Quiz Entry - updated: 2026.10.22
How do the jobs of the LDAP protocol and the LDIF format differ?
LDAP is the live network protocol (authenticate users, search in real time, change single entries, replicate), while LDIF is a file format for bulk work (export, import, backup, migration and batch changes).
| Task | LDAP (protocol) | LDIF (file format) |
|---|---|---|
| Authenticate a user | Yes (bind) | No |
| Search objects | Yes, in real time | No |
| Change entries | Yes, one operation at a time | Changes are written to a file and imported |
| Import/export | No direct export function | Yes: store and move directory data |
| Backup and restore | No | Yes: dump to LDIF, re-import later |
| Batch (mass) changes | No, single operations | Yes: many entries in one file |
| Replication | Yes | Mostly for the initial data load of a new replica |
The two complement each other: a migration typically exports the old directory to LDIF, transforms the file, and imports it into the new server, after which applications talk to the new server live over LDAP. Tools such as ldapadd and ldapmodify are the bridge, reading LDIF and sending the corresponding LDAP operations.
Go deeper:
RFC 2849: LDIF — content records for export and change records for batch updates.