Front | Back |
LDAP
|
Lightweight Directory Access Protocolenables querying of directoriesworks over tcp/ip
|
Kerberos
|
- authentication protocol between client/server- strong cryptography over insecure network- provides client TGT to access services so client doesnt send password- ticket expires after 8 hours
|
DN
|
Each object identified by DN used by LDAP when querying directory
CN=common nameOU=Organizational UnitDC=domain componentO=organizationC=country |
RDN
|
First part of DN that identifies object
|
UPN
|
- username that contain domain name- represented as email
|
GUID
|
-128-bit hexademical number assigned to every object when created-never changes unless deleted and re-created
|
SID
|
-number assigned to every object when created for access purposes-never changes unless object moved to another domain
|
Canonical Name
|
DNS name that lists object from domain downwards
|
Namespaces
|
Flat = one level(Netbios)
Hierarchical = multiple levels (DNS) |
AD Namespaces
|
Contiguous = child name and parent nameDisjointed = child name without parent name
|
Classes
|
Set of attributes that define object
|
Container
|
Object that holds other objects
|
Object
|
Item cataloged in AD consisting of attributes
|
Partitions
|
Domain = info on objects in domain(replicated to DCs in domain + partial info to GC)Schema = classes and attributes(replicated to DCs in forest)Configuration = structure of AD(replicated to DCs in forest)Application = applications info - DNS info(replicated to DCs that need it)
|
What is a Domain
|
- Logical grouping of computers sharing same directory database and security- domain contains NTDS.DIT and replicates using multi-master replication
|