What is LDAP and Active Directory ? How LDAP works and what is the structure of LDAP/AD?

#ldap #ldapauth
What is LDAP and Active Directory ? How LDAP works and what is the structure of LDAP/AD?
In this video, I have discussed regarding LDAP, Active Directory, LDAP vs Active Directory, Structure of LDAP, How LDAP works, LDAP Authentication.
GitHub:
github.com/talenteddeveloper
LDAP in Java:
• LDAP in Java
LDAP Updated:
• LDAP Updated
What is LDAP?
LDAP, the Lightweight Directory Access Protocol, is a mature, flexible, and well supported standards-based mechanism for interacting with directory servers. It’s often used for authentication and storing information about users, groups, and applications, but an LDAP directory server is a fairly general-purpose data store and can be used in a wide variety of applications
How Does LDAP work?
In short, LDAP specifies a method of directory storage that allows for adding, deleting, and modifying records, and it enables the search of those records to facilitate both authentication and authorization of users to resources.
LDAP’s three main functions are:
Update: This includes adding, deleting, or modifying directory information.
Query: This includes searching and comparing directory information.
Authenticate: The main authentication functions include binding and unbinding; a third function, abandon, can be used to stop a server from completing an operation
LDAP Directory Information Tree
LDAP organizes information in a hierarchical tree structure, referred to as a directory information tree (DIT). The LDAP DIT can vary based on the software or directory service you use; however, LDAP directories generally follow this tree structure, where entries without subordinates (users, for example) are leaves, and the root is the overarching entity that encompasses all the information within the directory.
LDAP Authentication and Authorization
The LDAP protocol both authenticates and authorizes users to their resources. The protocol authenticates users with a bind operation that allows the user to communicate with an LDAP directory, then authorizes the authenticated user to the resources they need if their input login information matches what’s listed for them in the database.
1.What Is LDAP Authentication ?
LDAP authentication relies on a client/server bind operation, which allows the LDAP-ready client, referred to as the directory user agent (DUA), and the directory server, referred to as the directory system agent (DSA), to communicate within a secure, encrypted session.
When authenticating against an LDAP server in an attempt to gain access to the database, the user is prompted to provide their username and password.
If the values the user inputs into the client matches what is found in the LDAP database, the user is granted access by the LDAP server to whatever the IT resource may be.
2. What Is LDAP Authorization ?
Once a user is successfully authenticated, they need to be authorized to the resource(s) requested. While different LDAP instances may structure and encode this slightly differently, this is essentially accomplished by assigning permissions with groups and roles in the directory.

[@mateuszstompor]

Great explanation. I really appreciate that you added diagrams, they help understand a lot

[@TalentedDeveloper]

Glad it was helpful!

[@wbcmt847]

Thank you for making this video! I appreciate your video and you for taking the time to put this video together!

[@TalentedDeveloper]

Glad it was helpful!

[@KangJangkrik]

Despite thick accent, your explanation is the best compared to other recommended videos. Thumbs up for that :)

[@TalentedDeveloper]

Thanks for your valuable feedback 😃

[@roboedar]

Thank you for this video! I was struggling for a long time but your explanation was great.

[@TalentedDeveloper]

Thanks so so much for your feedback

[@vimala7830]

Thank you for this super clear explanation video.

[@slzvieira]

Nice! Finally some good explanation about LDAP! Very usefull!

[@TalentedDeveloper]

Glad it was helpful!

[@rashidmuhammad5653]

This was most helpful - thank you.

[@NdubisiOnuora]

This is incredible and extremely useful. Thank you so much!

[@TalentedDeveloper]

Thanks 🙏

[@saifvasta9787]

Thanks Now I Understand LDAP & AD

[@PaulEllisBIGDATA]

Enjoyed. Watching your other videos

[@syedhannan546]

Very well explained. Thanks

[@not-normal771]

This is fantastic! Thank you!

[@gabrielsantaritta3558]

Amazing explanation, thank you for the free content!

[@TalentedDeveloper]

you are most welcome

[@user-ii8vw5qq8z]

Very useful video. Thank you so much.

[@enionevesdesouza36]

Great content! Thank you very much, sir!

[@TalentedDeveloper]

Thanks

[@kaii5401]

Thank you for the video!

[@TalentedDeveloper]

you are most welcome 😃

[@CyberDevNet]

Thank you for this video!!

[@TalentedDeveloper]

most welcome

[@scapri1000]

This is really helpful . Thankyou for simplifying the content, which can be understood by non-tech background people :)

[@TalentedDeveloper]

Glad it was helpful!

[@DiwakarKushwaha-mf1yt]

Thanks for the Video

[@nadzeyahutsko1094]

Thank you! It was helpful

[@TalentedDeveloper]

most welcome 😀. Thanks for your feedback 😀

[@Hebrews_412_KJV]

Thank you for this. I love taking online courses for IT related subjects but honestly a lot of them don't give a practical hands-on demonstration of certain terms. I can appreciate why though, as it would turn a 25 hour course into a 50 + hour course.

[@TalentedDeveloper]

hmm, I agree with you. But I will surely try to add some practical demonstration

[@ibkhsh]

Helpfull. Thank you.

[@TalentedDeveloper]

you are most welcome

[@ngochuyproducer]

❤ Thank you for your sharing

[@shamsurrahman1496]

very informative and good for beginners

[@elsamebrahtu9180]

Great explanation. Thank you

[@TalentedDeveloper]

Glad it was helpful!

[@Bhuv-]

This was Amazing!!

[@umeshpatle7289]

Superb.. Understand Thanks a lot

[@TalentedDeveloper]

You are most welcome

[@fcsunday5458]

Great video, many thanks for your hard work, I learn lot of from this good course

[@TalentedDeveloper]

Thanks 🙏

[@pspk70]

Excellent tutorial ! ! Thank you sir :-)

[@TalentedDeveloper]

most welcome

[@ivanvaulin3679]

thanks a lot!

[@saajkmk]

Great video .. informative..

[@deadmanwalking5456]

Also good! Thank You!

[@TalentedDeveloper]

Thanks 😀😀

[@Chinnurockbells]

Very helpful content sir, thanks

[@TalentedDeveloper]

Thanks a lot

[@sahedprin8339]

Awesome indeed

[@AlirezaReisi-bk6wu]

your content is so useful, I suggest this video

[@TalentedDeveloper]

Thanks

[@mharshaa]

Explained very well

[@TalentedDeveloper]

Thanks

[@PramodKumar-xo2oo]

Thank you so much :)

[@TalentedDeveloper]

Thanks

[@javajimaruthi8657]

Good Explanation

[@TalentedDeveloper]

Thanks

[@yaniaseniero7378]

Nice video u adopt the change of volume and you input caption. And details you provide is good illustration

[@TalentedDeveloper]

yes, you are right. Thanks 😊

[@sapphirecoders6134]

@@TalentedDeveloper Set Audio gain to 2x. It will help.

[@TalentedDeveloper]

thanks for your suggestion, i will follow

[@Alastor363]

now is better, thanks.

[@TalentedDeveloper]

Thanks, most welcome

[@mindfreaksaad]

this is great

[@TalentedDeveloper]

Thanks for your feedback 😀

[@zM0D4]

Hi, at 6:40 why call it "LDAP structure" ? Shouldn't it be called AD structure. As I understood LDAP is just the protocol to access data in the ad database. Please answer me. Thanks

[@TalentedDeveloper]

Yes, you are correct. But as you know, LDAP is much older than Active Directory, and most of Active Directory comes from LDAP so I said LDAP instead of AD

[@georgesmith9178]

Thank you, great video - gave you thumbs-up. I wish you had something about querying the server with ldapsearch or similar utility.

[@TalentedDeveloper]

Thanks George, I am having those videos also. Please check this LDAP in Java: kzbin.info/aero/PLyzY2l387AlPME9QEtU3j56dPFx0yV8Mf Even nodejs videos also available

[@georgesmith9178]

@@TalentedDeveloper Thank you, will watch in a couple of days.

[@himelahmed4164]

thanks

[@Jayronism]

Thanks for the explanation, just to be clear, you can change the attribute or add a attribute in the LDAP and that will communicate to the Active directory?

[@TalentedDeveloper]

yes

[@shikha1387]

Hello , the Apache server that you’re showing , is that connected to the AD server and getting the data ? Because as we see here the users / groups etc where are these mapped ? Are these mapped in AD ?? If I add any user in LDAP Apache will that add user in AD as well ?? Similarly if I remove any user will that be done in AD too ? Kindly explain

[@TalentedDeveloper]

Hi, yes it will be synchronised only. Whatever you are seeing as apache ldap, it is kind of ui and inside that I am using an inbuilt ldap database. so when the connection was coming from the code you can see all the details about user, group etc. so whenever you will add any user in that it will reflect at same time. It is like sql server with workbench

[@shikha1387]

@@TalentedDeveloper hi yes so you enter the server details and port number etc for the Apache setup , then the data or the user and groups are shown in this ldap Apache server . So just to understand correct , whatever group or user management we do here will be reflected in AD right ? Any idea how to we login directly to AD ? Can we do that ?

[@Battleneter]

Nice thankyou

[@TalentedDeveloper]

most welcome

[@kenadelglass7933]

Hi - I am trying to write a node.js lambda function in AWS that will do user unlocks and provide a temporary password for the user to login. Uses a VPC to connect with Windows Active Directory on a company's main network. Have you done this type of thing before and is this possible with nodejs and the ldap library? Any advice on how to accomplish this would be appreciated.

[@TalentedDeveloper]

Hi Ken, I am really sorry, I never worked on. But I think it is possible. Need to check about this

[@DEN-tg1yp]

Красивый Индийский язык. Посмотрел - выучил.

[@TalentedDeveloper]

большое спасибо

[@daler_anvarov]

soo nice

[@TalentedDeveloper]

thanks

[@kanngi9232]

good video

[@Vijaysaikumar]

Hi Brother, Password may not be similar to last 5 passwords [duplicate]. Can we do implement above condition by using ads-pwdInHistory in LDAP by using java ?

[@TalentedDeveloper]

may be, I never tried

[@shradhadeep]

Great Explanation. Can you please make videos on Master Slave replication in LDAP in nodejs

[@TalentedDeveloper]

Thanks for your feedback, i will check.

[@kunalbagwe6091]

one question here, that LDAP works for Authentication or for the Authorization. As both of these are different concepts. Please confirm the same.

[@TalentedDeveloper]

it's mainly for authorization but you can use it for authentication also(not recommended)

[@sandeepkasturi7330]

Thank you for this video. Can i know how to implement ldap in ubuntu server and client machines and i want to administer labs with authenticating users at login screen and track user activities from ldap server, can it be possible?

[@TalentedDeveloper]

Hi, There is a video in playlist. It will help you to install the apache ldap. If you follow other video in the playlist then you will learn how to add user and user group. I think your requirement is possible but you need to give try. I also don't have so knowledge regarding tracking the activities

[@alirezajeditehrani879]

Perfect

[@TalentedDeveloper]

Thanks

[@Verama-lc7pm]

Awesome

[@TalentedDeveloper]

Thanks

[@SuperAdil08]

Cool

[@SafinSingh]

W vid 🙌

[@veraabanda8125]

I love the way you teach, do you have courses for Linux?

[@TalentedDeveloper]

Thanks for your valuable feedback. I am just having a video about Apache ldap installation in Linux

[@naveenrepala53]

Hi thanks for the information I would like to know about ldap check user in database or not and gives the information to clients if user is present and able to check in ldap database but user is not able to authenticate showes no error message but client gets message like username and password is not founded from logs we can see time out Please help me in this issues

[@TalentedDeveloper]

Please check this kzbin.info/www/bejne/h5bMq4d_jbSdmsU

[@naveenrepala53]

@@TalentedDeveloper Hi Thanks for replying But in my case serch filter is working fine Having issues with authorisation And also not able to edit any attribute of user From logs i can only see time out no more error code If possible help in this issue

[@suraj.mohapatra]

Hi I am using Java 22 oracle Hostspot. I installed apache directory services. and nowhere in sll your videos you have explained that we have to configure the jdk path in apache ds configuration file. so I followed your old videos instructions and I am not able to start the server

[@suraj.mohapatra]

I added the server. but when running it throws error and the server not getting started even after creating a connention. Kindly help😊

[@TalentedDeveloper]

ohh, if possible can you try to download the java version. Try with java 11 / 16 once. And try to start the server using the administrator

[@suraj.mohapatra]

@@TalentedDeveloper I have already installed openJDK 11 and it worked. I was waiting for your validation thanks anyways.

[@TalentedDeveloper]

ok, great. But what validation??

[@suraj.mohapatra]

@@TalentedDeveloper That this works with OpenJDK 11 or later

[@DailyLearnings1]

I lavu yar vinglish 😍😍

[@TalentedDeveloper]

😂😂

[@okey1317]

what is SSO and SAML then? i am struggling to understand how these tthings differ

[@TalentedDeveloper]

I also know only a little bit like it is related to single sign in . Give me some time Need to check then I will update in detail

[@okey1317]

@@TalentedDeveloper okey thanks you! i am waiting for your video explaining what and the differences between SSO,SAML,LDAP,Active Directory with actual demo/examples

[@suryakiran4722]

is there any Teradata database which tracks ldap info

[@TalentedDeveloper]

I am really sorry, I don't know 😔

[@JG-nh2mr]

what is Ldap url ?

[@TalentedDeveloper]

it is the url. It will start like ldap:///.... it includes address, port and DN. like this example ldap://abc..com:389/dc=abc,dc=com

[@Thor11th]

Why LDAP is showing up in my accounts on Samsung phone? Could it be a hack attempt?

[@TalentedDeveloper]

please check this kzbin.info/www/bejne/mH_Ik62Gp6-hj5Y it is kind of scam

[@Thor11th]

@@TalentedDeveloper bro it is being used to steal data because by definition its function is designed for that. I wonder why is it displaying on my phone? Is it by default?

[@chetanmahajan8420]

Its working fine but some users facing the issues directoryservices exc 0x0008052E the username or password incorrect please provide ur input

[@TalentedDeveloper]

Hi Chetan, can you please see the video number 6 in below playlist. LDAP in Java: kzbin.info/aero/PLyzY2l387AlPME9QEtU3j56dPFx0yV8Mf this will generally happen due to wrong credentials. So during connection time try to make sure the dn, username, password must be correct.

[@chetanmahajan8420]

Yes.. i have watched... but not mentioned this errors... only some users facing these issue... nd pwd reset then working fine... but any solution without reset password

[@TalentedDeveloper]

According to me, this is only happen due to wrong credentials. May be the old password is encrypted with different algorithm like plain, or etc. And when you are try to access then you are facing wrong credentials. You can do one thing. Open that kind of user profile in Apache ldap, then go to that user profile and click on the password attribute. Then try to verify the old password. Then may be you will get any idea. Try to collect all that kind of user, and see their data, may be you will find something common or something wrong. Then it will help you to identify the root cause.

[@chetanmahajan8420]

Thanks.. for quick response... i will check n confirm

[@srilakshmigowda5551]

If someone is looking to kickstart the career and wants to know what is LDAP - this helps them a lot, Because I find it useful and valuable.Thanks :)

[@TalentedDeveloper]

Thanks for your valuable feedback

[@frankdiaz6955]

So what is the relationship between LDAP and AD? Do they work together?

[@TalentedDeveloper]

LDAP (Lightweight Directory Access Protocol) is an application protocol for querying and modifying items in directory service providers like Active Directory, which supports a form of LDAP. Short answer: AD is a directory services database, and LDAP is one of the protocols you can use to talk to it

[@frankdiaz6955]

@@TalentedDeveloper thank you!

[@fcsunday5458]

@@TalentedDeveloper I think Frank's question is so important and also many people share same confusing. Assume if we do not have LDAP, no LDAP server and client running, what is happen? can we still use MS Active Directory feature to manage thousands of user's authentication? Please kindly explain, thanks

[@tamilankalaigal2]

you're a blessing ☝☝☝ ☝☝☝to me thank God for ur presence in my life you're the best !!! Thanks I recommend him to y’all I swear you won’t regret working with him 💯

[@johnfernandes455]

Very confusing to understand especially how the user is added to a group.

[@TalentedDeveloper]

check the playlist, I am having separate video regarding how to add user to the group. Mainly you have you add the dn of the user in the group

[@bralis2]

rrrrrrrrrrright rrrruser grrroup rrram memmmberrr

[@begrackled]

This video: "Well hello, everyone --" Me: [skips video] Brevity is the soul of wit. If bad explanation made people live longer, I'd be immortal.

[@TalentedDeveloper]

well done 👍🏻🤣

[@BehniaFB]

Please delete your older videos about LDAP. They are not complete as this one, and confuses the user

[@TalentedDeveloper]

Thanks for your feedback, definitely I will take a look and take action

[@marvelworld5042]

bhai hindi meh bol le yaar

[@TalentedDeveloper]

ye hindi me hai kzbin.info/www/bejne/jqGcnH-kbtuFo9k

[@provemr3412]

Utterly rubbish.

[@TalentedDeveloper]

ohk

[@9895101579]

Simply superb ❤

[@TalentedDeveloper]

Thanks

[@cyberghost_01]

i dont understand nothing! thanks

[@TalentedDeveloper]

Then you are a legend 💪

[@kutra100]

Get an education my friend 💃

[@TalentedDeveloper]

🤣

[@AlirezaReisi-bk6wu]

your content is so useful, I suggest this video

[@TalentedDeveloper]

Thanks