Understanding the LDAP Binding Component

Terms and Definitions

  1. Schema

    • Set of rules that describes the nature of data is stored

    • Helps maintain consistency and quality data

    • Reduces duplication of data

    • Object class attribute determines schema rules the entry must follow

    • Schema contains the following,

      • Required attributes

      • Allowed attributes

      • The method to compare attributes

      • Limit what the attribute can store, that is, restrict to integer

      • Restrict what information is stored, that is, stops duplication

  2. Attribute Abbreviation

    • User id : uid

    • Common Name ; cn

    • Surname : sn

    • Location : l

    • Organizational Unit : ou

    • Organization : o

    • Domain Component : dc

    • State : st

    • Country : c

    • Street address : street

  3. Search Filters

    • Criteria for attributes that must satisfy for entry on return

    • Base dn = base object entry search relative to

    • Prefix notation

    • Standards

      • LDAP String Representation of Search Filters

      • LDAPv3 Search Filters

    • Operators

      • AND : &

      • OR : |

      • NOT : !

      • Approximately equal : ~=

      • Greater than or equal : >=

      • Less than or equal : <=

      • Any : *

    • Example,

      • (objectclass=posixAccount)

      • (cn=Mickey M*)

      • (|(uid=fred)(uid=bill))

      • (&(|(uid=jack)(uid=jill)(objectclass=posixAccount))