[TriLUG] Best of breed LDAP solution

[Robert Dale]

I like Sun's OpenDS[1].  The open source version has only cli admin tools, IIRC.
I'm sure the commercial[2] variant has fancy tools.  Otherwise, it
fulfils your requirements.
I use it at $WORK on a relatively small user base.

1. https://www.opends.org/
2. http://www.sun.com/software/products/directory_srvr_ee/index.jsp

-- 
Robert Dale

On Wed, Nov 19, 2008 at 7:24 PM, Jeremy Portzer <jeremyp at pobox.com> wrote:
> Hello,
>
> Does anyone have any recent experience with LDAP deployments across
> reasonably large environments (we have 1000+ hosts)?    We use LDAP for
> traditional Unix host authentication/authorization, as well as various
> other web apps.  We currently use Fedora Directory Server but are having
> many problems with its multimaster replication, and have hit some walls
> in troubleshooting it.  While I believe we probably can fix it,
> management has asked for us to consider other directory server products
> (including commercial ones), if they would offer better features and
> long-term support.  I'm wondering if anyone can offer their recent LDAP
> deployment experiences?
>
> Our requirements:
>        * Multimaster replication (or similar) for cluster deployment across
> diverse geographical sites
>        * Scalability to 1000's of hosts
>        * Some sort of GUI administration (I guess web-based would be
> preferred; Fedora DS's Java-based admin tool is acceptable but painful
> to set up, and very slow over LANs)
>        * Runs on RHEL, preferably playing nice with other apps on the same host(s)
>        * Sane backup, disaster recovery, and upgrade procedures
>
> Commercial support availability is not a specific requirement, but is
> something we'd consider if it has good cost/benefit so I'd be interested
> in any thoughts on that also.
>
> Thanks,
> Jeremy Portzer
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG FAQ  : http://www.trilug.org/wiki/Frequently_Asked_Questions
>