[OpenAFS] Future of AFS? Interesting Ideas!?

[Benjamin Rodewald]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 16 December 2002 01:52, you wrote:
> > Why should I want to admin LDAP Corp. Directory, PT DB and Kerberos?
> > It`s very hard to keep it in sync.
>
>   Not really. We have probably taken the hardest approach doing it all
> in C but at the moment we have a user/password syncing system that keep=
s
> 2 MS ADs, a printing/IP qouta management system, a krb5 system (all wit=
h
> (>200000) and and LDAP system synced (subset of 10000 users). We
> populate PTS via perl scripts from ldap but will soon be moving it to C
> programs using the afs libs as we move to improve speed and reliablity.
> We will also be moving the ldap to edirectory from openldap and will
> therefore be adding NDS to the systems supported.
Sounds interestend.
>
> The key is the metadirectory. If you have a good one then the rest is
> easy but without one it's almost impossible. Novell's edirectory and
> dirxml are a very nice off the shelve solution. All some one would have
> to do is write an XML driver for afs and you would have a complete pack=
age.
Sounds even better.
Imho the key is to avoid running big batch jobs over night.
We`re living in the 21st century. I think its no reliable solution to "sy=
nc"=20
things via batch jobs. =20

One must connect the pieces to interoperate in realtime.
Redundancy in databases is a very bad idea if you want to keep the databa=
se(s)=20
consistent as a whole. Maybe a metadirectory is the solution.

LDAP is only one directiion. I think it`s the widely accepeted and approv=
ed=20
solution we have for these job, we only need the interfaces.=20

Yours,
Benjamin

- --=20
Benjamin Rodewald
 linuxfriendly.de - penguin empowered
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9/4pRFl/Puxw3Zo0RAmelAKDNIF4ASffYwt2IMlMqNaXpMrVxWgCeI7ej
9BuvasISSvBnF39QQPJNVGU=3D
=3Dgc0L
-----END PGP SIGNATURE-----