RFC 4511 - Lightweight Directory Access Protocol (LDAP): The Protocol

• Status: Proposed Standard
• Published: June 2006
• Stream: IETF
• Obsoletes: RFC2251, RFC2830, RFC3771
• Errata: No Errata

---

Abstract

This document describes the protocol elements, along with their semantics and encodings, of the Lightweight Directory Access Protocol (LDAP). LDAP provides access to distributed directory services that act in accordance with X.500 data and service models. These protocol elements are based on those described in the X.500 Directory Access Protocol (DAP).

---

Table of Contents

• 1. Introduction
  • 1.1 Relationship to Other LDAP Specifications
• 2. Conventions
• 3. Protocol Model
  • 3.1 Operation and LDAP Message Layer Relationship
• 4. Elements of Protocol
  • 4.1 Common Elements
  • 4.2 Bind Operation
  • 4.3 Unbind Operation
  • 4.4 Unsolicited Notification
  • 4.5 Search Operation
  • 4.6 Modify Operation
  • 4.7 Add Operation
  • 4.8 Delete Operation
  • 4.9 Modify DN Operation
  • 4.10 Compare Operation
  • 4.11 Abandon Operation
  • 4.12 Extended Operation
  • 4.13 IntermediateResponse Message
  • 4.14 StartTLS Operation
• 5. Protocol Encoding, Connection, and Transfer
  • 5.1 Protocol Encoding
  • 5.2 Transmission Control Protocol (TCP)
  • 5.3 Termination of the LDAP session
• 6. Security Considerations
• 7. Acknowledgements
• 8. Normative References
• 9. Informative References
• 10. IANA Considerations

Appendices

• Appendix A. LDAP Result Codes
  • A.1 Non-Error Result Codes
  • A.2 Result Codes
• Appendix B. Complete ASN.1 Definition
• Appendix C. Changes
  • C.1 Changes Made to RFC 2251
  • C.2 Changes Made to RFC 2830
  • C.3 Changes Made to RFC 3771

---

Related Resources

• Official Text: RFC 4511
• Official Page: RFC 4511 DataTracker

---