TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Ask HN: Is ActiveDirectory an Embrace, Extend, Extinguish of LDAP?

4 pointsby Fazel94over 5 years ago
I was studying the Embrace, Extend and Extinguish strategy(https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Embrace,_extend_and_extinguish) implemented by various Tech companies. It just occurred to me that ActiveDirectory that is one of the most successful enterprise products of microsoft, could be interpreted as an EEE over LDAP.<p>Could you elaborate on that?

2 comments

bjourneover 5 years ago
LDAP and AD aren&#x27;t equivalent technologies. LDAP provides &quot;directory services&quot; meaning (practically speaking) usernames, passwords and security policies. AD provides that and much more. For example, AD lets you share folders and manage users, something LDAP doesn&#x27;t support. So you have to combine LDAP with other protocols.<p>Many many years ago I had the displeasure of being in charge of an AD to OpenLDAP+NFS migration for a mid-sized company. I was put in charge after an intern had spent months trying but failing to come up with a migration plan. I can tell you it wasn&#x27;t fun. Especially the weird configuration files and stupid Perl scripts I had to use to communicate with OpenLDAP. I don&#x27;t remember the details, but there was a lot of character encoding problems (åäö) and places where whitespace was significant in command line arguments.<p>It made me appreciate AD because in comparison configuring that is a breeze. I&#x27;m not much a MS fan but AD is imho a solid product.
评论 #21671464 未加载
评论 #21668389 未加载
wshover 5 years ago
I thought Active Directory was Microsoft’s response to the competitive threat from other X.500-inspired, proprietary directory products, most notably Novell’s NDS, which met the needs of large organizations in ways that Windows NT domains couldn’t.<p>LDAP and Kerberos were in use before Active Directory, of course, but they weren’t ubiquitous the way HTML, HTTP, or IP had become by 1999, so I’m not sure the “embrace” stage of the strategy fits. Certainly, there were marketing advantages for Microsoft from using well-regarded open standards with at least nominal cross-platform compatibility, and some customers who would have expected any serious directory server to work with LDAP clients.