[Date Prev][Date Next] [Chronological] [Thread] [Top]

LDAP for policy provisioning



Hi,
I'm evaluating using LDAPv3 for policy provisioning, vs COPS. Current
LDAP-server use is for local security and VPN policies. Using it for network
wide policy provisioning would mean creating a "policy" on LDAP and
sending/'pushing' it to the right list of network elements that should apply
it.

A colleague suggested that some LDAP servers support persistant searching,
and that one may be able to use this as a push mechanism.  Also, one could
then check a directory flag to tell when the changes are complete. 

Is this practical? Does LDAP client-server normally work [or NOT work]
inside a TCP connection {COPS requirement].

thanks for any comments,

Roy Kopeikin
Lucent Technologies

-