The encyclopedia · Software & IT · Technical decision · 1993–2006
LDAP stripped X.500 down to TCP/IP and became the directory standard
University of Michigan researchers turned the heavyweight X.500 directory protocol into a lightweight one that runs over TCP/IP.
University of Michigan
the move
In the early 1990s the X.500 standard promised a global directory of people and resources, but it ran over the OSI protocol stack, which the Internet had never adopted. Real deployments were rare because the plumbing was too heavy.
Researchers at the University of Michigan created LDAP around 1993 as a lightweight alternative: keep X.500's data model, but talk to the directory with simple operations over TCP/IP. The protocol was small enough to implement in days, and it worked on the networks that actually existed.
Because it was simple and free, LDAP spread through universities and then enterprises. Microsoft built Active Directory on it, OpenLDAP shipped it everywhere, and the IETF standardized version 3 in 2006 as RFC 4511, making LDAP the de facto standard for directory access.
why it works
- X.500 required an OSI stack that few networks had deployed
- Simple string operations over TCP/IP were easy to implement
- Keeping X.500's data model preserved compatibility with the standard
- Free implementations spread it before any vendor could own it
what transfers
When an incumbent standard is too complex to reach, a compatible subset over the network everyone already uses can quietly become the real standard.
what came after
LDAPv3 is the base of enterprise directories, single sign-on and identity systems worldwide. Its core ideas also fed Active Directory, OpenLDAP and most cloud directories, and the protocol remains in use decades after X.500 itself faded.
references
- Lightweight Directory Access Protocol
- RFC 4511: Lightweight Directory Access Protocol (LDAP): The Protocol
spotted an error? The archive wants to know.