{"id":579941,"date":"2023-12-28T03:14:07","date_gmt":"2023-12-28T03:14:07","guid":{"rendered":"https:\/\/proxyelite.info\/glossary\/ldap-lightweight-directory-access-protocol\/"},"modified":"2023-12-28T03:14:07","modified_gmt":"2023-12-28T03:14:07","slug":"ldap-lightweight-directory-access-protocol","status":"publish","type":"glossary","link":"https:\/\/proxyelite.info\/vi\/glossary\/ldap-lightweight-directory-access-protocol\/","title":{"rendered":"LDAP (Giao th\u1ee9c truy c\u1eadp th\u01b0 m\u1ee5c nh\u1eb9)"},"content":{"rendered":"

LDAP, hay Giao th\u1ee9c truy c\u1eadp th\u01b0 m\u1ee5c nh\u1eb9, l\u00e0 giao th\u1ee9c \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i, ch\u1ee7 y\u1ebfu \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 truy c\u1eadp v\u00e0 qu\u1ea3n l\u00fd c\u00e1c d\u1ecbch v\u1ee5 th\u00f4ng tin th\u01b0 m\u1ee5c. B\u00e0i vi\u1ebft n\u00e0y \u0111i s\u00e2u v\u00e0o s\u1ef1 ph\u1ee9c t\u1ea1p c\u1ee7a LDAP, cung c\u1ea5p c\u00e1i nh\u00ecn t\u1ed5ng quan to\u00e0n di\u1ec7n v\u1ec1 c\u00e1c t\u00ednh n\u0103ng, lo\u1ea1i, \u1ee9ng d\u1ee5ng ch\u00ednh c\u1ee7a n\u00f3 v\u00e0 m\u1ee9c \u0111\u1ed9 li\u00ean quan c\u1ee7a n\u00f3 v\u1edbi th\u1ebf gi\u1edbi m\u00e1y ch\u1ee7 proxy.<\/p>\n

Th\u00f4ng tin chi ti\u1ebft v\u1ec1 LDAP (Giao th\u1ee9c truy c\u1eadp th\u01b0 m\u1ee5c h\u1ea1ng nh\u1eb9)<\/h2>\n

LDAP, \u0111\u01b0\u1ee3c h\u00ecnh th\u00e0nh v\u00e0o \u0111\u1ea7u nh\u1eefng n\u0103m 1990, n\u1ed5i l\u00ean nh\u01b0 m\u1ed9t gi\u1ea3i ph\u00e1p thay th\u1ebf nh\u1eb9 cho DAP (Giao th\u1ee9c truy c\u1eadp th\u01b0 m\u1ee5c) ph\u1ee9c t\u1ea1p h\u01a1n. N\u00f3 ho\u1ea1t \u0111\u1ed9ng tr\u00ean n\u1ec1n t\u1ea3ng TCP\/IP, khi\u1ebfn n\u00f3 tr\u1edf th\u00e0nh m\u1ed9t ph\u01b0\u01a1ng ti\u1ec7n linh ho\u1ea1t v\u00e0 hi\u1ec7u qu\u1ea3 \u0111\u1ec3 truy v\u1ea5n v\u00e0 s\u1eeda \u0111\u1ed5i th\u00f4ng tin th\u01b0 m\u1ee5c.<\/p>\n

Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a LDAP<\/h3>\n

LDAP t\u1ef1 h\u00e0o c\u00f3 m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng \u0111\u00e1ng ch\u00fa \u00fd g\u00f3p ph\u1ea7n v\u00e0o s\u1ef1 ph\u1ed5 bi\u1ebfn v\u00e0 t\u00ednh linh ho\u1ea1t c\u1ee7a n\u00f3:<\/p>\n

    \n
  1. S\u1ef1 \u0111\u01a1n gi\u1ea3n<\/strong>: Thi\u1ebft k\u1ebf \u0111\u01a1n gi\u1ea3n c\u1ee7a LDAP t\u1ea1o \u0111i\u1ec1u ki\u1ec7n cho vi\u1ec7c t\u00edch h\u1ee3p v\u00e0 tri\u1ec3n khai d\u1ec5 d\u00e0ng.<\/li>\n
  2. C\u1ea5u tr\u00fac ph\u00e2n c\u1ea5p<\/strong>: Th\u00f4ng tin trong th\u01b0 m\u1ee5c LDAP \u0111\u01b0\u1ee3c s\u1eafp x\u1ebfp theo c\u1ea5u tr\u00fac d\u1ea1ng c\u00e2y, th\u01b0\u1eddng gi\u1ed1ng v\u1edbi h\u1ec7 th\u1ed1ng t\u1ec7p.<\/li>\n
  3. L\u01b0\u1ee3c \u0111\u1ed3<\/strong>: LDAP d\u1ef1a v\u00e0o l\u01b0\u1ee3c \u0111\u1ed3 \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh lo\u1ea1i d\u1eef li\u1ec7u c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef, \u0111\u1ea3m b\u1ea3o t\u00ednh nh\u1ea5t qu\u00e1n c\u1ee7a d\u1eef li\u1ec7u.<\/li>\n
  4. B\u1ea3o v\u1ec7<\/strong>: LDAP h\u1ed7 tr\u1ee3 x\u00e1c th\u1ef1c v\u00e0 m\u00e3 h\u00f3a d\u1eef li\u1ec7u, \u0111\u1ea3m b\u1ea3o t\u00ednh b\u1ea3o m\u1eadt d\u1eef li\u1ec7u.<\/li>\n
  5. Kh\u1ea3 n\u0103ng m\u1edf r\u1ed9ng<\/strong>: Giao th\u1ee9c c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c m\u1edf r\u1ed9ng \u0111\u1ec3 \u0111\u00e1p \u1ee9ng c\u00e1c y\u00eau c\u1ea7u c\u1ee5 th\u1ec3.<\/li>\n<\/ol>\n

    C\u00e1c lo\u1ea1i LDAP (Giao th\u1ee9c truy c\u1eadp th\u01b0 m\u1ee5c h\u1ea1ng nh\u1eb9)<\/h2>\n

    LDAP c\u00f3 nhi\u1ec1u lo\u1ea1i kh\u00e1c nhau ph\u00f9 h\u1ee3p v\u1edbi c\u00e1c tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng c\u1ee5 th\u1ec3. \u1ede \u0111\u00e2y, ch\u00fang t\u00f4i ph\u00e2n lo\u1ea1i ch\u00fang trong m\u1ed9t b\u1ea3ng:<\/p>\n\n\n\n\n\n\n\n\n\n
    Ki\u1ec3u<\/th>\nS\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n
    LDAPv2<\/td>\nPhi\u00ean b\u1ea3n \u0111\u1ea7u ti\u00ean v\u1edbi kh\u1ea3 n\u0103ng h\u1ea1n ch\u1ebf.<\/td>\n<\/tr>\n
    LDAPv3<\/td>\nPhi\u00ean b\u1ea3n \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng r\u1ed9ng r\u00e3i v\u00e0 n\u00e2ng cao.<\/td>\n<\/tr>\n
    LDAPS<\/td>\nLDAP qua SSL\/TLS, b\u1ed5 sung th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt.<\/td>\n<\/tr>\n
    Th\u01b0 m\u1ee5c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a Microsoft<\/td>\nM\u1ed9t tri\u1ec3n khai d\u00e0nh ri\u00eang cho Microsoft.<\/td>\n<\/tr>\n
    D\u1ecbch v\u1ee5 th\u01b0 m\u1ee5c Novell<\/td>\n\u0110\u01b0\u1ee3c s\u1eed d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng NetWare c\u1ee7a Novell.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    C\u00e1c c\u00e1ch s\u1eed d\u1ee5ng LDAP (Giao th\u1ee9c truy c\u1eadp th\u01b0 m\u1ee5c h\u1ea1ng nh\u1eb9)<\/h2>\n

    LDAP t\u00ecm th\u1ea5y \u1ee9ng d\u1ee5ng trong nhi\u1ec1u l\u0129nh v\u1ef1c kh\u00e1c nhau, bao g\u1ed3m:<\/p>\n

      \n
    1. X\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng<\/strong>: LDAP th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng trong c\u00e1c d\u1ecbch v\u1ee5 m\u1ea1ng, ch\u1eb3ng h\u1ea1n nh\u01b0 email v\u00e0 \u1ee9ng d\u1ee5ng web.<\/li>\n
    2. D\u1ecbch v\u1ee5 th\u01b0 m\u1ee5c<\/strong>: N\u00f3 ph\u1ee5c v\u1ee5 nh\u01b0 m\u1ed9t kho l\u01b0u tr\u1eef trung t\u00e2m cho h\u1ed3 s\u01a1 ng\u01b0\u1eddi d\u00f9ng, \u0111\u1ecba ch\u1ec9 v\u00e0 th\u00f4ng tin li\u00ean h\u1ec7.<\/li>\n
    3. \u1ee6y quy\u1ec1n<\/strong>: LDAP c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ki\u1ec3m so\u00e1t quy\u1ec1n truy c\u1eadp v\u00e0o t\u00e0i nguy\u00ean.<\/li>\n
    4. \u0110\u1ed9 ph\u00e2n gi\u1ea3i DNS<\/strong>: LDAP c\u00f3 th\u1ec3 gi\u1ea3i quy\u1ebft c\u00e1c truy v\u1ea5n DNS, gi\u1ea3m g\u00e1nh n\u1eb7ng cho m\u00e1y ch\u1ee7 DNS.<\/li>\n<\/ol>\n

      C\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng LDAP<\/h3>\n

      Vi\u1ec7c tri\u1ec3n khai LDAP c\u00f3 th\u1ec3 g\u1eb7p ph\u1ea3i nh\u1eefng th\u00e1ch th\u1ee9c, bao g\u1ed3m:<\/p>\n