directory Services Attribute

Last Name (sn)

Attribute details

LDAP sn attribute properties, usage and population rules
Definition: The last name of the account holder (i.e. surname).
Attribute Name: 'sn' 'surname'
OID: 2.5.4.4
URN: urn:oid:2.5.4.4
Multiple Values: Multi-valued (treated as Single-valued)
Format: Directory String {32768}
The UTF-8 character set is used to encode name values.
Search Syntax: EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch
Controlled Vocabulary: not applicable
Source: Enterprise Directory People Branch/White Pages Directory People Branch/AUTH Directory People Branch/Azure Directory People Branch:
If (present in EDW feed) AND preferredLastName IS NOT NULL ⇒ preferredLastName
else, lastName value provided by all data sources.

Enterprise Directory Affiliates Branch:
Entry is created with lastName last provided by a campus data source. The surname stored in the entry is updated every time account holder activates/reactivates account via the Former Student Account Activation application.
Enterprise Directory Sponsored Affiliates Branch:
Surname value provided by sponsor. The account holder can update the surname after activating the account via the Guest Account Activation application.

Directory-specific details

LDAP sn attribute properties that are dependent on directory branch or object class configuration
  Enterprise Directory
People Branch
White Pages Directory
People Branch
Directory URL: ldap.tamu.edu operator.tamu.edu
Object Class: person person
Required: yes yes
Indexing: Presence (pres): Improves searches for entries that contain the indexed attribute.
Equality (eq): Improves searches for entries that contain an attribute that is set to a specific value.
Substring (sub): Improves searches for entries that contain a specified substring.
Presence (pres): Improves searches for entries that contain the indexed attribute.
Equality (eq): Improves searches for entries that contain an attribute that is set to a specific value.
Substring (sub): Improves searches for entries that contain a specified substring.
Access: Access to Enterprise Directory restricted. If tamuEduSuppress is set to administrative or name, nonauthenticated (anonymous) users have no access.
Otherwise, nonauthenticated users have read access.
(White Pages Directory supports anonymous binds only.)
Usage: directory search web service directory search
Example(s): College College
LDAP sn attribute properties that are dependent on directory branch or object class configuration, continued
  Enterprise Directory
Affiliates Branch
Enterprise Directory
Sponsored Affiliates Branch
Directory URL: ldap.tamu.edu ldap.tamu.edu
Object Class: person person
Required: yes yes
Indexing: Presence (pres): Improves searches for entries that contain the indexed attribute.
Equality (eq): Improves searches for entries that contain an attribute that is set to a specific value.
Substring (sub): Improves searches for entries that contain a specified substring.
Presence (pres): Improves searches for entries that contain the indexed attribute.
Equality (eq): Improves searches for entries that contain an attribute that is set to a specific value.
Substring (sub): Improves searches for entries that contain a specified substring.
Access: Access to Enterprise Directory restricted. Access to Enterprise Directory restricted.
Usage: directory search web service account activation
Example(s): College College
LDAP sn attribute properties that are dependent on directory branch or object class configuration, continued
  AUTH Directory
People Branch
Azure Directory
People Branch
Directory URL: auth.tamu.edu tamucs.onmicrosoft.com/tamu.edu
Object Class: person person
Required: yes yes
Indexing: Presence (pres): Improves searches for entries that contain the indexed attribute.
Equality (eq): Improves searches for entries that contain an attribute that is set to a specific value.
Substring (sub): Improves searches for entries that contain a specified substring.
Presence (pres): Improves searches for entries that contain the indexed attribute.
Equality (eq): Improves searches for entries that contain an attribute that is set to a specific value.
Substring (sub): Improves searches for entries that contain a specified substring.
Access: Authenticated accounts have read access. Authenticated accounts have read access.
Usage: application account management application account management
Example(s): College College