The Integration of LDAP into the Messaging Infrastructure at CERN

Web authentication & LDAP

nAll major web servers can support LDAP for authentication (Apache, IIS, E’prise)

nBased on ‘group’ ACL’s e.g. ou=it-div-is

nSimple to setup and configure (Used extensively in secure web archiving)

nDoes not require physical accounts to be created on an OS. (few lines of LDIF only)

nACL’s can be easily created based on data in LDAP from CCDB and HR (e.g. division, group, status, mailing list membership etc.)