eli5 What is LDAP and what is active directory? What are the security risks involved with these ?
In: 0
LDAP is a sort of database, only unlike most databases people are familiar with it’s hierarchical, meaning it stores data in a structure that looks like a [tree](https://docs.geoserver.org/2.19.x/en/user/_images/acme_ldap.png). It’s very often used for user accounts.
For instance, LDAP can very comfortably handle the case of handling multiple organizations, departments, groups and so on in the same database, and having different rules apply to different levels. In something like MySQL there tends to be a single rule about whether table “employees” can be modified or not. Either you can’t, or you can do anything you like. Under LDAP you can easily have say, Bob Manager be able to add accounts to his own department, but not somebody else’s.
LDAP by its nature tends to be critical for security, because it can define who can do what for the entire organization.
Active Directory is Microsoft’s specific implementation of a LDAP server, with Microsoft’s own additions.
Latest Answers