Re: OpenLDAP question

2007-05-22 Thread Uv Pzaf
I still want to push this little points directly from the OpenLDAP faq:

* back-ldbm is /obsolete/ and /should not be used/.

*As a historical note, the back-ldbm code is a direct descendant of the
original University of Michigan code. The age of the code and its
byzantine data structures were becoming unmaintainable, and since
back-bdb has proven itself to be more reliable, the decision was made to
delete back-ldbm from the code base.

*While BerkeleyDB supports this generic interface, it also offers a much
richer API that has a lot more power and a lot more complexity. back-bdb
is written specifically for the Berkeley DB /Transactional Data Store/
API. That is, back-bdb uses BDB's most advanced features to offer
transactional consistency, durability, fine-grained locking, and other
features that offer improved concurrency, reliability, and useability.
//

Dave Harrison wrote:
 Henning Brauer wrote:
   
 * Dave Harrison [EMAIL PROTECTED] [2007-05-21 08:26]:
 
 Henning Brauer wrote:
   
 * Uv Pzaf [EMAIL PROTECTED] [2007-05-20 23:12]:
 
 I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still
 uses ldbm as database backend especially since the OpenLDAP folks are
 stating that this is no good any more:
 (http://www.openldap.org/faq/data/cache/756.htm) and not bdb or hdb.
   
 because ldbm works fine, very much opposed to the other two you mention. 
 
 My personal experiences with ldbm were equally fine, I recommend you use it
 unless you are performing frequent writes, or are in need of high 
 performance
 lookups.  Once I started making regular writes, ldbm started to  pack it in
 rather frequently (db corruption) so I went to bdb, however bdb takes 
 careful
 tuning to get right.
   
 now that is funny, in the, what, 5 years? of using openldap/ldbm, i 
 have never seen database corruption. trying to use bdb, pretty much 
 immediately.
 

 As I said, depends on how you're using it.

 After a year, as the usage grew, I found ldbm was corrupting regularly and bdb
 solved the problem nicely.  3 years later, bdb is still perfectly fine.

 Obviously the other, valid, concern is what the OpenLDAP project intends to 
 support.

 With this kind of thing I think the mantra of YMMV is probably wise.



OpenLDAP question

2007-05-20 Thread Uv Pzaf
I wonder why OpenBSD packages (i.e. openldap-server-2.3.24.tgz) still
uses ldbm as database backend especially since the OpenLDAP folks are
stating that this is no good any more:
(http://www.openldap.org/faq/data/cache/756.htm) and not bdb or hdb.
By the way I'm just wondering i don't think i have the competence to
make a new package that contains bdb.
And i know i can build it from ports but it would be logical to have
anything else the ldbm since it almost have the deprecated status.

//AJ



Anybody using EJBCA on OpenBSD?

2007-04-06 Thread Uv Pzaf
Hello OpenBSD community.
Is there anyone using EJBCA on OpenBSD?
If thats the case:
Problems?
Installation?
Good or  Bad?
Any other CA software working better on OpenBSD?

//AJ