LDAP (Lightweight Directory Access Protocol) is a protocol that allows you to quickly access directories with a hierarchical structure. The protocol allows you to find specific catalog entries, edit them, delete them, add new ones, and authenticate them.
The composition of the protocol
LDAP-based directories have a complex structure. The catalog system assumes a hierarchical tree-like system. LDAP includes:
- An attribute is a unit of information based on the key+value principle. All other elements form a structure for storing existing attributes.
- Records. Each attribute is compiled according to a specific principle and forms a cluster record.
- Classes. A class is a group of attributes that are related to each other by specific attributes. They contribute to the formation of the most accurate catalog structure.
- Scheme. All classes and attributes are contained here. All the conditions for the content of attributes are prescribed in the scheme.
LDAP allows you to check the entire tree. It is important to remember that the protocol reads directories from left to right. This is what can cause difficulties in the form of a decrease in the speed of LDAP.