Design And Implementation Of Uniform Identity Authentication System In The Office Automation System Based On LDAP

With the development of internet and informative jobs in gradual swing, hardware installations, variety of business and type of service are complicated with each passing day, and all kinds of uses based on internet and of teaching resources and of the office system of information management have been greatly developed. A flexible convenient secure tool of managing network system with strong function, which can concentrate every distributive resources and service upon a identical and seamless system to strengthen the managerical ability of network and raise its efficiency of use, is urgently needed. Directory Service is now becoming an important tool and method to manage network by its flexible, extensible. distributed characteristics. Lightweight Directory Access Protocol is an open and extensible network protocol, which defines storing model of directory information, format and contents of message exchanged between a client and a directory server.There are many different kinds of servers, platforms of software and hardware, network services, user account etc in office automation network system. It is a great challenge to unified manage all of the complicated information. This paper studies the resolution of uniform identity authentication system by the heart of directory service and a simulative environment under Linux has been built, including directory server, proxy server, mail server, and web server, etc. It unifies authentication for different application servers, and implements secure transmission between directory server and other application servers.At first, the paper introduces the concepts and characteristics of directory service, analyzes its merits and demerits by comparing the directory with the relational database, then briefly states the concepts, models, structure and development of LDAP, and briefs some products and application about it, too. The following discussion centers on our main jobs based on the design of unified authentication of LDAP and implementation of prototype under Linux, and describes the research background, design objective, key problems, feasibility. From the viewpoint of of network management, it puts forward the principle of design on directory information database and explains the design and implementation about several main function models.