Free directory software implementing LDAP, developed as open source. vCenter accepts it as an identity source, though vCenter's SSO domain should be given a name distinct from any existing OpenLDAP or Active Directory domain.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains OpenLDAP in context, with comparison tables and the common traps.
Terms in this definition
- LDAP
Lightweight Directory Access Protocol, the standard way to bind to and query directories like Active Directory. In Azure it is provided by Entra Domain Services.
- vCenter
Management software for VMs, clusters and ESX hosts. Each domain in VCF gets a dedicated one.
- Identity source
A user and group directory, for example OpenLDAP or Active Directory over LDAP, that vCenter Single Sign-On authenticates against. Federating with an external identity provider is the alternative approach.
- SSO
Signing in once to gain access to multiple applications.
- Domain
A way of grouping workspaces by area of the business, in support of a data mesh approach. Items take on their workspace's domain, letting you filter the OneLake catalog by it, and certain tenant settings can be passed to domain admins; domains have no effect on access permissions.
- DISTINCT
Removes duplicates so that each row appears once; it can be used in a
SELECT, an aggregate or a set operation. - AD
Short for Active Directory, the directory service built into Windows Server (AD DS). Entra Connect synchronises on-premises forests to Microsoft Entra ID.
Related terms
- Directory authentication
Signing in to Prism with accounts held in Active Directory or OpenLDAP. Ports and the format of the service account vary between the two.
- LDAP
The standard way to query directories, normally over port 389. Both Prism consoles use it to check the identity of OpenLDAP or Active Directory accounts.
- service account
An account for applications or scripts rather than people, for instance one with read access to AD or OpenLDAP, or one set up in Prism Central IAM.