DEV Community

Steve Mak
Steve Mak

Posted on

LDAP

LDAP (Lightweight Directory Access Protocol)

  • LDAP目錄的條目(entry)由屬性(attribute)的一個聚集組成,並由一個唯一性的名字參照,即專有名稱(distinguished name,DN)。例如,DN能取這樣的值:「ou=people,dc=wikipedia,dc=org」。
  • LDAP is appropriate for any kind of directory-like information, where fast lookups and less-frequent updates are the norm.
  • LDAP does not define how programs work on either the client or server side. It defines the "language" used for client programs to talk to servers (and servers to servers, too).

Normal Attribute Name (X.500 standard)

Attribute Meaning Example
dn Distinguished name
dc
o Organization
ou
c Country Country: e.g GB for Great Britain.
cn Common name CN=Guy Thomas. Actually, this LDAP attribute can be made up from givenName joined to SN.
sn Surname
givenName
homeDrive Home Folder: connect. Tricky to configure.
name name = Guy Thomas. Exactly the same as CN.
displayName
objectClass objectClass = User. Also used for Computer, organizationalUnit, even container. Important top-level container.
title Job title title = Manager
description Description
mail E-mail
wWWHomePage User's home page

Reference

GUI LDAP Client tool

Filter

Top comments (0)