Re: Red Hat Directory Server

Manuel Amador <[email protected]> Wed, 08 Jun 2005 02:50:55 -0500
Newsgroups gmane.network.directoryadmin
Organization Amauta
Message-ID <[email protected]>
El mar, 07-06-2005 a las 06:10 +0200, Dieter Kluenter escribió:


> 
> I do not agree with your statement. Defined standards are required for
> interoperability reason and if there are stringend standards, one
> should follow these standards when developing software.

But you get problems when there are several differing interpretations of
the standard, which is exactly what happened here.  Had the standard
said anything different, DA would have been developed using a different
architecture, based on the assumption that a single entity in the
directory cannot be of several structural object classes.  We use that
"feature" or "bug" (depending on the flavor/interpretation of the day)
to make maintaining an address book, and mail routing instructions, and
several other things, as a single entity, thus lowering development
efforts and (in addition) reducing the chance of bugs and "leftover
crap" when deleting old users.

I agree with your statement, I do!  But I'm not so sure I agree with
whatever the thought was that prompted you to cite your statement in
this context.

> 
> > 2. NDS always has had very mature administration tools, whereas with
> > OpenLDAP you're practically stuck with the ldap command-line tools.
> > That is simply unacceptable in a corporate environment.
> 
> Your are argueing based on outdated information. You can write to the
> config and schema backends of OpenLDAP by means of ldif, thus any ldap
> editor can be used to change configuration and add schemas at runtime.

...which proves, again, my point.  An "LDAP editor" is definitely not
the right choice for directory management in the enterprise level.  It
may be a debugging utility, and an inspection helper, but definitely not
an enterprise directory management tool.

When entering the business space, the technology no longer matters as
much as what the client (in this case a directory manager, or a CTO, or
whoever is in charge of authorizing a check for you) sees.  DA has
fulfilled an important role in this space.

> 
> -Dieter
> 
-- 
                Manuel Amador   <[email protected]>
                http://www.amautacorp.com/staff/Rudd-O/