Dennis Krul

OpenLDAP improvements

February 26th, 2008 | Category: OpenSource

I just discovered that OpenLDAP now supports multimaster replication! This means there finally is a serious enterprise-ready(?) and open alternative for the Netscape directory server family (on which both Fedora DS and Sun JES are based iirc). Without multimaster replication it is impossible to create a real redundant directory setup, which is what you want when your whole data center depends on LDAP for authentication/authorization or other types of lookup maps. (Well, you could always just replicate the directory, but you would not be able to change anything in it while the master server was down.)
From the OpenLDAP roadmap:

OpenLDAP 2.4 (released October 2007)
Functional enhancements and improved scalability:

  • Updated slapd dispatcher
  • MirrorMode and MultiMaster replication
  • Proxy Sync replication
  • Expanded monitoring
  • Multiple new Overlays
  • Expanded documentation
  • New socket backend (experimental)
  • LDAPv3 extensions:
    • LDAP Chaining Operation support
    • LDAP Don’t Use Copy Control support
    • LDAP Dynamic Directory Services (RFC2589)
    • LDAP Transaction support (work in progress)

Kudos to the OpenLDAP development team!

1 comment

1 Comment so far

  1. suretec March 4th, 2008 11:55 am

    It’s been very, very Enterprise ready for a good while now. Those in the know will know ( ;-) ) that MM Replication isn’t what it’s made out to be, Active-Active or Master/Slave is always good enough.

    Cheers.

Mexico