Penguin

An Acronym for Lightweight Directory Access Protocol.

A Protocol for accessing hierarchical data. Kinda like SQL except it has "fixed" schemata (you can define your own, but not quite as easily as you do in SQL) and it's for HierarchicalDataBases rather than RelationalDataBases. It is often used for directories, so LDAP implementations are commonly optimised for reading much more than for modifying/inserting data.

Products which speak LDAP include the Free OpenLDAP, NetWare's NDS, and MicrosoftCorporation's ActiveDirectory.

Definitions of terms:

BASEDN
This is the base of your ldap tree. Often it's made up from your domain name (if your domain name is foo.example.org then your basedn is often dc=foo,dc=example,dc=org), or from your organisation name (ou=organisationname,c=ISO country code).
BINDDN
This is the "username" you bind to the ldap tree as. Often cn=<username>,ou=Users,<BASEDN>

When trying to use ldapsearch(1) try:

 ldapsearch -x -h ldapservername -B binddn -W -b basedn

This can often be simplified and defaults provided in /etc/ldap/ldap.conf or /etc/openldap/ldap.conf

 Short name   Long name   Use 
 cn   commonName   A common ("readable") name of a resource 
 ou   organisationalUnit   Some unit (or grouping). 
 uid   userId   A username 

See also:


CategoryProtocols