1 1.1 lukem 2 1.1 lukem 3 1.1 lukem 4 1.1 lukem 5 1.1 lukem 6 1.1 lukem 7 1.1 lukem Network Working Group K. Zeilenga, Ed. 8 1.1 lukem Request for Comments: 4510 OpenLDAP Foundation 9 1.1 lukem Obsoletes: 2251, 2252, 2253, 2254, 2255, June 2006 10 1.1 lukem 2256, 2829, 2830, 3377, 3771 11 1.1 lukem Category: Standards Track 12 1.1 lukem 13 1.1 lukem 14 1.1 lukem Lightweight Directory Access Protocol (LDAP): 15 1.1 lukem Technical Specification Road Map 16 1.1 lukem 17 1.1 lukem Status of This Memo 18 1.1 lukem 19 1.1 lukem This document specifies an Internet standards track protocol for the 20 1.1 lukem Internet community, and requests discussion and suggestions for 21 1.1 lukem improvements. Please refer to the current edition of the "Internet 22 1.1 lukem Official Protocol Standards" (STD 1) for the standardization state 23 1.1 lukem and status of this protocol. Distribution of this memo is unlimited. 24 1.1 lukem 25 1.1 lukem Copyright Notice 26 1.1 lukem 27 1.1 lukem Copyright (C) The Internet Society (2006). 28 1.1 lukem 29 1.1 lukem Abstract 30 1.1 lukem 31 1.1 lukem The Lightweight Directory Access Protocol (LDAP) is an Internet 32 1.1 lukem protocol for accessing distributed directory services that act in 33 1.1 lukem accordance with X.500 data and service models. This document 34 1.1 lukem provides a road map of the LDAP Technical Specification. 35 1.1 lukem 36 1.1 lukem 1. The LDAP Technical Specification 37 1.1 lukem 38 1.1 lukem The technical specification detailing version 3 of the Lightweight 39 1.1 lukem Directory Access Protocol (LDAP), an Internet Protocol, consists of 40 1.1 lukem this document and the following documents: 41 1.1 lukem 42 1.1 lukem LDAP: The Protocol [RFC4511] 43 1.1 lukem LDAP: Directory Information Models [RFC4512] 44 1.1 lukem LDAP: Authentication Methods and Security Mechanisms [RFC4513] 45 1.1 lukem LDAP: String Representation of Distinguished Names [RFC4514] 46 1.1 lukem LDAP: String Representation of Search Filters [RFC4515] 47 1.1 lukem LDAP: Uniform Resource Locator [RFC4516] 48 1.1 lukem LDAP: Syntaxes and Matching Rules [RFC4517] 49 1.1 lukem LDAP: Internationalized String Preparation [RFC4518] 50 1.1 lukem LDAP: Schema for User Applications [RFC4519] 51 1.1 lukem 52 1.1 lukem 53 1.1 lukem 54 1.1 lukem 55 1.1 lukem 56 1.1 lukem 57 1.1 lukem 58 1.1 lukem Zeilenga Standards Track [Page 1] 59 1.1 lukem 61 1.1 lukem RFC 4510 LDAP: TS Road Map June 2006 62 1.1 lukem 63 1.1 lukem 64 1.1 lukem The terms "LDAP" and "LDAPv3" are commonly used to refer informally 65 1.1 lukem to the protocol specified by this technical specification. The LDAP 66 1.1 lukem suite, as defined here, should be formally identified in other 67 1.1 lukem documents by a normative reference to this document. 68 1.1 lukem 69 1.1 lukem LDAP is an extensible protocol. Extensions to LDAP may be specified 70 1.1 lukem in other documents. Nomenclature denoting such combinations of 71 1.1 lukem LDAP-plus-extensions is not defined by this document but may be 72 1.1 lukem defined in some future document(s). Extensions are expected to be 73 1.1 lukem truly optional. Considerations for the LDAP extensions described in 74 1.1 lukem BCP 118, RFC 4521 [RFC4521] fully apply to this revision of the LDAP 75 1.1 lukem Technical Specification. 76 1.1 lukem 77 1.1 lukem IANA (Internet Assigned Numbers Authority) considerations for LDAP 78 1.1 lukem described in BCP 64, RFC 4520 [RFC4520] apply fully to this revision 79 1.1 lukem of the LDAP technical specification. 80 1.1 lukem 81 1.1 lukem 1.1. Conventions 82 1.1 lukem 83 1.1 lukem The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 84 1.1 lukem "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 85 1.1 lukem document are to be interpreted as described in BCP 14 [RFC2119]. 86 1.1 lukem 87 1.1 lukem 2. Relationship to X.500 88 1.1 lukem 89 1.1 lukem This technical specification defines LDAP in terms of [X.500] as an 90 1.1 lukem X.500 access mechanism. An LDAP server MUST act in accordance with 91 1.1 lukem the X.500 (1993) series of International Telecommunication Union - 92 1.1 lukem Telecommunication Standardization (ITU-T) Recommendations when 93 1.1 lukem providing the service. However, it is not required that an LDAP 94 1.1 lukem server make use of any X.500 protocols in providing this service. 95 1.1 lukem For example, LDAP can be mapped onto any other directory system so 96 1.1 lukem long as the X.500 data and service models [X.501][X.511], as used in 97 1.1 lukem LDAP, are not violated in the LDAP interface. 98 1.1 lukem 99 1.1 lukem This technical specification explicitly incorporates portions of 100 1.1 lukem X.500(93). Later revisions of X.500 do not automatically apply to 101 1.1 lukem this technical specification. 102 1.1 lukem 103 1.1 lukem 3. Relationship to Obsolete Specifications 104 1.1 lukem 105 1.1 lukem This technical specification, as defined in Section 1, obsoletes 106 1.1 lukem entirely the previously defined LDAP technical specification defined 107 1.1 lukem in RFC 3377 (and consisting of RFCs 2251-2256, 2829, 2830, 3771, and 108 1.1 lukem 3377 itself). The technical specification was significantly 109 1.1 lukem reorganized. 110 1.1 lukem 111 1.1 lukem 112 1.1 lukem 113 1.1 lukem 114 1.1 lukem 115 1.1 lukem Zeilenga Standards Track [Page 2] 116 1.1 lukem 118 1.1 lukem RFC 4510 LDAP: TS Road Map June 2006 119 1.1 lukem 120 1.1 lukem 121 1.1 lukem This document replaces RFC 3377 as well as Section 3.3 of RFC 2251. 122 1.1 lukem [RFC4512] replaces portions of RFC 2251, RFC 2252, and RFC 2256. 123 1.1 lukem [RFC4511] replaces the majority RFC 2251, portions of RFC 2252, and 124 1.1 lukem all of RFC 3771. [RFC4513] replaces RFC 2829, RFC 2830, and portions 125 1.1 lukem of RFC 2251. [RFC4517] replaces the majority of RFC 2252 and 126 1.1 lukem portions of RFC 2256. [RFC4519] replaces the majority of RFC 2256. 127 1.1 lukem [RFC4514] replaces RFC 2253. [RFC4515] replaces RFC 2254. [RFC4516] 128 1.1 lukem replaces RFC 2255. 129 1.1 lukem 130 1.1 lukem [RFC4518] is new to this revision of the LDAP technical 131 1.1 lukem specification. 132 1.1 lukem 133 1.1 lukem Each document of this specification contains appendices summarizing 134 1.1 lukem changes to all sections of the specifications they replace. Appendix 135 1.1 lukem A.1 of this document details changes made to RFC 3377. Appendix A.2 136 1.1 lukem of this document details changes made to Section 3.3 of RFC 2251. 137 1.1 lukem 138 1.1 lukem Additionally, portions of this technical specification update and/or 139 1.1 lukem replace a number of other documents not listed above. These 140 1.1 lukem relationships are discussed in the documents detailing these portions 141 1.1 lukem of this technical specification. 142 1.1 lukem 143 1.1 lukem 4. Security Considerations 144 1.1 lukem 145 1.1 lukem LDAP security considerations are discussed in each document 146 1.1 lukem comprising the technical specification. 147 1.1 lukem 148 1.1 lukem 5. Acknowledgements 149 1.1 lukem 150 1.1 lukem This document is based largely on RFC 3377 by J. Hodges and R. 151 1.1 lukem Morgan, a product of the LDAPBIS and LDAPEXT Working Groups. The 152 1.1 lukem document also borrows from RFC 2251 by M. Wahl, T. Howes, and S. 153 1.1 lukem Kille, a product of the ASID Working Group. 154 1.1 lukem 155 1.1 lukem This document is a product of the IETF LDAPBIS Working Group. 156 1.1 lukem 157 1.1 lukem 158 1.1 lukem 159 1.1 lukem 160 1.1 lukem 161 1.1 lukem 162 1.1 lukem 163 1.1 lukem 164 1.1 lukem 165 1.1 lukem 166 1.1 lukem 167 1.1 lukem 168 1.1 lukem 169 1.1 lukem 170 1.1 lukem 171 1.1 lukem 172 1.1 lukem Zeilenga Standards Track [Page 3] 173 1.1 lukem 175 1.1 lukem RFC 4510 LDAP: TS Road Map June 2006 176 1.1 lukem 177 1.1 lukem 178 1.1 lukem 6. Normative References 179 1.1 lukem 180 1.1 lukem [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate 181 1.1 lukem Requirement Levels", BCP 14, RFC 2119, March 1997. 182 1.1 lukem 183 1.1 lukem [RFC4511] Sermersheim, J., Ed., "Lightweight Directory Access 184 1.1 lukem Protocol (LDAP): The Protocol", RFC 4511, June 2006. 185 1.1 lukem 186 1.1 lukem [RFC4512] Zeilenga, K., "Lightweight Directory Access Protocol 187 1.1 lukem (LDAP): Directory Information Models", RFC 4512, June 188 1.1 lukem 2006. 189 1.1 lukem 190 1.1 lukem [RFC4513] Harrison, R., Ed., "Lightweight Directory Access 191 1.1 lukem Protocol (LDAP): Authentication Methods and Security 192 1.1 lukem Mechanisms", RFC 4513, June 2006. 193 1.1 lukem 194 1.1 lukem [RFC4514] Zeilenga, K., Ed., "Lightweight Directory Access 195 1.1 lukem Protocol (LDAP): String Representation of Distinguished 196 1.1 lukem Names", RFC 4514, June 2006. 197 1.1 lukem 198 1.1 lukem [RFC4515] Smith, M., Ed. and T. Howes, "Lightweight Directory 199 1.1 lukem Access Protocol (LDAP): String Representation of Search 200 1.1 lukem Filters", RFC 4515, June 2006. 201 1.1 lukem 202 1.1 lukem [RFC4516] Smith, M., Ed. and T. Howes, "Lightweight Directory 203 1.1 lukem Access Protocol (LDAP): Uniform Resource Locator", RFC 204 1.1 lukem 4516, June 2006. 205 1.1 lukem 206 1.1 lukem [RFC4517] Legg, S., Ed., "Lightweight Directory Access Protocol 207 1.1 lukem (LDAP): Syntaxes and Matching Rules", RFC 4517, June 208 1.1 lukem 2006. 209 1.1 lukem 210 1.1 lukem [RFC4518] Zeilenga, K., "Lightweight Directory Access Protocol 211 1.1 lukem (LDAP): Internationalized String Preparation", RFC 212 1.1 lukem 4518, June 2006. 213 1.1 lukem 214 1.1 lukem [RFC4519] Sciberras, A., Ed., "Lightweight Directory Access 215 1.1 lukem Protocol (LDAP): Schema for User Applications", RFC 216 1.1 lukem 4519, June 2006. 217 1.1 lukem 218 1.1 lukem [RFC4520] Zeilenga, K., "Internet Assigned Numbers Authority 219 1.1 lukem (IANA) Considerations for the Lightweight Directory 220 1.1 lukem Access Protocol (LDAP)", BCP 64, RFC 4520, June 2006. 221 1.1 lukem 222 1.1 lukem [RFC4521] Zeilenga, K., "Considerations for LDAP Extensions", BCP 223 1.1 lukem 118, RFC 4521, June 2006. 224 1.1 lukem 225 1.1 lukem 226 1.1 lukem 227 1.1 lukem 228 1.1 lukem 229 1.1 lukem Zeilenga Standards Track [Page 4] 230 1.1 lukem 232 1.1 lukem RFC 4510 LDAP: TS Road Map June 2006 233 1.1 lukem 234 1.1 lukem 235 1.1 lukem [X.500] International Telecommunication Union - 236 1.1 lukem Telecommunication Standardization Sector, "The 237 1.1 lukem Directory -- Overview of concepts, models and 238 1.1 lukem services", X.500(1993) (also ISO/IEC 9594-1:1994). 239 1.1 lukem 240 1.1 lukem [X.501] International Telecommunication Union - 241 1.1 lukem Telecommunication Standardization Sector, "The 242 1.1 lukem Directory -- Models", X.501(1993) (also ISO/IEC 9594- 243 1.1 lukem 2:1994). 244 1.1 lukem 245 1.1 lukem [X.511] International Telecommunication Union - 246 1.1 lukem Telecommunication Standardization Sector, "The 247 1.1 lukem Directory: Abstract Service Definition", X.511(1993) 248 1.1 lukem (also ISO/IEC 9594-3:1993). 249 1.1 lukem 250 1.1 lukem 251 1.1 lukem 252 1.1 lukem 253 1.1 lukem 254 1.1 lukem 255 1.1 lukem 256 1.1 lukem 257 1.1 lukem 258 1.1 lukem 259 1.1 lukem 260 1.1 lukem 261 1.1 lukem 262 1.1 lukem 263 1.1 lukem 264 1.1 lukem 265 1.1 lukem 266 1.1 lukem 267 1.1 lukem 268 1.1 lukem 269 1.1 lukem 270 1.1 lukem 271 1.1 lukem 272 1.1 lukem 273 1.1 lukem 274 1.1 lukem 275 1.1 lukem 276 1.1 lukem 277 1.1 lukem 278 1.1 lukem 279 1.1 lukem 280 1.1 lukem 281 1.1 lukem 282 1.1 lukem 283 1.1 lukem 284 1.1 lukem 285 1.1 lukem 286 1.1 lukem Zeilenga Standards Track [Page 5] 287 1.1 lukem 289 1.1 lukem RFC 4510 LDAP: TS Road Map June 2006 290 1.1 lukem 291 1.1 lukem 292 1.1 lukem Appendix A. Changes to Previous Documents 293 1.1 lukem 294 1.1 lukem This appendix outlines changes this document makes relative to the 295 1.1 lukem documents it replaces (in whole or in part). 296 1.1 lukem 297 1.1 lukem A.1. Changes to RFC 3377 298 1.1 lukem 299 1.1 lukem This document is nearly a complete rewrite of RFC 3377 as much of the 300 1.1 lukem material of RFC 3377 is no longer applicable. The changes include 301 1.1 lukem redefining the terms "LDAP" and "LDAPv3" to refer to this revision of 302 1.1 lukem the technical specification. 303 1.1 lukem 304 1.1 lukem A.2. Changes to Section 3.3 of RFC 2251 305 1.1 lukem 306 1.1 lukem The section was modified slightly (the word "document" was replaced 307 1.1 lukem with "technical specification") to clarify that it applies to the 308 1.1 lukem entire LDAP technical specification. 309 1.1 lukem 310 1.1 lukem Author's Address 311 1.1 lukem 312 1.1 lukem Kurt D. Zeilenga 313 1.1 lukem OpenLDAP Foundation 314 1.1 lukem 315 1.1 lukem EMail: Kurt (a] OpenLDAP.org 316 1.1 lukem 317 1.1 lukem 318 1.1 lukem 319 1.1 lukem 320 1.1 lukem 321 1.1 lukem 322 1.1 lukem 323 1.1 lukem 324 1.1 lukem 325 1.1 lukem 326 1.1 lukem 327 1.1 lukem 328 1.1 lukem 329 1.1 lukem 330 1.1 lukem 331 1.1 lukem 332 1.1 lukem 333 1.1 lukem 334 1.1 lukem 335 1.1 lukem 336 1.1 lukem 337 1.1 lukem 338 1.1 lukem 339 1.1 lukem 340 1.1 lukem 341 1.1 lukem 342 1.1 lukem 343 1.1 lukem Zeilenga Standards Track [Page 6] 344 1.1 lukem 346 1.1 lukem RFC 4510 LDAP: TS Road Map June 2006 347 1.1 lukem 348 1.1 lukem 349 1.1 lukem Full Copyright Statement 350 1.1 lukem 351 1.1 lukem Copyright (C) The Internet Society (2006). 352 1.1 lukem 353 1.1 lukem This document is subject to the rights, licenses and restrictions 354 1.1 lukem contained in BCP 78, and except as set forth therein, the authors 355 1.1 lukem retain all their rights. 356 1.1 lukem 357 1.1 lukem This document and the information contained herein are provided on an 358 1.1 lukem "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS 359 1.1 lukem OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET 360 1.1 lukem ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, 361 1.1 lukem INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE 362 1.1 lukem INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED 363 1.1 lukem WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. 364 1.1 lukem 365 1.1 lukem Intellectual Property 366 1.1 lukem 367 1.1 lukem The IETF takes no position regarding the validity or scope of any 368 1.1 lukem Intellectual Property Rights or other rights that might be claimed to 369 1.1 lukem pertain to the implementation or use of the technology described in 370 1.1 lukem this document or the extent to which any license under such rights 371 1.1 lukem might or might not be available; nor does it represent that it has 372 1.1 lukem made any independent effort to identify any such rights. Information 373 1.1 lukem on the procedures with respect to rights in RFC documents can be 374 1.1 lukem found in BCP 78 and BCP 79. 375 1.1 lukem 376 1.1 lukem Copies of IPR disclosures made to the IETF Secretariat and any 377 1.1 lukem assurances of licenses to be made available, or the result of an 378 1.1 lukem attempt made to obtain a general license or permission for the use of 379 1.1 lukem such proprietary rights by implementers or users of this 380 1.1 lukem specification can be obtained from the IETF on-line IPR repository at 381 1.1 lukem http://www.ietf.org/ipr. 382 1.1 lukem 383 1.1 lukem The IETF invites any interested party to bring to its attention any 384 1.1 lukem copyrights, patents or patent applications, or other proprietary 385 1.1 lukem rights that may cover technology that may be required to implement 386 1.1 lukem this standard. Please address the information to the IETF at 387 1.1 lukem ietf-ipr (a] ietf.org. 388 1.1 lukem 389 1.1 lukem Acknowledgement 390 1.1 lukem 391 1.1 lukem Funding for the RFC Editor function is provided by the IETF 392 1.1 lukem Administrative Support Activity (IASA). 393 1.1 lukem 394 1.1 lukem 395 1.1 lukem 396 397 398 399 400 Zeilenga Standards Track [Page 7] 401 403