Using LDAP from Tcl

Lightweight Directory Access Protocol (LDAP) can be used to retrieve and/or modify a directory, in this case a directory is understood as a set of objects that are organized in hierarchical way and have attributes, such as directory of users. LDAP allows us to access this directory, query it, and modify certain attributes, based on the level of privileges we have.

Often, LDAP is deployed in larger companies to provide centralized information about users, along with their authentication details. This allows applications that can work using LDAP to authenticate users and/or get additional information about users.

LDAP operates on standardized attribute names and same names are used for the same values in different LDAP implementations. For example:

• o stands for organization

• ou means organization unit

• cn is canonical name

• c is country

For contact information, these are mail, telephoneNumber, mobile among others. Usually the best way to learn about the available fields is...