LDAP
LDAP, or the Lightweight Directory Access Protocol, is a networking protocol for accessing and managing a distributed directory service, like a phonebook for network resources such as users, printers, and servers. It uses a hierarchical tree structure to organize information and allows for operations like searching, adding, and modifying entries. Organizations use LDAP for central authentication, allowing users to log in once to access multiple applications and services.
Key concepts
Protocol: LDAP is a set of rules for how clients can communicate with directory servers.
Directory Service: A database that stores information about network resources in a structured way, organized like a tree.
Hierarchical structure: Information is arranged in a tree, with a root at the top and branches for different organizational units, users, and other entries.
Attributes: Each entry in the directory has attributes that define it, such as cn (common name), sn (surname), mail (email address), and telephone Number.
Operations: LDAP defines standard operations for interacting with the directory, including searching, adding, deleting, and modifying entries.
Authentication: A common use is for authentication, where a user’s credentials are sent to an LDAP server to verify their identity before granting access to an application or service.