Mailing-List: contact infrastructure-dev-help@apache.org; run by ezmlm
Precedence: bulk
Reply-To: infrastructure-dev@apache.org
Received-SPF: pass (nike.apache.org: domain of elecharny@gmail.com designates
 72.14.220.154 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=sender:message-id:date:from:reply-to:organization:user-agent
         :mime-version:to:subject:references:in-reply-to:content-type
         :content-transfer-encoding;
        b=mxcY/+QrIP2EyiwKefOSFNtVrREUp1eR2L5WpoxwjfVN9SJsGucdcUve3ia5xaF43r
         XrOH1LHvnZi0mr5Z9ndwE4n3vOhubKThijE378IoIQcOYDOJQDZ1R06NYlBmfWIlFaR0
         J+mArw85sjs98TcQjS+uj2VRN/cAs8e9g/3uU=
Sender: Emmanuel Lecharny <elecharny@gmail.com>
Message-ID: <494ED93C.8030207@apache.org>
Date: Mon, 22 Dec 2008 01:03:08 +0100
From: =?UTF-8?B?RW1tYW51ZWwgTMOpY2hhcm55?= <elecharny@apache.org>
Reply-To: elecharny@apache.org
Organization: The Apache Software Foundation
User-Agent: Thunderbird 2.0.0.18 (X11/20081125)
MIME-Version: 1.0
To: infrastructure-dev@apache.org
Subject: Re: LDAP : first step
References: <494CD7AC.7090508@nextury.com>
 <494CE03A.3010603@sharp.fm>	 <494CE126.2070101@apache.org>
 <494D83E6.1040308@apache.org>	 <494EBDA8.1040708@apache.org>
  <494EC81A.2020400@apache.org> <1229901446.15695.800.camel@urgyen>
 <494ED117.3080003@apache.org> <494ED21C.8090202@apache.org>
 <494ED6C7.60204@apache.org> <494ED890.7050103@apache.org>
In-Reply-To: <494ED890.7050103@apache.org>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit


>> I see your point. And we'd better put every non-committers created on 
>> another LDAP server too, in order to avoid DOS (creating an entry on 
>> LDAP is _costly_, I can imagine some robots creating thousands of 
>> entries in confluence for many reasons...)
>
> This was actually a point raised on IRC earlier this week.  One LDAP 
> server for "internal" services.  Another for public accounts on 
> services such as moinmoin, conflucence, bugzilla.
>
> Could we potentially get the internal services LDAP server to sync one 
> way with a public services LDAP instance, and merge with the public 
> services instance?
No need to do that. Better use some referral.
> So that committers can login using their availid, etc.  Without the 
> need to configure 2 LDAP servers.
Here, we need to know how confluence, moin-moin, bugzilla, etc... are 
identifying users with LDAP.


-- 
--
cordialement, regards,
Emmanuel Lécharny
www.iktek.com
directory.apache.org