LDAP Explained — Directory Access, DNs & LDAPS

LDAP Explained: How Apps Query the Directory

1 min readPublished 22 Jul 2026

Track your progress. Sign in to mark this guide complete and build your Job Readiness Score.

LDAP (Lightweight Directory Access Protocol) is how applications talk to a directory such as Active Directory — to authenticate users and look up group membership.

Interactive explainer

LDAP: Directory Access

The protocol applications use to query Active Directory.

Tap or hover a part to learn more.

1. What LDAP is

Directory query protocol.

Lightweight Directory Access Protocol is the standard protocol for reading and writing directory data. Active Directory is queried over LDAP (port 389, or 636 for LDAPS). LDAP is the language; AD is one directory that speaks it.

Check your understanding

1. Which port does secure LDAP (LDAPS) use?

2. What does a Distinguished Name (DN) describe?

Keep learning

Active Directory LDAP & the Directory CompTIA Security+

Practise this in AI Interview™

LDAP vs Active Directory

LDAP is the protocol (the language); Active Directory is a directory that speaks it. Queries run on port 389, or 636 for secure LDAPS.

Distinguished Names

Every object has a Distinguished Name (DN) describing its exact position in the tree, e.g. CN=Jane Doe,OU=Sales,DC=corp,DC=example,DC=com, built from Relative DNs (CN, OU, DC).

Binds and searches

A client binds to authenticate before querying. A simple bind must run over LDAPS so credentials aren't sent in clear text; SASL binds use stronger mechanisms like Kerberos. Applications then run search filters such as (&(objectClass=user)(department=IT)) to find objects — the backbone of directory-integrated logins.

This builds on Active Directory and is common ground for Security+ and application-integration work.

Interview Intelligence

How this topic actually shows up in interviews — and how to demonstrate you understand it.

Why employers ask about this

Countless apps authenticate via LDAP against AD. Employers check you can integrate and secure directory access.

Technical questions

What is a Distinguished Name?+

The full path to an object in the directory, e.g. CN=Jane,OU=Sales,DC=corp,DC=com.

Why should LDAP authentication use LDAPS?+

Simple binds send credentials; without TLS they can be captured. LDAPS (636) encrypts the session.

Behavioural questions

Tell me about integrating an app with a central directory.+

STAR: the app, the LDAP/LDAPS bind and search you configured, and the single-sign-on/security benefit.

Real-world scenarios

“An app authenticates users over plain LDAP on 389.”+

Expected answer: Recommend switching to LDAPS (636) and disabling anonymous binds so credentials aren't exposed.

Common misconceptions

What candidates get wrong in interviews and on the job — and what strong professionals actually do.

Myth

'LDAP and AD are the same.'

Reality

LDAP is a protocol; AD is a directory that uses it.

Myth

'Plain LDAP is secure enough.'

Reality

simple binds need LDAPS or credentials travel in clear text.

Practise in AI Interview™Rehearse these questions, scored.Plan with Career Coach™A personalised path to your goal.Evidence it in Career Passport™Prove this skill to employers.

Employability Intelligence

Where this knowledge takes you — the jobs, skills and certifications it feeds into.

Relevant roles

Systems AdministratorIdentity EngineerSOC Analyst

Skills you're proving

LDAPDirectory servicesSecure integration

Recommended certifications

CompTIA A+CompTIA Security+

Career progression

Help Desk → Sysadmin → Identity/Security Engineer.

What employers expect

That you can integrate applications with the directory securely.

Frequently asked questions

What's the difference between LDAP and Active Directory?

LDAP is the protocol; Active Directory is a directory that can be queried using LDAP.

What port does LDAPS use?

636 (secure LDAP over TLS); plain LDAP is 389.

Why use LDAPS for authentication?

A simple bind sends credentials that must be encrypted; LDAPS prevents them being captured in clear text.

Practise what you've learned

Turn this guide into real, evidenced progress

Missiora helps you measure, improve and evidence the capabilities employers actually value — start with the tools best suited to this topic.

Published by

Missiora

Missiora is an AI Employability Intelligence platform. Our resources are researched and reviewed by the Missiora team to help you measure, improve and prove your career readiness.