Definition: LDAP Extended Operation
The LDAP extended operation provides a degree of extensibility to the LDAP protocol by allowing clients to request operations not defined in the core protocol specification. Examples of LDAP extended operations include:
- Cancel Extended Operation – This operation may be used to cancel a previously-requested operation.
- Password Modify Extended Operation – This operation may be used to change a user password.
- StartTLS Extended Operation – This operation may be used to initiate a secure communication channel over an existing connection.
- "Who Am I?" Extended Operation – This operation may be used to determine the authorization identity associated with the client connection.
The extended request protocol op is defined as follows:
ExtendedRequest ::= [APPLICATION 23] SEQUENCE {
requestName [0] LDAPOID,
requestValue [1] OCTET STRING OPTIONAL }
The elements of the extended request include:
- The OID that is used to indicate the type of operation to perform.
- An optional value containing additional information to use during the course of processing the request.
The response to an LDAP extended operation is defined as follows:
ExtendedResponse ::= [APPLICATION 24] SEQUENCE {
COMPONENTS OF LDAPResult,
responseName [10] LDAPOID OPTIONAL,
responseValue [11] OCTET STRING OPTIONAL }
The elements of the extended response include:
- The elements of the LDAP result objet.
- An optional OID used to indicate the type of response.
- An optional encoded value with additional information to include in the response.
Sign up or Log in to add a comment or watch this page.