10.4.1 Directory service access
LDAP queries to a directory service use the following format:
ldap://directory-service-host:port/search-string
-
ldap is the protocol indicator. Use this indicator for both standard connections and SSL connections to the directory service.
-
directory-service-host is the fully-qualified name of the computer that hosts the directory service.
-
port is the port that the directory service uses for LDAP communication. The default port for non-SSL connections is 389. The default port for SSL connections is 636.
-
search-string contains the information request. For details, see 10.4.2 Directory service content and RFC 1959, An LDAP URL Format, which is available at:
http://www.ietf.org/rfc/rfc1959.txt
You can enter an LDAP query as a URL in a Web browser to verify that you have the correct access information and the correct structure for the search string.
If the directory service (for example, Active Directory) does not permit anonymous access, the directory service denies LDAP queries from a Web browser. In this case, you can use a third-party LDAP browser (for example, the LDAP browser included in Apache Directory Studio) to validate your configuration parameters.