[Date Prev][Date Next]
Re: ldapi vs ldap
On Fri, 16 Mar 2012 22:07:36 +0200, Nick Milas <firstname.lastname@example.org>
we are replicating locally and applications connect using:
We are considering using ldapi://localhost instead.
ldapi://<URL-escaped socket filename>. See '-h' in man 8 slapd.
Would there be any performance / reliability pros/cons?
Should be pro, if there is a difference.
Performance: The knowledge that transmitted data was always in your
system's memory might drill deeper into caching/buffering policies.
Reliability: I don't know of any difference.
Security: In addition to ordinary slapd ACLs, you can use filesystem
permissions to control access, and most systemss let you Bind with
SASL/EXTERNAL to get a Bind DN based on the client process' uid/gid.