LDAP is a set of rules that computers and networked devices can adhere to access common information over a network. For example, classic case can be employee-information which might be stored in a directory so that people and applications can locate their contact information. Such contact information might include email addresses and fax numbers, or even additional data that unambiguously identifies employees’ attempts to access enterprise applications.
Thus we can say that a directory is simply a collection of information (mind that information is meaningful collection of data).
Computer applications often have their own directories. For example, we can store usernames and passwords in a data file, which is thus a directory of users.
LDAP – Light Weight Directory Access Protocol was developed in early 1990s as directory protocol. LDAP provides client-server access to directories over a computer network and is therefore a directory service. In addition to offering the ability to search and read information, it defines a way to add, update, and delete information in a directory.
LDAP Structure can be understood by dividing into,
– Information model
– Naming model
– Functional model
Information model defines what kind of information can be stored in directory and how that information is structured. Data in LDAP is organised in a hierarchical tree. Each node in this tree is called an ENTRY and first entry is called ROOT. An entry is a named collection of attributes, which have type and value.
Example: objectclass = person requires sn (surname), cn (common name) and allows a list of other attributes.
An entry can be located in LDAP by specifying either the distinguished name (dn) or the relative distinguished name (rdn). The dn is the full LDAP tree path whereas the rdn is just a unique identifier for a specific entry in the tree.
Naming model defines how information is organized and referenced. Like domain names, the name of any entry should be unique across all LDAP servers. Position of entry in a hierarchy given by it’s distinguished name (DN). Each component of a DN is called a relative distinguished name (RDN).
Functional model defines how directory information is retrieved and modified. It supports authentication (bind , unbind), search, and updates (add, Delete, modify).
Continued to Part 2 … Happy Learning !!!
