LDAP Programming, Management, and Integration
暫譯: LDAP 程式設計、管理與整合

LDAP is the leading Internet protocol for directory-like information: user identities, preferences, security privileges. etc. Because it is popular, most programming languages have handy extensions for searching and updating LDAP directories. But most information today is still locked away in application-specific repositories that lack LDAP access.

LDAP Programming, Management and Integration explains how to link non-LDAP data with LDAP directories. It starts with a concise introduction to the LDAP standard and discusses how to work with it in Java and Perl. It gives you practical code and advice for migrating and integrating data into an LDAP environment. And it explains how to increase your application's security using identity and profile information from LDAP repositories.

Written for programmers and system administrators, this book teaches clearly and honestly the LDAP practiced “in the trenches.” It is concise yet rich in practical examples that make a sometimes complex subject easy to understand.

What’s Inside:

• Migrating to standards-based directories
• Directory synchronization
• Authenticating and authorizing users
• Security with digital certificates
• How to work with XML’s DSML v1 and v2
• Accessing directories with Perl
• How JNDI enables you to add:
  • Security
  • Personalization
  • White pages
• Covers LDAPv3

Table of Contents

Part I Fundamental LDAP concepts 1

1 Introduction to LDAP 3

2 Understanding the LDAP information model 34

3 Exploring the LDAP namespace 55

4 Search criteria 75

5 Exchanging directory information 90

Part II LDAP management 105

6 Accessing LDAP directories with Perl 107

7 Managing directory entries, groups, and accounts 121

8 Synchronizing LDAP information 144

9 Accessing operational information in LDAP 168

10 DSML: getting under the hood 185

Part III Application integration 213

11 Accessing LDAP directories with JNDI 215  

12 Java programming with DSML 233

13 Application security and directory services 253