https://x7peeps.com/tags/389-Directory-Server/index.htmlHugozh-CNMon, 06 Jul 2026 14:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/LDAP%E7%9B%AE%E5%BD%95%E6%9C%8D%E5%8A%A1%E4%B8%8E%E8%BA%AB%E4%BB%BD%E5%AD%98%E5%82%A8/LDAP%E7%9B%AE%E5%BD%95%E6%9C%8D%E5%8A%A1%E4%B8%8E%E8%BA%AB%E4%BB%BD%E5%AD%98%E5%82%A8%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.htmlMon, 06 Jul 2026 14:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/03-%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/LDAP%E7%9B%AE%E5%BD%95%E6%9C%8D%E5%8A%A1%E4%B8%8E%E8%BA%AB%E4%BB%BD%E5%AD%98%E5%82%A8/LDAP%E7%9B%AE%E5%BD%95%E6%9C%8D%E5%8A%A1%E4%B8%8E%E8%BA%AB%E4%BB%BD%E5%AD%98%E5%82%A8%E9%AB%98%E5%8D%B1%E6%94%BB%E5%87%BB%E9%93%BE%E4%B8%93%E9%A2%98/index.htmlLDAP（Lightweight Directory Access Protocol）是企业身份基础设施的核心协议，承载着用户凭据存储、组策略分发、证书服务、单点登录等关键功能。Active Directory、OpenLDAP、389 Directory Server、FreeIPA 等目录服务几乎覆盖了所有中大型企业的身份管理架构。一旦 LDAP 目录服务被攻破，攻击者即可获取全域用户凭据、篡改组策略、伪造证书，最终实现域级别完全接管。