Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The core UH LDAP servers are ldap.hawaii.edu (recommended) and ldap1.its.hawaii.edu (legacy) and are based on the uhEduPerson schema.

...

Info
titleNext General LDAP


The next generation of our LDAP service is now in Production. Please see below for details:

...

...

...

  • Departmental/ Group UH Usernames
  • Visiting individuals who have have been granted the ability to access the Internet from our campus(es).

...

Accessing LDAP

LDAP Generation

host

port

comments

(tick) Next Generation LDAP, Productionldap.hawaii.edu389only for STARTTLS, clear binds are rejected, a Special DN is required
(tick) Next Generation LDAP, Testldap-test.its.hawaii.edu389only for STARTTLS, clear binds are rejected, a Special DN is required
(minus) Legacy, Slated for Retirement

ldap1.its.hawaii.edu

389

data goes over cleartext, do not provide any passwords when you connect

(minus) Legacy, Slated for Retirement

ldap1.its.hawaii.edu

636

LDAPS, encrypted, always use this when providing a password

  • Connecting to LDAP is referred to as binding.
  • You cannot bind to LDAP anonymously, credentials are required for the Next Generation LDAP.
    • You must must request a special DN in order to bind per UH Data Governance policies.
    • Special DNs are only granted when CAS (the the Web Login Service) will not suffice.
    • Special DN requests are subject to to E2.215 and  and may require a Data Governance approval.

Our core UH LDAP service currently has data in three branches:

  • ou=people,dc=hawaii,dc=edu
  • ou=misc,dc=hawaii,dc=edu
    • Departmental/ Group UH Usernames
    • Visiting individuals who have have been granted the ability to access the Internet from our campus(es).
  • ou=dept_listings,dc=hawaii,dc=edu
    • Department listings, primarily used for printing or providing PDFs of the University Phone Directory.

Using LDAP to verify a UH username and password

...