]> pere.pagekite.me Git - homepage.git/blob - blog/Time_for_new__LDAP_schemas_replacing_RFC_2307_.html
3ed8bcc4111b2b22002e59d1a375a7b0df9ad8ce
[homepage.git] / blog / Time_for_new__LDAP_schemas_replacing_RFC_2307_.html
1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3 <html xmlns="http://www.w3.org/1999/xhtml" dir="ltr">
4 <head>
5 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
6 <title>Petter Reinholdtsen: Time for new LDAP schemas replacing RFC 2307?</title>
7 <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/style.css" />
8 <link rel="stylesheet" type="text/css" media="screen" href="http://people.skolelinux.org/pere/blog/vim.css" />
9
10
11 </head>
12 <body>
13 <div class="title">
14 <h1>
15 <a href="http://people.skolelinux.org/pere/blog/">Petter Reinholdtsen</a>
16
17 </h1>
18
19 </div>
20
21
22 <div class="entry">
23 <div class="title">Time for new LDAP schemas replacing RFC 2307?</div>
24 <div class="date">29th March 2009</div>
25 <div class="body"><p>The state of standardized LDAP schemas on Linux is far from
26 optimal. There is RFC 2307 documenting one way to store NIS maps in
27 LDAP, and a modified version of this normally called RFC 2307bis, with
28 some modifications to be compatible with Active Directory. The RFC
29 specification handle the content of a lot of system databases, but do
30 not handle DNS zones and DHCP configuration.</p>
31
32 <p>In <a href="http://www.skolelinux.org/">Debian Edu/Skolelinux</a>,
33 we would like to store information about users, SMB clients/hosts,
34 filegroups, netgroups (users and hosts), DHCP and DNS configuration,
35 and LTSP configuration in LDAP. These objects have a lot in common,
36 but with the current LDAP schemas it is not possible to have one
37 object per entity. For example, one need to have at least three LDAP
38 objects for a given computer, one with the SMB related stuff, one with
39 DNS information and another with DHCP information. The schemas
40 provided for DNS and DHCP are impossible to combine into one LDAP
41 object. In addition, it is impossible to implement quick queries for
42 netgroup membership, because of the way NIS triples are implemented.
43 It just do not scale. I believe it is time for a few RFC
44 specifications to cleam up this mess.</p>
45
46 <p>I would like to have one LDAP object representing each computer in
47 the network, and this object can then keep the SMB (ie host key), DHCP
48 (mac address/name) and DNS (name/IP address) settings in one place.
49 It need to be efficently stored to make sure it scale well.</p>
50
51 <p>I would also like to have a quick way to map from a user or
52 computer and to the net group this user or computer is a member.</p>
53
54 <p>Active Directory have done a better job than unix heads like myself
55 in this regard, and the unix side need to catch up. Time to start a
56 new IETF work group?</p>
57 </div>
58
59 <div class="tags">Tags: <a href="http://people.skolelinux.org/pere/blog/tags/debian">debian</a>, <a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu</a>, <a href="http://people.skolelinux.org/pere/blog/tags/english">english</a>, <a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap</a>, <a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug</a>.</div>
60
61
62 </div>
63
64
65
66
67 <div id="sidebar">
68
69
70
71 <h2>Archive</h2>
72 <ul>
73
74 <li>2017
75 <ul>
76
77 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/01/">January (4)</a></li>
78
79 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/02/">February (3)</a></li>
80
81 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/03/">March (5)</a></li>
82
83 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/04/">April (2)</a></li>
84
85 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/06/">June (5)</a></li>
86
87 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/07/">July (1)</a></li>
88
89 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/08/">August (1)</a></li>
90
91 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/09/">September (3)</a></li>
92
93 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/10/">October (5)</a></li>
94
95 <li><a href="http://people.skolelinux.org/pere/blog/archive/2017/11/">November (2)</a></li>
96
97 </ul></li>
98
99 <li>2016
100 <ul>
101
102 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/01/">January (3)</a></li>
103
104 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/02/">February (2)</a></li>
105
106 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/03/">March (3)</a></li>
107
108 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/04/">April (8)</a></li>
109
110 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/05/">May (8)</a></li>
111
112 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/06/">June (2)</a></li>
113
114 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/07/">July (2)</a></li>
115
116 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/08/">August (5)</a></li>
117
118 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/09/">September (2)</a></li>
119
120 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/10/">October (3)</a></li>
121
122 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/11/">November (8)</a></li>
123
124 <li><a href="http://people.skolelinux.org/pere/blog/archive/2016/12/">December (5)</a></li>
125
126 </ul></li>
127
128 <li>2015
129 <ul>
130
131 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/01/">January (7)</a></li>
132
133 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/02/">February (6)</a></li>
134
135 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/03/">March (1)</a></li>
136
137 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/04/">April (4)</a></li>
138
139 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/05/">May (3)</a></li>
140
141 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/06/">June (4)</a></li>
142
143 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/07/">July (6)</a></li>
144
145 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/08/">August (2)</a></li>
146
147 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/09/">September (2)</a></li>
148
149 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/10/">October (9)</a></li>
150
151 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/11/">November (6)</a></li>
152
153 <li><a href="http://people.skolelinux.org/pere/blog/archive/2015/12/">December (3)</a></li>
154
155 </ul></li>
156
157 <li>2014
158 <ul>
159
160 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/01/">January (2)</a></li>
161
162 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/02/">February (3)</a></li>
163
164 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/03/">March (8)</a></li>
165
166 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/04/">April (7)</a></li>
167
168 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/05/">May (1)</a></li>
169
170 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/06/">June (2)</a></li>
171
172 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/07/">July (2)</a></li>
173
174 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/08/">August (2)</a></li>
175
176 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/09/">September (5)</a></li>
177
178 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/10/">October (6)</a></li>
179
180 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/11/">November (3)</a></li>
181
182 <li><a href="http://people.skolelinux.org/pere/blog/archive/2014/12/">December (5)</a></li>
183
184 </ul></li>
185
186 <li>2013
187 <ul>
188
189 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/01/">January (11)</a></li>
190
191 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/02/">February (9)</a></li>
192
193 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/03/">March (9)</a></li>
194
195 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/04/">April (6)</a></li>
196
197 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/05/">May (9)</a></li>
198
199 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/06/">June (10)</a></li>
200
201 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/07/">July (7)</a></li>
202
203 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/08/">August (3)</a></li>
204
205 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/09/">September (5)</a></li>
206
207 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/10/">October (7)</a></li>
208
209 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/11/">November (9)</a></li>
210
211 <li><a href="http://people.skolelinux.org/pere/blog/archive/2013/12/">December (3)</a></li>
212
213 </ul></li>
214
215 <li>2012
216 <ul>
217
218 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/01/">January (7)</a></li>
219
220 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/02/">February (10)</a></li>
221
222 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/03/">March (17)</a></li>
223
224 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/04/">April (12)</a></li>
225
226 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/05/">May (12)</a></li>
227
228 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/06/">June (20)</a></li>
229
230 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/07/">July (17)</a></li>
231
232 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/08/">August (6)</a></li>
233
234 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/09/">September (9)</a></li>
235
236 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/10/">October (17)</a></li>
237
238 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/11/">November (10)</a></li>
239
240 <li><a href="http://people.skolelinux.org/pere/blog/archive/2012/12/">December (7)</a></li>
241
242 </ul></li>
243
244 <li>2011
245 <ul>
246
247 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/01/">January (16)</a></li>
248
249 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/02/">February (6)</a></li>
250
251 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/03/">March (6)</a></li>
252
253 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/04/">April (7)</a></li>
254
255 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/05/">May (3)</a></li>
256
257 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/06/">June (2)</a></li>
258
259 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/07/">July (7)</a></li>
260
261 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/08/">August (6)</a></li>
262
263 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/09/">September (4)</a></li>
264
265 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/10/">October (2)</a></li>
266
267 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/11/">November (3)</a></li>
268
269 <li><a href="http://people.skolelinux.org/pere/blog/archive/2011/12/">December (1)</a></li>
270
271 </ul></li>
272
273 <li>2010
274 <ul>
275
276 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/01/">January (2)</a></li>
277
278 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/02/">February (1)</a></li>
279
280 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/03/">March (3)</a></li>
281
282 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/04/">April (3)</a></li>
283
284 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/05/">May (9)</a></li>
285
286 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/06/">June (14)</a></li>
287
288 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/07/">July (12)</a></li>
289
290 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/08/">August (13)</a></li>
291
292 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/09/">September (7)</a></li>
293
294 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/10/">October (9)</a></li>
295
296 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/11/">November (13)</a></li>
297
298 <li><a href="http://people.skolelinux.org/pere/blog/archive/2010/12/">December (12)</a></li>
299
300 </ul></li>
301
302 <li>2009
303 <ul>
304
305 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/01/">January (8)</a></li>
306
307 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/02/">February (8)</a></li>
308
309 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/03/">March (12)</a></li>
310
311 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/04/">April (10)</a></li>
312
313 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/05/">May (9)</a></li>
314
315 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/06/">June (3)</a></li>
316
317 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/07/">July (4)</a></li>
318
319 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/08/">August (3)</a></li>
320
321 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/09/">September (1)</a></li>
322
323 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/10/">October (2)</a></li>
324
325 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/11/">November (3)</a></li>
326
327 <li><a href="http://people.skolelinux.org/pere/blog/archive/2009/12/">December (3)</a></li>
328
329 </ul></li>
330
331 <li>2008
332 <ul>
333
334 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/11/">November (5)</a></li>
335
336 <li><a href="http://people.skolelinux.org/pere/blog/archive/2008/12/">December (7)</a></li>
337
338 </ul></li>
339
340 </ul>
341
342
343
344 <h2>Tags</h2>
345 <ul>
346
347 <li><a href="http://people.skolelinux.org/pere/blog/tags/3d-printer">3d-printer (14)</a></li>
348
349 <li><a href="http://people.skolelinux.org/pere/blog/tags/amiga">amiga (1)</a></li>
350
351 <li><a href="http://people.skolelinux.org/pere/blog/tags/aros">aros (1)</a></li>
352
353 <li><a href="http://people.skolelinux.org/pere/blog/tags/bankid">bankid (4)</a></li>
354
355 <li><a href="http://people.skolelinux.org/pere/blog/tags/bitcoin">bitcoin (9)</a></li>
356
357 <li><a href="http://people.skolelinux.org/pere/blog/tags/bootsystem">bootsystem (16)</a></li>
358
359 <li><a href="http://people.skolelinux.org/pere/blog/tags/bsa">bsa (2)</a></li>
360
361 <li><a href="http://people.skolelinux.org/pere/blog/tags/chrpath">chrpath (2)</a></li>
362
363 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian">debian (154)</a></li>
364
365 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian edu">debian edu (158)</a></li>
366
367 <li><a href="http://people.skolelinux.org/pere/blog/tags/debian-handbook">debian-handbook (4)</a></li>
368
369 <li><a href="http://people.skolelinux.org/pere/blog/tags/digistan">digistan (10)</a></li>
370
371 <li><a href="http://people.skolelinux.org/pere/blog/tags/dld">dld (17)</a></li>
372
373 <li><a href="http://people.skolelinux.org/pere/blog/tags/docbook">docbook (24)</a></li>
374
375 <li><a href="http://people.skolelinux.org/pere/blog/tags/drivstoffpriser">drivstoffpriser (4)</a></li>
376
377 <li><a href="http://people.skolelinux.org/pere/blog/tags/english">english (359)</a></li>
378
379 <li><a href="http://people.skolelinux.org/pere/blog/tags/fiksgatami">fiksgatami (23)</a></li>
380
381 <li><a href="http://people.skolelinux.org/pere/blog/tags/fildeling">fildeling (12)</a></li>
382
383 <li><a href="http://people.skolelinux.org/pere/blog/tags/freeculture">freeculture (30)</a></li>
384
385 <li><a href="http://people.skolelinux.org/pere/blog/tags/freedombox">freedombox (9)</a></li>
386
387 <li><a href="http://people.skolelinux.org/pere/blog/tags/frikanalen">frikanalen (18)</a></li>
388
389 <li><a href="http://people.skolelinux.org/pere/blog/tags/h264">h264 (20)</a></li>
390
391 <li><a href="http://people.skolelinux.org/pere/blog/tags/intervju">intervju (42)</a></li>
392
393 <li><a href="http://people.skolelinux.org/pere/blog/tags/isenkram">isenkram (15)</a></li>
394
395 <li><a href="http://people.skolelinux.org/pere/blog/tags/kart">kart (20)</a></li>
396
397 <li><a href="http://people.skolelinux.org/pere/blog/tags/ldap">ldap (9)</a></li>
398
399 <li><a href="http://people.skolelinux.org/pere/blog/tags/lego">lego (4)</a></li>
400
401 <li><a href="http://people.skolelinux.org/pere/blog/tags/lenker">lenker (8)</a></li>
402
403 <li><a href="http://people.skolelinux.org/pere/blog/tags/lsdvd">lsdvd (2)</a></li>
404
405 <li><a href="http://people.skolelinux.org/pere/blog/tags/ltsp">ltsp (1)</a></li>
406
407 <li><a href="http://people.skolelinux.org/pere/blog/tags/mesh network">mesh network (8)</a></li>
408
409 <li><a href="http://people.skolelinux.org/pere/blog/tags/multimedia">multimedia (39)</a></li>
410
411 <li><a href="http://people.skolelinux.org/pere/blog/tags/nice free software">nice free software (9)</a></li>
412
413 <li><a href="http://people.skolelinux.org/pere/blog/tags/norsk">norsk (293)</a></li>
414
415 <li><a href="http://people.skolelinux.org/pere/blog/tags/nuug">nuug (189)</a></li>
416
417 <li><a href="http://people.skolelinux.org/pere/blog/tags/offentlig innsyn">offentlig innsyn (33)</a></li>
418
419 <li><a href="http://people.skolelinux.org/pere/blog/tags/open311">open311 (2)</a></li>
420
421 <li><a href="http://people.skolelinux.org/pere/blog/tags/opphavsrett">opphavsrett (66)</a></li>
422
423 <li><a href="http://people.skolelinux.org/pere/blog/tags/personvern">personvern (104)</a></li>
424
425 <li><a href="http://people.skolelinux.org/pere/blog/tags/raid">raid (2)</a></li>
426
427 <li><a href="http://people.skolelinux.org/pere/blog/tags/reactos">reactos (1)</a></li>
428
429 <li><a href="http://people.skolelinux.org/pere/blog/tags/reprap">reprap (11)</a></li>
430
431 <li><a href="http://people.skolelinux.org/pere/blog/tags/rfid">rfid (3)</a></li>
432
433 <li><a href="http://people.skolelinux.org/pere/blog/tags/robot">robot (10)</a></li>
434
435 <li><a href="http://people.skolelinux.org/pere/blog/tags/rss">rss (1)</a></li>
436
437 <li><a href="http://people.skolelinux.org/pere/blog/tags/ruter">ruter (5)</a></li>
438
439 <li><a href="http://people.skolelinux.org/pere/blog/tags/scraperwiki">scraperwiki (2)</a></li>
440
441 <li><a href="http://people.skolelinux.org/pere/blog/tags/sikkerhet">sikkerhet (53)</a></li>
442
443 <li><a href="http://people.skolelinux.org/pere/blog/tags/sitesummary">sitesummary (4)</a></li>
444
445 <li><a href="http://people.skolelinux.org/pere/blog/tags/skepsis">skepsis (5)</a></li>
446
447 <li><a href="http://people.skolelinux.org/pere/blog/tags/standard">standard (55)</a></li>
448
449 <li><a href="http://people.skolelinux.org/pere/blog/tags/stavekontroll">stavekontroll (6)</a></li>
450
451 <li><a href="http://people.skolelinux.org/pere/blog/tags/stortinget">stortinget (12)</a></li>
452
453 <li><a href="http://people.skolelinux.org/pere/blog/tags/surveillance">surveillance (52)</a></li>
454
455 <li><a href="http://people.skolelinux.org/pere/blog/tags/sysadmin">sysadmin (4)</a></li>
456
457 <li><a href="http://people.skolelinux.org/pere/blog/tags/usenix">usenix (2)</a></li>
458
459 <li><a href="http://people.skolelinux.org/pere/blog/tags/valg">valg (9)</a></li>
460
461 <li><a href="http://people.skolelinux.org/pere/blog/tags/video">video (59)</a></li>
462
463 <li><a href="http://people.skolelinux.org/pere/blog/tags/vitenskap">vitenskap (4)</a></li>
464
465 <li><a href="http://people.skolelinux.org/pere/blog/tags/web">web (40)</a></li>
466
467 </ul>
468
469
470 </div>
471 <p style="text-align: right">
472 Created by <a href="http://steve.org.uk/Software/chronicle">Chronicle v4.6</a>
473 </p>
474
475 </body>
476 </html>