Table of Contents
|LDAP, Production||ldap.hawaii.edu||636 for LDAPS, 389 if using startTLS||cleartext or anonymous binds are rejected, a Special DN is required|
|LDAP, Test||ldap-test.its.hawaii.edu||636 for LDAPS, 389 if using startTLS||cleartext or anonymous binds are rejected, a Special DN is required|
- Connecting to LDAP is referred to as binding.
- You cannot bind to LDAP anonymously, credentials are required.
Our UH LDAP service features three branches
By default a Special DN provides access to the "people" and "misc" branches.
- All people who have received a UH Number, meaning anyone who was, is or will shortly be a student, faculty, staff or guest at UH.
- See also UH Role Assignments and Transitions
- The UH Online Directory relies on this branch for providing contact information for people.
- Departmental/ Group UH Usernames
- Visiting individuals who have have been granted the ability to access the Internet from our campus(es).
- Department listings, primarily used for printing or providing PDFs of the University Phone Directory.
Data Element Dictionary
Using LDAP to verify a UH username and password
- See LDAP Authentication
- If you wish to limit use of your app to certain roles and/or campuses, you should retrieve the affiliations of the person associated with the authenticated username, and allow only those matching your criteria to pass through.
You should also look into CAS (the UH Web Login Service) as the preferred and highly recommended alternative to using LDAP for authentication.