29

I have googled for well over an hour, and cannot find and information that simply explains the protocol/concept. Re-binding seems to occur several times during the process of LDAP authentication and authorization.

Can anyone help me understand this concept or share better well explained resources on this...? Thanks!

Improve this question
2

2 Answers 2

Reset to default
20

An LDAP client transmits a BIND request to a server in order to change the authorization state of the client connection. When a client first connects to an LDAP directory server, the server sets the authorization state of the connection to unauthenticated. When the server receives a BIND request, the server sets the authorization state of the connection to unauthenticated immediately. Should the BIND request be successful, the server sets the authorization state of the connection to the state associated with the distinguished-name in the BIND request. LDAPv3 allows a connection to change states any number of times, with the caveat that no requests be outstanding when the BIND request is received.

see also

Improve this answer
1
  • I've tried researching this question several times and this is a great answer, but I think it's still missing something. I think why some people (myself included) get confused by BIND is because it looks like normal server authentication that is done with almost every kind of client/server scenario you can imagine, and yet here with LDAP it's got this special name that looks like an acronym, so we expect BIND to have some extra magic going on, and it really doesn't. The one thing that is different is highlighted in this answer, which is that LDAP allows you to BIND multiple times per session
    – Matt Vang
    Commented Jul 26 at 15:31
2

Google...first link...

http://msdn.microsoft.com/en-us/library/windows/desktop/aa366092%28v=vs.85%29.aspx

Binding is the step where the LDAP server authenticates the client and, if the client is successfully authenticated, allows the client access to the LDAP server based on that client's privileges.

Rebinding is simply doing the process over to authenticate the client.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .