A client can request information from each entry that matches the criteria. For example, you might want to search the entire directory subtree below the XYZ Corporation for people with the name Barbara Jensen, retrieving the fax number of each entry found. LDAP lets you do this easily. LDAP lets you do this too. Using this facility, client developers can easily provide powerful search capabilities.
Some directory services provide no protection, allowing anyone to see the information they contain.
LDAP provides a method for a client to authenticate, or to prove its identity to, a directory server. This paves the way for rich access control to protect the information that the server contains. LDAP provides for multiple, extensible authentication protocols. Access levels include none, compare, search, read, write, and delete. LDAP provides for replication between LDAP servers.