Research And Implemented The LDAP Based Unify Identity Authentieation System

Withtherapiddevelopmentof Internet,avarietyofWeb-basedapplicationsexpandceaselessly, and the services provided are progressively, so the drawbacks ofindependent certification in application system are emerged. As a result, the creation ofa unified authentication system which can manage, authenticate and authorize networkusers plays an important role on network constructed. This paper investigates theunifiednetworkuserauthenticationsystembasedonLDAP.First of all, this paper expounds the concept of unified authentication system andthree main models developed with the research of unified authentication system, thenintroduces the idea of directory services, including general situation of X.500 , and thebasic concepts and features of LDAP, then brings forward unified authentication modelbased on LDAP. Secondly it followed by a detailed analysis of the four kinds of LDAPmodels, as well as the differences of LDAP V2 and LDAP V3. And on that basis, thispaper analyses OpenLDAP of the open source LDAP server, and focus on theimprovement of the performance of the OpenLDAP system. By the analysis of chokepoint in the performance of the OpenLDAP system, this paper puts forward a new"thread pool"model, and investigates the influence of Nagle algorithm to systemperformance. Through emulational experiment, these technologies can significantlyimprove the performance of OpenLDAP. At last, it designs every module of unifiedauthentication system in detail, and proposes a "second sign" mode. Finally it achievesthe unified user authentication system in the use of Open LDAP, and consequently, itenhancestheworkefficiencyandreducesmanagementcosts.