What is an LDAP ?
LDAP is an abbreviated term for Lightweight Directory Access Protocol. This protocol is used to access directory services. LDAP runs over TCP/IP or other connection oriented transfer services.
LDAP can be considered to be a directory without much difference than any database, but holding more detailed, attribute based information. The data in a directory is usually read more as compared to that is added to it. Hence, they are built to offer a faster response to higher volumes of look-ups and search operations. The capability of mirroring the information over a greater scale for the purpose of enhancing the availability and reliability and in the meantime cutting down the time required for responding to queries. For such directories it is important to have a proper scheduling and synchronization.
Various methods of providing directory services exists. These methods enable users to store different types of information within the directory and placing various attributes on the way the information can be grabbed and updation can be achieved, and avoiding unauthorized accessibility.
Working of LDAP
The LDAP directory service makes use of the client-server model. Single or more that one LDAP servers can contain the data constituting the LDAP directory database. An LDAP client would get connected to an LDAP server and request for information. In return, the LDAP server would respond either by providing the information or would direct the requester somewhere he can get the information.
Most of the popular email clients offer a personal address book, but if you have never sent or received an email from a particular address, you do not have a scope for its look up. Hence it becomes difficult for any organization to maintain a central updated phone book that can be accessible to all. This gave rise to LDAP servers. With it, client programs can search for entries in the LDAP databases by different means. These servers are capable of indexing every data in their entries, and can filter information based on the person or group of your requirement, and provide the required information.
This should not be mis-understood that LDAP only be limited to offering contact information or information related to individuals. LDAP also offers look up for encrypted certificates, pointers to printers and related services over a network, and allow a single sign-on where a single password for a user is used for multiple services. It is suitable for all sorts of directory-like information, where fast look-ups and less-frequent updates are the norm.
There are basic 3 levels of Lightweight Directory Access Protocol servers, namely (i) Large Public servers; (ii) Large organizational servers at universities and corporations and (iii) Smaller LDAP servers for workgroups. Though LDAP does not bring to your doorstep an email address book but, it is still considered to be one of the chosen standards for communicating record-based, directory-like data between programs.
Benefits of LDAP
A. Consolidation – The primary benefit of opting for LDAP is its capability to allow users use a single directory of information about users data and access it via. various services. A single LDAP directory can be used for emails, samba, squid, web browsers, etc. Hence allowing you to save a large amount of time.
B. Directory Information - LDAP enables users to add additional information to the directory which the company wishes to offer. Data such as phone numbers, addresses, office location, etc. can be added to the directory.
C. Speed – The LDAP directory system is built to produce faster reading. Hence allowing each process making use of this directory would in-turn work faster.
D. Security – LDAP offers support for Secure Socket Layers(SSL) and Transport Layer Security (TLS) hence enabling exchange of information via. secure mediums.
E. Lightweight – If compared to X.500 system, LDAP is considered to be lighter in weight. LDAP has less overhead than the X.500 standard. This was possible due to the mapping of LDAP in the network layer on port 389. Whereas the X.500 was mapped to the application layer hence holds the capacity to hold more information. Fewer number of operations are carried out by LDAP than X.500. Hence making it simpler for programmers and implementation and connection to more services.

VN:F [1.9.17_1161]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.17_1161]
Related Posts: