Hands on A directory service is an application that lets you store, retrieve and modify information about network-attached resources such as users.

If you want to keep a directory of company employees, for example, you would use a directory service instead of storing that information directly in a database. A directory service is created in a directory server, which is built on top of the database.

In this article I shall create a directory service using PHP, one of the internet's most popular scripting languages, and OpenLDAP directory server - part of the ubiquitous OpenLDAP suite used in Linux distributions and vendors' software.

I have picked OpenLDAP because it's an open source package, meaning the code is easy to grab and use, and because it's easier to install and use than commercial directory servers such as Oracle Internet Directory server or IBM's Tivoli directory server.

Get up to speed

First, some basic - but essential - orientation. As I mentioned, the actual user data is stored in a database - a directory service is an abstract layer that sits on top of the database.

Lightweight Directory Access Protocol (LDAP) is a lightweight protocol for accessing directory services and that also defines operations for adding, searching, modifying and deleting directory entries. A "directory entry" is a set of attributes identified by a globally unique Distinguished Name (DN). Each of a directory entry's attributes has a type and one or more values.

Some examples of attribute types are discussed in the following table:

Attribute Type	Description
o	Organization
dc	Domain component
ou	Organizational unit
cn	Common name
uid	Userid
dn	Distinguished name
mail	Email address

The attributes in a directory entry's DN are arranged in a hierarchy from right to left, with the right-most attributes as the base entry and the left-most attributes called Relative Distinguished Name (RDN). A DN is a sequence of RDNs. An example of a DN is as follows.

cn=dvohra,dc=example,dc=com

In this example, the base entry/root is dc=example,dc=com, and the RDN is cn=dvohra.

Ok, now let's get started. First, install Apache HTTP Server 2.3.2 and PHP 5.2. Enable the PHP LDAP extension in php.ini configuration file.

extension=php_ldap.dll

Next page: Install OpenLDAP

Page:

• 1
• 2
• 3
• Next →

Related stories

• Hands on Get your PHP on the right Trax (24 September 2008)
• Spread your database connections with PHP PDO (24 April 2008)
• Zend stacks PHP for work and play (14 March 2008)
• Extreme Programming in risky position, says co-creator (13 March 2008)
• SD West 2008 Stroustrup and Sutter: C++ to run and run (7 March 2008)
• Mix 08 Ballmer pledges PHP love in Microhoo future (6 March 2008)
• Hands on Put some MVC in your PHP (22 February 2008)
• Myths and legends All aboard the WS-* standards express (20 February 2008)
• Time to rewrite DBMS, says Ingres founder (18 February 2008)
• SugarCon 2008 Java and PHP to exchange sweet nothings (7 February 2008)
• Hands on Streamline your search with Yahoo! Web Services and AJAX (29 January 2008)
• AJAX wave evades vendors (2 January 2008)
• Hands on Build your PDF and Excel reports with PHP (10 December 2007)
• Hands on Xajax and PHP: JavaScript without the pain (20 November 2007)
• Hands on Get started with Silverlight (5 November 2007)
• Java and .NET to drive double-digit wage growth (2 November 2007)
• Considering Microsoft’s 'rift with the web' (23 October 2007)
• Build business-ready XML Schema with JDeveloper (1 October 2007)
• Retrieving RSS/Atom Feeds with the Google AJAX Feed API (7 September 2007)
• Tutorial Accessing DB2 UDB with PHP (Part 2) (9 August 2006)
• Tutorial Accessing DB2 UDB with PHP (7 August 2006)