Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Internet app needs to be really secure. So LDAP for auth got into the game. Instead doing the traditional db with users table, we want to authenticate agains a LDAP server. How good/bad you think it is ?

share|improve this question

In principle, there is no fundamental difference in security between a "normal" DB and LDAP if implemented with equal care. However, there will be no benefit when compared to a DB if you use it to authenticate just a single app. The main advantage of LDAP as a user database is that you can use the same users in many different contexts and it can easily fit into a hierarchical model in an enterprise, which is difficult to achieve with a classic database.

What benefit would you expect from LDAP?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.