LDAP (389, 636)
Last updated
Was this helpful?
Last updated
Was this helpful?
LDAP stands for Lightweight Directory Access Protocol and, as the name suggests, it is used for accessing various directory services, most commonly the .
LDAP uses ports 389
(unencrypted) and 636
(encrypted).
LDAP is the language that systems can use for speaking to (Figure 1).
LDAP supports two authentication methods:
Simple: This includes anonymous, unauthenticated, and username:password
authentication and it means that a pair of credentials create a bind request to authenticate to the LDAP server.
: This uses other authentication services, like Kerberos, to bind to the LDAP server.
All domain users can authenticate with the LDAP server.
A can also be granted the role which is an LDAP-compliant directory consisting of a partial representation of every object from every domain within the forest. This is available by default on ports 3268
(unencrypted) and 3269
(encrypted).
Detailed queries can be found on the page.