[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?
Turbo Fredriksson wrote:
On Jan 30, 2014, at 5:35 PM, Howard Chu wrote:
I saw some of this on twitter before, ignored it since none of the parties involved have any clue what they're talking about.
Personally, I think it's spot on. It IS hard to configure an LDAP server, and
even harder to understand how it works (the object based part). Took me three
months first time, and I'm not an idiot.
The object based part is *LDAP*, so that complaint is not specific to OpenLDAP.
The part about RedHat seems fairly accurate to me, it *is* true that they have
their own commercial LDAP server to sell, and they have no great interest in
OpenLDAP working well on their platforms.
Even today, I need to consult either my own book or the howto (or seriously
skim through the man pages) to setup a new server.
And I still need to read the docs when configuring an Apache HTTP server.
That's why we have manpages, there's nothing wrong about that.
And even worse if when you want to optimize the backend... There's a lot of
magic there....
The LMDB backend has no tuning/optimization. That's one of the reasons it
exists today.
And with the new config backend!? I haven't even had the time or energy to go
that far yet!
I think you (and everyone else) are blowing this way out of proportion.
Compare the example from here
http://www.openldap.org/doc/admin24/slapdconf2.html#Configuration%20Example
to the slapd.conf example
http://www.openldap.org/doc/admin24/slapdconfig.html#Configuration%20File%20Example
They aren't that different, and anyone familiar with slapd.conf and LDIF files
should have no trouble mapping concepts from one to the other.
And if you aren't familiar with slapd.conf *and* LDIF then you don't know
enough to be an OpenLDAP administrator in the first place, you need to do more
homework. That's just life.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/