CertiGuide to Security+  9  Chapter 3:  Infrastructure Security (Domain 3.0; 20%)       9  3.5  Security Baselines            9  3.5.3  Application Hardening                 9  3.5.3.9  Data Repositories

3.5.3.9  Data Repositories 1 2 3 3.5.3.9.2  Databases

A directory service is the full-featured electronic version of the white-pages. It allows clients to perform property-based retrieval of information stored in the directory. For example, the directory might store information about users, network services and printers. Types of information about, or “properties of” users that are maintained in the directory might include their name, department, position, telephone extension, and email address – and can include anything else of interest to those who manage the directory (as long as the directory software allows for it).

Directories are used for far more than simple information lookup by the curious. For example, they can be used to distribute public-key information (public keys will be discussed in the next chapter), locate the “closest” server providing a specific network service like electronic mail, and control access to resources. Directory servers can also be set up to communicate among themselves and exchange information so that they know about information managed by other directory servers.³⁷⁹

Directories can be used for simple information lookup, like an electronic “white pages”.

3.5.3.9  Data Repositories 1 2 3 3.5.3.9.2  Databases