Directory Service Access

LDAP queries to a directory service use the following format:

ldap://<directory_service_host>:<port>/<search_string>

  • ldap is the protocol indicator. Use this indicator for both standard connections and SSL connections to the directory service.
  • <directory_service_host> is the fully-qualified name of the computer that hosts the directory service.
  • <port> is the port that the directory service uses for LDAP communication. The default port for non-SSL connections is 389. The default port for SSL connections is 636.
  • <search_string> contains the information request. For more information, see Directory Service Content and RFC 1959, An LDAP URL Format, which is available at:
    labs.apache.org/webarch/uri/rfc/rfc1959.txt

You can enter an LDAP query as a URL in a web browser to verify that you have the correct access information and the correct structure for the search string.

Tip If the directory service (for example, Active Directory) does not permit anonymous access, the directory service denies LDAP queries from a web browser. In this case, you can use a third-party LDAP browser (for example, the LDAP browser included in Apache Directory Studio) to validate your configuration parameters.