Understanding and Deploying LDAP Directory Services (2nd Edition)

Since directory services aren't widely understood, this book begins by defining them and explaining what they can do for an organization. The guide then gets into the specifics of how LDAP organizes directories and handles queries. The authors go to great lengths to talk about what information to put in directories, how to validate and maintain it, and how to manage access to it. There's also lots of material on initiating LDAP services and on troubleshooting.

The aft part of this book holds special appeal for software developers, since it talks extensively about how to implement LDAP in both new and existing software. Throughout, the authors pay special attention to data redundancy, security, privacy, and the economic issues involved in an LDAP deployment. The book's real-world focus is cemented by case studies (both historical and semifictional). --David Wall

Product Description

Lightweight Directory Access Protocol (LDAP) is the standard for directory information access and is the underlying protocol for a variety of email systems, Web systems, and enterprise applications. LDAP enables central management of users, groups, devices, and other data, thereby simplifying directory management and reducing the total cost of ownership. Understanding and Deploying LDAP Directory Services, written by the creators of the protocol, is known as the LDAP bible and is the classic text for learning about LDAP and how to utilize it effectively. The Second Edition builds on this success by acting as an exhaustive resource for designing, deploying, and maintaining LDAP directory services. Topics such as implementation pitfalls, establishing and maintaining user access to information, troubleshooting, and real-world scenarios will be thoroughly explored.

While there isn't as much programming info that I would want, it is understandable, as teh book is quite indepth, and a programmer should be able to build on the knowledge he or she will gain from reading it.


On the 8th day, the Gods of LDAP gave unto us this book...   August 4, 1999
6 out of 7 found this review helpful

This is by far the best technical "manual" that I have picked up in a LONG time. The book is concise, well written and full of information on the LDAP protocol.

This is a must read for anyone involved in the Directory business, or who is having one implemented for them!


The LDAP "bible"?... Yes.   January 29, 1999
Tom Cozzolino (tcozzolino@answerthink.com) (Philadelphia, PA)
8 out of 10 found this review helpful

This long-awaited book definitively answers the question "Why is LDAP so important to Internet-based computing?" Furthermore, it answers the equally important questions concerning how to go about actually building LDAP-based solutions.

It very effectively describes LDAP as a strategic service, traces through complete details regarding design and implementation, and includes information on how small or large organizations can "survive" migration to directory-based computing.

Real-world practitioners will appreciate the sections on product selection, piloting an LDAP service, and costing. Finally, disaster recovery, long-term maintenance, monitoring, and application development in a directory-centric world complete the picture. As a bonus, several fairly deep case studies are presented, including very useful sidebars entitled "20/20 Hindsight".

For those of us who have lived through several large-scale LDAP designs/deployments, this book will be a great reference. For IT professionals and/or architects who are relatively new to the area, it will be invaluable.

The authors jokingly refer to the book as the "LDAP bible" - but that's not an altogether outlandish description.