What is LDAP?

LDAP stands for Lightweight Directory Access Protocol and is used for user authentication and authorisation. LDAP used Microsoft’s Active Directory service to perform this role. As LDAP uses TLS (Transport Layer Security), connections and message between client and server are always encrypted. LDAP also uses TCP (Transmission Control Protocol) to reduce the changes of dropped requests. LDAP is simpler to set up than RADIUS but adds additional network overhead. LDAP does not support user accounting and has to use Syslog to accommodate this. LDAP does not support multi-factor authentication (MFA).