CEG 2400 Fall 2012 Directory Services - LDAP eDir LDAP Active Directory
LDAP (Lightweight Directory Access Protocol) LDAP is a protocol, Now at version 3 Strictly speaking, though, LDAP isn't a database at all, but a protocol used to access information stored in an information directory LDAP directory servers soon followed Different NOSs can share and be accessed by using this protocol
LDAP Directory Servers They use LDAP to access the information stored in a directory database They all have the same characteristics Object Thing or person associated with network Attributes Properties associated with object Values Information stored in attributes 3
LDAP Directory Servers Schema Set of definitions of the kinds of objects and object-related information contained in directory Two types of definitions: Classes (object classes): identifies object type specified in directory Attributes: stores information about object 4
Schema elements associated with a User account object 5
LDAP Directory Servers Containers (OUs or organizational units) Logically defined receptacles Assemble similar objects Account User record containing all properties LDAP standard Directories and its contents form trees Tree Logical representation of multiple, hierarchical levels within directory Root, branches, leafs 6
Identifying and Organizing Network Elements A directory tree 7
LDAP Directory Servers Advantages Cross-platform support Standards-based LDAP aware applications Open Source
LDAP Directory Servers An example of an individual LDAP entry dn: uid=fsmith, ou=employees, dc=foobar, dc=com objectclass: inetOrgPerson uid: fsmith givenname: Fran sn: Smith cn: Fran Smith telephonenumber: 510-554-1234 mailAddress: fsmith@foobar.com userpassword: {crypt}3x1231v76T89N
Summary Commonly used protocol Objects, Attributes, Schema Used with directory services Objects, Attributes, Schema Containers and Leaf objects
Directory Services - LDAP eDir LDAP Active Directory Questions