On 1/29/2014 2:24 PM, Joseph L. Casale wrote: > No, the other way around. Microsoft Active Directory implements an > LDAP like directory accessible interface for its own directory. > > Calling Active Directory "LDAP" is like calling vim `echo "xx" > yy`. If you > are unaware of all the moving parts under Active Directory, it might prove > very informative to explore it. > > Credit where credit is due ... AD *is* a modified/extended LDAP+Kerberos based system, it just adds a ton more proprietary stuff around it to manage Windows workstations, the whole Group Policy Object stuff etc etc. Thats all implemented via LDAP extensions. -- john r pierce 37N 122W somewhere on the middle of the left coast