What is a Directory Service?
A directory is similar to a database, but typically contains more descriptive, attribute-based data; that is, data read more often than it is written.
A directory service is a shared information infrastructure for locating, managing, administering, and organizing common items and network resources, which can include volumes, folders, files, printers, users, groups, devices, telephone numbers and other objects.
LDAP Directory Tree
An LDAP directory has a tree structure. All entries (called objects) of the directory have a defined position within this hierarchy. This hierarchy is called the directory information tree (DIT). The complete path to the desired entry, which unambiguously identifies it, is called distinguished name or DN. A single node along the path to this entry is called relative distinguished name or RDN
Active Directory makes use of Lightweight Directory Access Protocol (LDAP) versions 2 and 3
- Simple Authentication Method
- SASL Authentication Method
While each of the major components of FreeIPA is a pre-existing open-source project, the bundling of these components into a single manageable suite with a comprehensive management interface makes FreeIPA more comparable to its proprietary-software cousins, Identity Manager and Active Directory.
By Kanagaraj M