LDAPLIGHT WEIGHT DIRECTORY ACCESS PROTOCOL课件.ppt

LDAPLIGHT WEIGHT DIRECTORY ACCESS PROTOCOL PRESENTATION BY ALAKESH APURVA DHAN AND ASH 精品文档 WHAT IS LDAP LDAP IS LIGHT WEIGHT SUFFICIENT STRAIGHT FORWARD EASY TO IMPLEMENT AS AGAINST X.500 DAP WHICH IS HEAVY WEIGHT 精品文档 LDAP DIRECTORY BECAUSE DATA IS ORGANISED IN THE FORM OF TREE MUCH LIKE UNIX FILE SYSTEM USES SIMPLIFIED SET OF ENCODING RUNS DIRECTLY ABOVE TCP/IP USES STRING TO REPRESENT DATA 精品文档 LDAP LDAP SECURITY MODEL : DEFINES HOW INFORMATION CAN BE PROTECTED FROM UNAUTHORISED ACCESS 精品文档 LDAP LDAP API THERE ARE SEVERAL LDAP API APPLICATION PROGRAMMING INTERFACE OLDEST ONES WRITTEN IN C NOW A DAYS LDAP API S ARE AVAILABLE IN OTHER PROGRAMMING LANGUAGES LIKE PERL JAVA 精品文档 HOW LDAP WORKS LDAP DIRECTORY SERVICE IS BASED ON CLIENT SERVER MODEL LDAP IS A MESSAGE ORIENTED PROTOCOL CLIENT CONSTRUCTS AN LDAP MESSAGE CONTAINING A REQUEST AND SENDS IT TO THE SERVER 精品文档 HOW LDAP WORKS SERVER PROCESSES THE REQUEST AND SENDS IT BACK TO THE CLIENT IN THE FORM OF LDAP MESSAGE 精品文档 LDAP BACKENDS THE BASIC DAEMON PROCESS THAT RUNS ON THE LDAP SERVER CALLED SLAPD COMES WITH THREE DIFFERENT BACKEND DATABASES WE ASSUME THAT IN OUR CASE WE USE LDBM THE MOST USED ONE 精品文档 HOW LDAP WORKS LDAP DATABASE WORKS BY ADDING A COMPACT FOUR BYTE UNIQUE IDENTIFIER INDEX FILES ARE MAINTAINED FOR REFERRING TO DATA 精品文档 LDAP PROTOCOL OPERATION INTERROGATION OPERATION : SEARCH , COMPARE ADD DELETE OPERATOIN : ADD , DELETE , MODIFY , MODIFY DN AUTHENTICATION AND CONTROL OPERATION : BIND , UNBIND , ABANDON 精品文档 LDAP INFORMATION MODEL BASIC UNIT IS ENTRY ( A COLLECTION OF INFORMATION ABOUT AN OBJECT ) AN ENTRY IS COMPOSED OF A SET OF ATTRIIBUTES 精品文档 LDIF LDIF STANDS FOR LDAP DATA INTERCHANGE FORMAT DIRECTORY ENTRIES IN LDAP ARE IN THE FORM OF LDIF 精品文档 LDIF FORMAT BASIC FORM OF LDIF :