Re: Importing OpenLDAP into base

[Anders Magnusson <ragge%ludd.ltu.se@localhost>]

Andrew Doran wrote:
> On Wed, Apr 23, 2008 at 11:10:19PM +1000, Luke Mewburn wrote:
>
>   
> > I'd like to propose that we import OpenLDAP into NetBSD.
> >     
>
> I think this is a great idea. Along with SNMP and BSM (the Sun/Apple audit
> framework) this is something I have wanted to see in NetBSD for a long time!
>
> In my experience setting up LDAP auth is a bit cumbersome, just like NIS.
> Do you have any ideas on how we could make it easier?
>   
Well, it requires a much higher level of knowledge to get ldap going 
than nis/yp.
Also, it is not simple to setup and run openldap and at the same time 
understand
how it works unless you are used to ldap.

Anyway, that said, I think NetBSD really should go towards using 
ldap+kerberos
as some sort of standard solution for network environment.

What I would like to have is a lightweight version of an ldap server 
that would be
basically just to store the basic system information just like YP, and 
not as many
fancy features.  If people would want those features then use openldap 
or iplanet
instead.

Hm, thinking about it, I do not think it would be especially difficult 
to write such
an ldap server.  Would it be interesting?  Luke, can you wait a week or 
so before
importing openldap?  I can take a quick look at it and come back with an 
estimate.

-- Ragge