10.2.3 - Lightweight Directory Access Protocol (LDAP)

Flashcards about Lightweight Directory Access Protocol (LDAP) from lecture notes.

What is the principal means of implementing privilege management and authorization on an enterprise network?

Directory services

What does the server security service generate for an authenticated user upon logging into a network?

An access key containing the username and group memberships

What does the server's security service match with entries in the access list to calculate user's access privileges?

Username and group memberships from the access key

What is a directory compared to in database terms?

A database, where an object is like a record, and attributes are like fields.

What is the main directory standard?

The X.500 series of standards

What protocol is widely supported in current directory products, including Windows Active Directory, for querying and updating X.500-like directories?

Lightweight Directory Access Protocol (LDAP)

What TCP and UDP port does insecure LDAP messaging use by default?

Port 389

What is the unique identifier for each object in an X.500 directory?

Distinguished name

How is a distinguished name structured?

Attribute value pairs, separated by commas, with the most specific attribute listed first.

What is the most specific attribute in a distinguished name also referred to as?

Relative distinguished name

What describes the types of attributes, the information they contain, and the way object types are defined through attributes?

Directory schema