The Suretec Blog

Sorry all, I've been so busy with Suretec and OpenLDAP work , that I haven't had time to do a news issue (I could, but I wouldn't do it justice at the moment).

I will be rolling up 2 weeks worth for next weeks one.

In the mean time, if you have anything you want included in next weeks issue, e.g. case studies, questions to be answered, suggestions for The OpenLDAP Project documentation etc., please leave a comment.

Thanks,

Gavin.

We've already spoken about this this week, but the whole history is nicely summed up at Sun accused of using threats to gain control of project

Just a quick note to say that the Catalyst Advent Calendar is doing very well. Now at 7 entries

Being:

1. Getting started with ExtJS screen library


2. Get more REST - Using YUI and JavaScript for REST


3. Application Design Techniques


4. Catalyst + Open Flash Chart: Fancy graphs with minimal fuss


5. Adding Authentication to your Catalyst App


6. Inline Authentication Without Redirection


7. Rapid CRUD with Catalyst

I've really enjoyed them all so far and they are all well written and excellent quality. But the ExtJS, REST and Open Flash Chart I liked best.

Suretec partners Symas have released the final results of benchmarking ADAM^[?] and AD^[?] versus OpenLDAP at AD and ADAM Performance: UPDATE

Punchline: at 5,000,000 (5M) entries, OpenLDAP 2.4.6+ delivered 20,179 authentications a second, ADAM delivered 5,424 and AD did 216. The 1,000,000 (1M) entry runs were 23,273 for OpenLDAP, 5,738 for ADAM, and 4,662 for AD.

The result are open, so feel free to independently verify (you will need an AMD Celestica A8440 with four Opteron 875s (dual 2.2GHz cores) and 16GB DDR333 RAM though ).

I've already talked about a Blog LDAP^[?] Schema, and I also raised the question in the blog software forum The Suretec Blog uses.

Well, one of the developers posted on their blog why our idea is crazy

I know Howard loves these kind of posts, so I let him comment first

Gavin.

More-on-OpenDS-and-Suns-interesting-views-on-what-open-source-are

and

More "Explanations" on OpenDS

Dear, dear me...In Centeris opens Active Directory to open source:

What about LDAP^[?], the Internet directory standard, I asked.

“We looked at lots of technologies, but first we listened to our enterprise customers. They want to leverage technology in place, and Active Directory has a powerful policy engine. LDAP doesn’t have that. We don’t take a stand. We just go where the customers are.”

That, however, is the other side of the coin here. Microsoft is allowing integration with Active Directory, but over time it hopes LDAP will wither due to a shortage of competitive enterprise features.

So,

[Microsoft] hopes LDAP will wither due to a shortage of competitive enterprise features.

Sorely mistaken.

Another hook into Microsoft technology. What is wrong with pam and nss ldap^[?]....Oh, it's Open Source of course.

Welcome to the sixth issue of OpenLDAP Weekly News (OWN), the unofficial weekly newsletter for the OpenLDAP community.

This will be released every Sunday (or thereabouts), covering the latest goings on in and around the OpenLDAP community.

Summary:

- Upcoming OpenLDAP 2.4.7
- Update on Build Farm
- Contributions
- OpenLDAP Documentation updates
- OpenLDAP Development
- Blog LDAP^[?] Schema Ideas
- Selected user issues and solutions discussed
- LDAP Roundup

It is true that Poorly written LDAP^[?] code can really affect your Portal, Suretec have seen it a few times:

A programmer who hadn't had much exposure to LDAP decided it best to do a base level search, for example, using ldapsearch:

CODE:

ldapsearch -x -b 'dc=suretecsystems,dc=com' '(objectclass=*)' -H ldap^[?]://127.0.0.1

he retrieved *everything*, then did all the searching/filtering etc. locally in the client! What's the point of a Directory Server!?!

Our partners Symas have also talked about similar encounters, mainly with Sendmail.

It all comes down to the level of LDAP understanding a programmer has.

Or could it actually be the Directory Server implementation, namely Oracle Internet Directory (OID)?

I know OpenLDAP wouldn't slow an app down like this, because it's very fast..very very fast