RFC 4513 · PROPOSED STANDARD · 2006 MON · 27 JUL 2026

Lightweight Directory Access Protocol : Authentication Methods and Security Mechanisms

By R. Harrison · Published June 2006 · DOI 10.17487/RFC4513

Overview

RFC 4513, “Lightweight Directory Access Protocol : Authentication Methods and Security Mechanisms”, is a Proposed Standard document published in June 2006 by R. Harrison. It obsoletes RFC 2251, RFC 2829, RFC 2830. It has since been updated by RFC 8996. The canonical text is published by the RFC Editor.

Abstract

This document describes authentication methods and security mechanisms of the Lightweight Directory Access Protocol (LDAP). This document details establishment of Transport Layer Security (TLS) using the StartTLS operation.

This document details the simple Bind authentication method including anonymous, unauthenticated, and name/password mechanisms and the Simple Authentication and Security Layer (SASL) Bind authentication method including the EXTERNAL mechanism.

This document discusses various authentication and authorization states through which a session to an LDAP server may pass and the actions that trigger these state changes.

This document, together with other documents in the LDAP Technical Specification (see Section 1 of the specification's road map), obsoletes RFC 2251, RFC 2829, and RFC 2830. [STANDARDS-TRACK]

Abstract as published in the RFC, via rfc-editor.org.

What “Proposed Standard” means

An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.

Read this RFC

The canonical text of RFC 4513 is hosted at rfc-editor.org. Available in TXT,HTML.

Read on rfc-editor.org Plain text › HTML › IETF Datatracker › DOI link ›

Relationships to other RFCs

This RFC obsoletes: RFC 2251 RFC 2829 RFC 2830
Updated by: RFC 8996

Other RFCs from 2006

Abstract

What “Proposed Standard” means

Who Is Online