Can you be more specific about 'slapd showing problems under load'? On Wed, Oct 6, 2010 at 4:26 PM, Joshua McKenty <[email protected]> wrote: > Be careful taking Jay's word as canonical - there's been no official > decision to "remove redis", simply a decision to support an alternate, > SQL-backed ORM system. It's a topic for the upcoming design summit, as far > as I know. > But for user auth, yeah - LDAP is the intended protocol and solution > (although slapd has been showing problems under load.) > Joshua > > On Wed, Oct 6, 2010 at 5:35 PM, Mika Kohonen <[email protected]> > wrote: >> >> Thank you. I will get rid of Redis. >> >> On Wed, Oct 6, 2010 at 3:22 PM, Jay Pipes <[email protected]> wrote: >> > On Wed, Oct 6, 2010 at 10:32 AM, Mika Kohonen >> > <[email protected]> wrote: >> >> Hi all, >> >> >> >> I'm having a look at the Nova platform and I must admit I'm impressed. >> >> I'm testing different configurations and I don't understand what are >> >> exactly the benefits of using Redis vs OpenLDAP. >> > >> > Don't think too much about it :) Redis is being entirely removed. >> > >> >> The default configuration is Redis based, but from a classic system >> >> administrator perspective, OpenLDAP is much more mature and I know >> >> about it, but Redis is new, looks sexy, but I don't know if it's worth >> >> to use it instead of OpenLDAP. >> > >> > OK, so right now there is a FakeLDAP driver that uses Redis to store >> > LDAP DNs. This is being rewritten to remove the Redis dependency. >> > The real LDAPdriver in /nova/auth/ldapdriver.py uses the plain old >> > python-ldap module to connect to a real LDAP store. Whether you use >> > OpenLDAP or some other LDAP driver under the covers is completely up >> > to you. :) >> > >> >> Thinking in the long term, can you give some hints about the roadmap >> >> of Nova and if I should go with Redis instead of OpenLDAP? >> > >> > See above. It's not about Redis vs. OpenLDAP. :) AFAIK, Nova uses >> > slapd (the OpenLDAP LDAP daemon) as the default LDAP daemon if you >> > don't use the "faked" LDAP driver. >> > >> > -jay >> > >> >> >> >> -- >> Mika >> >> _______________________________________________ >> Mailing list: https://launchpad.net/~openstack >> Post to : [email protected] >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp > >
-- Mika _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : [email protected] Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
