Helpful Information
 
 
Category: LDAP Programming
LDAP resources.

Thank you again to Jcaputo for creating this LDAP forum.

This thread is for LDAP resources info, for any types of LDAP please post what you know.

OpenLDAP (http://www.openldap.org/)
Novel eDirectory (http://www.novell.com/products/edirectory/)
iPlanet Directory (http://www.iplanet.com/)
Netscape Directory Server 6.11 (http://sbsdownload.netscape.com/download/product.cgi?Product=1)


RFC - Here are a bunch of RFC's that are about LDAP
http://www.rfc-editor.org/rfc/rfc1274.txt
http://www.rfc-editor.org/rfc/rfc2079.txt
http://www.rfc-editor.org/rfc/rfc2247.txt
http://www.rfc-editor.org/rfc/rfc2251.txt
http://www.rfc-editor.org/rfc/rfc2252.txt
http://www.rfc-editor.org/rfc/rfc2253.txt
http://www.rfc-editor.org/rfc/rfc2254.txt
http://www.rfc-editor.org/rfc/rfc2255.txt
http://www.rfc-editor.org/rfc/rfc2256.txt
http://www.rfc-editor.org/rfc/rfc2307.txt
http://www.rfc-editor.org/rfc/rfc2377.txt
http://www.rfc-editor.org/rfc/rfc2596.txt
http://www.rfc-editor.org/rfc/rfc2696.txt
http://www.rfc-editor.org/rfc/rfc2713.txt
http://www.rfc-editor.org/rfc/rfc2714.txt
http://www.rfc-editor.org/rfc/rfc2798.txt
http://www.rfc-editor.org/rfc/rfc2829.txt
http://www.rfc-editor.org/rfc/rfc2830.txt
http://www.rfc-editor.org/rfc/rfc2849.txt
http://www.rfc-editor.org/rfc/rfc2891.txt
http://www.rfc-editor.org/rfc/rfc3062.txt
http://www.rfc-editor.org/rfc/rfc3088.txt


FAQ:

Q: What is LDAP
A: http://www.umich.edu/~dirsvcs/ldap/doc/guides/slapd/1.html#RTFToC1

Q: Where can I find an editor?
A: For Windows http://www.ldapadministrator.com/

DevShed Articles
IGREP list of LDAP Articles (http://www.igrep.com/search.php?ds=on&searchphrase=ldap)

Please post any good resources you may have. I'll post more when I find them.

Posted by pabloj

First of all a FAQ!

1. Q: Where can I find OpenLDAP for Windows?
1. A: http://acctsync.sourceforge.net/ or http://www.fivesight.com/downloads/openldap.asp

2. Q: Where can I find a graphical browser/editor?
2. A: http://sourceforge.net/projects/jxplorer/ or http://www-unix.mcs.anl.gov/~gawor/...ml#Introduction

Please add your own tips!

To authenticate (apache) against an LDAP server use
mod_ldap (http://httpd.apache.org/docs-2.0/mod/mod_ldap.html)

LDIF File Format (http://developer.netscape.com/docs/manuals/directory/admin30/ldif.htm)

Netscape Directory Server Administrator's Guide (http://developer.netscape.com/docs/manuals/directory/admin30/contents.htm)

Netscape 6.1 - 6.11 Docs (http://enterprise.netscape.com/docs/directory/index.html)

iPlanet Directory Server 5.1 Docs (http://docs.sun.com/db/prod/4467#hic)

Berkeley DB 4.1.25 (http://www.sleepycat.com/download/index.shtml) (needed for OpenLDAP 2.1)
Patch (http://www.sleepycat.com/update/4.1.25/patch.4.1.25.html)

Some friends and me are making a project about LDAP so we had to study some resources...So you can have a look on them:
Understanding LDAP (http://www.redbooks.ibm.com/redbooks/pdfs/sg244986.pdf)

LDAP Implementation Cookbook (http://www.redbooks.ibm.com/redbooks/pdfs/sg245110.pdf)

These two resources are very good to understand LDAP. They are written by some guys from IBM...
Bye Daniel

JNDI and JDBC
http://www.developer.com/java/other/article.php/610901

A little update to my post reported by Viper_SB, Fivesight does no longer distribute a windows version of OpenLDAP, but Lucas Bergman from Fivesight has taken the task of keeping up the port, you can find more details at his site (http://lucas.bergmans.us/hacks/openldap/), at the time of this post he has an v2.1.29 for windows.

Remember it's important to index your server.

Index Types:


index default eq
index cn eq,sub
index sn eq,sub,approx
index uidNumber

The above directives configure the types of indexing to be performed on the listed attributes. The very first directive says that the default type of indexing to use, if none is specified, is eq. So, for the uidNumber entry, it will be indexed eq.

Type types of possible indexing are:
pres, eq, approx, sub, none

"pres" indexing allows you to use filters that ask if the attribute is present in an entry (cn=*).

"eq" indexing allows you to use filters to ask if an attribute has an exact value ("gn=quanah"). It includes presence, so it is not necessary to index something as pres,eq.

"approx" indexing allows you to use filters to ask if an attribute value "sounds like" something. This is tied to the --enable-phonetic compile option in OpenLDAP. ("sn~=book") could return book, hook, nook.

"sub" indexing allows you to use filters that do substring searches on an attribute's values. A filter of ("cn=*mount*") will return all values of cn containing the letters "mount".

The above quote is taken from ITSS Stanford University (http://www.stanford.edu/services/directory/openldap/configuration/slapd-conf-replica.html)

OpenLDAP FAQ on Indexing (http://www.openldap.org/faq/index.cgi?_highlightWords=index&file=42)

To make AD more compatible with non-MS apps, you can install the InetOrgPerson schema, see this link (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnactdir/html/inetopkit.asp)

LDAP Directory Server Board:

http://www.ldaphelp.com

Two interesting articles about having windows authenticate users against an external LDAP server (NOT AD).
Using pGINA to Authenticate Users in Microsoft Windows Environments (http://www.phptr.com/articles/article.asp?p=330803&seqNum=1), Short take: Using pGina to integrate PCs into a Mac server world (http://www.computerworld.com/softwaretopics/os/macos/story/0,10801,84770,00.html?SKC=macos-84770) and Using pGina with LDAP (http://rulink.rutgers.edu/pgina.html). Hope this helps

Good web site for general openldap issues

Edit: http://www.zytrax.com/books/ldap/

Netscape Directory Server 6.11 (http://sbsdownload.netscape.com/download/product.cgi?Product=1)


Netscape directory server does not exists as such anymore. It has been transorfmed into Rad Hat Directory Server (http://www.redhat.com/en_us/USA/home/solutions/directoryserver/).

There is also the Fedora Directory Server (http://directory.fedora.redhat.com/wiki/Main_Page).

Some examples about Visual Basic and LDAP here (http://rulink.rutgers.edu/ldap-vb.html)

Orginally posted by robajz

http://www.zend.com/lists/php-dev/200511/msg00617.html

http://www.zend.com/zend/week/pat/pat44.txt

Just wanted to let you know that the articles in the first post about LDAP and PHP and LDAP from the DevShed forums are dead.

Also, a great and free win32 based product to query ldap directories is:
http://www.ldapbrowser.com/download/index.php

Thanks, I updated the link to instead search IGREP
IGREP list of LDAP Articles (http://www.igrep.com/search.php?ds=on&searchphrase=ldap)

LDAP browsing utility, this is made by Microsoft.

LDP Docs (http://technet2.microsoft.com/WindowsServer/en/library/20832e80-a4d8-46b6-8f14-004f1cdb88311033.mspx?mfr=true)

You can get ALL the support tools here (http://www.microsoft.com/downloads/details.aspx?FamilyID=49ae8576-9bb9-4126-9761-ba8011fabf38&DisplayLang=en) or just the ldp.zip from the attachment on this post. (it contains the single ldp.exe within it)

Another non MS tutorial on ldp.exe http://www.computerperformance.co.uk/w2k3/utilities/ldp.htm

Straight from Peter Freitag's blog (http://www.petefreitag.com/item/547.cfm)










privacy (GDPR)