[Users] LDAP

[Yair Zaslavsky]

On 02/20/2012 09:39 AM, Oved Ourfalli wrote:
> Hey,
> 
> More information on the domain infrastructure we have can be found in:
> http://www.ovirt.org/wiki/DomainInfrastructure
> (I might update it more soon, but it can give you a basic view of how the domain management in oVirt is working, and what do you need to update in order to support a new ldap provider).
> 
> Oved

I just would like to add that in general, when one wants to add a new
LDAP server support, it should be realized that there are two main
issues to take care of:
a. How authentication to LDAP server is performed (examples we
encountered in the past - Kerberos/GSSAPI  and SIMPLE).
b. How to perform the ldap queries (i.e - use proper schema)

This is at least how I see it.

Yair

> 
> ----- Original Message -----
>> From: "Itamar Heim" <iheim at redhat.com>
>> To: "Nathan Stratton" <nathan at robotics.net>
>> Cc: users at ovirt.org
>> Sent: Sunday, February 19, 2012 11:14:24 PM
>> Subject: Re: [Users] LDAP
>>
>> On 02/19/2012 11:11 PM, Nathan Stratton wrote:
>>> On Sun, 19 Feb 2012, Itamar Heim wrote:
>>>
>>>> the current code supports AD, freeIPA/IPA and 389ds/RHDS.
>>>> if apache directory server is similar to any of them, you could
>>>> try
>>>> hacking the code to add support for it.
>>>
>>> Ok, will go with 389 for now, its in the family, tho Gluster is in
>>> the
>>> family and you don't support it as a storage file system... : )
>>
>> please remember you need 389ds with kerberos support.
>>
>> gluster is in the works...
>> see:
>> http://www.ovirt.org/wiki/AddingGlusterSupportToOvirt
>>
>>>
>>> Just kidding, you guys are great, keep up the good work.
>>>
>>>> <>
>>> Nathan Stratton CTO, BlinkMind, Inc.
>>> nathan at robotics.net nathan at blinkmind.com
>>> http://www.robotics.net http://www.blinkmind.com
>>
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users