[Beowulf] Poll - Directory implementation

[Ryan Novosielski]

Funny, we are considering the exact opposite, and this is our motivation:

https://access.redhat.com/solutions/2440481

--
____
|| \\UTGERS,       |---------------------------*O*---------------------------
||_// the State     |         Ryan Novosielski - novosirj at rutgers.edu<mailto:novosirj at rutgers.edu>
|| \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS Campus
||  \\    of NJ     | Office of Advanced Research Computing - MSB C630, Newark
    `'

On Oct 24, 2018, at 12:54, Michael Di Domenico <mdidomenico4 at gmail.com<mailto:mdidomenico4 at gmail.com>> wrote:

we use openldap where i work now.  it's working fine.  i guess the
first question to you is, why the push to switch?
On Wed, Oct 24, 2018 at 12:43 PM Tom Harvill <unl at harvill.net<mailto:unl at harvill.net>> wrote:


[Because of my ignorance I mistakenly posted this inside of a list
thread.  I'm sending it again cleanly.]

Hello,

Long time lurker, very infrequent poster - I enjoy this list very much.

We run multiple clusters in different data centers with a single
directory (LDAP) for general authentication and some user grouping for
special purposes (eg delineating admin users for privileges). We put
'extra' user data in an RDBMS.

We currently use 389-DS (aka Fedora Directory Server) and there is some
internal pressure to switch to OpenLDAP.

389-DS is working well, we use the multi-master feature.  It really
hasn't failed us.

I'm writing this list to ask:

- what directory solution do you implement?
- if LDAP, which flavor?
- do you have any opinions one way or another on the topic?

Because 389-DS has just worked, it's sort-of out of sight and mind. I've
been re-engaging it for a little while and from what I can see it's
fairly well documented (I don't remember this being the case when we
originally set it up 10+ years ago.)  I think OpenLDAP doesn't have
integrated multi-master replication - that feature appears to be a
bolted on script.

Thanks in advance for your time,

Tom

Tom Harvill
Holland Computing Center
https://hcc.unl.edu

_______________________________________________
Beowulf mailing list, Beowulf at beowulf.org<mailto:Beowulf at beowulf.org> sponsored by Penguin Computing
To change your subscription (digest mode or unsubscribe) visit http://www.beowulf.org/mailman/listinfo/beowulf
_______________________________________________
Beowulf mailing list, Beowulf at beowulf.org<mailto:Beowulf at beowulf.org> sponsored by Penguin Computing
To change your subscription (digest mode or unsubscribe) visit http://www.beowulf.org/mailman/listinfo/beowulf
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.beowulf.org/pipermail/beowulf/attachments/20181024/6e07a214/attachment.html>