Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Syndeia interfaces with LDAP servers using RFC 4511 standard LDAP URL requests.

Tip: Research outside Syndeia

The recommended way to discover how to configure Syndeia for LDAP-speaking IdPs is to use one of the several open-source utilities for LDAP searching. These include:

...

For all the examples, the LDAP server being queried is shown as myldap.acme.org. Actual queries must use actual hostnames.

Tip: How to search an open, simple LDAP service

To perform a query for all the objects within a particular LDAP server which allows unauthenticated queries:

...

  • the particular attributes which are returned will vary depending on the vendor of the LDAP service

  • the simple utility verifies that the specified LDAP server is reachable at the specified port

  • the LDAP server does not require the DN and password of an administrator account, many do require those

...

Tip: How to search an open, Secure LDAP server

To perform a query for all the objects within a particular Secure LDAP server which allows unauthenticated queries:

...

  • the particular attributes which are returned will vary depending on the vendor of the LDAP service

  • the simple utility verifies that the specified LDAP server is reachable at the specified port and that the client and the server negotiated a secure TLS session using credentials and cypher algorithms that are acceptable to both parties

  • the LDAP server does not require the DN and password of an administrator account, many do require those

...

Tip: How to search a restricted, Secure LDAP server

To perform a query for all the objects within a particular Secure LDAP server which requires authenticated queries:

...