]> pere.pagekite.me Git - homepage.git/blob - blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html
2c5a94fff53f09f5d70ab01370b4ab6da9c60068
[homepage.git] / blog / Time_for_new__LDAP_schemas_replacing_RFC_2307_.html
1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html>
4 <head>
5 <title>Petter Reinholdtsen: Time for new LDAP schemas replacing RFC 2307?</title>
6 <link rel="stylesheet" type="text/css" media="screen" href="style.css">
7 </head>
8 <body>
9
10 <div class="title">
11 <h1>
12 <a href="">Petter Reinholdtsen</a>
13
14 </h1>
15
16 </div>
17
18
19 <div class="entry">
20 <div class="title">Time for new LDAP schemas replacing RFC 2307?</div>
21 <div class="date">2009-03-29 20:30</div>
22 <div class="body">
23 <p>The state of standardized LDAP schemas on Linux is far from
24 optimal. There is RFC 2307 documenting one way to store NIS maps in
25 LDAP, and a modified version of this normally called RFC 2307bis, with
26 some modifications to be compatible with Active Directory. The RFC
27 specification handle the content of a lot of system databases, but do
28 not handle DNS zones and DHCP configuration.</p>
29
30 <p>In <a href="http://www.skolelinux.org/">Debian Edu/Skolelinux</a>,
31 we would like to store information about users, SMB clients/hosts,
32 filegroups, netgroups (users and hosts), DHCP and DNS configuration,
33 and LTSP configuration in LDAP. These objects have a lot in common,
34 but with the current LDAP schemas it is not possible to have one
35 object per entity. For example, one need to have at least three LDAP
36 objects for a given computer, one with the SMB related stuff, one with
37 DNS information and another with DHCP information. The schemas
38 provided for DNS and DHCP are impossible to combine into one LDAP
39 object. In addition, it is impossible to implement quick queries for
40 netgroup membership, because of the way NIS triples are implemented.
41 It just do not scale. I believe it is time for a few RFC
42 specifications to cleam up this mess.</p>
43
44 <p>I would like to have one LDAP object representing each computer in
45 the network, and this object can then keep the SMB (ie host key), DHCP
46 (mac address/name) and DNS (name/IP address) settings in one place.
47 It need to be efficently stored to make sure it scale well.</p>
48
49 <p>I would also like to have a quick way to map from a user or
50 computer and to the net group this user or computer is a member.</p>
51
52 <p>Active Directory have done a better job than unix heads like myself
53 in this regard, and the unix side need to catch up. Time to start a
54 new IETF work group?</p>
55 </div>
56
57 <div class="tags">Tags: <a href="tags/debian">debian</a>, <a href="tags/debian edu">debian edu</a>, <a href="tags/english">english</a>, <a href="tags/nuug">nuug</a>.</div>
58
59 </div>
60
61
62
63
64
65
66 <div id="sidebar">
67
68 <h2>Archive</h2>
69 <ul>
70
71 <li>2009
72 <ul>
73
74 <li><a href="archive/2009/01/">January (8)</a></li>
75
76 <li><a href="archive/2009/02/">February (8)</a></li>
77
78 <li><a href="archive/2009/03/">March (12)</a></li>
79
80 <li><a href="archive/2009/04/">April (10)</a></li>
81
82 <li><a href="archive/2009/05/">May (9)</a></li>
83
84 <li><a href="archive/2009/06/">June (3)</a></li>
85
86 <li><a href="archive/2009/07/">July (4)</a></li>
87
88 <li><a href="archive/2009/08/">August (2)</a></li>
89
90 </ul></li>
91
92 <li>2008
93 <ul>
94
95 <li><a href="archive/2008/11/">November (5)</a></li>
96
97 <li><a href="archive/2008/12/">December (7)</a></li>
98
99 </ul></li>
100
101 </ul>
102
103
104
105 <h2>Tags</h2>
106 <ul>
107
108 <li><a href="tags/3d-printer">3d-printer (11)</a></li>
109
110 <li><a href="tags/amiga">amiga (1)</a></li>
111
112 <li><a href="tags/aros">aros (1)</a></li>
113
114 <li><a href="tags/debian">debian (14)</a></li>
115
116 <li><a href="tags/debian edu">debian edu (7)</a></li>
117
118 <li><a href="tags/english">english (17)</a></li>
119
120 <li><a href="tags/fiksgatami">fiksgatami (1)</a></li>
121
122 <li><a href="tags/fildeling">fildeling (3)</a></li>
123
124 <li><a href="tags/lenker">lenker (1)</a></li>
125
126 <li><a href="tags/ltsp">ltsp (1)</a></li>
127
128 <li><a href="tags/multimedia">multimedia (5)</a></li>
129
130 <li><a href="tags/norsk">norsk (52)</a></li>
131
132 <li><a href="tags/nuug">nuug (53)</a></li>
133
134 <li><a href="tags/opphavsrett">opphavsrett (6)</a></li>
135
136 <li><a href="tags/personvern">personvern (8)</a></li>
137
138 <li><a href="tags/reprap">reprap (10)</a></li>
139
140 <li><a href="tags/rss">rss (1)</a></li>
141
142 <li><a href="tags/sikkerhet">sikkerhet (3)</a></li>
143
144 <li><a href="tags/standard">standard (9)</a></li>
145
146 <li><a href="tags/stavekontroll">stavekontroll (1)</a></li>
147
148 <li><a href="tags/video">video (9)</a></li>
149
150 <li><a href="tags/vitenskap">vitenskap (1)</a></li>
151
152 <li><a href="tags/web">web (5)</a></li>
153
154 </ul>
155
156 </div>
157 </body>
158 </html>