Definition
LDAP or Lightweight Directory Access Protocol is an open, vendor neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an IP network. It provides a mechanism to query and modify directory services, which are databases optimized for searching and retrieving information. LDAP is commonly used for authentication and authorization, enabling systems to verify user identities and control access to resources. For instance, when you log into a corporate network, LDAP might be used to check your username and password against a central directory. This differs from protocols like Kerberos, which uses tickets for authentication rather than direct directory lookups. Understanding LDAP is crucial for the Security+, CySA+, and CISSP certifications.