[Beowulf] Poll - Directory implementation

[Tom Harvill]

Thank you!


On 10/24/2018 12:04 PM, Ryan Novosielski wrote:
> Funny, we are considering the exact opposite, and this is our motivation:
>
> https://access.redhat.com/solutions/2440481
>
> --
> ____
> || \\UTGERS, |---------------------------*O*---------------------------
> ||_// the State     |         Ryan Novosielski - novosirj at rutgers.edu 
> <mailto:novosirj at rutgers.edu>
> || \\ University | Sr. Technologist - 973/972.0922 (2x0922) ~*~ RBHS 
> Campus
> ||  \\    of NJ     | Office of Advanced Research Computing - MSB 
> C630, Newark
>     `'
>
> On Oct 24, 2018, at 12:54, Michael Di Domenico <mdidomenico4 at gmail.com 
> <mailto:mdidomenico4 at gmail.com>> wrote:
>
>> we use openldap where i work now.  it's working fine.  i guess the
>> first question to you is, why the push to switch?
>> On Wed, Oct 24, 2018 at 12:43 PM Tom Harvill <unl at harvill.net 
>> <mailto:unl at harvill.net>> wrote:
>>>
>>>
>>> [Because of my ignorance I mistakenly posted this inside of a list
>>> thread.  I'm sending it again cleanly.]
>>>
>>> Hello,
>>>
>>> Long time lurker, very infrequent poster - I enjoy this list very much.
>>>
>>> We run multiple clusters in different data centers with a single
>>> directory (LDAP) for general authentication and some user grouping for
>>> special purposes (eg delineating admin users for privileges). We put
>>> 'extra' user data in an RDBMS.
>>>
>>> We currently use 389-DS (aka Fedora Directory Server) and there is some
>>> internal pressure to switch to OpenLDAP.
>>>
>>> 389-DS is working well, we use the multi-master feature.  It really
>>> hasn't failed us.
>>>
>>> I'm writing this list to ask:
>>>
>>> - what directory solution do you implement?
>>> - if LDAP, which flavor?
>>> - do you have any opinions one way or another on the topic?
>>>
>>> Because 389-DS has just worked, it's sort-of out of sight and mind. I've
>>> been re-engaging it for a little while and from what I can see it's
>>> fairly well documented (I don't remember this being the case when we
>>> originally set it up 10+ years ago.)  I think OpenLDAP doesn't have
>>> integrated multi-master replication - that feature appears to be a
>>> bolted on script.
>>>
>>> Thanks in advance for your time,
>>>
>>> Tom
>>>
>>> Tom Harvill
>>> Holland Computing Center
>>> https://hcc.unl.edu
>>>
>>> _______________________________________________
>>> Beowulf mailing list, Beowulf at beowulf.org 
>>> <mailto:Beowulf at beowulf.org> sponsored by Penguin Computing
>>> To change your subscription (digest mode or unsubscribe) visit 
>>> http://www.beowulf.org/mailman/listinfo/beowulf
>> _______________________________________________
>> Beowulf mailing list, Beowulf at beowulf.org 
>> <mailto:Beowulf at beowulf.org> sponsored by Penguin Computing
>> To change your subscription (digest mode or unsubscribe) visit 
>> http://www.beowulf.org/mailman/listinfo/beowulf 
>> <http://www.beowulf.org/mailman/listinfo/beowulf>
>
>
> _______________________________________________
> Beowulf mailing list, Beowulf at beowulf.org sponsored by Penguin Computing
> To change your subscription (digest mode or unsubscribe) visit http://www.beowulf.org/mailman/listinfo/beowulf

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.beowulf.org/pipermail/beowulf/attachments/20181024/1dbdcba9/attachment-0001.html>