1 / 24

LIGHT WEIGHT DIRECTORY ACCESS PROTOCOL

LIGHT WEIGHT DIRECTORY ACCESS PROTOCOL. Presented by Chaithra H.T. TOPICS. Introduction History Why LDAP? Architecture How does LDAP works? Technology Utilities Conclusion. Introduction.

perine
Télécharger la présentation

LIGHT WEIGHT DIRECTORY ACCESS PROTOCOL

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. LIGHT WEIGHT DIRECTORY ACCESS PROTOCOL Presented by Chaithra H.T

  2. TOPICS • Introduction • History • Why LDAP? • Architecture • How does LDAP works? • Technology • Utilities • Conclusion

  3. Introduction • LDAP, the Lightweight Directory Access Protocol, is a client-server protocol for accessing and managing directory information. • Directory is a set of objects with attributes organized in a logical and hierarchical boundaries depending on the model chosen. • LDAP is based on the X.500 standard.

  4. It is an internet protocol runs over TCP/IP. • It is an open protocol, applications need not to worry about the type of server hosting the directory. • The directory structure is a specialized database which is optimized for browsing, searching, locating and reading information.

  5. History • X.500 is the OSI directory standard. • X.500 defines the Directory Access Protocol. • The size and complexity of DAP makes it difficult to run on smaller machines. • LDAP was designed to remove some of the burden of X.500.

  6. Why LDAP? • It access through a simpler TCP/IP model. • A mobile user may initiate a database lookup over the Internet . • It was given its lightweight name because it can be easily implemented over the internet due to its lightweight bandwidth usage.

  7. Unlike the directory structure, which allows the user access to all the information available, LDAP allows information to be accessed only after authenticating the user. • It also supports privacy end integrity security services.

  8. HOW DOES LDAP WORKS? • LDAP directory service is based on client-server model. • LDAP is a message oriented protocol. • Client constructs an LDAP message containing a request and sends it to the server.

  9. Server processes the request and sends it back to the client in the form of LDAP message. • Client initiates a session with the LDAP server. • Client specifies a name or an IP address and port of the LDAP server. • Client specifies user name and password.

  10. ARCHITECTURE

  11. Client requests information. • Server1 returns referral to server2 • Client resend request to server2 • Server2 returns information to client

  12. X.500 • Information model • A namespace • A functional model • An authentication framework • A distributed operation model

  13. General purpose, standards- based directories • X.500 • RFC 1497 • SLDAPD

  14. Request For Comments: RFC 4510 LDAP is an Internet protocol for accessing distributed directory services . Request For Comments: RFC 4515 LDAP defines a network representation of a search filter transmitted to an LDAP server. Request For Comments: RFC 4516 LDAP describes it as Uniform Resource Locator(URL). Technology

  15. Associated technology • The technology associated LDAP are in the integration of LDAP with DCE • This reduces administrative support concerns and the duplication of resources that accompanies server administration

  16. Trends • It is evolving into a more intelligent network structure called a Directory Enable Network (DEN). • It separates the logical properties from physical components.

  17. Utilities • LDAPMODIFY • LDAPADD • LDAPCHANGEPWD • LDAPSEARCH • LDAPDELETE

  18. LDAPMODIFY & LDAPADD : Invoking LDAPADD is equivalent to invoking LDAPMODIFY with -a flag turned on. • Syntax :ldapmodify [-a] [-b] [-c]

  19. LDAPCHANGEPWD: It is a modify password tool. • Syntax: ldapchangepwd [-h ldaphost] [-n newpassword]

  20. LDAPSEARCH: search the entries in LDAP server. • Syntax: ldapsearch [-p ldapport] [-dn]

  21. LDAP CONFIGURATION • The configuration FILE SLAPD.OC.CONF contains the definition of all the object classes. • The attributes of the object classes are defined in SLAPD.AT.CONF FILE.

  22. LDAP ACCESS CONTROL • Access to <what> [ by <who> <access level> <control> ]. • This directive grants access to a set of entries/attributes by one or more requesters. • Example: Access To * by * Read. • The above directive gives read permission to everyone.

  23. Conclusion • LDAP provides a low-overhead method of accessing the X.500 directory. • It runs over TCP, eliminating much of the connection set-up. • It has an excellent future as a directory access protocol.

  24. Thank you

More Related