Ldap

Front 1

LDAP

Back 1

Lightweight Directory Access Protocol
defines a directory services structure for storing and
managing information about elements in you network, such as user accounts, user groups, hosts, and
servers.

Front 2

Schema

Back 2

Schema – The schema is the set of rules or the structure that defines the types of data that can be
stored in a directory, and how that data can be stored. Data is stored in the form of ‘entries’.

Front 3

Active Directory (AD)

Back 3

Active Directory (AD) – The Microsoft directory service, commonly used with Windows-based
networking. Microsoft Active Directory is compatible with LDAP.

Front 4

eDirectory

Back 4

eDirectory – The Novell directory service, used for Novell NetWare-based networking. Novell
eDirectory has an LDAP gateway that can be used for management.

Front 5

Entry

Back 5

Entry – The data that is stored in the LDAP directory. Entries are stored in ‘attribute’/value (or
name/value) pairs, where the attributes are defined by ‘object classes’. A sample entry would be
‘cn=john’ where ‘cn’ (common name) is the attribute, and ‘john’ is the value.

Front 6

Object class

Back 6

Object class – Object classes define the type of entries that an LDAP directory may contain. A
sample object class, as used by AD, would be ‘user’ or ‘group’.

Front 7

Object

Back 7

Object - In LDAP terminology, the entries in a directory are referred to as objects.

Front 8

Attribute

Back 8

Attribute - A data item stored in an object in an LDAP directory. The object can have required
attributes or allowed attributes. For example, the ‘dc’ attribute is a required attribute of the
‘dcObject’ (domain component) object.

Front 9

dn

Back 9

dn - A ‘distinguished name’, which is a globally unique name for a user or other object. It is made
up of a number of components, usually starting with a common name (cn) component and ending
with a domain specified as two or more domain components (dc). For example,
‘cn=john,cn=users,dc=domain,dc=com’

Front 10

cn

Back 10

cn – The ‘common name’ attribute is a required component of many object classes throughout
LDAP.

Front 11

ou

Back 11

ou – The ‘organizational unit’ attribute is a required component of most LDAP schema
implementations.

Front 12

dc

Back 12

dc – The ‘domain component’ attribute is commonly found at the root of a distinguished name, and
is commonly a required attribute.

Front 13

TLS

Back 13

TLS – Transport Layer Security is the IETF standardized version of SSL (Secure Sockets Layer).
TLS 1.0 is the successor to SSL 3.0.