[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: GNUstep directory in userhome
From: |
Helge Hess |
Subject: |
Re: GNUstep directory in userhome |
Date: |
Sat, 10 Mar 2001 19:13:14 +0100 |
Manuel Guesdon wrote:
> On Wed, 07 Mar 2001 09:39:38 +0100 Helge Hess <Helge Hess
> <helge.hess@skyrix.com>> wrote:
> >| Further LDAP servers usually have a *very* fine grained access control
> >| (much more complex than Unix) ! Eg in OpenLDAP you can restrict access
> >| on field level.
>
> You're right but having a lot of access rights in OpenLDAP can make it
> unusable: we had something like 20 or 25 rules for an
> OpenLDAP (on a x86 bi-pro 600) to handle mail routing and user accounts. When
> the load increased (a little), the OpenLDAP server
> started to fail to respond to requests every 2 or 3 hours ! Without these
> access rules, there's no problem.
I miss your point. Of course additional checks require additional
resources. Besides that OpenLDAP is certainly not the best LDAP
implementation available (but basically the only freely available).
Commercial directory servers scale to huge amounts of entries and
hit-rates.
BTW: if you write that the server *fails* to respond to request it
sounds more like a bug than a performance problem. Maybe you are using
an unstable OpenLDAP version ?
> Another point is that using ldap to store user info increase GNUstep
> dependencies.
Exactly. It would be nice as an option (especially in enterprise
environments), but not as the only way to store defaults.
Greetings
Helge
--
SKYRIX Software AG - http://www.skyrix.com/
Visit us at CeBIT: hall 4 / booth E52,(414)
- Re: GNUstep directory in userhome, (continued)