topics that matter; ideas worth sharing

share a tip, submit a link, add something new

LDAP in action, Part 1

March 26, 2001, 04:11 PM —  LinuxWorld.com — 

If you've ever worked in a small business, you've no doubt come to realize that a good operations manager can make all the difference in the world. The operations manager can be counted on to know at all times what is happening within the business, where important files are located, who to contact for various
business services, and who can take care of a particular task or
problem. Although perhaps not completely versed in all the technical details of the business, this person is usually very resourceful, and it's usually well understood that he or she is the one to talk to when you really need results.

From a software point of view, this is exactly what the Lightweight
Directory Access Protocol (LDAP) does. This technology is the key to creating better enterprise networks. It's a simple protocol that acts as a storehouse of information for applications, but is also important enough to become a central part of modern operating system services. It binds together system information, distributed across multiple computers, with system services and client applications that make it simpler to access user preferences, application configuration data, and security configuration data, and to locate services on the network.



This article will give you an up-close look at how LDAP works
and advise you on how to design the information hierarchy
and deployment of your LDAP services. If you're unfamiliar
with LDAP, you may want to peruse the Resources section at the end of this article.

LinuxWorld.com links


LDAP applications and use



LDAP was designed to contain small records of information in a
hierarchical structure. This structure appears much like the directory tree of a filesystem, with individual nodes containing attributes and connecting to other subtrees. However, unlike the multimegabyte files in most user directories, the nodes in an LDAP tree are usually pretty small.



Unlike existing database systems, LDAP is not designed to hold many
hundreds of thousands of entries. It might be best to think of LDAP as a hierarchically organized lightweight database. An LDAP server may use a small embedded database to contain its information for faster access, but it's nothing like the large commercial databases such as Oracle, Sybase, DB/2 or SQL Server.



To date, there are still only a handful of native LDAP servers. These
include the OpenLDAP server (Linux), Innosoft's Distributed Directory
Server (Linux), Netscape Directory Server (coming to Linux), Sun
Microsystems's Directory Services (Solaris), IBM's DSSeries LDAP
Directory (AIX), and the University of Michigan's SLAPD (various forms of Unix). There are a number of other directory service systems that also support LDAP queries. These include Novell's NetWare Directory Services (NDS) 3.0, Microsoft's Active Directory (AD), and Lotus Domino. These primarily use proprietary APIs, but also provide interfaces for LDAP communications. Microsoft's AD, for example, uses

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff
Featured Sponsor

Get a broad understanding of important regulations and how you can make sure your site is in adherence.





Learn how VeriSign SGC-enabled SSL Certificates can help improve site security and customer confidence in the free white paper, "How to Offer the Strongest SSL Encryption." In this paper you will learn the differences between weak and strong encryption and what they mean for your site's performance.

Get VeriSign's free white paper: "The Latest Advancements in SSL Technology" and learn about the benefits of strong SSL encryption, Extended Validation (EV) SSL and security trust marks and what these SSL offerings can do for your site.

Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in this free VeriSign white paper.

More Resources