What is LDAP (Lightweight Directory Access Protocol)?

Lightweight Directory Access Protocol. It is an application layer protocol for accessing and managing information in directory services such as Active Directory. It serves for centralized storage of information (logins, passwords, contact details) and user and device authentication/authorization. It operates over TCP/IP, typically on ports 389 (LDAP) and 636 (LDAPS - with TLS/SSL encryption).

Key components:

• DN (Distinguished Name): Unique record identifier.
• RDN (Relative Distinguished Name): Part of DN, locally unique within the parent object.
• Schema: Defines object and attribute types that can be stored in the directory.
• Entries: Individual records in the directory representing objects (users, groups).
• Attributes: Record properties (login, email).

Main operations:

• Bind: Authentication.
• Search: Record search.
• Add: Adding records.
• Modify: Modifying records.
• Delete: Deleting records.

Example DN: cn=Ivan Ivanov,ou=Users,dc=example,dc=com Example RDN: cn=Ivan Ivanov

Used for:

• Centralized account management.
• User authentication in various applications and services.
• Access management (authorization).
• Storage of organizational structure and contact information.