Bad LDAP coding, bad Application, but....maybe the LDAP Implementation?

It is true that Poorly written LDAP^[?] code can really affect your Portal, Suretec have seen it a few times:

A programmer who hadn't had much exposure to LDAP decided it best to do a base level search, for example, using ldapsearch:

CODE:

ldapsearch -x -b 'dc=suretecsystems,dc=com' '(objectclass=*)' -H ldap^[?]://127.0.0.1

he retrieved *everything*, then did all the searching/filtering etc. locally in the client! What's the point of a Directory Server!?!

Our partners Symas have also talked about similar encounters, mainly with Sendmail.

It all comes down to the level of LDAP understanding a programmer has.

Or could it actually be the Directory Server implementation, namely Oracle Internet Directory (OID)?

I know OpenLDAP wouldn't slow an app down like this, because it's very fast..very very fast

Posted by Gavin Henry in OpenLDAP, Suretec at 10:38 | Comments (5) | Trackback (1)

Defined tags for this entry: Active Directory

, ADAM

, Directory Services

, IAM

, Identity Management

, LDAP

, Linux

, OID

, OpenLDAP

, Oracle

, Oracle Internet Directory

, Perl

, PostgreSQL

, Sendmail

, SSO

, Suretec

, Symas

Related entries by tags:

Trackbacks

Trackback specific URI for this entry

OpenLDAP Weekly News Issue 6
Welcome to the sixth issue of OpenLDAP Weekly News (OWN), the unofficial weekly newsletter for the OpenLDAP community. This will be released every Sunday (or thereabouts), covering the latest goings on in and around the OpenLDAP community. Summary:

Weblog: The Suretec Blog
Tracked: Dec 04, 09:50

Comments

Display comments as (Linear | Threaded)

This is the same argument in favor of server-side search and VLV.

#1 James on 2007-12-05 09:11 (Reply)

Server-side search *ordering*, even.

#1.1 James on 2007-12-05 09:17 (Reply)

Not quite, as that code can be controlled by the programmers with LDAP knowledge, i.e. the ones developing server side.

This is bound to be more efficient than the client side programmer.

#1.1.1 Gavin Henry (Homepage) on 2007-12-05 09:20 (Reply)

Yeah, that's my point. But the OpenLDAP devs don't seem to share that view http://www.openldap.org/lists/openldap-software/200711/msg00184.html

#1.1.1.1 James on 2007-12-05 18:18 (Reply)

I never said it was a good thing.

#1.1.1.1.1 Gavin Henry (Homepage) on 2007-12-05 19:43 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	Enclosing asterisks marks text as bold (word), underscore are made via _word_. Standard emoticons like :-) and ;-) are converted to images. BBCode format allowed Pavatar, Gravatar, Favatar, MyBlogLog, Pavatar author images supported.
	Remember Information? Subscribe to this entry