1. LDAP Lightweight Directory Access Protocol

2. What is a Directory?

3. A Specialized Data Store • For data that is "mostly" read, less frequently updated • Optimized for read (vs. a general purpose database supporting airline reservation or banking applications which require high-volume real-time updates) • More static info than dynamic • Client-server based • Replicates data with "Loose consistency"

5. A Directory is NOT

6. Data that "belongs" in a Directory

7. Data that is a poor match for a Directory

8. LDAP Directories

9. LDAP Standard

10. Information Model Elements

11. Information Model - Syntaxes

13. Example

14. LDAP Object Classes

15. Object Class Inheritance

16. Structural Object Class

17. Entry Creation from Structural Object Classes

18. Abstract Object Classes

19. Abstract Object Classes • Cannot be used to create directory entries • Typically used as a "Parent" for other Object Classes to define mandatory and optional attributes for subclasses (children) • Top: contains a mandatory attribute - objectclass • Every object class is a "child" of top • Every entry in the directory must therefore contain a value for the objectclass attribute

20. Auxiliary Object Classes • An entry cannot be created from an Auxiliary class • An auxiliary class is a collection of attributes that can be attached to other directory entries • Provides a way to extend a structural object class without changing its definition in the schema • Can be attached to an entry at the time the entry is created • Can be attached at a later time • More than one auxiliary class can be attached to an entry

21. Entry Creation from Structural and Auxilliary Object Classes

22. Querying the Schema

23. Modifying the Schema

24. Example

25. Extending the Schema

26. Extending the Schema

27. LDAP Naming Model

28. Directory Entries are Organized into a Tree Structure

29. Naming LDAP Entries

30. DIT Naming

31. DIT Naming

32. DIT Naming Model

33. Relationships between Entries

34. Relationships between Entries

35. Relationships between Entries

36. Functional Model

37. Search operation

38. Search operation

39. Functional Model - Search

40. LDIF Files

41. LDIF Syntax

42. LDIF Describing a Directory Entry

43. LDIF to Change Directory Entries

44. LDIF to Change Directory Entries

45. External Interfaces

46. Directory Security

47. Security Model (2)

48. Authorization

50. Why Directory is Important