📜  LDAP和RADIUS之间的区别

📅  最后修改于: 2021-08-24 04:43:10             🧑  作者: Mango

1.轻型目录访问协议(LDAP):
LDAP代表轻型目录访问协议。它是一种协议,用于在网络中查找任何人以查找个人,组织和其他设备,而不管其位于公共Internet还是公司Internet上。它用作目录即服务,是Microsoft建立活动目录的基础。

LDAP的功能:

  • 它实现了具有灵活体系结构的开源协议。
  • 直接通过TCP / IP和SSL操作。
  • LDAP是一种自动协议。
  • 提供跨行业的广泛支持。

2.远程身份验证拨入用户服务(RADIUS):
RADIUS代表“远程身份验证拨入用户服务”。它是一种网络协议,可为使用和网络服务的用户提供足够的集中式身份验证,计费和授权。当用户请求访问网络资源时,协议开始工作,其中RADIUS服务器对用户输入的凭据进行加密。此后,将通过本地数据库映射凭据,此后,如果所有检查都为真,则授予用户访问权限。

RADIUS的功能:

  • 它的服务器可以充当其他Radius服务器的代理客户端。
  • 客户端和服务器之间的通信由共享密钥验证。
  • 它支持PPP,PAP和CHAP协议以进行身份验证。
  • 它使用UDP运行,并且是无状态协议。

LDAP和RADIUS之间的区别:

S.No. LDAP RADIUS
1. It is short called as Lightweight Directory Access Protocol. It is short used for Remote Authentication Dial-In User Service.
2. LDAP is used for authorizing the details of the records when accessed. It is used for centralized Authentication, Accounting, and Authorization for the user’s information.
3. It is not open-source but it possesses implementation such as Open LDAP which are open-source. It is not open-source but it possesses implementation such as Free RADIUS which is open-source.
4. It supports two-factor authentication with RADIUS protocol. It does not provide two-way authentication, but can set two levels of privileges.
5. LDAP appends authentication in two options SASL or anonymous authentication. RADIUS provides authentication by RADIUS client also called NAS.
6. It renders authentication in multi-tier applications. It provides authentication in multi-tier applications.