Abstract: With the upgrade of campus network, the computer applications are widely spread out among the stuff and students, in order to keep the consistence of user data between different applications, it is urgent to develop a single-sign-on system. This article begins with LDAP protocol and explains how to perform a single-sign-on authentication system based on LDAP.

Key words: Directory service, Single-sign-on authentication, Lightweight directory access protocol (LDAP)

摘要： 随着高校校园网基础设施的不断建设与升级，基于校园网的应用也得到了迅速发展，为了保证各个应用系统之间用户数据的一致性及易操作性，迫切需要校园网对统一身份认证系统的支持。该文从LDAP协议出发，描述了典型的校园网络中如何实现多系统之间的统一身份认证。

关键词: 目录服务, 统一身份认证, LDAP