On 1/29/2014 2:24 PM, Joseph L. Casale wrote:
No, the other way around. Microsoft Active Directory implements an LDAP like directory accessible interface for its own directory.
Calling Active Directory "LDAP" is like calling vim `echo "xx" > yy`. If you are unaware of all the moving parts under Active Directory, it might prove very informative to explore it.
Credit where credit is due ...
AD *is* a modified/extended LDAP+Kerberos based system, it just adds a ton more proprietary stuff around it to manage Windows workstations, the whole Group Policy Object stuff etc etc. Thats all implemented via LDAP extensions.