On Wed, 4 Jun 2003, Ben Johns wrote:

> I'm in the process of trying to develop a centralised user directory to be
> used by a number of e-smith servers. What I need to know or find out is
> there any method of 'easily' updating all of E-Smith's user accounts via
> LDAP? The only way that I can think of is to write my own perl script
> making heavy use of the Net::LDAP modules, and checking the directory
> often for new/modified/deleted user accounts, while running the
> appropriate E-Smith DB commands.

If you do that, you run into the "two bosses" problem. Has a record been 
deleted from LDAP, or added to the accounts DB by the manager, or 
vice-versa?

Do you have any need to add/delete records in LDAP other than by the 
manager? The manager already keeps LDAP and accounts db records in 
synchrony. As you've surmised, if you allow some other system to 
manipulate LDAP data, then you will need to poll LDAP to detect changes, 
because LDAP (AFAIK) doesn't have a change notification system.

--
Charlie Brady                         [EMAIL PROTECTED]
Lead Product Developer
Network Server Solutions Group
Mitel Networks Corporation      http://www.mitel.com/smallbusiness
Phone: +1 (613) 592 5660 or 592 2122  Fax: +1 (613) 592 1175



--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Searchable archive at http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to