LDAPS - Lightweight Directory Access Protocol over SSL/TLS ============================================================ .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **What is LDAPS?** LDAPS stands for Lightweight Directory Access Protocol over SSL/TLS. It is a secure version of LDAP that encrypts the communication between the client and server using SSL (Secure Sockets Layer) or TLS (Transport Layer Security). .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Why is LDAPS useful?** * Protects sensitive directory data by encrypting it during transmission. * Prevents eavesdropping, tampering, and man-in-the-middle attacks. * Commonly required in environments handling authentication, authorization, or identity management. * Helps meet security compliance standards. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **How it works?** * The client initiates a connection to the LDAP server on the secure LDAPS port. * A TLS/SSL handshake occurs to establish a secure channel. * Once the connection is encrypted, LDAP operations (search, bind, modify, etc.) proceed securely. * The entire session is wrapped in TLS/SSL from the start. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Where is LDAPS used?** * Secure enterprise authentication systems. * Microsoft Active Directory environments. * Linux-based LDAP servers like OpenLDAP with TLS enabled. * Identity management, access control, and Single Sign-On (SSO) systems. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Which OSI layer does this protocol belong to?** * LDAPS operates at the Application Layer (Layer 7) of the OSI model. * Encryption is provided by TLS/SSL at the Presentation Layer (Layer 6), but the LDAP protocol itself remains an application-layer protocol. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **IS LDAPS Windows specific?** * No, LDAPS is not Windows-specific. * While it is heavily used in Windows environments (like Active Directory), it is supported across various platforms. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **IS LDAPS Linux Specific?** * No, LDAPS is not Linux-specific. * Linux systems commonly use LDAPS with OpenLDAP or similar directory services, but it's not limited to Linux. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Which Transport Protocol is used by LDAPS?** * LDAPS uses TCP as the transport protocol. * All data is transmitted over an encrypted TCP connection. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Which Port is used by LDAPS?** * LDAPS typically uses **port 636** for secure connections. * This differs from standard LDAP, which uses port 389. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow **Is LDAPS using Client server model?** * Yes, LDAPS follows the client-server model. * Clients (such as authentication services or applications) connect to the LDAPS server to securely retrieve or manage directory information. .. panels:: :container: container pb-4 :column: col-lg-12 p-2 :card: shadow Topics in this section, * :ref:`Learnings in this section ` * :ref:`Terminology ` * :ref:`Version Info ` * :ref:`LDAPS Version&IEEE Details ` * :ref:`LDAPS Basic Setup on Ubuntu using IPv4 ` * :ref:`LDAPS Basic Setup on Ubuntu using IPv6 ` * :ref:`LDAPS Protocol Packet Details ` * :ref:`LDAPS Usecases ` * :ref:`LDAPS Basic Features ` * :ref:`Reference links ` .. _LDAPS_step1: .. tab-set:: .. tab-item:: Learnings in this section * In this section, you are going to learn .. _LDAPS_step2: .. tab-set:: .. tab-item:: Terminology * Terminology .. _LDAPS_step3: .. tab-set:: .. tab-item:: Version Info * Version Info .. _LDAPS_step5: .. tab-set:: .. tab-item:: LDAPS Version&RFC Details * rfc details .. _LDAPS_step18: .. tab-set:: .. tab-item:: LDAPS Basic Setup on Ubuntu using IPv4 * setup .. _LDAPS_step19: .. tab-set:: .. tab-item:: LDAPS Basic Setup on Ubuntu using IPv6 * setup .. _LDAPS_step6: .. tab-set:: .. tab-item:: LDAPS Protocol Packet Details * packet details .. _LDAPS_step7: .. tab-set:: .. tab-item:: LDAPS Usecases * usecases .. _LDAPS_step8: .. tab-set:: .. tab-item:: LDAPS Basic Features * features .. _LDAPS_step17: .. tab-set:: .. tab-item:: Reference links * Reference links