X.500 and LDAP security: a comparative overview

Author

Hassler, Vesna

Author_Institution

Tech. Univ. Wien, Austria

Volume

13

Issue

6

fYear

1999

Firstpage

54

Lastpage

64

Abstract

We give a comparative overview of the X.500 and LDAPv3 Directory security features. X.500 is a commonly used name for a series of joint ISO/IEC and ITU-T standards specifying a distributed directory service. It assumes the existence of an underlying OSI protocol stack. LDAP is an Internet alternative to the X.500 Directory Access Protocol (X.511 DAP). Since its first version LDAP has undergone significant changes, and many of them concern security. It was originally planned to use LDAP only to access the X.500 directory via an LDAP gateway. In the meantime, LDAP functionality was extended, which enables LDAPv3 to be used for both the server model and the client read and update access protocol

Keywords

ISO standards; Internet; access protocols; message authentication; network servers; open systems; telecommunication security; telecommunication standards; ISO/IEC standards; ITU-T standards; Internet; LDAP gateway; LDAP security; LDAPv3 Directory security; OSI protocol stack; X.500 Directory Access Protocol; X.500 access protocol; X.500 security; X.511 DAP; access control model; authentication parameters; distributed directory service; server model; update access protocol; Access protocols; Authentication; Data models; Digital audio players; IEC standards; ISO standards; Information security; Internet; Standardization; Web server;

fLanguage

English

Journal_Title

Network, IEEE

Publisher

ieee

ISSN

0890-8044

Type

jour

DOI

10.1109/65.806992

Filename

806992