Question: is ldap used for authentication or authorization?
Answer: LDAP can be used for both authentication and authorization. The other directories that Open Directory is compatible with are also LDAP-compatible directories.