Download LDAP- Lightweight Directory Access Protocol

LIGHT WEIGHT DIRECTORY
ACCESS PROTOCOL
Presented by
Chaithra H.T
TOPICS








Introduction
History
Why LDAP?
Architecture
How does LDAP works?
Technology
Utilities
Conclusion
Introduction

LDAP, the Lightweight Directory Access
Protocol, is a client-server protocol for
accessing and managing directory
information.

Directory is a set of objects with attributes
organized in a logical and hierarchical
boundaries depending on the model chosen.

LDAP is based on the X.500 standard.

It is an internet protocol runs over TCP/IP.

It is an open protocol, applications need not
to worry about the type of server hosting the
directory.

The directory structure is a specialized
database which is optimized for browsing,
searching, locating and reading information.
History

X.500 is the OSI directory standard.

X.500 defines the Directory Access Protocol.

The size and complexity of DAP makes it difficult
to run on smaller machines.

LDAP was designed to remove some of the
burden of X.500.
Why LDAP?

It access through a simpler TCP/IP model.

A mobile user may initiate a database lookup over the
Internet .

It was given its lightweight name because it can be easily
implemented over the internet due to its lightweight
bandwidth usage.


Unlike the directory structure,
which allows the user access to all
the information available, LDAP
allows information to be accessed
only after authenticating the user.
It also supports privacy end
integrity security services.
HOW DOES LDAP
WORKS?

LDAP directory service is based on clientserver model.

LDAP is a message oriented protocol.

Client constructs an LDAP message
containing a request and sends it to the
server.

Server processes the request and sends it back to
the client in the form of LDAP message.

Client initiates a session with the LDAP server.

Client specifies a name or an IP address and port
of the LDAP server.

Client specifies user name and password.
ARCHITECTURE




Client requests information.
Server1 returns referral to server2
Client resend request to server2
Server2 returns information to client
X.500





Information model
A namespace
A functional model
An authentication framework
A distributed operation model
General purpose,
standards- based
directories



X.500
RFC 1497
SLDAPD
Technology

Request For Comments: RFC 4510
LDAP is an Internet protocol for accessing distributed
directory services .

Request For Comments: RFC 4515
LDAP defines a network representation of a search
filter transmitted to an LDAP server.

Request For Comments: RFC 4516
LDAP describes it as Uniform Resource Locator(URL).
Associated technology


The technology associated LDAP
are in the integration of LDAP with
DCE
This reduces administrative
support concerns and the
duplication of resources that
accompanies server administration
Trends


It is evolving into a more intelligent
network structure called a
Directory Enable Network (DEN).
It separates the logical properties
from physical components.
Utilities

LDAPMODIFY

LDAPADD

LDAPCHANGEPWD

LDAPSEARCH

LDAPDELETE

LDAPMODIFY & LDAPADD :
Invoking LDAPADD is equivalent to
invoking LDAPMODIFY with -a flag
turned on.

Syntax :ldapmodify [-a] [-b] [-c]

LDAPCHANGEPWD: It is a modify
password tool.

Syntax: ldapchangepwd [-h ldaphost]
[-n newpassword]

LDAPSEARCH: search the entries in
LDAP server.

Syntax: ldapsearch [-p ldapport] [-dn]
LDAP
CONFIGURATION

The configuration FILE SLAPD.OC.CONF
contains the definition of all the object
classes.

The attributes of the object classes are
defined in SLAPD.AT.CONF FILE.
LDAP ACCESS
CONTROL




Access to <what> [ by <who> <access
level> <control> ].
This directive grants access to a set of
entries/attributes by one or more requesters.
Example: Access To * by * Read.
The above directive gives read permission to
everyone.
Conclusion

LDAP provides a low-overhead method of accessing the
X.500 directory.

It runs over TCP, eliminating much of the connection setup.

It has an excellent future as a directory access protocol.
Thank you