--- title: Introduction to the PingDirectory server description: The PingDirectory server is a high-performance, extensible Lightweight Directory Access Protocol (LDAP) directory that provides seamless data management over a distributed system while meeting the constant performance demands for today's markets. component: pingdirectory version: 11.0 page_id: pingdirectory::pd_ds_intro_pindirectory_server canonical_url: https://docs.pingidentity.com/pingdirectory/11.0/pd_ds_intro_pindirectory_server.html page_aliases: ["pingdirectory_server_administration_guide:pd_ds_intro_pindirectory_server.adoc"] section_ids: server-features: Server features administration-framework: Administration framework server-tools-location: Server tools location --- # Introduction to the PingDirectory server The PingDirectory server is a high-performance, extensible Lightweight Directory Access Protocol (LDAP) *(tooltip: \
\

An open, cross platform protocol used for interacting with directory services.\

\
)* directory that provides seamless data management over a distributed system while meeting the constant performance demands for today's markets. The PingDirectory server centralizes consumer and user identity management information, subscriber data management, application configurations, and user credentials into a network, enterprise, or virtualized database environment. The PingDirectory server can: * Simplify administration * Reduce costs * Secure information in systems that scale for large numbers of users You can find the latest information on PingDirectory server releases in the [Release notes](release_notes/pd_release_notes.html). ## Server features The PingDirectory server provides the following features and tools. * Full LDAP version 3 implementation The PingDirectory server fully supports [LDAP v3](https://docs.oracle.com/javase/jndi/tutorial/ldap/models/v3.html), which supports the Request For Comments (RFCs) specified in the protocol. It provides a feature-rich solution that supports the core LDAP v3 protocol in addition to server-specific controls and extended operations. * High availability The PingDirectory server supports N-way multi-primary [replication](pingdirectory_server_administration_guide/pd_ds_manage_replication.html) that eliminates single points of failure and ensures high availability for a networked topology. It allows you to store data across multiple machines and disk partitions for fast replication. It also supports replication in [entry-balancing proxy server](pingdirectoryproxy_server_administration_guide/pd_proxy_deploy_entry_balancing_dps.html) deployments. * Administration tools The PingDirectory server provides a full set of [command-line tools](pingdirectory_server_administration_guide/pd_ds_available_cmdline_tools.html), an [admin console](pingdirectory_server_administration_guide/pd_ds_using_the_console.html), and a Java-based setup tool to configure, monitor, and manage any part of the server. The server has a task-based subsystem that provides automated scheduling of basic functions, such as: * Backups * Restores * Imports * Exports * Restarts * Shutdowns The set of utilities includes a [troubleshooting support tool](troubleshooting_the_pingdirectory_suite_of_products/pd_ds_collect_support_data_tool.html) that aggregates system metrics into a `.zip` archive, which administrators can send to your authorized support provider for analysis. * Self-service account manager application The Self Service Account Manager project, hosted at , is a customizable web application allowing users to perform their own account registration, profile updates, and password changes. The project is for testing and development purposes only and is not a supported application. * Delegated admin application A JavaScript-based web application can be installed for business users to manage identities stored in the PingDirectory server. The application provides delegated administration of identities for: * Help desk or customer service representatives initiating a password reset and unlock * An employee in HR updating an address stored within another employee profile * An application administrator updating identity attributes or group membership to allow application single sign-on (SSO) access. Learn more in the [Delegated Admin application guide](delegated_admin_application_guide/pd_da_admin_guide.html). * Security mechanisms The PingDirectory server provides extensive security mechanisms to protect data and prevent unauthorized access. Access control list (ACL) instructions are available down to the attribute value level and can be stored within each entry. The server allows connections over SSL through an encrypted communication tunnel. Clients can also use the StartTLS extended operation over standard, non-encrypted ports. Other security features include: * A privilege subsystem for fine-grained granting of rights * A password policy subsystem that allows configurable password validators and storage schemes * SASL authentication mechanisms to secure data integrity, such as: * PLAIN * ANONYMOUS * EXTERNAL * CRAM-MD5 * Digest-MD * GSSAPI The PingDirectory server supports various providers and mappers for certificate-based authentication in addition to the ability to encrypt specific entries or sensitive attributes. Learn more in the [PingDirectory Security Guide](pingdirectory_security_guide/pd_sec_security_guide.html). * Monitoring and notifications The PingDirectory server supports monitoring entries using: * JConsole * SNMP * The admin console Administrators can track the response times for LDAP operations using a monitoring histogram as well as record performance statistics down to sub-second granularity. The PingDirectory server supports configurable notifications, auditing, and logging subsystems with filtered logging capabilities. Learn more in [Monitoring the PingDirectory Suite of Products](monitoring_the_pingdirectory_suite_of_products/pd_ds_manage_monitoring.html). * Powerful LDAP SDK The PingDirectory server is based on a feature-rich LDAP SDK for Java. The LDAP SDK is a Java API standard that overcomes the limitations of the Java Naming and Directory Interface (JNDI) model. For example, JNDI does not address the use of LDAP controls and extended operations. The LDAP SDK for Java provides support for controls and extended operations to leverage Ping Identity's extensible architecture for their applications. | | | | - | ------------------------------------------------------------------------- | | | For more information on the LDAP SDK for Java, see . | * System for Cross-domain Identity Management (SCIM) extension The PingDirectory server provides a SCIM servlet extension to facilitate moving users to, from, and between cloud-based software as a service (SaaS) applications in a secure and fast manner. Learn more in [Managing SCIM 1.1 and 2.0 servlet extensions](managing_scim_11_and_20_servlet_extensions/pd_ds_scim_1_1_2_servlet_exts_mgmt.html). * Directory REST API The PingDirectory server provides a [REST API](pingdirectory_server_administration_guide/pd_ds_directory_rest_api.html) as the native interface for client access. Instead of trying to manage directory hierarchy or requiring attribute mapping, the Directory REST API provides direct access to directory data in a way that is dynamic, discoverable, and efficient. Learn more in the [Developer portal](https://developer.pingidentity.com/en.html). * Server SDK The Server SDK is a library of Java packages, classes, and build tools to help in-house or third-party developers create client extensions for: * PingDirectory server * PingDirectoryProxy server * PingDataSync server The servers have a highly extensible and scalable architecture with multiple plugin points for your customization needs. The Server SDK provides APIs to alter the behavior of each server's components without affecting its code base. ## Administration framework The PingDirectory server provides an administration and configuration framework capable of managing stand-alone servers, server groups, and highly available deployments that include multiple redundant server instances. Administrators can configure changes locally or remotely: * On a single server * On all servers in a server group Each server configuration is stored as a flat file (LDIF) that can be accessed under the `cn=config` branch of the directory information tree (DIT). Administrators can tune the configuration and perform maintenance functions over LDAP using a suite of command-line tools or an admin console (for configuration and monitoring). The PingDirectory server provides plugins to extend the functionality of its components. ## Server tools location The PingDirectory server stores a full set of command-line tools for maintaining your system in the `PingDirectory/bin` directory for UNIX or Linux machines and the `PingDirectory\bat` directory for Microsoft Windows machines. The PingDirectory server, admin console, and LDAP SDK for Java are distributed in `.zip` format. After extracting the file, you can access the `setup` utility in the server root directory, located at `PingDirectory`. Before installing the PingDirectory server, refer to [Preparing the operating system (Linux)](installing_the_pingdirectory_suite_of_products/pd_ds_prepare_operating_system_linux.html) for important information on setting up your machines. Refer to [Installing the PingDirectory server](installing_the_pingdirectory_suite_of_products/pd_ds_install_server.html) for information on installing a server instance using the `setup` utility. You can run this utility in either interactive command-line or non-interactive command-line. You can find information on modifying the configuration of a server instance or a group of servers using the command-line tools and the admin console in [Configuring the PingDirectory server](pingdirectory_server_administration_guide/pd_ds_configuring_server.html).