Home | History | Annotate | Line # | Download | only in rfc
      1  1.1  lukem 
      2  1.1  lukem 
      3  1.1  lukem 
      4  1.1  lukem 
      5  1.1  lukem 
      6  1.1  lukem 
      7  1.1  lukem Network Working Group                                   K. Zeilenga, Ed.
      8  1.1  lukem Request for Comments: 4510                           OpenLDAP Foundation
      9  1.1  lukem Obsoletes: 2251, 2252, 2253, 2254, 2255,                       June 2006
     10  1.1  lukem            2256, 2829, 2830, 3377, 3771
     11  1.1  lukem Category: Standards Track
     12  1.1  lukem 
     13  1.1  lukem 
     14  1.1  lukem              Lightweight Directory Access Protocol (LDAP):
     15  1.1  lukem                     Technical Specification Road Map
     16  1.1  lukem 
     17  1.1  lukem Status of This Memo
     18  1.1  lukem 
     19  1.1  lukem    This document specifies an Internet standards track protocol for the
     20  1.1  lukem    Internet community, and requests discussion and suggestions for
     21  1.1  lukem    improvements.  Please refer to the current edition of the "Internet
     22  1.1  lukem    Official Protocol Standards" (STD 1) for the standardization state
     23  1.1  lukem    and status of this protocol.  Distribution of this memo is unlimited.
     24  1.1  lukem 
     25  1.1  lukem Copyright Notice
     26  1.1  lukem 
     27  1.1  lukem    Copyright (C) The Internet Society (2006).
     28  1.1  lukem 
     29  1.1  lukem Abstract
     30  1.1  lukem 
     31  1.1  lukem    The Lightweight Directory Access Protocol (LDAP) is an Internet
     32  1.1  lukem    protocol for accessing distributed directory services that act in
     33  1.1  lukem    accordance with X.500 data and service models.  This document
     34  1.1  lukem    provides a road map of the LDAP Technical Specification.
     35  1.1  lukem 
     36  1.1  lukem 1.  The LDAP Technical Specification
     37  1.1  lukem 
     38  1.1  lukem    The technical specification detailing version 3 of the Lightweight
     39  1.1  lukem    Directory Access Protocol (LDAP), an Internet Protocol, consists of
     40  1.1  lukem    this document and the following documents:
     41  1.1  lukem 
     42  1.1  lukem       LDAP: The Protocol [RFC4511]
     43  1.1  lukem       LDAP: Directory Information Models [RFC4512]
     44  1.1  lukem       LDAP: Authentication Methods and Security Mechanisms [RFC4513]
     45  1.1  lukem       LDAP: String Representation of Distinguished Names [RFC4514]
     46  1.1  lukem       LDAP: String Representation of Search Filters [RFC4515]
     47  1.1  lukem       LDAP: Uniform Resource Locator [RFC4516]
     48  1.1  lukem       LDAP: Syntaxes and Matching Rules [RFC4517]
     49  1.1  lukem       LDAP: Internationalized String Preparation [RFC4518]
     50  1.1  lukem       LDAP: Schema for User Applications [RFC4519]
     51  1.1  lukem 
     52  1.1  lukem 
     53  1.1  lukem 
     54  1.1  lukem 
     55  1.1  lukem 
     56  1.1  lukem 
     57  1.1  lukem 
     58  1.1  lukem Zeilenga                    Standards Track                     [Page 1]
     59  1.1  lukem 
     61  1.1  lukem RFC 4510                   LDAP: TS Road Map                   June 2006
     62  1.1  lukem 
     63  1.1  lukem 
     64  1.1  lukem    The terms "LDAP" and "LDAPv3" are commonly used to refer informally
     65  1.1  lukem    to the protocol specified by this technical specification.  The LDAP
     66  1.1  lukem    suite, as defined here, should be formally identified in other
     67  1.1  lukem    documents by a normative reference to this document.
     68  1.1  lukem 
     69  1.1  lukem    LDAP is an extensible protocol.  Extensions to LDAP may be specified
     70  1.1  lukem    in other documents.  Nomenclature denoting such combinations of
     71  1.1  lukem    LDAP-plus-extensions is not defined by this document but may be
     72  1.1  lukem    defined in some future document(s).  Extensions are expected to be
     73  1.1  lukem    truly optional.  Considerations for the LDAP extensions described in
     74  1.1  lukem    BCP 118, RFC 4521 [RFC4521] fully apply to this revision of the LDAP
     75  1.1  lukem    Technical Specification.
     76  1.1  lukem 
     77  1.1  lukem    IANA (Internet Assigned Numbers Authority) considerations for LDAP
     78  1.1  lukem    described in BCP 64, RFC 4520 [RFC4520] apply fully to this revision
     79  1.1  lukem    of the LDAP technical specification.
     80  1.1  lukem 
     81  1.1  lukem 1.1.  Conventions
     82  1.1  lukem 
     83  1.1  lukem    The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
     84  1.1  lukem    "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
     85  1.1  lukem    document are to be interpreted as described in BCP 14 [RFC2119].
     86  1.1  lukem 
     87  1.1  lukem 2.  Relationship to X.500
     88  1.1  lukem 
     89  1.1  lukem    This technical specification defines LDAP in terms of [X.500] as an
     90  1.1  lukem    X.500 access mechanism.  An LDAP server MUST act in accordance with
     91  1.1  lukem    the X.500 (1993) series of International Telecommunication Union -
     92  1.1  lukem    Telecommunication Standardization (ITU-T) Recommendations when
     93  1.1  lukem    providing the service.  However, it is not required that an LDAP
     94  1.1  lukem    server make use of any X.500 protocols in providing this service.
     95  1.1  lukem    For example, LDAP can be mapped onto any other directory system so
     96  1.1  lukem    long as the X.500 data and service models [X.501][X.511], as used in
     97  1.1  lukem    LDAP, are not violated in the LDAP interface.
     98  1.1  lukem 
     99  1.1  lukem    This technical specification explicitly incorporates portions of
    100  1.1  lukem    X.500(93).  Later revisions of X.500 do not automatically apply to
    101  1.1  lukem    this technical specification.
    102  1.1  lukem 
    103  1.1  lukem 3.  Relationship to Obsolete Specifications
    104  1.1  lukem 
    105  1.1  lukem    This technical specification, as defined in Section 1, obsoletes
    106  1.1  lukem    entirely the previously defined LDAP technical specification defined
    107  1.1  lukem    in RFC 3377 (and consisting of RFCs 2251-2256, 2829, 2830, 3771, and
    108  1.1  lukem    3377 itself).  The technical specification was significantly
    109  1.1  lukem    reorganized.
    110  1.1  lukem 
    111  1.1  lukem 
    112  1.1  lukem 
    113  1.1  lukem 
    114  1.1  lukem 
    115  1.1  lukem Zeilenga                    Standards Track                     [Page 2]
    116  1.1  lukem 
    118  1.1  lukem RFC 4510                   LDAP: TS Road Map                   June 2006
    119  1.1  lukem 
    120  1.1  lukem 
    121  1.1  lukem    This document replaces RFC 3377 as well as Section 3.3 of RFC 2251.
    122  1.1  lukem    [RFC4512] replaces portions of RFC 2251, RFC 2252, and RFC 2256.
    123  1.1  lukem    [RFC4511] replaces the majority RFC 2251, portions of RFC 2252, and
    124  1.1  lukem    all of RFC 3771.  [RFC4513] replaces RFC 2829, RFC 2830, and portions
    125  1.1  lukem    of RFC 2251.  [RFC4517] replaces the majority of RFC 2252 and
    126  1.1  lukem    portions of RFC 2256.  [RFC4519] replaces the majority of RFC 2256.
    127  1.1  lukem    [RFC4514] replaces RFC 2253.  [RFC4515] replaces RFC 2254.  [RFC4516]
    128  1.1  lukem    replaces RFC 2255.
    129  1.1  lukem 
    130  1.1  lukem    [RFC4518] is new to this revision of the LDAP technical
    131  1.1  lukem    specification.
    132  1.1  lukem 
    133  1.1  lukem    Each document of this specification contains appendices summarizing
    134  1.1  lukem    changes to all sections of the specifications they replace.  Appendix
    135  1.1  lukem    A.1 of this document details changes made to RFC 3377.  Appendix A.2
    136  1.1  lukem    of this document details changes made to Section 3.3 of RFC 2251.
    137  1.1  lukem 
    138  1.1  lukem    Additionally, portions of this technical specification update and/or
    139  1.1  lukem    replace a number of other documents not listed above.  These
    140  1.1  lukem    relationships are discussed in the documents detailing these portions
    141  1.1  lukem    of this technical specification.
    142  1.1  lukem 
    143  1.1  lukem 4.  Security Considerations
    144  1.1  lukem 
    145  1.1  lukem    LDAP security considerations are discussed in each document
    146  1.1  lukem    comprising the technical specification.
    147  1.1  lukem 
    148  1.1  lukem 5.  Acknowledgements
    149  1.1  lukem 
    150  1.1  lukem    This document is based largely on RFC 3377 by J. Hodges and R.
    151  1.1  lukem    Morgan, a product of the LDAPBIS and LDAPEXT Working Groups.  The
    152  1.1  lukem    document also borrows from RFC 2251 by M. Wahl, T. Howes, and S.
    153  1.1  lukem    Kille, a product of the ASID Working Group.
    154  1.1  lukem 
    155  1.1  lukem    This document is a product of the IETF LDAPBIS Working Group.
    156  1.1  lukem 
    157  1.1  lukem 
    158  1.1  lukem 
    159  1.1  lukem 
    160  1.1  lukem 
    161  1.1  lukem 
    162  1.1  lukem 
    163  1.1  lukem 
    164  1.1  lukem 
    165  1.1  lukem 
    166  1.1  lukem 
    167  1.1  lukem 
    168  1.1  lukem 
    169  1.1  lukem 
    170  1.1  lukem 
    171  1.1  lukem 
    172  1.1  lukem Zeilenga                    Standards Track                     [Page 3]
    173  1.1  lukem 
    175  1.1  lukem RFC 4510                   LDAP: TS Road Map                   June 2006
    176  1.1  lukem 
    177  1.1  lukem 
    178  1.1  lukem 6.  Normative References
    179  1.1  lukem 
    180  1.1  lukem    [RFC2119]     Bradner, S., "Key words for use in RFCs to Indicate
    181  1.1  lukem                  Requirement Levels", BCP 14, RFC 2119, March 1997.
    182  1.1  lukem 
    183  1.1  lukem    [RFC4511]     Sermersheim, J., Ed., "Lightweight Directory Access
    184  1.1  lukem                  Protocol (LDAP): The Protocol", RFC 4511, June 2006.
    185  1.1  lukem 
    186  1.1  lukem    [RFC4512]     Zeilenga, K., "Lightweight Directory Access Protocol
    187  1.1  lukem                  (LDAP): Directory Information Models", RFC 4512, June
    188  1.1  lukem                  2006.
    189  1.1  lukem 
    190  1.1  lukem    [RFC4513]     Harrison, R., Ed., "Lightweight Directory Access
    191  1.1  lukem                  Protocol (LDAP): Authentication Methods and Security
    192  1.1  lukem                  Mechanisms", RFC 4513, June 2006.
    193  1.1  lukem 
    194  1.1  lukem    [RFC4514]     Zeilenga, K., Ed., "Lightweight Directory Access
    195  1.1  lukem                  Protocol (LDAP): String Representation of Distinguished
    196  1.1  lukem                  Names", RFC 4514, June 2006.
    197  1.1  lukem 
    198  1.1  lukem    [RFC4515]     Smith, M., Ed. and T. Howes, "Lightweight Directory
    199  1.1  lukem                  Access Protocol (LDAP): String Representation of Search
    200  1.1  lukem                  Filters", RFC 4515, June 2006.
    201  1.1  lukem 
    202  1.1  lukem    [RFC4516]     Smith, M., Ed. and T. Howes, "Lightweight Directory
    203  1.1  lukem                  Access Protocol (LDAP): Uniform Resource Locator", RFC
    204  1.1  lukem                  4516, June 2006.
    205  1.1  lukem 
    206  1.1  lukem    [RFC4517]     Legg, S., Ed., "Lightweight Directory Access Protocol
    207  1.1  lukem                  (LDAP): Syntaxes and Matching Rules", RFC 4517, June
    208  1.1  lukem                  2006.
    209  1.1  lukem 
    210  1.1  lukem    [RFC4518]     Zeilenga, K., "Lightweight Directory Access Protocol
    211  1.1  lukem                  (LDAP): Internationalized String Preparation", RFC
    212  1.1  lukem                  4518, June 2006.
    213  1.1  lukem 
    214  1.1  lukem    [RFC4519]     Sciberras, A., Ed., "Lightweight Directory Access
    215  1.1  lukem                  Protocol (LDAP): Schema for User Applications", RFC
    216  1.1  lukem                  4519, June 2006.
    217  1.1  lukem 
    218  1.1  lukem    [RFC4520]     Zeilenga, K., "Internet Assigned Numbers Authority
    219  1.1  lukem                  (IANA) Considerations for the Lightweight Directory
    220  1.1  lukem                  Access Protocol (LDAP)", BCP 64, RFC 4520, June 2006.
    221  1.1  lukem 
    222  1.1  lukem    [RFC4521]     Zeilenga, K., "Considerations for LDAP Extensions", BCP
    223  1.1  lukem                  118, RFC 4521, June 2006.
    224  1.1  lukem 
    225  1.1  lukem 
    226  1.1  lukem 
    227  1.1  lukem 
    228  1.1  lukem 
    229  1.1  lukem Zeilenga                    Standards Track                     [Page 4]
    230  1.1  lukem 
    232  1.1  lukem RFC 4510                   LDAP: TS Road Map                   June 2006
    233  1.1  lukem 
    234  1.1  lukem 
    235  1.1  lukem    [X.500]       International Telecommunication Union -
    236  1.1  lukem                  Telecommunication Standardization Sector, "The
    237  1.1  lukem                  Directory -- Overview of concepts, models and
    238  1.1  lukem                  services", X.500(1993) (also ISO/IEC 9594-1:1994).
    239  1.1  lukem 
    240  1.1  lukem    [X.501]       International Telecommunication Union -
    241  1.1  lukem                  Telecommunication Standardization Sector, "The
    242  1.1  lukem                  Directory -- Models", X.501(1993) (also ISO/IEC 9594-
    243  1.1  lukem                  2:1994).
    244  1.1  lukem 
    245  1.1  lukem    [X.511]       International Telecommunication Union -
    246  1.1  lukem                  Telecommunication Standardization Sector, "The
    247  1.1  lukem                  Directory: Abstract Service Definition", X.511(1993)
    248  1.1  lukem                  (also ISO/IEC 9594-3:1993).
    249  1.1  lukem 
    250  1.1  lukem 
    251  1.1  lukem 
    252  1.1  lukem 
    253  1.1  lukem 
    254  1.1  lukem 
    255  1.1  lukem 
    256  1.1  lukem 
    257  1.1  lukem 
    258  1.1  lukem 
    259  1.1  lukem 
    260  1.1  lukem 
    261  1.1  lukem 
    262  1.1  lukem 
    263  1.1  lukem 
    264  1.1  lukem 
    265  1.1  lukem 
    266  1.1  lukem 
    267  1.1  lukem 
    268  1.1  lukem 
    269  1.1  lukem 
    270  1.1  lukem 
    271  1.1  lukem 
    272  1.1  lukem 
    273  1.1  lukem 
    274  1.1  lukem 
    275  1.1  lukem 
    276  1.1  lukem 
    277  1.1  lukem 
    278  1.1  lukem 
    279  1.1  lukem 
    280  1.1  lukem 
    281  1.1  lukem 
    282  1.1  lukem 
    283  1.1  lukem 
    284  1.1  lukem 
    285  1.1  lukem 
    286  1.1  lukem Zeilenga                    Standards Track                     [Page 5]
    287  1.1  lukem 
    289  1.1  lukem RFC 4510                   LDAP: TS Road Map                   June 2006
    290  1.1  lukem 
    291  1.1  lukem 
    292  1.1  lukem Appendix A.  Changes to Previous Documents
    293  1.1  lukem 
    294  1.1  lukem    This appendix outlines changes this document makes relative to the
    295  1.1  lukem    documents it replaces (in whole or in part).
    296  1.1  lukem 
    297  1.1  lukem A.1. Changes to RFC 3377
    298  1.1  lukem 
    299  1.1  lukem    This document is nearly a complete rewrite of RFC 3377 as much of the
    300  1.1  lukem    material of RFC 3377 is no longer applicable.  The changes include
    301  1.1  lukem    redefining the terms "LDAP" and "LDAPv3" to refer to this revision of
    302  1.1  lukem    the technical specification.
    303  1.1  lukem 
    304  1.1  lukem A.2. Changes to Section 3.3 of RFC 2251
    305  1.1  lukem 
    306  1.1  lukem    The section was modified slightly (the word "document" was replaced
    307  1.1  lukem    with "technical specification") to clarify that it applies to the
    308  1.1  lukem    entire LDAP technical specification.
    309  1.1  lukem 
    310  1.1  lukem Author's Address
    311  1.1  lukem 
    312  1.1  lukem    Kurt D. Zeilenga
    313  1.1  lukem    OpenLDAP Foundation
    314  1.1  lukem 
    315  1.1  lukem    EMail: Kurt (a] OpenLDAP.org
    316  1.1  lukem 
    317  1.1  lukem 
    318  1.1  lukem 
    319  1.1  lukem 
    320  1.1  lukem 
    321  1.1  lukem 
    322  1.1  lukem 
    323  1.1  lukem 
    324  1.1  lukem 
    325  1.1  lukem 
    326  1.1  lukem 
    327  1.1  lukem 
    328  1.1  lukem 
    329  1.1  lukem 
    330  1.1  lukem 
    331  1.1  lukem 
    332  1.1  lukem 
    333  1.1  lukem 
    334  1.1  lukem 
    335  1.1  lukem 
    336  1.1  lukem 
    337  1.1  lukem 
    338  1.1  lukem 
    339  1.1  lukem 
    340  1.1  lukem 
    341  1.1  lukem 
    342  1.1  lukem 
    343  1.1  lukem Zeilenga                    Standards Track                     [Page 6]
    344  1.1  lukem 
    346  1.1  lukem RFC 4510                   LDAP: TS Road Map                   June 2006
    347  1.1  lukem 
    348  1.1  lukem 
    349  1.1  lukem Full Copyright Statement
    350  1.1  lukem 
    351  1.1  lukem    Copyright (C) The Internet Society (2006).
    352  1.1  lukem 
    353  1.1  lukem    This document is subject to the rights, licenses and restrictions
    354  1.1  lukem    contained in BCP 78, and except as set forth therein, the authors
    355  1.1  lukem    retain all their rights.
    356  1.1  lukem 
    357  1.1  lukem    This document and the information contained herein are provided on an
    358  1.1  lukem    "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
    359  1.1  lukem    OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET
    360  1.1  lukem    ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED,
    361  1.1  lukem    INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE
    362  1.1  lukem    INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
    363  1.1  lukem    WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
    364  1.1  lukem 
    365  1.1  lukem Intellectual Property
    366  1.1  lukem 
    367  1.1  lukem    The IETF takes no position regarding the validity or scope of any
    368  1.1  lukem    Intellectual Property Rights or other rights that might be claimed to
    369  1.1  lukem    pertain to the implementation or use of the technology described in
    370  1.1  lukem    this document or the extent to which any license under such rights
    371  1.1  lukem    might or might not be available; nor does it represent that it has
    372  1.1  lukem    made any independent effort to identify any such rights.  Information
    373  1.1  lukem    on the procedures with respect to rights in RFC documents can be
    374  1.1  lukem    found in BCP 78 and BCP 79.
    375  1.1  lukem 
    376  1.1  lukem    Copies of IPR disclosures made to the IETF Secretariat and any
    377  1.1  lukem    assurances of licenses to be made available, or the result of an
    378  1.1  lukem    attempt made to obtain a general license or permission for the use of
    379  1.1  lukem    such proprietary rights by implementers or users of this
    380  1.1  lukem    specification can be obtained from the IETF on-line IPR repository at
    381  1.1  lukem    http://www.ietf.org/ipr.
    382  1.1  lukem 
    383  1.1  lukem    The IETF invites any interested party to bring to its attention any
    384  1.1  lukem    copyrights, patents or patent applications, or other proprietary
    385  1.1  lukem    rights that may cover technology that may be required to implement
    386  1.1  lukem    this standard.  Please address the information to the IETF at
    387  1.1  lukem    ietf-ipr (a] ietf.org.
    388  1.1  lukem 
    389  1.1  lukem Acknowledgement
    390  1.1  lukem 
    391  1.1  lukem    Funding for the RFC Editor function is provided by the IETF
    392  1.1  lukem    Administrative Support Activity (IASA).
    393  1.1  lukem 
    394  1.1  lukem 
    395  1.1  lukem 
    396             
    397             
    398             
    399             
    400             Zeilenga                    Standards Track                     [Page 7]
    401             
    403