LDAP integration

Freddie Cash fcash at ocis.net
Fri Jan 12 00:30:52 UTC 2007


On Thursday 11 January 2007 09:56 am, Darren Pilgrim wrote:
> Mike Meyer wrote:
> > In <20070111035549.7c11a450 at vixen42>, Vulpes Velox 
<v.velox at vvelox.net> typed:
> >> LDAP is nice organizing across many systems, but if you are just
> >> dealing with one computer it is complete over kill for any thing.
> >
> > In that situation, it's not merely overkill, it's may actually be a
> > bad idea. Can you say "AIX SDR"? How about "Windows registry"?
> >
> > Those system both took the approach of putting all the configuration
> > information in a central database. This creates problems because the
> > tools needed to examine/fix the config database require a complex
> > environment - at least compared to a statically linked copy of
> > ed. LDAP may not be so bad, but it still makes me nervous.
> >
> > On the other hand, if you've got a flock of boxes to manage, having a
> > way to tell the rc subsystem "Go read config values from this LDAP
> > server" seems like a very attractive alternative.
>
> And to think, all these years I've been wasting my time and effort
> using NFS and rsync to centralize the configurations of server farms.

I think (Mike will have to confirm/deny) what Mike was trying to say was 
that for a single system, a centralised database for configuration 
options was overkill and a problem.  Using the Windows Registry as an 
example.

But, using a centralised database for configuring dozens of systems 
(similar or otherwise) could be a good idea, and that LDAP may be good in 
that situation (a lot of reading going on at boot to create the configs).

-- 
Freddie Cash
fcash at ocis.net


More information about the freebsd-hackers mailing list