bea实战集锦LDAP.pptVIP

Investigating Weblogic LDAP Issues Pattern Ellen Yang BEA Customer Support Center in China Agenda About LDAP LDAP Used in Weblogic LDAP Issues Pattern QA Agenda About LDAP LDAP Used in Weblogic LDAP Issues Pattern QA About LDAP What is LDAP Lightweight Directory Access Protocol A protocol to be used to look up information from a server Like a relational database Read-mostly Non-transactional Typically distributed About LDAP LDAP History LDAP v1, 1993, University of Michigan Current version LDAP v3, 1997 RFC 2251——LDAP V3 core protocol，defines LDAP V3 models and operations; RFC 2252——Defines schema in LDAP V3, including syntax, filter, attributes type and object class RFC 2253——Defines about distinguished name (DN) in LDAP V3 RFC 2254——Defines about filters in LDAP V3 RFC 1823——Defines LDAP client APIs in C language RFC 2847——Defines the LDAP data interchange format (LDIF) About LDAP Common Terms Used in LDAP DN: Distinguish Name RDN: Relative Distinuished Name DIT: Directory Information Tree LDIF: LDAP Data Interchange Format dc - domain component o - organization ou - organizational unit cn - common name dn - distinguished name uid - user id About LDAP LDAP Simplifies X.500 X.500 - a set of directory access protocols (DAP) Simplifies X.500 functionality by eliminating low use features LDAP Models Information Describes the structure of information Naming How information is organized and referenced Functional What can be done with the information Security How information is protected About LDAP Information and Naming Model A tree-like structure called Directory Information Tree (DIT); Basic unit of information is entry; Entry is the collection of attributes; Entry has a distinguished name (DN) which is unique in the tree; Attribute is composed of type and values; Directory schema limits what the attributes can store About LDAP Directory Information Tree (DIT) dn:cn=dev,ou=Group,dc=pisoftware,dc=com About LDAP Function Model Auth