How to design an LDAP schema?

I want to use a LDAP repository as login backend for a portal. Is there a sample schema I can use?

• I want to switch Jenkins-CI from a local user db, for this I need to define user groups in the LDAP.

• Answer:

  (Note, I'm not a heavy Jenkins users, but I'm hoping that this will at least be helpful...) Most systems either provide you a way to define which attributes in the schema one can use for username, pw, etc or expect to use one of the RFC standard schemas such as posixUser. Groups tend to be trickier, but there are essentially four ways in which applications tend to use/accept groups: groupOfUniqueNames nisNetgroups posixGroup individual DNs under some sort of container DN I believe in the case of Jenkins, it requires the user of filters for both username and group definitions.  Also see https://wiki.jenkins-ci.org/display/JENKINS/Standard+Security+Setup on some (sort of ridiculous, really) requirements around group naming.