You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by Emmanuel Lecharny <el...@gmail.com> on 2008/01/07 17:00:07 UTC
[Feedback needed] ADS pros and cons ?
Hi !
This is the very beginning of 2008, and we are all working hard to get a
2.0 out in the next few months. At this point, we think it's a good
timing to get some feedback from you, users and developpers ! Here is a
short list of question you may answer, but this is very up to you. We
don't need names ( "I'm working for company XYZ" ), this is just
informational.
*Keep in mind that those informations will appear on the
Apache ML and many other, so if you think that any confidential piece of
it should not be disclose, then don't answer !*
1) What are you using ADS for ? Is it in production, used to do some
tests during developpement, or simply as a toy ?
2) What are the Pros and Cons you clearly see ?
3) What would be the major features or improvement you are expecting to
see in the near future ?
4) Are you a commercial entity, an non-for profit organization, an
Apache project, a student or an individual just interested in the techno
? (no name needed)
5) Any other opinion or feedback you would like to share with us ?
Thank you all for helping us being more aware !
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: [Feedback needed] ADS pros and cons ?
Posted by Emmanuel Lecharny <el...@gmail.com>.
Thanks a lot, Chris !
Support for ;binary extension is something we should take care of, but
it will take some time. Can you fill a JIRA for us to remember to work
on it, and also to be able to put it in the roadmap ?
Thanks !
On Feb 13, 2008 6:00 PM, Chris Trobridge
<ch...@aepnetworks.com> wrote:
>
> > 1) What are you using ADS for ? Is it in production, used to do some
> > tests during developpement, or simply as a toy ?
> I looked into using ADS as a possible alternative to the current LDAP
> server (iPlanet) that we use in our product management.
> > 2) What are the Pros and Cons you clearly see ?
> I found it very easy to get up and running.
> The immediate showstopper for us is the lack of support for the
> "userCertificate;binary" which our deployed products include in there
> queires.
> > 3) What would be the major features or improvement you are expecting to
> > see in the near future ?
> Support for "userCertificate;binary" was mentioned as a possibility for 2.0.
> > 4) Are you a commercial entity, an non-for profit organization, an
> > Apache project, a student or an individual just interested in the techno
> > ? (no name needed)
> Commercial.
>
> > 5) Any other opinion or feedback you would like to share with us ?
> >
> > Thank you all for helping us being more aware !
> >
>
>
--
Regards,
Cordialement,
Emmanuel Lécharny
www.iktek.com
Re: [Feedback needed] ADS pros and cons ?
Posted by Chris Trobridge <ch...@aepnetworks.com>.
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
I looked into using ADS as a possible alternative to the current LDAP
server (iPlanet) that we use in our product management.
> 2) What are the Pros and Cons you clearly see ?
I found it very easy to get up and running.
The immediate showstopper for us is the lack of support for the
"userCertificate;binary" which our deployed products include in there
queires.
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
Support for "userCertificate;binary" was mentioned as a possibility for 2.0.
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
Commercial.
> 5) Any other opinion or feedback you would like to share with us ?
>
> Thank you all for helping us being more aware !
>
Re: [Feedback needed] ADS pros and cons ?
Posted by Przemyslaw Rudzki <er...@erace.pl>.
On Wed, 2008-01-23 at 15:17 +0100, Emmanuel Lecharny wrote:
> We have some muti-master replication capability in the server. It's not
> really documented , but we have at least one of our committers who uses
> it for real, so it might work well ! (I'm ashamed to say I personally
> never tested replication ...).
>
> May be we need to work more on this aspect, with is absolutly essential
> for production servers. We know that's it's important, and we really
> want to make it bullet-proof, that's for sure.
>
> 2.0 should be delivered with a complet and solid replication system.
> (expected by Q2, 2008)
>
> Hope it helps !
Thx a lot for the info. I will sure help to test it ;-).
Once again - all the best!
/p
Re: [Feedback needed] ADS pros and cons ?
Posted by Emmanuel Lecharny <el...@gmail.com>.
Thanks a lot for your feedback, Przemyslaw !
>> 2) What are the Pros and Cons you clearly see ?
>>
>
> Pros: simple to setup, simple to manipulate, small.
> Cons: maybe I have not checked carefully enough but some replication
> would be nice.
>
We have some muti-master replication capability in the server. It's not
really documented , but we have at least one of our committers who uses
it for real, so it might work well ! (I'm ashamed to say I personally
never tested replication ...).
May be we need to work more on this aspect, with is absolutly essential
for production servers. We know that's it's important, and we really
want to make it bullet-proof, that's for sure.
2.0 should be delivered with a complet and solid replication system.
(expected by Q2, 2008)
Hope it helps !
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: [Feedback needed] ADS pros and cons ?
Posted by Przemyslaw Rudzki <er...@erace.pl>.
Hi,
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
I like to deploy ADS as web app (WAR) in testing and some non demanding
production envs. The process is that simple:
1. Have some example.com.ldif ready (exported via ADS Studio)
2. Put it in the user home dir (no matter if this is win or lin)
3. Deploy war (simply copy to jboss deploy dir)
4. During startup import data from example.com.ldif
5. And I am done and ready to use/test my ldap related functionality
> 2) What are the Pros and Cons you clearly see ?
Pros: simple to setup, simple to manipulate, small.
Cons: maybe I have not checked carefully enough but some replication
would be nice.
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
Replication ;-).
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
Commercial.
> 5) Any other opinion or feedback you would like to share with us ?
Maybe it would be nice to manipulate some config data in for the running
instance and then export it to be easily importable for new deployments.
Good work guys! And all the best in 2008!
Rgds,
/p
> Thank you all for helping us being more aware !
Re: [Feedback needed] ADS pros and cons ?
Posted by Emmanuel Lecharny <el...@gmail.com>.
Thanks a lot for this, Ossi !
Yeah, the documentation is a little bit fuzzy atm, as we are in the
middle of some big modifications, and the doc team are waiting for the
dev team to finish those modifications...
(you have to know that there is nothing like doc and dev team, anyway :
dev are writting docs too, and some people are dedicated to doc, but do
some other things, including dev... ;)
I must admit that the developpers are way better at writting JavaDoc
than real user guides, too ...
This is definitively something we have to improve, but users can help:
we welcome any kind of contribution, including doc !
ossi petz wrote:
> Hallo
>
> some feedback :)
>
> 1) we currently use ADS for experiments, we plan to replace MS Active
> Directory Server with a more open LDAP Server
>
> 2) pros: open source, certified, stable, java
> cons: documentation is not foolproof. in our company there
> is no ldap specialist, only basic knowledge is there.
> when we tried to synchronize MS Active Directory with
> ADS the docs where too confusing (for us fools)
>
> documentation could show more examples
>
> 3) dont eve know what i could do already. as with 2: we
> need to sync different user stores into one directory
> (LDAP, from MySql DB, from Oracle DB) and then
> replicate / mirror this one
>
> i ve seen such features with penrose ldap solution
> but i have not done an evaluation yet
>
> 4) we are commercial, selling a java framework (rcp, webapps)
> currently the plan is to use ADS for inhouse administration
> and later integrate it into the our secure-server
>
> 5) just go on please :)
>
>
> regards
>
> ossi
>
>
>
> Emmanuel Lecharny schrieb:
>> Hi !
>>
>> This is the very beginning of 2008, and we are all working hard to get a
>> 2.0 out in the next few months. At this point, we think it's a good
>> timing to get some feedback from you, users and developpers ! Here is a
>> short list of question you may answer, but this is very up to you. We
>> don't need names ( "I'm working for company XYZ" ), this is just
>> informational.
>>
>> *Keep in mind that those informations will appear on the
>> Apache ML and many other, so if you think that any confidential piece of
>> it should not be disclose, then don't answer !*
>>
>> 1) What are you using ADS for ? Is it in production, used to do some
>> tests during developpement, or simply as a toy ?
>>
>> 2) What are the Pros and Cons you clearly see ?
>>
>> 3) What would be the major features or improvement you are expecting to
>> see in the near future ?
>>
>> 4) Are you a commercial entity, an non-for profit organization, an
>> Apache project, a student or an individual just interested in the techno
>> ? (no name needed)
>>
>> 5) Any other opinion or feedback you would like to share with us ?
>>
>> Thank you all for helping us being more aware !
>>
>
>
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: [Feedback needed] ADS pros and cons ?
Posted by Aleksandar Vidakovic <sp...@gmx.net>.
Salut ossi,
just FYI: Penrose (http://docs.safehaus.org/display/PENROSE/Home) might
be interesting for your plans... just in case you didn't stumble upon it.
Cheers,
Aleks
ossi petz wrote:
> Hallo everyone!
>
> i was happy getting ldap, hearing about kerberos is even better :)
>
> i did not want to draw the active directory replacement picture.
> actually using exchange, windows clients, sharepoint... there is a need
> for an active directory when using windows. just for easy living.
>
> what we encountered: we need the same ldap structure at different
> locations that do not only contain the users with windows logins. we
> have a custom made CRM and sometimes someone turns from 'interested'
> into 'customer'. so he will need a useraccount in different tools.
> currently this is all done manually.
>
> my vision was: sync apacheDS with actice directory. from there use the
> wiki, the dms, the crm and so on with apacheDS. and then mirror it to
> the other company sites or the cms / forum.
>
> the only thing all tools have in common is ldap authentication. and
> accessing apacheDS for java people looks much more promising than using
> active directory as the master (which cannot be easily deployed with
> java apps too)
>
> and well it all looks blody complicated. makes it interesting somehow.
>
> well. thanks for paying attention :)
>
> regards
>
> ossi
>
>
>
> Emmanuel Lecharny schrieb:
>> Hi Denis !
>>
>>
>>> My fault, I have only been looking at the ldap part of apache
>>> directory...
>> No problem at all ! At least, it demonstrates that we need to improve
>> a lot the documentation :)
>>
>>> I defininitly shall try the kerberos/dns/dhcp part of ApacheDS.
>>> Currently I'm using heimdal, bind and isc dhcp server on ldap backend
>>> (openldap), and looking for better solution, that's why I'm following
>>> this list. I didn't realized I could already get all of it bundled in
>>> ApacheDS! I'll try to accomodate for a few hours to roll out a test
>>> bench.
>> Don't blame me if you have problems while doing such an experiment ;)
>> This is a very early bird, and it needs a lot of work to be able to
>> use it smoothly... Any feedback will help, of course !
>>>
>>>> And when it comes to LDAP server compliance, please just read this :
>>>> http://www.symas.com/documents/Adam-Eval1-0.pdf
>>>>
>>>> So we think that ADS could stands for an active directory
>>>> replacement. Even if you just need the ldap part.
>>>
>>> Sorry I think I misrepresented my point. I don't claim that ActiveDS
>>> is a good, bad or better LDAP server. I just wanted to point out that
>>> ActiveDS is not just an ldap server.
>> I dodn't want to say that AD is a bad piece of techno either. I just
>> wanted to point to this very interesting paper written by our friends
>> at OpenLdap (which is a really good LDAP server btw!)
>>
>> Anyway, replacing AD by another LDAP server is not that easy, if you
>> consider that AD is a major element of the Window$(tm) system.
>>> The fact that it is much more than an ldap server makes it one of the
>>> most difficult part of proprietary stuff to get out of a IT
>>> infrastructure... What a pain !
>> indeed :)
>>
>>
>> Thanks Denis !
Re: [Feedback needed] ADS pros and cons ?
Posted by ossi petz <os...@gmail.com>.
Hallo everyone!
i was happy getting ldap, hearing about kerberos is even better :)
i did not want to draw the active directory replacement picture.
actually using exchange, windows clients, sharepoint... there is a need
for an active directory when using windows. just for easy living.
what we encountered: we need the same ldap structure at different
locations that do not only contain the users with windows logins. we
have a custom made CRM and sometimes someone turns from 'interested'
into 'customer'. so he will need a useraccount in different tools.
currently this is all done manually.
my vision was: sync apacheDS with actice directory. from there use the
wiki, the dms, the crm and so on with apacheDS. and then mirror it to
the other company sites or the cms / forum.
the only thing all tools have in common is ldap authentication. and
accessing apacheDS for java people looks much more promising than using
active directory as the master (which cannot be easily deployed with
java apps too)
and well it all looks blody complicated. makes it interesting somehow.
well. thanks for paying attention :)
regards
ossi
Emmanuel Lecharny schrieb:
> Hi Denis !
>
>
>> My fault, I have only been looking at the ldap part of apache
>> directory...
> No problem at all ! At least, it demonstrates that we need to improve a
> lot the documentation :)
>
>> I defininitly shall try the kerberos/dns/dhcp part of ApacheDS.
>> Currently I'm using heimdal, bind and isc dhcp server on ldap backend
>> (openldap), and looking for better solution, that's why I'm following
>> this list. I didn't realized I could already get all of it bundled in
>> ApacheDS! I'll try to accomodate for a few hours to roll out a test
>> bench.
> Don't blame me if you have problems while doing such an experiment ;)
> This is a very early bird, and it needs a lot of work to be able to use
> it smoothly... Any feedback will help, of course !
>>
>>> And when it comes to LDAP server compliance, please just read this :
>>> http://www.symas.com/documents/Adam-Eval1-0.pdf
>>>
>>> So we think that ADS could stands for an active directory
>>> replacement. Even if you just need the ldap part.
>>
>> Sorry I think I misrepresented my point. I don't claim that ActiveDS
>> is a good, bad or better LDAP server. I just wanted to point out that
>> ActiveDS is not just an ldap server.
> I dodn't want to say that AD is a bad piece of techno either. I just
> wanted to point to this very interesting paper written by our friends at
> OpenLdap (which is a really good LDAP server btw!)
>
> Anyway, replacing AD by another LDAP server is not that easy, if you
> consider that AD is a major element of the Window$(tm) system.
>> The fact that it is much more than an ldap server makes it one of the
>> most difficult part of proprietary stuff to get out of a IT
>> infrastructure... What a pain !
> indeed :)
>
>
> Thanks Denis !
>
>
Re: [Feedback needed] ADS pros and cons ?
Posted by Emmanuel Lecharny <el...@gmail.com>.
Hi Denis !
> My fault, I have only been looking at the ldap part of apache
> directory...
No problem at all ! At least, it demonstrates that we need to improve a
lot the documentation :)
> I defininitly shall try the kerberos/dns/dhcp part of ApacheDS.
> Currently I'm using heimdal, bind and isc dhcp server on ldap backend
> (openldap), and looking for better solution, that's why I'm following
> this list. I didn't realized I could already get all of it bundled in
> ApacheDS! I'll try to accomodate for a few hours to roll out a test
> bench.
Don't blame me if you have problems while doing such an experiment ;)
This is a very early bird, and it needs a lot of work to be able to use
it smoothly... Any feedback will help, of course !
>
>> And when it comes to LDAP server compliance, please just read this :
>> http://www.symas.com/documents/Adam-Eval1-0.pdf
>>
>> So we think that ADS could stands for an active directory
>> replacement. Even if you just need the ldap part.
>
> Sorry I think I misrepresented my point. I don't claim that ActiveDS
> is a good, bad or better LDAP server. I just wanted to point out that
> ActiveDS is not just an ldap server.
I dodn't want to say that AD is a bad piece of techno either. I just
wanted to point to this very interesting paper written by our friends at
OpenLdap (which is a really good LDAP server btw!)
Anyway, replacing AD by another LDAP server is not that easy, if you
consider that AD is a major element of the Window$(tm) system.
> The fact that it is much more than an ldap server makes it one of the
> most difficult part of proprietary stuff to get out of a IT
> infrastructure... What a pain !
indeed :)
Thanks Denis !
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: [Feedback needed] ADS pros and cons ?
Posted by Denis Cardon <de...@tranquil-it-systems.fr>.
Hi Emmanuel,
>>
>>> 1) we currently use ADS for experiments, we plan to replace MS Active
>>> Directory Server with a more open LDAP Server
>>
>> actually Active Directory is more than just a ldap server. It bundles
>> a customified ldap server, a kerberos server, a dns server, and some
>> ms rpc stuff. So apache directory server could not, by itself stands
>> for an active directory replacement (unless the only thing you need is
>> the ldap part).
> Actually Apache Directory Server is more than just a ldap server too. It
> bundles a *standard and compliant* ldap server
> (http://directory.apache.org/community%26resources/open-group-certification.html),
> a kerberos server, a dns server, a NTP server, a DHCP server, a SSO
> solution (TripleSec) and a tool (Apache DirectoryStudio) which can't be
> compared to LDP, because it would like comparing M$ Word (tm) to M$
> Notepad(tm).
My fault, I have only been looking at the ldap part of apache
directory... I defininitly shall try the kerberos/dns/dhcp part of
ApacheDS. Currently I'm using heimdal, bind and isc dhcp server on ldap
backend (openldap), and looking for better solution, that's why I'm
following this list. I didn't realized I could already get all of it
bundled in ApacheDS! I'll try to accomodate for a few hours to roll out
a test bench.
> And when it comes to LDAP server compliance, please just read this :
> http://www.symas.com/documents/Adam-Eval1-0.pdf
>
> So we think that ADS could stands for an active directory replacement.
> Even if you just need the ldap part.
Sorry I think I misrepresented my point. I don't claim that ActiveDS is
a good, bad or better LDAP server. I just wanted to point out that
ActiveDS is not just an ldap server. The fact that it is much more than
an ldap server makes it one of the most difficult part of proprietary
stuff to get out of a IT infrastructure... What a pain !
> *But*, because nothing is perfect, it has to be documented, tested,
> fixed, etc. We need volunteers for that.
>>
>> Open source projects are getting close to a replacement of ActiveDS,
>> and bundling ApacheDS + Samba4alpha3 + Bind/sdb_ldap should almost do
>> the trick, however it is not yet very polished and might need some
>> twicking.
> I agree fully with the polishing and twicking needs !
If everything was too easy, there would'nt be any more fun geeking around!
Cheers,
Denis
--
Denis Cardon
Tranquil IT Systems
44 bvd des pas enchantés
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.62.67
http://www.tranquil-it-systems.fr
Re: [Feedback needed] ADS pros and cons ?
Posted by Emmanuel Lecharny <el...@gmail.com>.
Denis Cardon wrote:
> Hi Ossi,
>
>> 1) we currently use ADS for experiments, we plan to replace MS Active
>> Directory Server with a more open LDAP Server
>
> actually Active Directory is more than just a ldap server. It bundles
> a customified ldap server, a kerberos server, a dns server, and some
> ms rpc stuff. So apache directory server could not, by itself stands
> for an active directory replacement (unless the only thing you need is
> the ldap part).
Actually Apache Directory Server is more than just a ldap server too. It
bundles a *standard and compliant* ldap server
(http://directory.apache.org/community%26resources/open-group-certification.html),
a kerberos server, a dns server, a NTP server, a DHCP server, a SSO
solution (TripleSec) and a tool (Apache DirectoryStudio) which can't be
compared to LDP, because it would like comparing M$ Word (tm) to M$
Notepad(tm).
And when it comes to LDAP server compliance, please just read this :
http://www.symas.com/documents/Adam-Eval1-0.pdf
So we think that ADS could stands for an active directory replacement.
Even if you just need the ldap part.
*But*, because nothing is perfect, it has to be documented, tested,
fixed, etc. We need volunteers for that.
>
> Open source projects are getting close to a replacement of ActiveDS,
> and bundling ApacheDS + Samba4alpha3 + Bind/sdb_ldap should almost do
> the trick, however it is not yet very polished and might need some
> twicking.
I agree fully with the polishing and twicking needs !
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: [Feedback needed] ADS pros and cons ?
Posted by Emmanuel Lecharny <el...@gmail.com>.
Denis Cardon wrote:
>> Forgive me for correcting you here but ApacheDS has a DNS and Kerberos
>> service embedded inside. ApacheDS is not only an LDAP server.
>
> thanks for the input, Emmanuel already briefed me on that and I expect
> to roll out a test bench once I manage to get a few hours off.
Don't worry, we usually process mail FIFO, so Alex might have replied
before having read my answer ;) Anyway, it's a good point that we are on
the same page !
>
>> Also MS ActiveDirectory as a process just services LDAP requests (not
>> fully
>> compliant but it works). Another separate process actually handles the
>> Kerberos requests as the AS and TGTS. Also the DNS service is a
>> different
>> service as well. So no MS ActiveDirectory is not all these things in
>> one.
>
> Actually it is just a war of words. On its web site MS says (among
> other things :-) "Active Directory provides: (...) Information
> security and single sign-on for user access to network resources". So
> I guess Kerberos is considered part of ActiveDS
In fact, it's not. The kerberos service is run beside AD, and use AD as
a repository (which makes sense). ADS kerberos server is on the opposite
running on the same process than the LDAP server.
http://msdn2.microsoft.com/en-us/library/aa378170(VS.85).aspx
>> I think you might have been referring to a Windows 200X Server being
>> replaced by the components you listed?
>
> In my daily business I carry out migration to FOSS systems (both
> servers and desktop/thin clients). Currently one of the unremoveble
> piece of software in a Windows environnement is the Domain Controler
> (unless it is NT4 based, which is still quite common in French SMBs).
>
> Many people asume that, because FOSS world provide first grade ldap
> servers, it may be possible to replace an ActiveDS. I just wanted to
> underline that it is not that simple...
Damn not ... Thanks to M$ AD which is not really LDAP compliant, and to
the thousands of specific ObjectClasses and AttributeType they added to
make it more dificult ;)
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
Re: [Feedback needed] ADS pros and cons ?
Posted by Alex Karasulu <ak...@apache.org>.
Aye there's too much marketing messing up reality you're right. Forgive me
for not seeing Emmanuel's posts earlier.
Alex
On Jan 23, 2008 1:22 PM, Denis Cardon <de...@tranquil-it-systems.fr>
wrote:
> Hi Alex,
>
> > Forgive me for correcting you here but ApacheDS has a DNS and Kerberos
> > service embedded inside. ApacheDS is not only an LDAP server.
>
> thanks for the input, Emmanuel already briefed me on that and I expect
> to roll out a test bench once I manage to get a few hours off.
>
> > Also MS ActiveDirectory as a process just services LDAP requests (not
> fully
> > compliant but it works). Another separate process actually handles the
> > Kerberos requests as the AS and TGTS. Also the DNS service is a
> different
> > service as well. So no MS ActiveDirectory is not all these things in
> one.
>
> Actually it is just a war of words. On its web site MS says (among other
> things :-) "Active Directory provides: (...) Information security and
> single sign-on for user access to network resources". So I guess
> Kerberos is considered part of ActiveDS (I also doubled checked with
> some MCSE people about this wording). Ref :
>
> http://technet2.microsoft.com/WindowsServer/en/library/6f8a7c80-45fc-4916-80d9-16e6d46241f91033.mspx?mfr=true
>
> Granted I've not checked at the process level though to see how they
> named all that stuff :-)
>
> > I think you might have been referring to a Windows 200X Server being
> > replaced by the components you listed?
>
> In my daily business I carry out migration to FOSS systems (both servers
> and desktop/thin clients). Currently one of the unremoveble piece of
> software in a Windows environnement is the Domain Controler (unless it
> is NT4 based, which is still quite common in French SMBs).
>
> Many people asume that, because FOSS world provide first grade ldap
> servers, it may be possible to replace an ActiveDS. I just wanted to
> underline that it is not that simple...
>
> > I may be wrong though hopefully someone can clarify.
>
> I hope I did clarify my former statement :-)
>
> Cheers,
>
> Denis
>
> >
> > Regards,
> > Alex
> >
> >
> > On Jan 23, 2008 4:42 AM, Denis Cardon <
> denis.cardon@tranquil-it-systems.fr>
> > wrote:
> >
> >> Hi Ossi,
> >>
> >>> 1) we currently use ADS for experiments, we plan to replace MS Active
> >>> Directory Server with a more open LDAP Server
> >> actually Active Directory is more than just a ldap server. It bundles a
> >> customified ldap server, a kerberos server, a dns server, and some ms
> >> rpc stuff. So apache directory server could not, by itself stands for
> an
> >> active directory replacement (unless the only thing you need is the
> ldap
> >> part).
> >>
> >> Open source projects are getting close to a replacement of ActiveDS,
> and
> >> bundling ApacheDS + Samba4alpha3 + Bind/sdb_ldap should almost do the
> >> trick, however it is not yet very polished and might need some
> twicking.
> >>
> >> Cheers,
> >>
> >> Denis
> >>
> >>
> >>> 2) pros: open source, certified, stable, java
> >>> cons: documentation is not foolproof. in our company there
> >>> is no ldap specialist, only basic knowledge is there.
> >>> when we tried to synchronize MS Active Directory with
> >>> ADS the docs where too confusing (for us fools)
> >>>
> >>> documentation could show more examples
> >>>
> >>> 3) dont eve know what i could do already. as with 2: we
> >>> need to sync different user stores into one directory
> >>> (LDAP, from MySql DB, from Oracle DB) and then
> >>> replicate / mirror this one
> >>>
> >>> i ve seen such features with penrose ldap solution
> >>> but i have not done an evaluation yet
> >>>
> >>> 4) we are commercial, selling a java framework (rcp, webapps)
> >>> currently the plan is to use ADS for inhouse administration
> >>> and later integrate it into the our secure-server
> >>>
> >>> 5) just go on please :)
> >>>
> >>>
> >>> regards
> >>>
> >>> ossi
> >>>
> >>>
> >>>
> >>> Emmanuel Lecharny schrieb:
> >>>> Hi !
> >>>>
> >>>> This is the very beginning of 2008, and we are all working hard to
> get
> >> a
> >>>> 2.0 out in the next few months. At this point, we think it's a good
> >>>> timing to get some feedback from you, users and developpers ! Here is
> a
> >>>> short list of question you may answer, but this is very up to you. We
> >>>> don't need names ( "I'm working for company XYZ" ), this is just
> >>>> informational.
> >>>>
> >>>> *Keep in mind that those informations will appear on the
> >>>> Apache ML and many other, so if you think that any confidential piece
> >> of
> >>>> it should not be disclose, then don't answer !*
> >>>>
> >>>> 1) What are you using ADS for ? Is it in production, used to do some
> >>>> tests during developpement, or simply as a toy ?
> >>>>
> >>>> 2) What are the Pros and Cons you clearly see ?
> >>>>
> >>>> 3) What would be the major features or improvement you are expecting
> to
> >>>> see in the near future ?
> >>>>
> >>>> 4) Are you a commercial entity, an non-for profit organization, an
> >>>> Apache project, a student or an individual just interested in the
> >> techno
> >>>> ? (no name needed)
> >>>>
> >>>> 5) Any other opinion or feedback you would like to share with us ?
> >>>>
> >>>> Thank you all for helping us being more aware !
> >>>>
> >>
> >> --
> >> Denis Cardon
> >> Tranquil IT Systems
> >> 44 bvd des pas enchantés
> >> 44230 Saint Sébastien sur Loire
> >> tel : +33 (0) 2.40.97.62.67
> >> http://www.tranquil-it-systems.fr
> >>
> >>
> >>
> >
>
>
> --
> Denis Cardon
> Tranquil IT Systems
> 44 bvd des pas enchantés
> 44230 Saint Sébastien sur Loire
> tel : +33 (0) 2.40.97.62.67
> http://www.tranquil-it-systems.fr
>
>
>
Re: [Feedback needed] ADS pros and cons ?
Posted by Denis Cardon <de...@tranquil-it-systems.fr>.
Hi Alex,
> Forgive me for correcting you here but ApacheDS has a DNS and Kerberos
> service embedded inside. ApacheDS is not only an LDAP server.
thanks for the input, Emmanuel already briefed me on that and I expect
to roll out a test bench once I manage to get a few hours off.
> Also MS ActiveDirectory as a process just services LDAP requests (not fully
> compliant but it works). Another separate process actually handles the
> Kerberos requests as the AS and TGTS. Also the DNS service is a different
> service as well. So no MS ActiveDirectory is not all these things in one.
Actually it is just a war of words. On its web site MS says (among other
things :-) "Active Directory provides: (...) Information security and
single sign-on for user access to network resources". So I guess
Kerberos is considered part of ActiveDS (I also doubled checked with
some MCSE people about this wording). Ref :
http://technet2.microsoft.com/WindowsServer/en/library/6f8a7c80-45fc-4916-80d9-16e6d46241f91033.mspx?mfr=true
Granted I've not checked at the process level though to see how they
named all that stuff :-)
> I think you might have been referring to a Windows 200X Server being
> replaced by the components you listed?
In my daily business I carry out migration to FOSS systems (both servers
and desktop/thin clients). Currently one of the unremoveble piece of
software in a Windows environnement is the Domain Controler (unless it
is NT4 based, which is still quite common in French SMBs).
Many people asume that, because FOSS world provide first grade ldap
servers, it may be possible to replace an ActiveDS. I just wanted to
underline that it is not that simple...
> I may be wrong though hopefully someone can clarify.
I hope I did clarify my former statement :-)
Cheers,
Denis
>
> Regards,
> Alex
>
>
> On Jan 23, 2008 4:42 AM, Denis Cardon <de...@tranquil-it-systems.fr>
> wrote:
>
>> Hi Ossi,
>>
>>> 1) we currently use ADS for experiments, we plan to replace MS Active
>>> Directory Server with a more open LDAP Server
>> actually Active Directory is more than just a ldap server. It bundles a
>> customified ldap server, a kerberos server, a dns server, and some ms
>> rpc stuff. So apache directory server could not, by itself stands for an
>> active directory replacement (unless the only thing you need is the ldap
>> part).
>>
>> Open source projects are getting close to a replacement of ActiveDS, and
>> bundling ApacheDS + Samba4alpha3 + Bind/sdb_ldap should almost do the
>> trick, however it is not yet very polished and might need some twicking.
>>
>> Cheers,
>>
>> Denis
>>
>>
>>> 2) pros: open source, certified, stable, java
>>> cons: documentation is not foolproof. in our company there
>>> is no ldap specialist, only basic knowledge is there.
>>> when we tried to synchronize MS Active Directory with
>>> ADS the docs where too confusing (for us fools)
>>>
>>> documentation could show more examples
>>>
>>> 3) dont eve know what i could do already. as with 2: we
>>> need to sync different user stores into one directory
>>> (LDAP, from MySql DB, from Oracle DB) and then
>>> replicate / mirror this one
>>>
>>> i ve seen such features with penrose ldap solution
>>> but i have not done an evaluation yet
>>>
>>> 4) we are commercial, selling a java framework (rcp, webapps)
>>> currently the plan is to use ADS for inhouse administration
>>> and later integrate it into the our secure-server
>>>
>>> 5) just go on please :)
>>>
>>>
>>> regards
>>>
>>> ossi
>>>
>>>
>>>
>>> Emmanuel Lecharny schrieb:
>>>> Hi !
>>>>
>>>> This is the very beginning of 2008, and we are all working hard to get
>> a
>>>> 2.0 out in the next few months. At this point, we think it's a good
>>>> timing to get some feedback from you, users and developpers ! Here is a
>>>> short list of question you may answer, but this is very up to you. We
>>>> don't need names ( "I'm working for company XYZ" ), this is just
>>>> informational.
>>>>
>>>> *Keep in mind that those informations will appear on the
>>>> Apache ML and many other, so if you think that any confidential piece
>> of
>>>> it should not be disclose, then don't answer !*
>>>>
>>>> 1) What are you using ADS for ? Is it in production, used to do some
>>>> tests during developpement, or simply as a toy ?
>>>>
>>>> 2) What are the Pros and Cons you clearly see ?
>>>>
>>>> 3) What would be the major features or improvement you are expecting to
>>>> see in the near future ?
>>>>
>>>> 4) Are you a commercial entity, an non-for profit organization, an
>>>> Apache project, a student or an individual just interested in the
>> techno
>>>> ? (no name needed)
>>>>
>>>> 5) Any other opinion or feedback you would like to share with us ?
>>>>
>>>> Thank you all for helping us being more aware !
>>>>
>>
>> --
>> Denis Cardon
>> Tranquil IT Systems
>> 44 bvd des pas enchantés
>> 44230 Saint Sébastien sur Loire
>> tel : +33 (0) 2.40.97.62.67
>> http://www.tranquil-it-systems.fr
>>
>>
>>
>
--
Denis Cardon
Tranquil IT Systems
44 bvd des pas enchantés
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.62.67
http://www.tranquil-it-systems.fr
Re: [Feedback needed] ADS pros and cons ?
Posted by Alex Karasulu <ak...@apache.org>.
Dennis,
Forgive me for correcting you here but ApacheDS has a DNS and Kerberos
service embedded inside. ApacheDS is not only an LDAP server.
Also MS ActiveDirectory as a process just services LDAP requests (not fully
compliant but it works). Another separate process actually handles the
Kerberos requests as the AS and TGTS. Also the DNS service is a different
service as well. So no MS ActiveDirectory is not all these things in one.
I think you might have been referring to a Windows 200X Server being
replaced by the components you listed?
I may be wrong though hopefully someone can clarify.
Regards,
Alex
On Jan 23, 2008 4:42 AM, Denis Cardon <de...@tranquil-it-systems.fr>
wrote:
> Hi Ossi,
>
> > 1) we currently use ADS for experiments, we plan to replace MS Active
> > Directory Server with a more open LDAP Server
>
> actually Active Directory is more than just a ldap server. It bundles a
> customified ldap server, a kerberos server, a dns server, and some ms
> rpc stuff. So apache directory server could not, by itself stands for an
> active directory replacement (unless the only thing you need is the ldap
> part).
>
> Open source projects are getting close to a replacement of ActiveDS, and
> bundling ApacheDS + Samba4alpha3 + Bind/sdb_ldap should almost do the
> trick, however it is not yet very polished and might need some twicking.
>
> Cheers,
>
> Denis
>
>
> >
> > 2) pros: open source, certified, stable, java
> > cons: documentation is not foolproof. in our company there
> > is no ldap specialist, only basic knowledge is there.
> > when we tried to synchronize MS Active Directory with
> > ADS the docs where too confusing (for us fools)
> >
> > documentation could show more examples
> >
> > 3) dont eve know what i could do already. as with 2: we
> > need to sync different user stores into one directory
> > (LDAP, from MySql DB, from Oracle DB) and then
> > replicate / mirror this one
> >
> > i ve seen such features with penrose ldap solution
> > but i have not done an evaluation yet
> >
> > 4) we are commercial, selling a java framework (rcp, webapps)
> > currently the plan is to use ADS for inhouse administration
> > and later integrate it into the our secure-server
> >
> > 5) just go on please :)
> >
> >
> > regards
> >
> > ossi
> >
> >
> >
> > Emmanuel Lecharny schrieb:
> >> Hi !
> >>
> >> This is the very beginning of 2008, and we are all working hard to get
> a
> >> 2.0 out in the next few months. At this point, we think it's a good
> >> timing to get some feedback from you, users and developpers ! Here is a
> >> short list of question you may answer, but this is very up to you. We
> >> don't need names ( "I'm working for company XYZ" ), this is just
> >> informational.
> >>
> >> *Keep in mind that those informations will appear on the
> >> Apache ML and many other, so if you think that any confidential piece
> of
> >> it should not be disclose, then don't answer !*
> >>
> >> 1) What are you using ADS for ? Is it in production, used to do some
> >> tests during developpement, or simply as a toy ?
> >>
> >> 2) What are the Pros and Cons you clearly see ?
> >>
> >> 3) What would be the major features or improvement you are expecting to
> >> see in the near future ?
> >>
> >> 4) Are you a commercial entity, an non-for profit organization, an
> >> Apache project, a student or an individual just interested in the
> techno
> >> ? (no name needed)
> >>
> >> 5) Any other opinion or feedback you would like to share with us ?
> >>
> >> Thank you all for helping us being more aware !
> >>
> >
>
>
> --
> Denis Cardon
> Tranquil IT Systems
> 44 bvd des pas enchantés
> 44230 Saint Sébastien sur Loire
> tel : +33 (0) 2.40.97.62.67
> http://www.tranquil-it-systems.fr
>
>
>
Re: [Feedback needed] ADS pros and cons ?
Posted by Denis Cardon <de...@tranquil-it-systems.fr>.
Hi Ossi,
> 1) we currently use ADS for experiments, we plan to replace MS Active
> Directory Server with a more open LDAP Server
actually Active Directory is more than just a ldap server. It bundles a
customified ldap server, a kerberos server, a dns server, and some ms
rpc stuff. So apache directory server could not, by itself stands for an
active directory replacement (unless the only thing you need is the ldap
part).
Open source projects are getting close to a replacement of ActiveDS, and
bundling ApacheDS + Samba4alpha3 + Bind/sdb_ldap should almost do the
trick, however it is not yet very polished and might need some twicking.
Cheers,
Denis
>
> 2) pros: open source, certified, stable, java
> cons: documentation is not foolproof. in our company there
> is no ldap specialist, only basic knowledge is there.
> when we tried to synchronize MS Active Directory with
> ADS the docs where too confusing (for us fools)
>
> documentation could show more examples
>
> 3) dont eve know what i could do already. as with 2: we
> need to sync different user stores into one directory
> (LDAP, from MySql DB, from Oracle DB) and then
> replicate / mirror this one
>
> i ve seen such features with penrose ldap solution
> but i have not done an evaluation yet
>
> 4) we are commercial, selling a java framework (rcp, webapps)
> currently the plan is to use ADS for inhouse administration
> and later integrate it into the our secure-server
>
> 5) just go on please :)
>
>
> regards
>
> ossi
>
>
>
> Emmanuel Lecharny schrieb:
>> Hi !
>>
>> This is the very beginning of 2008, and we are all working hard to get a
>> 2.0 out in the next few months. At this point, we think it's a good
>> timing to get some feedback from you, users and developpers ! Here is a
>> short list of question you may answer, but this is very up to you. We
>> don't need names ( "I'm working for company XYZ" ), this is just
>> informational.
>>
>> *Keep in mind that those informations will appear on the
>> Apache ML and many other, so if you think that any confidential piece of
>> it should not be disclose, then don't answer !*
>>
>> 1) What are you using ADS for ? Is it in production, used to do some
>> tests during developpement, or simply as a toy ?
>>
>> 2) What are the Pros and Cons you clearly see ?
>>
>> 3) What would be the major features or improvement you are expecting to
>> see in the near future ?
>>
>> 4) Are you a commercial entity, an non-for profit organization, an
>> Apache project, a student or an individual just interested in the techno
>> ? (no name needed)
>>
>> 5) Any other opinion or feedback you would like to share with us ?
>>
>> Thank you all for helping us being more aware !
>>
>
--
Denis Cardon
Tranquil IT Systems
44 bvd des pas enchantés
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.62.67
http://www.tranquil-it-systems.fr
Re: [Feedback needed] ADS pros and cons ?
Posted by ossi petz <os...@gmail.com>.
Hallo
some feedback :)
1) we currently use ADS for experiments, we plan to replace MS Active
Directory Server with a more open LDAP Server
2) pros: open source, certified, stable, java
cons: documentation is not foolproof. in our company there
is no ldap specialist, only basic knowledge is there.
when we tried to synchronize MS Active Directory with
ADS the docs where too confusing (for us fools)
documentation could show more examples
3) dont eve know what i could do already. as with 2: we
need to sync different user stores into one directory
(LDAP, from MySql DB, from Oracle DB) and then
replicate / mirror this one
i ve seen such features with penrose ldap solution
but i have not done an evaluation yet
4) we are commercial, selling a java framework (rcp, webapps)
currently the plan is to use ADS for inhouse administration
and later integrate it into the our secure-server
5) just go on please :)
regards
ossi
Emmanuel Lecharny schrieb:
> Hi !
>
> This is the very beginning of 2008, and we are all working hard to get a
> 2.0 out in the next few months. At this point, we think it's a good
> timing to get some feedback from you, users and developpers ! Here is a
> short list of question you may answer, but this is very up to you. We
> don't need names ( "I'm working for company XYZ" ), this is just
> informational.
>
> *Keep in mind that those informations will appear on the
> Apache ML and many other, so if you think that any confidential piece of
> it should not be disclose, then don't answer !*
>
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
>
> 2) What are the Pros and Cons you clearly see ?
>
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
>
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
>
> 5) Any other opinion or feedback you would like to share with us ?
>
> Thank you all for helping us being more aware !
>
Cross Between [Feedback needed] Pros and Cons and EclipseLink DAS
and JPA
Posted by Ole Ersoy <ol...@gmail.com>.
Hey Guys,
This is a cross between the [Feedback Needed] thread and David's EclipseLink DAS and JPA forwarded message.
One more huge pro is dynamic schema creation. As can be seen in the EclipseLink DAS and JPA message that David just forwarded, LDAP could be considered much more frequently by the broader community for java persistence. For example it is excluded in the list of storage technologies being considered here:
http://www.jpox.org/docs/product_overview.html
And was missing in Tuscany until just recently. I think David's idea of using the JPOX/JPA interfaces for the Java Object <> LDAP Mapping layer would be really slick, and do a lot of good in terms of shining a light on ADS...Over Heeeere.
Cheers,
- Ole
Re: [Feedback needed] ADS pros and cons ?
Posted by Jörg Henne <j....@levigo.de>.
Hi all,
Emmanuel Lecharny schrieb:
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
Production/planned production for openthinclient.org servers.
> 2) What are the Pros and Cons you clearly see ?
Pro:
- easily embeddable
- unit testing made straight forward
- very flexible
Cons:
- admin password needs to be changed in two places
- no low-level migration path between versions
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
See cons:
- get rid of authentication for in-VM accesses and server start/stop
- provide migration path besides LDIF import/export
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
Commercial/commercially driven open-source project
Joerg Henne
Re: [Feedback needed] ADS pros and cons ?
Posted by Alex Karasulu <ak...@apache.org>.
Wow!!! Mark that was just a spectacular plug for ApacheDS. You gave me the
warm fuzzies. We hope you will be pleased with 2.0 when it emerges. I'm
sure though there will be bumps to transition over to it but we hope it will
be worth it and as painless as possible for guys like yourself. Then again
you have us here if you're stuck.
Thank you,
Alex
On Jan 7, 2008 5:09 PM, Mark Swanson <ma...@scheduleworld.com> wrote:
> Emmanuel Lecharny wrote:
> > Hi !
> >
> > This is the very beginning of 2008, and we are all working hard to get a
> > 2.0 out in the next few months. At this point, we think it's a good
> > timing to get some feedback from you, users and developpers ! Here is a
> > short list of question you may answer, but this is very up to you. We
> > don't need names ( "I'm working for company XYZ" ), this is just
> > informational.
> >
> > *Keep in mind that those informations will appear on the
> > Apache ML and many other, so if you think that any confidential piece of
> > it should not be disclose, then don't answer !*
> >
> > 1) What are you using ADS for ? Is it in production, used to do some
> > tests during developpement, or simply as a toy ?
> Production.
> > 2) What are the Pros and Cons you clearly see ?
> I've posted lots of Pros to the list. A short summary:
> 1. It's in Java. Important to me because I extend ADS for
> authentication, authorization and much more and Java is my preferred
> language.
> 2. It's incredibly extensible. I was able to customize it to integrate
> with my environment exactly how I wanted.
> 3. The implementation of LDAP is excellent. I have had zero
> interoperability problems because of ADS.
> 4. The error reporting and detailed logging is excellent. This just
> makes it easy to reverse engineer wacky issues with specific clients.
> It's been a boon when extending ADS too.
>
> Any cons I had seem to be addressed in the upcoming version.
>
> > 3) What would be the major features or improvement you are expecting to
> > see in the near future ?
> I can't think of any.
> > 4) Are you a commercial entity, an non-for profit organization, an
> > Apache project, a student or an individual just interested in the techno
> > ? (no name needed)
> Commercial.
> > 5) Any other opinion or feedback you would like to share with us ?
> I'm not up on the latest ADS, but I think any extra effort you folks put
> into a migration guide would be most appreciated.
> > Thank you all for helping us being more aware !
> Thanks for writing ADS. ADS is the only product in existence that can
> meet my requirements.
>
> Cheers.
>
>
Re: [Feedback needed] ADS pros and cons ?
Posted by Mark Swanson <ma...@ScheduleWorld.com>.
Emmanuel Lecharny wrote:
> Hi !
>
> This is the very beginning of 2008, and we are all working hard to get a
> 2.0 out in the next few months. At this point, we think it's a good
> timing to get some feedback from you, users and developpers ! Here is a
> short list of question you may answer, but this is very up to you. We
> don't need names ( "I'm working for company XYZ" ), this is just
> informational.
>
> *Keep in mind that those informations will appear on the
> Apache ML and many other, so if you think that any confidential piece of
> it should not be disclose, then don't answer !*
>
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
Production.
> 2) What are the Pros and Cons you clearly see ?
I've posted lots of Pros to the list. A short summary:
1. It's in Java. Important to me because I extend ADS for
authentication, authorization and much more and Java is my preferred
language.
2. It's incredibly extensible. I was able to customize it to integrate
with my environment exactly how I wanted.
3. The implementation of LDAP is excellent. I have had zero
interoperability problems because of ADS.
4. The error reporting and detailed logging is excellent. This just
makes it easy to reverse engineer wacky issues with specific clients.
It's been a boon when extending ADS too.
Any cons I had seem to be addressed in the upcoming version.
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
I can't think of any.
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
Commercial.
> 5) Any other opinion or feedback you would like to share with us ?
I'm not up on the latest ADS, but I think any extra effort you folks put
into a migration guide would be most appreciated.
> Thank you all for helping us being more aware !
Thanks for writing ADS. ADS is the only product in existence that can
meet my requirements.
Cheers.
Re: [Feedback needed] ADS pros and cons ?
Posted by Kiran Ayyagari <ay...@gmail.com>.
Alex,
Thats a great encouraging news for me. Please let me know where to start
from and what should I look into or read to get ready to start working
with you.
thanking you,
- Kiran Ayyagari
Alex Karasulu wrote:
> Kiran,
>
> That's wonderful. Let me know if you need any questions answered.
>
> Incidentally I am currently working on revamping some issues in the
> partition design and perhaps you might want to work with me on it.
> For example I am defining a Cursor to replace NamingEnumeration and
> will be using some of the new ServerEntry interfaces Emmanuel has been
> working on.
>
> Alex
>
> On Jan 9, 2008 11:00 AM, Kiran Ayyagari <ayyagarikiran@gmail.com
> <ma...@gmail.com>> wrote:
>
> Emmanuel Lecharny wrote:
> > Hi !
> >
> > This is the very beginning of 2008, and we are all working hard
> to get a
> > 2.0 out in the next few months. At this point, we think it's a good
> > timing to get some feedback from you, users and developpers !
> Here is a
> > short list of question you may answer, but this is very up to
> you. We
> > don't need names ( "I'm working for company XYZ" ), this is just
> > informational.
> >
> > *Keep in mind that those informations will appear on the
> > Apache ML and many other, so if you think that any confidential
> piece of
> > it should not be disclose, then don't answer !*
> >
> > 1) What are you using ADS for ? Is it in production, used to do some
> > tests during developpement, or simply as a toy ?
> >
> > 2) What are the Pros and Cons you clearly see ?
> >
> > 3) What would be the major features or improvement you are
> expecting to
> > see in the near future ?
> >
> > 4) Are you a commercial entity, an non-for profit organization, an
> > Apache project, a student or an individual just interested in
> the techno
> > ? (no name needed)
> Am an individual, working as a programmer. Would like to contribute to
> ADS and currently looking at implementing the in-memory backend
> storage
> - https://issues.apache.org/jira/browse/DIRSERVER-265. At present
> digging through the code.
> >
> > 5) Any other opinion or feedback you would like to share with us ?
> >
> > Thank you all for helping us being more aware !
> >
>
>
> --
> - Kiran Ayyagari
>
>
--
- Kiran Ayyagari
Re: [Feedback needed] ADS pros and cons ?
Posted by Alex Karasulu <ak...@apache.org>.
Kiran,
That's wonderful. Let me know if you need any questions answered.
Incidentally I am currently working on revamping some issues in the
partition design and perhaps you might want to work with me on it. For
example I am defining a Cursor to replace NamingEnumeration and will be
using some of the new ServerEntry interfaces Emmanuel has been working on.
Alex
On Jan 9, 2008 11:00 AM, Kiran Ayyagari <ay...@gmail.com> wrote:
> Emmanuel Lecharny wrote:
> > Hi !
> >
> > This is the very beginning of 2008, and we are all working hard to get a
> > 2.0 out in the next few months. At this point, we think it's a good
> > timing to get some feedback from you, users and developpers ! Here is a
> > short list of question you may answer, but this is very up to you. We
> > don't need names ( "I'm working for company XYZ" ), this is just
> > informational.
> >
> > *Keep in mind that those informations will appear on the
> > Apache ML and many other, so if you think that any confidential piece of
> > it should not be disclose, then don't answer !*
> >
> > 1) What are you using ADS for ? Is it in production, used to do some
> > tests during developpement, or simply as a toy ?
> >
> > 2) What are the Pros and Cons you clearly see ?
> >
> > 3) What would be the major features or improvement you are expecting to
> > see in the near future ?
> >
> > 4) Are you a commercial entity, an non-for profit organization, an
> > Apache project, a student or an individual just interested in the techno
> > ? (no name needed)
> Am an individual, working as a programmer. Would like to contribute to
> ADS and currently looking at implementing the in-memory backend storage
> - https://issues.apache.org/jira/browse/DIRSERVER-265. At present
> digging through the code.
> >
> > 5) Any other opinion or feedback you would like to share with us ?
> >
> > Thank you all for helping us being more aware !
> >
>
>
> --
> - Kiran Ayyagari
>
Re: [Feedback needed] ADS pros and cons ?
Posted by Kiran Ayyagari <ay...@gmail.com>.
Emmanuel Lecharny wrote:
> Hi !
>
> This is the very beginning of 2008, and we are all working hard to get a
> 2.0 out in the next few months. At this point, we think it's a good
> timing to get some feedback from you, users and developpers ! Here is a
> short list of question you may answer, but this is very up to you. We
> don't need names ( "I'm working for company XYZ" ), this is just
> informational.
>
> *Keep in mind that those informations will appear on the
> Apache ML and many other, so if you think that any confidential piece of
> it should not be disclose, then don't answer !*
>
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
>
> 2) What are the Pros and Cons you clearly see ?
>
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
>
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
Am an individual, working as a programmer. Would like to contribute to
ADS and currently looking at implementing the in-memory backend storage
- https://issues.apache.org/jira/browse/DIRSERVER-265. At present
digging through the code.
>
> 5) Any other opinion or feedback you would like to share with us ?
>
> Thank you all for helping us being more aware !
>
--
- Kiran Ayyagari
Re: [Feedback needed] ADS pros and cons ?
Posted by Chris Trobridge <ch...@aepnetworks.com>.
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
I looked into using ADS as a possible alternative to the current LDAP
server (iPlanet) that we use in our product management.
> 2) What are the Pros and Cons you clearly see ?
I found it very easy to get up and running.
The immediate showstopper for us is the lack of support for the
"userCertificate;binary" which our deployed products include in there
queires.
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
Support for "userCertificate;binary" was mentioned as a possibility for 2.0.
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
Commercial.
> 5) Any other opinion or feedback you would like to share with us ?
>
> Thank you all for helping us being more aware !
>
Re: [Feedback needed] ADS pros and cons ?
Posted by Przemyslaw Rudzki <er...@erace.pl>.
Hi,
> 1) What are you using ADS for ? Is it in production, used to do some
> tests during developpement, or simply as a toy ?
I like to deploy ADS as web app (WAR) in testing and some non demanding
production envs. The process is that simple:
1. Have some example.com.ldif ready (exported via ADS Studio)
2. Put it in the user home dir (no matter if this is win or lin)
3. Deploy war (simply copy to jboss deploy dir)
4. During startup import data from example.com.ldif
5. And I am done and ready to use/test my ldap related functionality
> 2) What are the Pros and Cons you clearly see ?
Pros: simple to setup, simple to manipulate, small.
Cons: maybe I have not checked carefully enough but some replication
would be nice.
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
Replication ;-).
> 4) Are you a commercial entity, an non-for profit organization, an
> Apache project, a student or an individual just interested in the techno
> ? (no name needed)
Commercial.
> 5) Any other opinion or feedback you would like to share with us ?
Maybe it would be nice to manipulate some config data in for the running
instance and then export it to be easily importable for new deployments.
Good work guys! And all the best in 2008!
Rgds,
/p
> Thank you all for helping us being more aware !
Re: [Feedback needed] ADS pros and cons ?
Posted by Emmanuel Lecharny <el...@gmail.com>.
Thanks Steve !
Hammond, Steve wrote:
> 1) What are you using ADS for?
> We are planning a production release in May with ADS included. We have created our own partition class using JDBC to connect to our existing database of users and H.350 device data. We need to add proxying of Active Directory user data (translated to "REAL" LDAP) that will be pulled in and mated to our H.350 device data and pushed back to the client as one cohesive unit. From today's mail stream, we may look into PENROSE to accomplish this.
>
That's pretty impressive ! Just one warning about Penrose : It's GPL,
unless you buy the commercial lincense, so you won't be able to embed it
into a product (that's the beauty of ASF compared to GPL : no restriction !)
> 2. What are the Pros and Cons you clearly see ?
> Pro: It is in Java, OpenSource, we can embed it in JBOSS, it was pretty easily extensible to add the JDBC partitions we needed.
> Cons: Configuration, moving from 1.0 to 1.5 during development was difficult, even going from 1.5 to 1.5.1 was a large hoop to jump thru.
Yeah, true, but 1.5 is considered as a 'unstable' version (means, some
elements can change) . We will provide a migration toolkit for 2.0 (to
switch from 1.0 to 2.0).
> We have had a learning ramp with Maven since our stuff is all done with Ant.
>
:) I hope you jumped to Maven 2.0 directly !
> I am afraid to move to 2.0, but soon I will grab the trunk or the big bang (still gotta figure that one out) and start builds and tests.
>
Don't be afraid ! You will have a lot of time to switch, as we don't
expect to deliver a 2.0 GA in 2 weeks. There will be some RC before.
I won't tell you either to use the bigbang nor the trunk, except if you
want to do some testing, as it's a moving target. As you may have
noticed, we are planning some huge refactoring in the core server,
including the backend API.
> 3) What would be the major features or improvement you are expecting to
> see in the near future ?
> I am counting on StartTLS and Distributed authentication. We also need NTLM SSO abilities, but I don't see that in the roadmap for ADS.
Not yet, but we will define a 3.0 roadmap as soon as we will be done for
2.0.
> I just found out today about the Kerberos server built in to ADS, so I need to check that one out too.
>
Yes, and it works, but we have a real lack of documentation on this
part. A lot of modifications have been done too, and we still have a lot
to do.
> 5) Any other opinion or feedback you would like to share with us ?
> AD Studio has been invaluable for getting as far as we have, since I knew nothing about LDAP a year ago.
>
I'm sure that the studio team will appreciate ! They are talented, and
hard workers too.
Thanks for this feedback. It's interesting to know that ADS will be used
on production systems ! It's also a little bit stressfull ... I wish we
have tested the server enough for you needs :)
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org
RE: [Feedback needed] ADS pros and cons ?
Posted by "Hammond, Steve" <st...@Polycom.com>.
1) What are you using ADS for?
We are planning a production release in May with ADS included. We have created our own partition class using JDBC to connect to our existing database of users and H.350 device data. We need to add proxying of Active Directory user data (translated to "REAL" LDAP) that will be pulled in and mated to our H.350 device data and pushed back to the client as one cohesive unit. From today's mail stream, we may look into PENROSE to accomplish this.
2. What are the Pros and Cons you clearly see ?
Pro: It is in Java, OpenSource, we can embed it in JBOSS, it was pretty easily extensible to add the JDBC partitions we needed.
Cons: Configuration, moving from 1.0 to 1.5 during development was difficult, even going from 1.5 to 1.5.1 was a large hoop to jump thru. We have had a learning ramp with Maven since our stuff is all done with Ant.
I am afraid to move to 2.0, but soon I will grab the trunk or the big bang (still gotta figure that one out) and start builds and tests.
3) What would be the major features or improvement you are expecting to
see in the near future ?
I am counting on StartTLS and Distributed authentication. We also need NTLM SSO abilities, but I don't see that in the roadmap for ADS. I just found out today about the Kerberos server built in to ADS, so I need to check that one out too.
4) Are you a commercial entity, an non-for profit organization, an
Apache project, a student or an individual just interested in the techno
? (no name needed)
We are a company.
5) Any other opinion or feedback you would like to share with us ?
AD Studio has been invaluable for getting as far as we have, since I knew nothing about LDAP a year ago.
-----Original Message-----
From: Emmanuel Lecharny [mailto:elecharny@gmail.com]
Sent: Monday, January 07, 2008 9:00 AM
To: Apache Directory Developers List; users@directory.apache.org
Subject: [Feedback needed] ADS pros and cons ?
Hi !
This is the very beginning of 2008, and we are all working hard to get a
2.0 out in the next few months. At this point, we think it's a good
timing to get some feedback from you, users and developpers ! Here is a
short list of question you may answer, but this is very up to you. We
don't need names ( "I'm working for company XYZ" ), this is just
informational.
*Keep in mind that those informations will appear on the
Apache ML and many other, so if you think that any confidential piece of
it should not be disclose, then don't answer !*
1) What are you using ADS for ? Is it in production, used to do some
tests during developpement, or simply as a toy ?
2) What are the Pros and Cons you clearly see ?
3) What would be the major features or improvement you are expecting to
see in the near future ?
4) Are you a commercial entity, an non-for profit organization, an
Apache project, a student or an individual just interested in the techno
? (no name needed)
5) Any other opinion or feedback you would like to share with us ?
Thank you all for helping us being more aware !
--
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org