Entries tagged as Active Directory
Thursday, April 3. 2008
I got back last night, after a somewhat hectic Flybe.com flight (long story).
I really enjoyed the conference, my first time speaking at one, bit nervous, but it can only get better
Tuesday:
Continue reading "Spring 2008 - a UKUUG Conference Review"
Tuesday, January 29. 2008
This was posted in reply to our post A Common Weakness in all Identity Management Products", but not OpenLDAP:
It is interesting to see how a thread on how identity provisioning tools and their lack of true interoperability with Active Directory gets twisted into a discussion on the merits of OpenLDAP. What is interesting is that the comparison is solely technical and doesn't provide any rationale related to how much it would cost to maintain OpenLDAP vs ADAM[?].
Hmmm, the Symas paper we referenced does indeed discuss the cost to maintain OpenLDAP on pages 6 and 7 of the paper
You will also notice mention of one and only one Fortune enterprise that uses it as their primary directory service. Of course, the mentioned company is in the consulting business so this isn't surprising. Maybe the mention of a bank or retailer in the Fortune ranks is in order. I suspect the economics nor the customer base simply aren't their...
It's more to do with the fact both Suretec and Symas aren't allowed to say. Have a look at Key Relationships or again, contact either Suretec or Symas.
Tuesday, January 22. 2008
A few comments on A Common Weakness in all Identity Management Products:
Consider for a moment, how many Fortune enterprises have Active Directory in a production environment. Out of the Fortune 500, Sun is the only hold out. You would think that if Active Directory were so pervasively implemented that software vendors would want to deeply integrate with it, but nothing could be further from the truth.
I would disagree. OpenLDAP is right up there, in fact most enterprises don't use AD [?] for true Directory requirements. Speak to Suretec and Symas for more information.
I would urge the author to read the ADAM[?] vs. LDAP[?] White Paper, an evaluation of Microsoft's ADAM to LDAP, written by our friends and partners Symas
Continue reading ""A Common Weakness in all Identity Management Products", but not OpenLDAP"
Thursday, December 6. 2007
Suretec partners Symas have released the final results of benchmarking ADAM[?] and AD[?] versus OpenLDAP at AD and ADAM Performance: UPDATE
Punchline: at 5,000,000 (5M) entries, OpenLDAP 2.4.6+ delivered 20,179 authentications a second, ADAM delivered 5,424 and AD did 216. The 1,000,000 (1M) entry runs were 23,273 for OpenLDAP, 5,738 for ADAM, and 4,662 for AD.
The result are open, so feel free to independently verify (you will need an AMD Celestica A8440 with four Opteron 875s (dual 2.2GHz cores) and 16GB DDR333 RAM though  ).
Tuesday, December 4. 2007
Dear, dear me...In Centeris opens Active Directory to open source:
What about LDAP[?], the Internet directory standard, I asked.
“We looked at lots of technologies, but first we listened to our enterprise customers. They want to leverage technology in place, and Active Directory has a powerful policy engine. LDAP doesn’t have that. We don’t take a stand. We just go where the customers are.”
That, however, is the other side of the coin here. Microsoft is allowing integration with Active Directory, but over time it hopes LDAP will wither due to a shortage of competitive enterprise features.
So,
[Microsoft] hopes LDAP will wither due to a shortage of competitive enterprise features.
Sorely mistaken.
Another hook into Microsoft technology. What is wrong with pam and nss ldap[?]....Oh, it's Open Source of course.
Saturday, December 1. 2007
It is true that Poorly written LDAP[?] code can really affect your Portal, Suretec have seen it a few times:
A programmer who hadn't had much exposure to LDAP decided it best to do a base level search, for example, using ldapsearch:
CODE: ldapsearch -x -b 'dc=suretecsystems,dc=com' '(objectclass=*)' -H ldap[?]://127.0.0.1
he retrieved *everything*, then did all the searching/filtering etc. locally in the client! What's the point of a Directory Server!?!
Our partners Symas have also talked about similar encounters, mainly with Sendmail.
It all comes down to the level of LDAP understanding a programmer has.
Or could it actually be the Directory Server implementation, namely Oracle Internet Directory (OID)?
I know OpenLDAP wouldn't slow an app down like this, because it's very fast..very very fast 
Thursday, November 29. 2007
Quite a few interesting articles and blog posts today.
Whenever I see a few good ones, I'll do one of these roundup posts.
|