Re: Manageing Access To an LDAP server.

[Adam Tauno Williams <adam@morrison-ind.com>]

>I am not big on data replication, but it's also possible to duplicate 
>your database (or a subset of it) to a machine in your DMZ as you 
>mention. You could potentially be more secure, but you'd also have a 
>high administration cost.

You can use partial replication to create a DSA outside your firewall.  Then
people can query it directly, via LDAP.  Just remember to enable anonymous
connections.  Publish a public SRV record that points at your public LDAP server
and people can "magically" reference you,  very cool.