cisco certification school

cisco certification school.people created another streamlined version called Lightweight Directory Access Protocol (LDAP) O Like X.500, the LDAP systemand directories are hierarchically organized, and even the naming conventions are the same (that is, distinct names are used to identify the informationobjects in the tree).In the LDAP system, the DUA is called the LDAP client, and the DSA is called the LDAP server. LDAP is not onlycan coexist with X.500-based systems and can also be used to query X.500-based systems. The following shows the important concepts related to directory management. A directory is a repository of information related to a unit's resources (including people and hardware and software). Directory service (directoryyservice) is a method of providing administrative identity, authentication, and authorization services for a unit through a directory. ITU-TX.500 is a set of standards that define how directory services are implemented. LDAP is based on X.500 and retains the same directory structure and definitions. The protocol simplifies directory lookups and is designed to work withThe TCP/IP stack works in concert.5.2.4 Single Sign-On (SSO) The idea is to allow users to authenticate their identity using only one system and to access all resources of the unit with a single login. The concept is different from configuring the same password for all systems, such as the password synchronization system mentioned earlier in this chapter. In the latter case, the user needs to have each system authenticate its identity, except that the passwords provided to all systems are all the same. Once SSO is enabled, the general way to perform authentication is to have240 Chapter 5 Introduction to Security Operations Management