I gather, from what I read on the Apache site, that Apache DS is not as performant as OpenLDAP which seems to be capable of handling large structures and high transaction rates.

I did find this reference http://portals.apache.org/jetspeed-2/multiproject/jetspeed-security/ldap.html

It seems to be a bit short on details about what needs to be done. There is a big effort underway to improve the documentation. Perhaps your questions will help focus on what needs to be added here.

Ron

Aaron Evans wrote:

Ron Wheeler <rwheeler <at> artifact-software.com> writes:

Did you build a custom schema for this?
What does it look like?

Ron


At the moment, I'm developing against Sun ONE but I plan on switching to either
Open LDAP or Apache DS in the near future.

So, I have just created extensions to the standard Sun ONE inetorgperson,
nsmanagedroledefinition and groupofuniquenames objects (users, roles and
groups respectively). I extended them so I can add my own custom attributes.

If you are unfamiliar with this schema, inetorgperson has an nsrole attribute
for storing one or more references to roles to which the user belongs. A groupofuniquenames object has a uniquemember attribute for storing one or
more references to users that belong to the group (the latter being a little
backward, but this is the way it has always been).

In addition, I'm storing users in our own hierarchy of companies and then
groupings within those companies, so the DN of a user is constructed to
reflect this.

So, any idea what I need to do to have user attributes stored in LDAP?




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to