As one of key network infrastructures, directory service is used in many network services, such as PKI and the next generation intelligent network management system, to publish and retrieve directory information. Directory service carries out information collection and information centralized-control, and provides simple and consistent solutions to the publisment and retrievement of information through naming,describing and specifying enterprise's users and resources.DAP(Directory Access Protocol) ,which is used by ISO directory services standard X.500, is based on OSI protocol stacks. Due to its complicatedness, DAP is hard to implement. Therefore, TCP/IP-based LDAP becomes widespread in the world instead of X.500 soon. As as an open-source LDAP server, OpenLDAP is being used in creasing number of distributed directory applications, so it is vital and of great use to research and improve the performance and security of OpenLDAP.This dissertation analyses the implementation of OpenLDAP's LDAPv3, and emphasizes in researching and improving the performance and security of OpenLDAP. |