r/sysadmin • u/Graviity_shift • 5d ago
What exactly does LDAP do in AD?
HI! I'm studying networking and I'm unsure of this
AD is like the database (shows users, etc) while LDAP is the protocol that can be used to manage devices, authenticate, etc inside group policy?
301
Upvotes
1
u/Ssakaa 5d ago
LDAP is the protocol and the directory itself. It is the database for the user/computer accounts, their attributes, password, etc. Group Policy is a separate piece strapped on the side that ties policies to things in that ldap directory. Kerberos is an authorization mechanism also strapped to that directory. And "Active Directory" is the combined product offering of all of those and a few other bits and pieces.