2.1. LDAP Information Model Overview

The LDAP information model is based on a subset of the X.500 information model but is extensible and modifiable. Complex attribute types supported in X.500 are not supported in LDAP.

Information is stored into entries which contain attributes. The allowed set of characters for object and attribute names is defined in Lightweight Directory Access Protocol (v3): Attribute Syntax Definitions, RFC 2252 (for example, the underscore character is invalid). Attributes are typed in the form of <type>=<value> pairs in which the type is defined by an object identifier (OID) and the value has a defined syntax. Attributes can be single-valued or multi-valued. There is no ordering for multiple values or a multi-valued ...

Get LDAP Implementation Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.