What is LDAP Authentication

Bind operation: The operation which authenticates clients to the directory server Let’s say you want to log ​into a website that uses a directory service. ​You enter your account login information and password. ​Your information is then sent back to the website. ​It will use LDAP to check if that user account ​is a user directory and that the password is valid. ​If it’s valid, then you’ll be ​granted access into that account. ​You want your data to be protected, ​encrypted when it’s completing this process.

There are 3 common ways to authenticate:

1. ​The first is anonymous
   • When using anonymous binding, ​you aren’t actually authenticating at all. ​Depending on how it’s configured, ​anyone could potentially access that directory, ​just like our public phone book example. ​
2. then simple
   • When you use simple authentication, ​you just need the directory entry name, and password. ​This is usually sent in plain text, ​meaning it’s not secure at all.
3. ​and the last is SASL ​or simple authentication and security layer
   • This method can employ the help ​of security protocols like TLS, ​which you’ve already learned about and Kerberos
   • requires the client ​and the directory server to ​authenticate using some method
   • One of the most common methods for ​this authentication is using Kerberos: A network authentication protocol that uses tickets to allow entities to prove their identity over potentially insecure channels to provide mutual authentication For more information on Kerberos reading check out the link here.