LDAP
LDAP, Lightweight Directory Access Protocol, is an internet protocol that email and other programs use to look up information from a server. LDAP is based on the standards contained within the X.500 standard, but is simpler. Moreover, it is not like X.500. LDPA can support TCP/IP, which is necessary for any type of internet access. LDAP is an open protocol, so applications need not worry about the type of server hosting directory.
LDPA features
Client-Server Communication – When a client transmits a protocol request for operation to be performed to the server, the server performs the some operations in its directory and after that the server returns a response containing results or errors to the client.
TCP (as the transporting protocol) – The server implements a mapping of LDAP over TCP in which LDAP message PDUs are mapped directly onto the TCP byte stream, and provides a protocol listener for the mode of operation on IP port 389.
SSL over TCP (as the transporting protocol) – The server implements a mapping of LDAP over SSL over TCP in which the LDAP Message PDUs are mapped directly onto the SSL byte stream, and provide a protocol listener for the mode of operation on IP port 636.
Transport Security (startTLS) – The server allows a client to perform a Start TLS operation, and negotiates Transport Layer Security (TLS) as a result.
Hi Phone, I think that this is a very good post on LDAP Security Feature. I like how you kept it short and simple and make it go straight to the point. However it would be so much better for our own understanding that you include a diagram and explain it to us. Thank you.
ReplyDeleteZahidah