LDAP

1
LDAP

• Jon Porter
• Joe Medlin

2
Columbus Tech Services Needs Lightweight
Directory Access Protocol (LDAP)

• Since the acquisition of Central Ohio Tech
  Solutions, CTS now has two divisions, CTS East
  and CTS West. Though both divisions are similar
  in their directory structures an interface is
  needed between them. This is especially
  important between the mail serves as CTS East
  uses Lotus Notes and CTS West is a Microsoft
  Exchange shop. progression.

3
LDAP will give CTS the ability to glue
together the different directory structures.
4
CTS Current Structure

• CTS East currently has Win2000 Server with Active
  Directory, Lotus Notes email server and an Oracle
  Database on a UNIX platform.
• CTS West currently has Win2000 Server, Microsoft
  Exchange and Oracle on a UNIX platform.

5
Current CTS Structure Diagram
6
What is Lightweight Directory Access Protocol?

• A network protocol for accessing information in a
  directory, across platforms, that are vendor
  independent
• LDAP can store and retrieve data from Win2000
  services such as DHCP and DNS and Email systems
  like Lotus Notes and Microsoft Exchange. (Wilkins
  2001)

7
Two Components of LDAP

• Client to Server Allows communication with user
  installed applications to make contact with
  Win2000 servers with Active Directory installed
  and create retrieve, modify and delete records
  (Wilkins 2001)

8
Client to Server chart
9

• Server to Server Allows Servers to share
  Contents of a directory tree and defines how they
  perform updates and replications among themselves
  (Wilkins 2001)

10
Server To Server chart
11
Data Retrieval with LDAP

• Service Protocol Different applications request
  information or a user creates a query. The query
  is sent to a search engine which is mapped
  against an LDAP server. The LDAP server points
  to where the data is actually located (Wilkins
  2001)

12

• Application Data Exchange Interface Software
  exchanges data with another. The relevant
  example for CTS is Notes can store data onto the
  LDAP server so that Microsoft Exchange can
  retrieve it. (Wilkins 2001)
• System Service Protocol Operating systems can
  communicate between different components. Ex
  LDAP server can contain access rights of a user
  that are referenced by the Login system and by
  the File system. (Wilkins 2001)

13
Security

• LDAP V3 Works with Kerberos security deployed in
  Win2000 as well as Secure Sockets Layer (SSL) and
  Transaction Layer Security (TLS).
• Kerberos security is essential because it sets up
  two-way trusts between domains.

14
Kerberos Security

• The advantage to Kerberos is that it allows the
  use of open networks by creating unique
  encryption keys between the domains in the LDAP
  environment.

15
Solution Summary

• We want shared email access between CTS East and
  CTS West for ease of administration. By
  implementing an LDAP server, we consolidate to
  one point of access between East and West to
  share the directory structure and data. The
  scalability of the LDAP solution allows CTS to
  move beyond the email solution to any platform we
  choose in the future.

16
LDAP Server
17
Sources

• Administering Active Directory Mark Wilkins,
  McGraw-Hill, 2001