[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Funding Open Source (Was Re: Accessing cn=config)

--On Sunday, February 19, 2006 9:51 PM -0500 matthew sporleder <msporleder@gmail.com> wrote:

I think cn=config is a major enhancement to OpenLDAP, and I would love to
be able to use it.  At the moment, however, as far as funding priorities
for Stanford, other things come first.  However, there are many other
institutions out there using OpenLDAP right now who also could benefit
from cn=config, and certainly from the interest on the list, know they
could benefit from it.  I would love to see some of these other groups
step up and join in with contributing to the development of OpenLDAP,
whether it is time from their staff or money to fund the work via one of
the primary developers.  Not only will they enjoy the benefit of having
those additional features (as will everyone else), they will then be
contributing to the ongoing life and growth of the project.

Not to stray too far from this commentary (I agree that it's difficult
to get organizations to contribute to open source), but maybe I'm
missing some of the great features cn=config could offer.  Would
anyone mind listing some of the pie-in-the-sky ideas that cn=config
can make a reality?

Here are the reasons I would like to use cn=config:

(a) The ability to modify ACL's on the fly, without restarting the server
(b) The ability to modify (add or MOD, not delete) the schema on the fly, without restarting the server
(c) The ability to add new indices on the fly, which will automatically trigger either updating or adding the new index, without restarting the server
(d) The ability to add new backends and overlays on the fly
(e) The ability to store my replicas configuration (which differs from the masters) on the master as a secondary backend, and have changes to it replicated to all the replicas via (delta-)syncrepl to my replicas, so that I can just modify one location to push updates out to my 9 replica servers.

Those are just what come off the top of my head. Essentially, with cn=config, the only time I envision having to restart my servers are:

(a) Version upgrades
(b) Deleting schema elements


-- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html