基于LDAP技术的校园网统一身份认证系统的设计与实现  

The Design and Implementation of the Campus Network Unified Identity System Based on LDAP

作　　者：谭胜兰[1] 

机构地区：[1]东莞理工学院网络与教育技术中心,广东东莞523808

出　　处：《东莞理工学院学报》2009年第3期82-86,共5页Journal of Dongguan University of Technology

摘　　要：随着高校信息化建设和互联网技术的不断发展,很多高校在不同阶段开发出了许多应用系统,这些系统可能是跨平台跨域的,都有其独立的安全验证机制.用户使用的应用系统越多,所必须记住的用户ID和用户密码就越多;客户出错、泄露密码等直接威胁到系统安全的可能性也就越大.因此,建立一个统一身份认证系统,对网络用户实行统一的管理、认证和授权是校园网建设中的一个重要步骤.从LDAP协议出发,描述了典型的校园网络中如何实现多系统之间的统一身份认证.With the development of informationization and Interact technology, many universities have developed various kinds of application systems at different phases. These applications may be implemented based on different technologies, deployed at different servers, and may use different developing languages, or even cross platform and domains. These systems have their own authentication mechanisms. The more applied systems that the user use, the more UserID and passwords he should remember, so the possibility that he would make mistakes and reveal his passwords is bigger. Therefore, it is an important measure in the information safety system to set up a unified identity, with which to manage the network users in unison, to unify authentication and to authorize. This article begins with LDAP protocol and explains how to perform a single-sign-on authentication system based on LDAP.

关 键 词：LDAP 目录服务 单点登录机制 统一身份认证 

分 类 号：TP202[自动化与计算机技术—检测技术与自动化装置]