HP-UX Directory Server 8.1 administrator guide

C LDAP URLs
LDAP URLs identify the HP-UX Directory Server instance, similarly to the way site URLs identify
a specific web site or web page. There are three common times when the LDAP URL of the
Directory Server instance is used:
The LDAP URL is used to identify the specific Directory Server instance when the Directory
Server is accessed using a web-based client such as Administration Express.
LDAP URLs are used to configure Directory Server referrals.
LDAP URLs are used to configure access control instructions.
NOTE:
The LDAP URL format is described in RFC 4516, which is available at http://www.ietf.org/rfc/
rfc4516.txt.
Topics include:
“Components of an LDAP URL” (page 569)
“Escaping unsafe characters” (page 570)
“Examples of LDAP URLs” (page 570)
C.1 Components of an LDAP URL
LDAP URLs have the following syntax:
ldap[s]://hostname:port/base_dn?attributes?scope?filter
The ldap:// protocol is used to connect to LDAP servers over unsecured connections, and the
ldaps:// protocol is used to connect to LDAP servers over TLS/SSL connections.
Table C-1 “LDAP URL components” lists the components of an LDAP URL.
NOTE:
The LDAP URL format is described in RFC 4516, which is available at http://www.ietf.org/rfc/
rfc4516.txt.
Table C-1 LDAP URL components
DescriptionComponent
Name (or IP address in dotted format) of the LDAP server. For example,
ldap.example.com or 192.202.185.90.
hostname
Port number of the LDAP server (for example, 696). If no port is specified, the standard
LDAP port (389) or LDAPS port (636) is used.
port
Distinguished name (DN) of an entry in the directory. This DN identifies the entry that
is the starting point of the search. If no base DN is specified, the search starts at the root
of the directory tree.
base_dn
The attributes to be returned. To specify more than one attribute, use commas to separate
the attributes; for example, cn,mail,telephoneNumber. If no attributes are specified
in the URL, all attributes are returned.
attributes
C.1 Components of an LDAP URL 569