LDAP Sequence Diagram with Kerberos

This sequence diagram describes authenticated LDAP directory lookup. The steps covered are:

  1. TCP connection establishment with the LDAP server
  2. Initial interaction to list the available services.
  3. Authenticate with the Kerberos server and obtain a ticket to proceed with the authentication with the LDAP server.
  4. Armed with the Kerberos ticket, the LDAP client uses bind to authenticate and initiate a secure connection.
  5. Encrypted LDAP communication follows after that.