Monday, June 2, 2014

Active Directorty Lightweight Directory Services in Server 2008

*What is AD LDS?
*What might it look like on a Network?
*What is an Instance of AD LDS?


*
Active directory lightweight Directory services (Formerly known as ADAM) - Active Directory Applications Mode) is a server role that provides LDAP services.
*You'll only need it if you're installing Applications, like network-aware commercial apps and open sources web apps that relly on LDAP to authenticate users and provide permissions to aspects of the specific application.
*It usually lives on a server separate from your AD DS (Sometimes the same server as your Application), and can also be installed on Server Core!

What is an Instance of AD LDS?
Think of it as a Copy in RAM
* An "Instance" of LDS is just a running copy of AD LDS that uses a particular "Store" of data.
* You can have multiple instances of LDS running on the same AD LDS Server, all with their own unique Schema definations.
* You could have multiple instances of LDS running for multiple applications, all instances being customized for the unique application requirements.
* Management Tools for LDS:
- ADSI Edit
- Event Viewer
- LDP.exe
- NTDSUTIL - Command Line
- LDIFDE - Command Line
- DSDBUTIL - Command Line
- DSACLS - Command Line

AD LDS in a NutShell.
* AD Lightweight Directory Services is a Server Role that allow LDAP Services.
* You'll only need it for applications that require it.
* You don't needs AD DS for it, although it can work with AD DS.
* When you install AD LDS, you need to also Create an Instance of LDS (A running copy)
* Most of the tools you would use for AD LDS are command line based, but there's a few that have a GUI, like ADSI Edit and Ldp.exe.

No comments:

Post a Comment